Sixty vulnerabilities were patched in the latest version of file transfer utility Rsync, including two allowing malicious code execution on servers. Clients only need anonymous read-access for exploitation. Hackers could also control a server to read/write files from any connected client, potentially extracting sensitive data. All issues affect Rsync versions prior to v3.4.0. Users are urged to implement the fixes, and updated Rsync packages have been released for Ubuntu and Debian.
Startup necromancy: Dead Google Apps domains can be compromised by new owners
Many businesses are not properly closing their Google accounts when they fail or are sold, posing significant risks, as the accounts often still give access
