The Internet Systems Consortium (ISC) this week announced patches for multiple high-severity denial-of-service (DoS) vulnerabilities in the DNS software suite BIND. The addressed issues could be exploited remotely to cause named...
Most distros unaffected unless defaults were changed, but do check Sudo, a standard tool on Unix-y operating systems that lets select users run some or all commands as root, can be exploited to give superpowers to any logged-in...
A patch has been released for a vulnerability in Sudo that can be exploited by an unprivileged attacker to gain full root permissions on the targeted system. read more
Microsoft spots malicious npm package stealing data from UNIX systems Go to Source Malicious JavaScript package was only active on the npm repository for two weeks.
A vulnerability that can be exploited to determine if a user is connected to a VPN and hijack active TCP connections in a VPN tunnel has been found to affect various Linux and Unix operating systems. read more
The authentication bypass (CVE-2019-19521) is remotely exploitable.
