Federal agency warns critical Linux vulnerability being actively exploited (arstechnica.com)

submitted 5 months ago by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works

25 comments fedilink hide all child comments

Cybersecurity and Infrastructure Security Agency urges affected users to update ASAP.

all 35 comments

sorted by: hot top controversial new old

[-] simplymath@lemmy.world 21 points 5 months ago

I appreciate that you curate the RSS feed. I get very little time for social media these days and I'm glad there's someone here populating feeds with content.

I'm not a huge fan of cynicism and non-contributory comments when this space is meant to be better than the toxic sites we all fled. There's a plethora of options for tailoring your feed to exclude unwanted content, none of which require attacking other users acting in good faith.

Thanks to your profile, I found several new communities I will happily follow now. Keep up the good work!

[-] Maeve@sh.itjust.works 1 points 5 months ago

I wondered how the heck humans made so. many. posts! Thanks for this post, I may unblock someone else. But maybe not bc I didn't need every stupid comment made by orange people (although it may be a good Idea, residing where I do, to be informed about certain developments pertaining to them).

[-] sugar_in_your_tea@sh.itjust.works 3 points 5 months ago

Yeah, if you're not applying updates at least once/month, you're just irresponsible and probably deserve to get hacked.

[-] KomfortablesKissen@discuss.tchncs.de 6 points 5 months ago

Normally I would say that nobody deserves to be hacked. But now my perception of the situation has changed.

If viewed like a bank and my data is the money in it, then what's happening mostly is that my money gets stolen. After getting found out the bank says "We're sorry ;)"; the bank might even get insurance money, while I get multiple attempts at accessing my accounts at other services.

Now I would like to see this gross negligence punished. Preferably by a 4x2 to the head. Or cat-o-ninetails.

[-] sugar_in_your_tea@sh.itjust.works 3 points 5 months ago

Exactly. If you run a service, the bare minimum due diligence is to install available updates in a timely manner. Imo, it's criminal negligence if a service gets hacked due to an unpatched system.

Most likely, this isn't being done because the IT dept isn't given enough time to actually maintain systems, so whoever makes that decision should face criminal charges. And orgs like the NSA should be auditing this kind of thing and issuing fines, not spying on US citizens.

[+] EmperorHenry@infosec.pub -9 points 5 months ago

oh but guys! Linux is so much more secure than windows!

Linux can't get hacked or get malware! That's absurd!

That was all sarcasm

[-] Telorand@reddthat.com 17 points 5 months ago

Anyone who still thinks that is either new to Linux or profoundly naive.

Also:

It was patched in January, but as the CISA advisory indicates, some production systems have yet to install it.

So it's really primarily a production issue at this point.

[-] EmperorHenry@infosec.pub 2 points 5 months ago

Anyone who still thinks that is either new to Linux or profoundly naive.

People still shit downvotes on me whenever I talk about how linux isn't perfect.

Microsoft, for all its faults is at least honest enough to admit outright that their software needs protection. They're still not honest about what kind of protection it needs. But at least they're not going to yoink anything off your system they don't want you to use like Apple does

[-] Paragone@sh.itjust.works 0 points 4 months ago

Back in the last century, iirc, or the very early 2000's, I logged-out of my desktop ( linux ) one time & discovered there was a new user on my machine..

the new username was "you are dead".

1st time I knew I'd been cracked.

Not a nice feeling.

Educational, however, & motivating..

did me good.

I'm glad the person was more interested in communicating my trusting foolishness to me, than in doing real harm..

_ /\ _

this post was submitted on 01 Jun 2024

95 points (97.0% liked)

Cybersecurity

5612 readers

100 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social