[USN-3809-1] OpenSSH vulnerabilities

---------- Forwarded message ---------
From: Leonidas S. Barbosa
Date: 2018年11月6日 週二 下午10:48

Robert Swiecki discovered that OpenSSH incorrectly handled certain
messages. An attacker could possibly use this issue to cause a denial
of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04
LTS. (CVE-2016-10708)

It was discovered that OpenSSH incorrectly handled certain requests.
An attacker could possibly use this issue to access sensitive
information. (CVE-2018-15473)

References:
  https://usn.ubuntu.com/usn/usn-3809-1
  CVE-2016-10708, CVE-2018-15473

TrendLabs: Disrupting the Flow: Exposed and Vulnerable Water and Energy Infrastructures

Figure 1. Screenshot of an exposed HMI for controlling/configuring a water treatment plant

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/disrupting-the-flow-exposed-and-vulnerable-water-and-energy-infrastructures/

LXM: A command-line presentation app with purpose

Impress and PowerPoint slide shows have limited options for design or presentation. By contrast, Impressive offers users more formatting options. Impressive also has a small, but effective set of practical tools to make a presentation more effective.

REF: http://www.linux-magazine.com/Issues/2018/217/Eye-Candy

TrendLabs: Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads

Figure 2. Comparison between the malicious email and a legitimate one. Note the difference in language and the changed signature

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/phishing-campaign-uses-hijacked-emails-to-deliver-ursnif-by-replying-to-ongoing-threads/

NewTek Now Shipping Connect Spark™ Pro

The NewTek Connect Spark™ Pro is the fastest, easiest, and most flexible way to acquire 4K UHD video for your IP-based production workflow.

REF: https://www.newtek.com/

LXM: IBM Purchase of Red Hat Software: There is No Fear Except Fear Itself – with Thanks to FDR

IBM bought Red Hat Software.

The world wide web is alive with the news, and many of the people who have worked and used Red Hat in the last 25 years are lamenting the “fall” of their beloved company and software.

REF: http://www.linux-magazine.com/Online/Blogs/Paw-Prints-Writings-of-the-maddog/IBM-Purchase-of-Red-Hat-Software-There-is-No-Fear-Except-Fear-Itself-with-Thanks-to-FDR

TrendLabs: Same Old yet Brand-new: New File Types Emerge in Malware Spam Attachments

Figure 3. A screen capture of the contents of a .Z file

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/same-old-yet-brand-new-new-file-types-emerge-in-malware-spam-attachments/