Welcome to our
Cyber Security News Aggregator
.Cyber Tzar
provide acyber security risk management
platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.
First slide label
Some representative placeholder content for the first slide.
Second slide label
Some representative placeholder content for the second slide.
Third slide label
Some representative placeholder content for the third slide.
Securing Internet-Critical Software: How We Could Have Backdoored Bash
published on 2026-11-02 09:43:15 UTC by /u/gainanContent:
(May 2026)
TL;DR:
- an email address like atouch${IFS}/tmp/savane-rce-proof@attacker.example gave any registered user code execution on its backend.
- From there, we made our account a superuser,
- impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository.
- An unpatched kernel gave us root access and access to a GNU backup server. We reported it to the FSF on May 11, 2026.
FSF incident report: https://static.fsf.org/nosvn/security/savannah-20260807.pdf
[link] [comments]
https://www.reddit.com/r/netsec/comments/1xlsxqk/securing_internetcritical_software_how_we_could/
Published: 2026 11 02 09:43:15
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Views: 0
