An unknown group of hackers is using a novel strain of malware to attack publicly accessible deployments of Redis — a popular data storage tool used by major companies like Amazon, Hulu and Tinder. . Researchers from Cado Security Labs explained that what stood out most was the fact that the malware appears to be a worm — a subset of malware that can propagate or self-replicate from one computer to another without human activation after breaching a system. The researchers said they recently encountered the malware, which they labeled “P2Pinfect,” and were alarmed at its ability to self-propagate and spread itself to other vulnerable Redis deployments. The report does not name specific victims of the malware, and Cado Security said it is unclear what the botnet's purpose is. The hacking campaign was initially analyzed by Palo Alto’s Unit 42 in a report on July 19, which found the malware exploiting CVE-2022-0543 to take over Redis applications and add them to a botnet — a group of computers that have been infected in a way that allows a hacker to control them all. . A troubling novel worm-like virus exploiting MySQL setups presents significant threats throughout systems.. Redis Botnet, Worm Malware, Cyberattack Prevention, Data Security, P2Pinfect Threat. . LinuxSecurity.com Team
SQLite 3.42 is now available as the newest update to this widely-used, embed-friendly SQL database option that is used by countless applications and other software for lightweight and speedy data storage purposes. . Most notable with SQLite 3.42 is the introduction of the FTS5 secure-delete command. When this option is used, all forensic traces are then removed from the FTS5 inverted index when content is deleted rather than potentially leaving latent information around post-deletion. SQLite 3.42 also improves its JSON SQL functions to support JSON5 extensions, new database configuration options added, query planner improvements, more keyword support for application-defined SQL functions, and various other fixes and performance optimizations. The link for this article located at Phoronix is no longer available. . PostgreSQL 15.1 includes the enhanced partitioning feature, optimizing data retrieval and providing advanced indexing for better query speed.. SQLite Update, Secure Delete Feature, Data Storage Solutions, JSON Functions. . LinuxSecurity.com Team
TrueNAS SCALE is a powerful, open-source operating system specifically built for enterprise-level data storage and management . Powered by Debian Linux and the innovative ZFS file system, it offers advanced features such as snapshotting, replication, and data compression to make sure that your organization’s most critical information is always secured in the best way possible. . TrueNAS SCALE is the perfect fit for companies and organizations that need to store, manage, and distribute large volumes of data across different devices. Plus, its web interface provides an easy-to-use platform allowing you to quickly configure the storage system from anywhere in a few simple steps! Built by iXsystems – a top provider of enterprise storage solutions – TrueNAS SCALE ensures secure access with maximum scalability. After successful deployment in December, TrueNAS SCALE Bluefin 22.12.1 is now available to help manage files, blocks, objects, and applications with ease! The link for this article located at UbuntuPit is no longer available. . TrueNAS SCALE Bluefin 22.12.1 brings cutting-edge features for enterprise data management, enhancing scalability, security, and user experience for optimized storage solutions. TrueNAS, Data Storage, Open Source Solution, Enterprise Management, ZFS File System. . LinuxSecurity.com Team
In modern times, a portable storage device isn. Making the storage and access of data more convenient, artist Anthony Antonellis implanted an RFID chip into his hand that can store data which can be wirelessly accessed by a smartphone. Last month, we saw Rich Lee implant magnetic headphones into his ears so he would have headphones on his person at all times. Now, Antonellis takes a similar route to further simplifying something that is already simple. By implanting an RFID chip the size of a grain of sand into his hand, he can access data stored on the chip. The chip, as you may have guessed, barely holds data The link for this article located at ExtremeTech is no longer available. . Creator Jamie Bracken embedded a Bluetooth module in his wrist for effortless connectivity to devices.. RFID Technology,Wireless Storage,Body Hacking,Implant Technology,Data Access. . LinuxSecurity.com Team
In a secret government agreement granted without approval or debate from lawmakers, the U.S. attorney general recently gave the National Counterterrorism Center sweeping new powers to store dossiers on U.S. citizens, even if they are not suspected of a crime, according to a news report. . Earlier this year, Attorney General Eric Holder granted the center the ability to copy entire government databases holding information on flight records, casino-employee lists, the names of Americans hosting foreign-exchange students and other data, and to store it for up to five years, even without suspicion that someone in the database has committed a crime, according to the Wall Street Journal, which broke the story. The link for this article located at Wired is no longer available. . The cabinet's covert agreement paves the way for widespread surveillance of individuals without probable cause.. Dossier Authority, Privacy Rights, Government Surveillance. . LinuxSecurity.com Team
Does this bother anyone, or is it just the cost of flying these days? How do you think the government could misuse this information? Here. The document reveals that the DHS is storing the reader The link for this article located at philosecurity is no longer available. . The growth of big data has led to governments amassing vast personal information, impacting individual privacy and blurring lines between surveillance and protection. Government Data Storage, Personal Privacy Implications, Surveillance Systems. . LinuxSecurity.com Team
There was much hype around the growth of the email archiving market last year. For example, the IDC predicted that 2005’s email archiving application revenue reached US $310 million worldwide. Good news! The open source community has just released MailArchiva, a competitive email archiving product that integrates directly with Microsoft Exchange. . MailArchiva has a comparable feature-set to proprietary offerings. In typical open source fashion, there are a few important differences, however. The software stores emails on the file system directly, as opposed to using a database. Thus, it eliminates the complexity and costs associated with the management of large databases. Furthermore, emails are stored in standard RFC822 format, ensuring that archived information is accessible for the long haul. The product utilizes the advanced search capabilities of the open source search engine, Lucene. In a matter of micro seconds, users can execute complex search queries and search through thousands of archived emails. The product also offers the capability to search inside attachments and supports many popular file formats (e.g. ms word). MailArchiva offers a web based user interface for the search and retrieval of emails. Users are authenticated directly with Active Directory, enabling administrators to leverage their existing user accounts. Installation and configuration of the system is a breeze. It takes no longer than twenty minutes for a fresh install. For more information on MailArchiva, visit MailArchiva Redirect The link for this article located at Jamie Band is no longer available. . MailArchiva has a comparable feature-set to proprietary offerings. In typical open source fashion, t. there, around, growth, email, archiving, market, example. . LinuxSecurity.com Team
A forthcoming Pentagon directive will shed light on how Defense Department organizations are expected to ensure information is stored on DOD systems adequately. The Pentagon initially issued a directive last October that gave a basic framework for providing information assurance . . . . A forthcoming Pentagon directive will shed light on how Defense Department organizations are expected to ensure information is stored on DOD systems adequately. The Pentagon initially issued a directive last October that gave a basic framework for providing information assurance (IA). DOD Directive 8500.1, which became effective Oct. 24, 2002, calls for information assurance requirements to be identified and included in the design, acquisition, installation, operation, upgrade and replacement of all DOD information systems. DOD Directive 8500.2 will provide more detailed instructions on how to carry the preceding policy and how it will be enforced. The policy is expected to be delivered Jan. 23 to John Stenbit, the assistant secretary of Defense for command, control communications and intelligence (ASD/C3I) and DOD chief information officer, said Donald Jones, a member of the ASD/C3I IA directorate, adding that "with a little bit of luck, [8500.2] will be signed within one week." The link for this article located at FCW is no longer available. . A forthcoming Pentagon directive will shed light on how Defense Department organizations are expecte. forthcoming, pentagon, directive, light, defense, department, organizations, expecte. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.