February 21, 2022
by sjvn01
Comments Off on Nasty Linux Kernel Stack Overflow Flaw Found and Patched
Here we go again. Another obnoxious security bug, CVE-2022-0435: A Remote Stack Overflow in The Linux Kernel was found by Appgate senior exploit developer Samuel Page while he was poking around at a Linux heap overflow security bug, CVE-2021-43267 from November 2021. Page’s discovery is a remotely … Continue reading
February 18, 2022
by sjvn01
Comments Off on JFrog Finds RCE Issue in Apache Cassandra
It’s always something when it comes to security. This time around the JFrog’s Security Research team has found a remote code execution (RCE) issue in Apache Cassandra, the popular open source NoSQL database. And, oh joy, of course with this RCE, you can … Continue reading
February 18, 2022
by sjvn01
Comments Off on Linux developers patch security holes faster than anyone else, says Google Project Zero
There’s a lot of FUD about how Linux is being shown recently to be less secure than proprietary systems. That’s nonsense. But, now there are hard facts from Google’s Project Zero, Google’s security research team, showing Linux’s developers do a faster job … Continue reading
February 16, 2022
by sjvn01
Comments Off on Here comes the web browser 100 problem
Soon both Google Chrome, the most popular of all web browsers, and the Firefox web browser will release their 100th version. Now, besides just being a cool number, there are technical issues that come with these anniversary releases. Some of those issues … Continue reading
February 10, 2022
by sjvn01
Comments Off on Security Trouble in Argo Continuous Delivery Program
Maybe someday there will a day when we don’t have a serious security problem to worry over, but that day is not today. In our latest headache, the cloud-native security company Apiiro’s Security Research team uncovered a nasty software supply chain zero-day … Continue reading
February 9, 2022
by sjvn01
Comments Off on The bill comes due: Securing open-source software isn’t going to be cheap
Open-source software has always been more secure than proprietary software, but that doesn’t mean it’s “secure.” To lock it down, we need to invest serious cash in developers and maintainers. You may have noticed that a lot of people are getting … Continue reading