this post was submitted on 01 Jun 2024
95 points (97.0% liked)

Cybersecurity

5687 readers
45 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
95
Federal agency warns critical Linux vulnerability being actively exploited (arstechnica.com)
submitted 5 months ago by BrikoX@lemmy.zip to c/cybersecurity@sh.itjust.works
25 comments fedilink hide all child comments
 

Cybersecurity and Infrastructure Security Agency urges affected users to update ASAP.

all 35 comments
sorted by: hot top controversial new old
[–] simplymath@lemmy.world 21 points 5 months ago (1 children)

I appreciate that you curate the RSS feed. I get very little time for social media these days and I'm glad there's someone here populating feeds with content.

I'm not a huge fan of cynicism and non-contributory comments when this space is meant to be better than the toxic sites we all fled. There's a plethora of options for tailoring your feed to exclude unwanted content, none of which require attacking other users acting in good faith.

Thanks to your profile, I found several new communities I will happily follow now. Keep up the good work!

[–] Maeve@sh.itjust.works 1 points 5 months ago

I wondered how the heck humans made so. many. posts! Thanks for this post, I may unblock someone else. But maybe not bc I didn't need every stupid comment made by orange people (although it may be a good Idea, residing where I do, to be informed about certain developments pertaining to them).

[–] sugar_in_your_tea@sh.itjust.works 3 points 5 months ago (1 children)

Yeah, if you're not applying updates at least once/month, you're just irresponsible and probably deserve to get hacked.

[–] KomfortablesKissen@discuss.tchncs.de 6 points 5 months ago (1 children)

Normally I would say that nobody deserves to be hacked. But now my perception of the situation has changed.

If viewed like a bank and my data is the money in it, then what's happening mostly is that my money gets stolen. After getting found out the bank says "We're sorry ;)"; the bank might even get insurance money, while I get multiple attempts at accessing my accounts at other services.

Now I would like to see this gross negligence punished. Preferably by a 4x2 to the head. Or cat-o-ninetails.

[–] sugar_in_your_tea@sh.itjust.works 3 points 5 months ago

Exactly. If you run a service, the bare minimum due diligence is to install available updates in a timely manner. Imo, it's criminal negligence if a service gets hacked due to an unpatched system.

Most likely, this isn't being done because the IT dept isn't given enough time to actually maintain systems, so whoever makes that decision should face criminal charges. And orgs like the NSA should be auditing this kind of thing and issuing fines, not spying on US citizens.