Venky Raju, CISSP’s Post

As you work on your security posture, did you forget about your Linux workloads ? "New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking" This vulnerability is obviously about linux desktop use, as a server machine would not use clipboard being running without GUI. Yet, it also means that your linux workloads (most cloud workloads are running on linux, like AWS EC2 instance etc), and should have proper security posture, patch management etc, properly handled as well. #cybersecurity #linux #patchmanagement #cybersecurityawareness https://lnkd.in/gg5zk_R4

A severe vulnerability in OpenSSH’s server (sshd) has been uncovered by Qualys’ Threat Research Unit (TRU), potentially affecting over 14 million Linux systems worldwide. The flaw, designated as CVE-2024-6387, allows for remote unauthenticated code execution (RCE) with root privileges on glibc-based Linux systems. This vulnerability, stemming from a signal handler race condition, impacts sshd in its default configuration. Qualys researchers have identified approximately 700,000 vulnerable external internet-facing instances among their global customer base, representing 31% of all internet-facing OpenSSH instances.

Learn how Oracle Linux can help accelerate your organizations' path to an effective Zero Trust security model.https://social.ora.cl/6045X363H

Security should be your organisations #1 priority! Belt'n'braces. Learn how your business can expedite the adoption of Zero Trust security with the help of the Oracle Linux https://lnkd.in/gjf4vFKT

My government customers wrestle with this - not sure why. #oraclelinux can make a difference to your organization: Learn how your organization can expedite the adoption of Zero Trust security with the help of the Oracle Linux https://lnkd.in/gAzAp-zM

Exciting news for organizations prioritizing cybersecurity: Offline Security Intelligence Update is now available in Public Preview! This new feature allows Linux endpoints that operate with limited or no internet access to update their security intelligence via a local hosting server. It's an excellent tool for enhancing control over signature downloads and deployments on Linux servers, especially those running critical workloads. The benefits of this offline update capability include managing download frequencies, testing signatures before wide deployment, reducing network bandwidth by using a single local server to fetch updates, and ensuring the latest antivirus protection without needing Defender for Endpoint installed on the local server. Plus, there are backup measures in place just in case something goes wrong with an update. The process involves setting up a local server that can connect with Microsoft Cloud, downloading signatures onto it, and then having your endpoints pull these verified signatures at set intervals. To get started with this feature and upgrade your security infrastructure, you'll need to have the latest Defender for Endpoint agent version 101.24022.000 or above and follow the provided documentation for setup instructions. For more detailed information about how it works and how to implement it within your organization's IT environment, please consult the full post. Post generated with the help of Azure OpenAI GPT4 🤖 #msftadvocate #MicrosoftDefenderForEndpoint #MicrosoftDefender #Security #MDE

Understanding your Ubuntu server version is not just about staying updated; it’s a strategic move in fortifying your... | Click below to read the full article at The Digital Insider.

CVE-2024-6387 is a vulnerability in OpenSSH servers (sshd) in 32-bit Linux/glibc systems. The vulnerability facilitates Remote Code Execution with full root privileges, classifying it as a high-severity exposure (CVSS 8.1). At the heart of this issue is a signal-handler race condition vulnerability within the sshd process of OpenSSH servers, which facilitates code execution on impacted systems with the highest level of system privileges, root privileges.

Exploitable PoC Released for CVE-2024-38077: 0-Click RCE Threatens All Windows Servers Researchers have successfully demonstrated a proof-of-concept (POC) exploit on Windows Server 2025, achieving a near 100% success rate https://lnkd.in/gHPAnKnT