Sep 252014
 

As with all recent issues with the bugs going around from the Heartbleed to this current Shellshock bug we are noticing that our environments are not as secure as we have believed them to be.    If you are run a webserver or linux distribution as I am, please update your software.  Ensure that there is an update software policy in place and ensure the updates are performed frequently.  I checked for updates after the initial report, but kept checking back every so many hours to ensure the patch was available and then installed.  Here is more information on this bug.

http://krebsonsecurity.com/2014/09/shellshock-bug-spells-trouble-for-web-security/

 

Here is the CERT website on this current bug on the ShellShock bug

 Posted by at 9:12 pm