Tux Machines

Security Leftovers

Posted by Roy Schestowitz on Apr 25, 2023

=> Programming: nativescript and Rust | What's new in GNOME 44

Security updates for Monday

=> ↺ Security updates for Monday

Security updates have been issued by Debian (389-ds-base, chromium, connman, curl, redis, and thunderbird), Fedora (ceph, doctl, dr_libs, ffmpeg, freeimage, golang-github-digitalocean-godo, insight, libreswan, mingw-binutils, mingw-freeimage, mingw-freetype, openvswitch, rnp, suricata, webkitgtk, and wireshark), Mageia (dnsmasq, emacs, openimageio, php-smarty, redis, squirrel/supertux, and tcpdump), Red Hat (emacs), and SUSE (avahi, chromium, dmidecode, indent, jettison, openssl, openstack-cinder, openstack-nova, python-oslo.utils, and ovmf).

San Bernardino County Sheriff's Department shuts down internet systems following recent cyberattack

=> ↺ San Bernardino County Sheriff's Department shuts down internet systems following recent cyberattack

More than two weeks after the San Bernardino County Sheriff's Department was hit with a cyberattack, the department is still working to get all of its systems back online.

Multiple sources have told Eyewitness News that the hack likely started after someone clicked a hyperlink that was malicious, and that suddenly encrypted many of the department's systems.

Yellow Pages Canada confirms cyber attack as Black Basta leaks data

=> ↺ Yellow Pages Canada confirms cyber attack as Black Basta leaks data

Yellow Pages Group, a Canadian directory publisher has confirmed to BleepingComputer that it has been hit by a cyber attack.

Black Basta ransomware and extortion gang claims responsibility for the attack and has posted sensitive documents and data over the weekend.

Founded in 1908, the Yellow Pages Group today owns and operates the YP.ca and YellowPages.ca websites, along with Canada411 online service.

Naivas Supermarket’s System Hacked, Data Stolen

=> ↺ Naivas Supermarket’s System Hacked, Data Stolen

Wycliffe Musalia reports that Kenya’s Naivas supermarket chain in Kenya has been the victim of a ransomware incident, but the chain assures customers that certain customer data such as payment card data was never at risk because it is not stored on their system.

From the news report, it sounds like the company notified law enforcement, brought in CrowdStrike, and published a notice to consumers on Twitter on April 23.

=> gemini.tuxmachines.org