Red Hat Warns Ceph Hacked Websites

Attackers have managed various websites of Ceph to hack, the free software storage platform developed by Red Hat. It involves ceph.com and download.inktank.com. Both websites are hosted outside the infrastructure of Red Hat.

Via download.inktank.com can Ceph Red Hat for Ubuntu and CentOS are downloaded. Ceph.com offers the upstream packages "for the Ceph community versions. The investigation into the hacking of the websites is ongoing, but as seen Red Hat, there is no code on the compromised websites. Yet the software developer says it can not be excluded that the sites any time or compromised code offered.

For both the software download.inktank.com as ceph.com also be new digital keys used with which the software is signed. Users should only use Ceph software that is signed with these new keys. In addition, managers of CentOS and Ubuntu using Ceph precaution download and install the new software autographed. Red Hat notes that managers of Red Hat Enterprise Linux systems need to take any action.

Free Tools Detect Hacking Team Backdoors

Both Facebook and the US security Smoke Security have developed a free tool that allows users and administrators to detect backdoors on their systems which come from the data that was stolen by the Italian Hacking Team.

Smoke Security analyzed the more than 400GB of data stolen and discovered herein 40 files that could be used to attack users or could assist. To detect these files, the security company developed the " Milano "tool. The tool features a 'quick scan' and 'deep scan'.

The quick scan checks for file name. If the retrieved file name matches the name of one of the found Hacking Team files, it is then also the MD5 hash compared with that of the stolen Hacking Team file. The deep scan compares the hash of all files on the computer with that of Hacking Team files.

Facebook

Last year, Facebook launched " osquery ", an open source project to monitor multiple platforms including Ubuntu, CentOS and Mac OS X. The current state of the operating system can be viewed on the basis of SQL based queries and tables, such as processes, loaded kernel modules and open network connections. According to Facebook's osquery for putting all kinds of things, such as intrusion detection, compliance and vulnerability management.

Facebook now has a new version of osquery launched which should be more user friendly. So are used "query packs", which basically clustered SQL queries are being offered as a file. One of the packs offered by Facebook specifically targets Mac OS X backdoors. Through the "OS X attacks pack" Organizations can now check whether a Mac computer in their area is infected with malware. It therefore comes to the Mac backdoor that was found in the stolen data of Hacking Team.

According To The Researcher - "75% PHP Installations Is Unsafe"

Approximately 75% of the PHP installation is unsafe, so the popular scripting language is one of the most unsafe platforms. That suggests Anthony Ferrara , "developer advocate" at Google. Ferrara had recently written an article about what it means to be a responsible developer.

PHP is one of the most popular programming languages ​​and Google employee also wanted to know how many percent of the plant is safe. He used the statistics W3Techs and correlated that with the versions that are managed by well-known Linux distributions. Users can install PHP namely itself or use the version offered by the Linux distribution used.

Then turns out 78.3% of the PHP installations at least include one or more vulnerabilities, while 21.7% identified as being safe. Ferrara says that the percentage of safe installations still high estimated because installations of PHP 5.4.4 on Debian, which is still supported, can not be distinguished from 5.4.4 installations that are not derived from Debian and are no longer supported. The percentage of 21.7% by Ferrara also described as "optimistic".

"It is totally unacceptable. This means that more than 78% have at least one vulnerability of the PHP installations. Sadly," concludes Ferrara. He calls on everyone to monitor his or her PHP installation. "Do not force people to update. Do not accept" if it works, do not fix it .'... You have the power to change it, so change it. Security is a problem for everyone. What is important is how you handle it. "

The investigation of the Google employee received the necessary attention and he decided to out for other platforms run it, as well as PHP, this time with Fedora and PHP 4.5.34 on Debian 7 were counted. Then it appears that 82.3% of the installations of the Perl programming language is safe. In the case of the Python programming language is about 77.6%. Ultimately, the recount of PHP, which Debian 7 extra is included, a slightly higher percentage of secure PHP installations, namely 25.6%. That would still mean that sure 74.4% of the installations is unsafe.