Afternoon Dessert – 2022-12-05

Afternoondessert

Welcome to another Afternoon Dessert breakout:

New BMC Supply Chain Vulnerabilities Affect Servers from Dozens of Manufacturers
Three different security flaws have been disclosed in American Megatrends (AMI) MegaRAC Baseboard Management Controller (BMC) software that could lead to remote code execution on vulnerable servers.
“The impact of exploiting these vulnerabilities include remote control of compromised servers, remote deployment of malware, ransomware and firmware implants, and server physical damage (bricking),”
Read more….

Severe AMI MegaRAC flaws impact servers from AMD, ARM, HPE, Dell, others
Three vulnerabilities in the American Megatrends MegaRAC Baseboard Management Controller (BMC) software impact server equipment used in many cloud service and data center providers. […]
Read more….

Hackers hijack Linux devices using PRoot isolated filesystems
Hackers are abusing the open-source Linux PRoot utility in BYOF (Bring Your Own Filesystem) attacks to provide a consistent repository of malicious tools that work on many Linux distributions. […]
Read more….

Follow for more…

Advertisement

Create a website or blog at WordPress.com

%d bloggers like this: