open source

Millions of routers running OpenWRT vulnerable to attack

April 1, 2020

A vulnerability (CVE-2020-7982) discovered in the package manager of the OpenWRT open source operating system could allow attackers to compromise the embedded and networking …

2020 cybersecurity risks: Insecure security tools, supply chains, abandonware

March 23, 2020

Considerable time and money are invested into looking for dangerous vulnerabilities in the most commonly used elements of IT infrastructure. Popular operating systems, …

Number of open source vulnerabilities surged in 2019

March 13, 2020

The number of disclosed open source software vulnerabilities in 2019 reached over 6000, up from just over 4,000 in 2018, a new WhiteSource report says. “This can be …

PPP Daemon flaw opens Linux distros, networking devices to takeover attacks

March 10, 2020

A vulnerability (CVE-2020-8597) in the Point-to-Point Protocol Daemon (pppd) software, which comes installed on many Linux-based and Unix-like operating systems and networking …

Microsoft releases PowerShell 7 for Windows, macOS and Linux

March 6, 2020

Microsoft has released PowerShell 7, the latest major update to its popular task automation tool and configuration management framework that can be used on various operating …

Kali Linux evolution: What’s next for the open source pentesting Linux distro?

March 2, 2020

When the popular security-focused BackTrack Linux distribution was redesigned from the ground up and given the name Kali Linux nearly seven years ago, I remember thinking that …

A new RCE in OpenSMTPD’s default install, patch available

February 25, 2020

Less than a month after the patching of a critical RCE flaw in OpenSMTPD, OpenBSD’s mail server, comes another call to upgrade to the latest version, as two additional …

OpenDXL Ontology: An open source language for connecting cybersecurity tools

February 24, 2020

The Open Cybersecurity Alliance (OCA) today announced the availability of OpenDXL Ontology, the first open source language for connecting cybersecurity tools through a common …

USB armory Mk II: A secure computer on a USB stick featuring open source hardware design

February 5, 2020

The hardware security professionals at F-Secure have created a new version of the USB armory – a computer on a USB stick built from the ground up to be secure. USB armory Mk …

Make your own security key with Google’s OpenSK

January 31, 2020

Google has open-sourced OpenSK, firmware that, combined with an affordable chip dongle, allows you to make your own security key to use for authentication purposes. About …

Critical RCE flaw in OpenSMTPD, patch available

January 29, 2020

Qualys researchers have discovered a critical vulnerability (CVE-2020-7247) in OpenBSD’s OpenSMTPD mail server, which can allow attackers to execute arbitrary shell commands …

Kali Linux 2020.1 released: New tools, Kali NetHunter rootless, and more!