🚨 SECURITY PSA - 7ZIP VULN🚨
Update your 7zip, folks
https://cybersecuritynews.com/7-zip-vulnerability-arbitrary-code/
#cybersecurity #zeroday #7zip #malware #security #it #infosec
🚨 SECURITY PSA - 7ZIP VULN🚨
Update your 7zip, folks
https://cybersecuritynews.com/7-zip-vulnerability-arbitrary-code/
#cybersecurity #zeroday #7zip #malware #security #it #infosec
7 Comments
nazokiyoubinbou@urusai.social · 2 pts · 1y
neatchee@urusai.social · 1 pts · 1y
@nazokiyoubinbou@urusai.social supply chain attacks are the favorite these days :/
nazokiyoubinbou@urusai.social · 1 pts · 1y
screaminggoat@infosec.exchange · 2 pts · 1y
@neatchee it's a fake proof of concept https://therecord.media/fake-zero-day-7Zip
devans143@phpc.social · 2 pts · 1y
@neatchee
If you read the write up, it sounds like the 7-Zip maintainers have not released a version yet with a patch. Current release is 24.09... watch for something newer.
neatchee@urusai.social · 1 pts · 1y
@devans143@phpc.social CVE indicates 24.08 was the patched version
devans143@phpc.social · 1 pts · 1y
@neatchee That good to know. The original report from the group that found it said they were unaware of any patched version being released, but they had not heard from the maintainers yet. I usually check for an update once a month anyway.
TootSweet@lemmy.world · 1 pts · 1y
Why do I hear specifically about vulnerabilities in compression programs so much more than in other kinds of software?
neatchee@urusai.social · 2 pts · 1y
@TootSweet@lemmy.world because it's specifically software that is about opening and processing arbitrary payloads.