OSSEC HIDS 3.0 Snapshots

Posted on by Scott R. Shinn

OSSEC 3.0 release candidate builds are available from our testing Yum/Apt repo for the following distributions: Amazon Linux Amazon Linux LTS RHEL / Centos 6 RHEL / Centos 7 Debian 7 / 8 Ubuntu 14 / 16 Fedora 24 / 25 / 26 / 27 Windows Updates for Fedora 28, Ubuntu 18, and Kali linux […]

CVE-2015-3222 Vulnerability Fixed in OSSEC 2.8.2

Posted on by Scott R. Shinn

The CVE-2015-3222 vulnerability, which allows for root escalation via syscheck has been fixed in OSSEC 2.8.2. Full details of the issue can be found on the OSSEC Github repository – https://github.com/ossec/ossec-hids/releases/tag/2.8.2.

CVE-2014-5284 Vulnerability Fixed in OSSEC 2.8.1

Posted on by Scott R. Shinn

OSSEC 2.8.1 has been released to address the security issue identified by Jeff Petersen of Roka Security LLC. Full details of the issue can be found on the OSSEC Github repository – https://github.com/ossec/ossec-hids/releases/tag/2.8.1. This correction will create the temp file for the hosts deny file in /var/ossec and will use mktemp where available to create […]

OSSEC CON 2014 Recap

Posted on by Scott R. Shinn

OSSEC CON 2014 was held in Cork Ireland this year to promote OSSEC in EMEA where we have many users. This year we had several members of the current OSSEC Team speak to our audience. Jeremy Rossi, currently the OSSEC Development Manager, told us about some of the OSSEC open source history and shared the […]

OSSEC Virtual Appliance 2.8.1 Available

Posted on by Scott R. Shinn

I have updated the OSSEC Virtual Appliance to include OSSEC 2.8.1 and Elasticsearch-Logstash-Kibana (ELK) log management and the ElasticHQ system to handle ELK monitoring. It is a single gzipped OVA that can be easily imported into VirtualBox or any other virtualization system that supports OVA files. Look for it in the Downloads section.

OSSEC 2.8 Released

Posted on by Scott R. Shinn

OSSEC 2.8 has been released and posted on our download page. You can check the release notes to find out what has been updated in this release.

OSSEC Commercial Support Contracts

Posted on by Scott R. Shinn

OSSEC Commercial Support contracts will no longer be available directly from Trend Micro as of March 2014; however all existing agreements will continue to be fully supported until the end of their respective terms. If you are still interested in OSSEC and require commercial support, Trend Micro is aware of some 3rd party vendors who […]

OSSEC 2.8 Beta-1 is Available

Posted on by Scott R. Shinn

The OSSEC developers have been hard at work on version 2.8 and we have made Beta-1 packages available for testing. See theDownloads page. Helps us with the testing and fine tuning of this preliminary release.