Cyber Security News: Erlang SSH Vulnerability, RSAC 2025 Preview, and DNS Outage

Critical Erlang/OTP SSH Vulnerability

• 🚨 A critical vulnerability in Erlang OTP SSH allows unauthenticated remote code execution, with a maximum CVSS score of 10.
• 🎯 Attackers can run commands, often as root, via the SSH Damon due to improper handling of pre-authentication SSH messages.
• 🛠️ Users are urged to upgrade immediately or, if patching isn't possible, limit access to trusted IPs or disable SSH.

Cybersecurity Information Sharing Law Renewal

• 🤝 A bipartisan effort is underway to renew the Cyber Security Information Sharing Act, set to expire in September.
• 📈 This law encourages businesses to share cyber threat data with the government, supporting real-time collaboration and aiding responses to major incidents.
• ⚠️ Experts agree renewal is crucial but suggest updating the law for modern privacy and threat realities.

Linux Kernel and Chrome Extension Risks

• 🔑 A newly discovered Linux kernel vulnerability allows local attackers to escalate privileges to root access due to improper handling of IP range parameters.
• 🕵️ Researcher John Tuckner uncovered 57 risky Chrome extensions with 6 million users, many with excessive permissions that could be used for surveillance.
• ⚠️ Users are advised to remove flagged extensions and reset passwords, as some remain active despite Google's investigation.

Malware and Data Breach Incidents

• 📧 Strela stealer, a credential-stealing malware, has enhanced obfuscation and new delivery methods, hitting over 100 organizations.
• 🏢 Legends International, a live event service provider, suffered a data breach exposing sensitive employee and customer information, including social security numbers and payment card details.
• 🚨 CISA warns of an actively exploited SonicWall vulnerability affecting SMA 100 series appliances, urging agencies to patch by May 7th.
• 💸 Airport retailer Paradis Shops agreed to a $6.9 million settlement over a 2020 ransomware attack that exposed employee data.

RSAC 2025 Conference Preview

• 🌟 Linda Gray Martin and Britta Glade preview RSAC 2025, highlighting a new branding as "RSAC Conference" and an expanded campus including the Yerba Buena Center for the Arts.
• 💡 Key new features include the 20th anniversary of the Innovation Sandbox contest, the YBCA Keynote Program, and a partnership with DARPA for their AI Cyber Challenge.
• 📈 Content expansions include a "Protecting Home and Family" mini-track, the return of the Security Foundations track, and presentations from EUNIX distinguished paper honorees.
• 🗺️ Tips for attendees include planning their schedule in advance via the website and attending the first-timer reception on Sunday night for networking.

DNS Outage and Security Takeaways

• 🌐 A global Zoom outage lasting nearly 2 hours was caused by a miscommunication between Zoom's domain registrar and GoDaddy, leading to the accidental deactivation of Zoom's US domain.
• 🔒 Zoom has since implemented a registry lock on its domain to prevent future incidents.
• 💡 The episode emphasizes the importance of real-time visibility, proactive patching, and robust defenses against evolving cyber threats.