Weekend Short: Linux Kernel Exploits, a WordPress Flaw, and One Simple Habit
It is Saturday, so we are keeping this brief. Three things crossed the desk this week, and only one of them is likely to matter to most households.
Linux kernel flaws with public exploits
Researchers have published working exploits for four flaws in the Linux kernel. These allow something called local privilege escalation. In plain terms, if an attacker is already on a machine, they can use these flaws to gain full control of it.
They cannot use them to break in from the internet. They need a foothold first. So this is mainly one for people running a Linux server, a small business server, a home server, or a Linux desktop. The fixes are already in most distributions, so it is about applying them.
WordPress Click2Shell
There is a flaw called Click2Shell affecting some WordPress setups. It tricks an administrator into installing a theme that contains hidden code, which can then lead to code execution on the site. If you run your own WordPress site, keep your plugins and themes from trusted sources only, and apply updates promptly.
Transparent Tribe
A known group called Transparent Tribe has been using private GitHub repositories to hide their command-and-control traffic. This is one for security researchers and defenders. It does not change anything for a family laptop, but it is worth knowing the name.
The weekend tip
Switch on automatic updates for every device in your home. Phones, tablets, laptops, and your router if it has the option. If you run Linux, check for updates and install them today. It takes five minutes and covers a large share of what we talk about on this show.
DarkWatch is tracking 13 active targets on an active dark web leak site. Nothing new for households today. We will bring you anything that changes on Monday.
Related reading