Featured news
It is thought that the attackers took advantage of an unpatched security flaw in the FTP daemon in order to gain access to the server.
"The fact that the server acted as the main FTP site for the ProFTPD project (ftp.proftpd.org) as well as the rsync distribution server (rsync.proftpd.org) for all ProFTPD mirror servers means that anyone who downloaded ProFTPD 1.3.3c from one of the official mirrors from 2010-11-28 to 2010-12-02 will most likely be affected by the problem," wrote TJ Saunders, the ProFTPD maintainer, in the warning sent to the subscribers of the project's mailing list on SourceForge.
The version with the backdoor makes it possible for the attackers to gain remote root access to any system that runs the malicious version.
Users who have downloaded the source files during those four days - and other users who would like to know they are completely safe just in case - are urged to download the source files again and run it.
To confirm their integrity, they are advised to verify the MD5 sums and PGP signatures of the downloaded files and compare them to that of the legitimate source tarballs.
Spotlight
When hacking saves lives: Hacking medical devices and implants
Of all the IoT devices out there, none are more crucial to users than the medical devices that help them simplify the management of certain medical conditions or, in the most extreme cases, actually keep living.
An Internet of Things wish list for 2016
While there is certainly plenty of legislation out there to protect citizen’s privacy online, it will be difficult to apply much of it to the kinds of data that will be collected through billions of sensors watching our every move both in the home and when out and about.
Difficult to block JavaScript-based ransomware can hit all operating systems
Ransom32 is delivered on the victims' computer in the form of a self-extracting WinRAR archive. It uses the built-in scripting language to unpack its contents and among the files it unpacks is one called chrome.exe.
Lack of skills and recruiting among challenges facing information security profession
Companies with pressing cyber security needs are finding that there’s a major lack of qualified professionals to fill their positions, which makes them vulnerable to cyber attacks.
Google is testing password-free logins
Infosec pros are moving beyond traditional passwords, and companies are expected to follow in the same direction.
Reading our newsletter every Monday will keep you up-to-date with security news.
Receive a daily digest of the latest security news.
