[PLUG] unpatched DNS bug, SSH hardening, network switches vuln

[jeffv via plug <plug@lists.phillylinux.org>]

Unpatched DNS bug affects millions of routers and IoT devices

https://www.bleepingcomputer.com/news/security/unpatched-dns-bug-affects-millions-of-routers-and-iot-devices/

The library uClibc and its fork from the OpenWRT team, uClibc-ng. Both 
variants are widely used by major vendors like Netgear, Axis, and 
Linksys, as well as Linux distributions suitable for embedded applications.



OpenSSH Security Hardening Guide for Linux

https://www.howtoforge.com/openssh-security-hardening-guide-for-linux/



Aruba and Avaya network switches are vulnerable to RCE attacks

https://www.bleepingcomputer.com/news/security/aruba-and-avaya-network-switches-are-vulnerable-to-rce-attacks/




Botnet that hid for 18 months boasted some of the coolest tradecraft ever

https://arstechnica.com/information-technology/2022/05/how-hackers-used-smarts-and-a-novel-iot-botnet-to-plunder-email-for-months/




Google SMTP relay service abused for sending phishing emails

https://www.bleepingcomputer.com/news/security/google-smtp-relay-service-abused-for-sending-phishing-emails/





Some hamsters are extremely susceptible to COVID-19

https://www.sciencenews.org/article/covid-coronavirus-hamsters-susceptible-transmission-humans
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug