Showing posts with label Shellshock. Show all posts
Showing posts with label Shellshock. Show all posts

Friday, 3 October 2014

The number of attacks with the operation of ShellShock began to decline

Most of the attacks are carried out from the territory of the United States, and the victims were gambling sites and pages of Home Appliance Manufacturers.
After three days of peak activity the number of cyber attacks that exploit vulnerabilities ShellShock, began to decline. It was  reported by researchers Akamai.

ShellShock is present in 37 VMware products

The company had released corrections only for few of their products. VMware is actively working to eliminate ShellShock vulnerabilities in their 37 virtual products, but so far it released corrections only for few of them. The company recommended its customers to install patches for Linux, Android, OSX and iOS, as many products are working precisely on the basis of these operating systems.

Wednesday, 1 October 2014

The Shellshock FAQ: Here's what you need to know

The situation with the Shellshock bug is so fluid and complicated that even insiders have trouble keeping it all straight. These questions and answers may help you to understand the bug — actually "bugs" — and what you should do about them.
The primary author of these questions and answers is Michael Lin, Security Research Engineer atFireEye, Inc. FireEye provides research and security products to protect enterprise and government networks against threats.
What is Shellshock?
Shellshock is a nickname for a bug in the Bash (Bourne Again SHell) command-line interpreter, also known as a shell. The Bash shell is widely distributed as the default command-line interpreter on many operating systems including most flavors of Linux, many flavors of Unix, some flavors of BSD, and Apple's OSX (since 10.3).

Read this

Friday, 26 September 2014

What is the Shellshock Bash bug and why does it matter?



By now you may have heard about a new bug found in the Bash shell. And unless you're a programmer or security expert, you're probably wondering if you should really worry. The short answer is: Don't panic, but you should definitely learn more about it, because you may be in contact with vulnerable devices.