Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4. The attack needs APT to retry failed downloads, which it does by default from Debian 12 and
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
LK

Lars Khan

2h ago
0 0

Discussion

Break the silence

Take the opportunity to kick things off.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
Cyberattack disrupts blood storage refrigeration systems in Fra…

France's national blood service has confirmed that a cyberattack targeting a refrigeration equipment provider raised temperature and defrost settings at three…
RM

ryan maybe

1h ago
0
bleepingcomputer.com
NIKKE PC game launcher hacked to spread remote access, data-ste…

The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing mal…
MA

maya af

1h ago
0
thehackernews.com
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS…

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised web…
TN

The Hacker News

4h ago
0
darkreading.com
Philippine Migrant Worker Data Likely Leaked in 69GB Government…

An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.
DR

Dark Reading

13h ago
0
darkreading.com
Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit

German police led a multinational probe that exposed an alleged crime-as-a-service provider supplying fraudulent trading platforms to investment scammers.
DR

Dark Reading

21h ago
0
thehackernews.com
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys…

Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords,…
alex but tired

alex but tired

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS…

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised web…
TN

The Hacker News

4h ago
0
thehackernews.com
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys…

Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords,…
alex but tired

alex but tired

1d ago
0
thehackernews.com
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code P…

Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that pe…
TN

The Hacker News

1d ago
0
thehackernews.com
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box …

A botnet of more than 1. 3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google s…
TN

The Hacker News

2d ago
0
thehackernews.com
DarkBlinders Compromises Israeli Target and Iraqi Kurdish Gover…

Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threa…
Nirano

Nirano

2d ago
0
thehackernews.com
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank …

Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) t…
TN

The Hacker News

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest