U.S. President Donald Trump's planned U.S. Space Command should seek to develop ways for the country's military to operate in outer space, White House advisers recommended on Tuesday, with the government hoping to secure approval for it by 2020.
Most of us don't think twice about installing software or updates from a trusted developer. We scrutinize the source site carefully to make sure it's legitimate, and then we let the code run on our computers without much more thought. As developers continue to make software and webpages harder to hack, blackhats over the past few years have increasingly exploited this trust to spread malicious wares. Over the past week, two such supply-chain attacks have come to light.
The first involves VestaCP, a control-panel interface that system administrators use to manage servers. This Internet scan performed by Censys shows that there are more than 132,000 unexpired TLS certificates protecting VestaCP users at the moment. According to a post published last Thursday by security firm Eset, unknown attackers compromised VestaCP servers and used their access to make a malicious change to an installer that was available for download.
"The VestaCP installation script was altered to report back generated admin credentials to vestacp.com after a successful installation," Eset Malware Researcher Marc-Étienne M.Léveillé told Ars. "We don't know exactly when this happened, but the modified installation script was visible in their source code management on GitHub between May 31 and June 13." VestaCP developer Serghey Rodin told Ars his organization is working with Eset to investigate the breach to better understand the attack.
The post Watch Live – DNSSEC Workshop on October 24 at ICANN 63 in Barcelona appeared first on Internet Society.
A new film about the British rock band Queen throws the spotlight on the East African archipelago's famous son.
U.S. President Donald Trump said on Tuesday that Saudi authorities staged the "worst cover-up ever" in the killing of prominent journalist Jamal Khashoggi this month. Rough Cut (no reporter narration).