Debian apt security update fixes man-in-the-middle code execution
Max Justicz discovered a vulnerability in apt allowing man-in-the-middle attackers to execute arbitrary code as root by merging package downloads; fixed in version 3.0.4.
Stories per day · 30 days
2 RSS
Relatedapt1credential-theft1debian1ebury1exit-relays1industrial-control1intrusion-detection1model-free1networked-control1ssh1tor1
4 stories, newest first · one card per story
Stories tagged #man-in-the-middle
Paper details stealthy data-driven attacks on closed-loop control systems
A model-free MITM method identifies plant behavior and tracks arbitrary references while staying under an infinity-norm IDS.
Attackers hijacked 300-plus Tor exits to steal SSH passwords
Only password SSH logins over Tor from October 1 to 5 that accepted a fake host key could be captured.
FortiOS and FortiProxy ZTNA Validation Vulnerability Allows Attacker to Perform a Man-in-the-Middle Attack
Fortinet discloses high-severity certificate validation flaw CVE-2026-84393 in FortiOS and FortiProxy Agentless ZTNA portals enabling unauthenticated man-in-the-middle attacks.
3