Sean Michael Kerner

Alpine Linux Goes All In for Docker The Alpine Linux distribution provides a small footprint, security-focused host operating system on which to run Docker containers. Alpine Linux 3.3.1 Debuts Alpine Linux iterates quickly, with a new release out every eight weeks or less. The most recent release of Alpine is version 3.3.1, which came out […]

Security firm Kaspersky Lab today revealed details on a trio of new financial industry attacks that are stealing money from banks and ATMs. One of the campaigns, Carbanak 2.0, is an evolution of an attack that Kaspersky first reported in 2015, while the Metel and GCMAN attacks are new. There is no direct connection between […]

Infrastructure, such as energy utilities, is an increasingly attractive target for cyber-attackers that aim to cause disruption. Two recent studies show that not every utility is ready to deal with and defend against modern attacks. On Dec. 23, a power outage hit parts of the Ukraine in what has since been determined to be a […]

An often cited best practice to help enable proper security is to test security by attempting to exploit it. That’s the goal of security startup vThreat, which is gearing up to take its place in the cyber-security market with a new CEO and a plan to grow market share in 2016. vThreat is the brainchild […]

CoreOS released today rkt (pronounced Rock-it) 1.0, providing container users with an alternative runtime to Docker. CoreOS first announced rkt in December 2014 after dissatisfaction arose with the state of the Docker runtime. While rkt is a competitor to the Docker runtime, users will still be able to run application containers that have been built […]

For most of the history of computing, the user experience has been defined and limited by the hardware form factor. Canonical, the lead sponsor of the Ubuntu Linux, is on a mission to create a converged platform where a single operating system is able to power a desktop or a phone and now a tablet. […]

The Google Project Zero security research effort publicly disclosed multiple security flaws in products from big antivirus vendors, such as Avast, Comodo and Malawarebytes. Google is targeting security vendors that have forked the open-source Chromium Web browser to build their own secure browsers. For Avast, Google security researcher Tavis Ormandy reported that the Avastium browser, […]

A new update to the WordPress open-source blogging and content management system (CMS) has been released that patches a pair of security vulnerabilities and includes 17 bug fixes that improve functionality. One of the patched security vulnerabilities in Version 4.4.2 of WordPress was identified as a possible Server-Side Request Forgery (SSRF) vulnerability that can impact […]

The open-source Docker container engine technology is set for a major boost this week. The expected release on Feb. 4 of Docker 1.10 includes new features and a strong focus on security, particularly with the integration of secure computing (or seccomp) and user namespace technology. Seccomp is a technology that is integrated into the mainline […]

Tails 2.0 Linux Distro Improves Installation, Gets New Look The first major milestone release for the privacy-focused Linux distribution in 2016 makes it easy for new users to install and provides a new interface. Installation Assistant Helps Get Tails Running As part of the new release, Tails now has an Installation Assistant, documentation that details […]

DDoS Attack Size Soars, Volumes Are Up, Arbor Networks Finds Distributed denial-of-service attacks continue to grow in bandwidth volume, as attackers make use of different techniques to saturate defender bandwidth. Peak DDoS Attack Reported at 500G bps The peak DDoS attack reported by Arbor in 2015 came in at a new all-time high of 500G […]

Google has come out with its second security patch update for Android in 2016, this time patching 13 vulnerabilities in the mobile device operating system. Five of the vulnerabilities are rated by Google as having critical severity. Of the five critical vulnerabilities patched by Google, two (CVE-2016-0803 and CVE-2016-0804) are remote code execution vulnerabilities in […]