Tag Archive for: curious

0-days, RCE bugs, and a curious tale of signed malware – Naked Security


Another month, another Microsoft Patch Tuesday, another 48 patches, another two zero-days…

…and an astonishing tale about a bunch of rogue actors who tricked Microsoft itself into giving their malicious code an official digital seal of approval.

For a threat researcher’s view of the Patch Tuesday fixes for December 2002, please consult the Sophos X-Ops writeup on our sister site Sophos News:

For a deep dive into the saga of the signed malware, discovered and reported recently by Sophos Rapid Response experts who were called into deal with the aftermath of a successful attack:

And for a high-level overview of the big issues this month, just keep reading here…

Two zero-day holes patched

Fortunately, neither of these bugs can be exploited for what’s known as RCE (remote code execution), so they don’t give outside attackers a direct route into your network.

Nevertheless, they’re both bugs that make things easier for cybercriminals by providing ways for them to sidestep security protections that would usually stop them in their tracks:


CVE-2022-44710: DirectX Graphics Kernel Elevation of Privilege Vulnerability

An exploit allowing a local user to abuse this bug has apparently been publicly disclosed.

As far as we are aware, however, the bug applies only to the very latest builds (2022H2) of Windows 11.

Kernel-level EoP (elevation-of-privilege) bugs allow regular users to “promote” themselves to system-level powers, potentially turning a troublesome but perhaps limited cybercrime intrusion into a complete computer compromise.


CVE-2022-44698: Windows SmartScreen Security Feature Bypass Vulnerability

This bug is also known to have been expoited in the wild.

An attacker with malicious content that would normally provoke a security alert could bypass that notification and thus infect even well-informed users without warning.


Bugs to watch

And here are three interesting bugs that weren’t 0-days, but that crooks may well be interested in digging into, in the hope of figuring out ways to attack anyone who’s slow at patching.

Remember that patches themselves often unavoidably give attackers clear hints on where to start looking, and what sort of things to…

Source…

Internet Security Firewall Market Growth, Overview with Detailed Analysis 2020-2026| SAP, Hewlett Packard Enterprise, Cellusys, Openmind Networks, Tata Communications, More – Curious Desk

Internet Security Firewall Market Growth, Overview with Detailed Analysis 2020-2026| SAP, Hewlett Packard Enterprise, Cellusys, Openmind Networks, Tata Communications, More  Curious Desk
“internet security news” – read more

The Curious Case Of The Bogus CC License On A 3D Scan Of A 3000-Year-Old Bust Of Nefertiti

Techdirt has written a number of stories about museums and art galleries claiming copyright on images of public domain works. That’s really not on for institutions that are supposedly dedicated to spreading appreciation of the masterpieces they hold. The latest example of this unfortunate habit is a complex and fascinating tale involving the famous bust of Nefertiti, found a century ago, currently displayed in Berlin’s Staatliche Museen.

A rather improbable story that people had managed surreptitiously to scan the bust at high resolution piqued the interest of the artist Cosmo Wenman. It seemed likely that the 3D scan files involved had been produced by the museum itself, so Wenman decided to use German freedom of information laws to request them officially. As his long and fascinating post on the 3D Nefertiti saga explains, the German museum was singularly unhelpful:

it acknowledged the existence of the Nefertiti scan and acknowledged that the organization was required by law to give me access to it. But it also declared that directly giving me copies of the scan data would threaten its commercial interests. The Egyptian Museum sells expensive Nefertiti replicas in its gift shop, and it implied that it needs to protect that revenue to finance its ongoing digitization efforts.

In museum-world parlance, this argument against open access is known as “the gift shop defense.”

In the end, it turned out that the money generated by using the scans to make replicas was pretty minimal. Reflecting the weakness of “the gift shop defense”, the museum sent Wenman a copy of the scans, but with a twist:

To mark their territory, [the German body overseeing museums] had inartfully carved a copyright claim directly into the flat underside of the 3D model. And without explanation, it had included a Creative Commons “CC BY-NC-SA” license.

A good analysis of the situation by Michael Weinberg points out why this is bogus:

Creative Commons licenses are copyright licenses. That means that if you violate the terms of the license, you may be liable for copyright infringement. It also means that if the file being licensed is not protected by copyright, nothing happens if you violate the license. If there is not a copyright protecting the scan a user does not need permission from a ‘rightsholder’ to use it because that rightsholder does not exist.

The central issue is whether a high-resolution 3D scan of an object unequivocally in the public domain, is also in the public domain. An earlier article by Weinberg explains that in the US it seems clear that producing an accurate scan of a public domain object is also in the public domain. It’s slightly less clear-cut in the EU, but even there 3D scans are unlikely to be protected. Moreover, one of the few good things in the generally awful EU Copyright Directive is explicit confirmation that material resulting from reproducing art that is in the public domain is also in the public domain, “unless the material resulting from that act of reproduction is original in the sense that it is the author’s own intellectual creation”. An accurate 3D scan does not fall into that category — something that EU Member States could and should make clear when they implement the Copyright Directive in their national legislation. Weinberg also raises the issue of “moral rights” — things like a right of attribution and a right of integrity:

While removing attribution or intentionally modifying the work to remove the fake [CC] license might create problems if the Staatliche Museen was the ‘creator of the work’ for copyright purposes, that is not the case here. The Staatliche Museen did not create any work that is recognized under US (and soon EU) copyright law. That means that there is nothing for the moral rights to attach to.

A post on the Creative Commons blog points out the use of bogus CC licenses causes collateral damage beyond simply misleading people about what they can and cannot do with material that is in the public domain:

Creative Commons licenses are tools to allow users to better understand what permissions are being granted to the public by the creator of the original work. When a CC license is misapplied, the ability of CC licenses to be a standard signal for communicating copyright permissions is undermined. Mislabelling works creates confusion among re-users of works and limits the rights of the public to benefit from the global commons.

It is doubly reprehensible that supposed guardians of culture should not only be asserting intellectual monopoly rights they don’t have over materials in their collections, but that they should be undermining one of the most important tools available for promoting the sharing of culture — the carefully-calibrated range of Creative Commons licenses.

Follow me @glynmoody on Twitter, Diaspora, or Mastodon.

Permalink | Comments | Email This Story

Techdirt.

The curious tradition of blaming foreign intelligence – China.org.cn


China.org.cn

The curious tradition of blaming foreign intelligence
China.org.cn
In fact it has been a pattern of the anti-espionage hysteria since Trump won. Note, I am saying anti-espionage hysteria, and not anti-Russian, as it is not only tied up to Russia. Chinese academics are not allowed into space sectors, because apparently

Espionage China – read more