Author: Tech Support

Security software that uses 'code hooking' opens the door to hackers

Some of the intrusive techniques used by security, performance, virtualization, and other types of programs to monitor third-party processes have introduced vulnerabilities that hackers can exploit. Researchers from data exfiltration prevention company enSilo found six common security issues affecting over 15 products when they studied how software vendors use “hooking” to inject code into a process

Read More
Ubuntu forum breach traced to neglected plugin

Updating software is important, but it’s the third-party add-ons that get servers pwned. No component — theme, plugin, or module — is too small. Canonical, the commercial vendor behind Ubuntu Linux, has disclosed a security breach where an unknown adversary accessed the database powering the Ubuntu support forums and obtained usernames, passwords, and IP addresses

Read More