Language Selection

English French German Italian Portuguese Spanish

NSA Back Doors in Windows Causing Chaos While Media is Obsessing Over DoS Linux Bug

Filed under
Microsoft
Security
  • U.S. Government Announces Critical Warning For Microsoft Windows Users

    The United States Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) has gone public with a warning to Microsoft Windows users regarding a critical security vulnerability. By issuing the "update now" warning, CISA has joined the likes of Microsoft itself and the National Security Agency (NSA) in warning Windows users of the danger from the BlueKeep vulnerability.

    This latest warning, and many would argue the one with most gravitas, comes hot on the heels of Yaniv Balmas, the global head of cyber research at security vendor Check Point, telling me in an interview for SC Magazine UK that "it's now a race against the clock by cyber criminals which makes this vulnerability a ticking cyber bomb." Balmas also predicted that it will only be "a matter of weeks" before attackers started exploiting BlueKeep.

    The CISA alert appears to confirm this, stating that it has, "coordinated with external stakeholders and determined that Windows 2000 is vulnerable to BlueKeep." That it can confirm a remote code execution on Windows 2000 might not sound too frightening, this is an old operating system after all, it would be unwise to classify this as an exercise in fear, uncertainty and doubt. Until now, the exploits that have been developed, at least those seen in operation, did nothing more than crash the computer. Achieving remote code execution brings the specter of the BlueKeep worm into view as it brings control of infected machines to the attacker.

  • Netflix uncovers SACK Panic vuln that can bork Linux-based systems

More in Tux Machines

Go 1.14 is released

Today the Go team is very happy to announce the release of Go 1.14. You can get it from the download page. Read more Also: Go 1.14 Released - Performance Improvements, Go's Module Support Production-Ready

IBM/Red Hat Leftovers

  • Open source marketing: Hacking our technology and process problems

    The teams that make up the Red Hat Open Studio are stewards of the Red Hat brand and identity. We are also makers, because Red Hat is an open source company, and open source is all about creating things. Open source is also about hacking together solutions when there isn’t an easy way to solve a problem.

  • Enterprise Kubernetes with OpenShift (Part one)

    The question “What’s the difference between Kubernetes and OpenShift?” comes up every now and then, and it is quite like asking: “What’s the difference between an engine and a car?” To answer the latter, a car is a product that immediately makes you productive: it is ready to get you where you want to go. The engine, in return, won’t get you anywhere unless you assemble it with other essential components that will form in the end a … car. As for the first question, in essence, you can think of it as Kubernetes being the engine that drives OpenShift, and OpenShift as the complete car (hence platform) that will get you where you want to.

  • Rules for product managers at open source companies

    Product management is an interesting career. It's immensely rewarding to be the interface between users, business strategy, engineering, and product design. And it's also a highly lucrative career with increasing demand for ambitious and empathetic practitioners. It's also a role with no single path. You might see various certifications and courses emerging to help address the serious skills shortage. The good news is that these are starting to contribute to the talent pipeline, but they struggle to address the wider demands of the role. This is especially the case where roles require direct experience across the enormous range of what it takes to build and ship successful products.

  • Red Hat simplifies container development and redistribution of RHEL packages

    Now, application developers in the Red Hat Technology Partner program can build their container apps and redeploy from the full set of Red Hat Enterprise Linux (RHEL) user space packages (non-kernel). This nearly triples the number of packages over UBI only. When we introduced Red Hat Universal Base Images (UBI) in May 2019, we provided Red Hat partners the ability to freely use and redistribute a substantial number of RHEL packages that can be deployed on both Red Hat and non-Red Hat platforms. This gave developers the ability to build safe, secure, and portable container-based software that could then be deployed anywhere. The feedback on this has been overwhelmingly positive and we thank you for it, but we learned that you needed more, so we’re sharing this advanced preview with Red Hat Partner Connect members to help you with your planning.

Linux Laptop Buyer’s Guide 2020

You can visit any online Linux discussion board, and you’re guaranteed to find the same question posted over and over again: What’s the best Linux laptop that I can buy? In 2020, this question is both easy and difficult to answer at the same time. On the one hand, the Linux kernel has made great strides in improving compatibility with hardware components, and it’s now very rare for a laptop to not work with Linux at all. On the other hand, the sheer number of attractive laptops that work with Linux can be overwhelming and make the buying process feel tiring. To make it easier for you, we selected the best Linux-friendly laptop brands in 2020 and picked one laptop for each brand. All there’s left for you to do is choose the laptop that best matches your requirements. Read more

today's howtos