Амазон похоже хочет создать форк Elastic

Stepping up for a truly open source Elasticsearch

https://aws.amazon.com/ru/blogs/opensource/stepping-up-for-a-truly-open-source-elasticsearch/

P.S. Похоже на зарубу, но могли бы и задонатить, денег то у Амазон достаточно

Deep dive into the Solorigate second-stage activation: From SUNBURST to TEARDROP and Raindrop

https://www.microsoft.com/security/blog/2021/01/20/deep-dive-into-the-solorigate-second-stage-activation-from-sunburst-to-teardrop-and-raindrop/

CVE-2021-21261: Flatpak sandbox escape via spawn portal

https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2

Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678)

https://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory/

Fake Office 365 Used for Phishing Attacks on C-Suite Targets

https://www.trendmicro.com/en_us/research/21/a/fake-office-365-used-for-phishing-attacks-on-c-suite-targets.html

Записал видео про то, как в кратце я исследую безопасность Линукс ядра, у каких источников я беру информацию и тд

@novitoll ©

https://www.youtube.com/watch?v=_g9QZF3YBy4

ProtonVPN Windows client BSOD reports

https://protonstatus.com/incidents/124

Stealing Your Private YouTube Videos, One Frame at a Time

https://bugs.xdavidhu.me/google/2021/01/11/stealing-your-private-videos-one-frame-at-a-time/

About the security content of iOS 14.4 and iPadOS 14.4

https://support.apple.com/en-us/HT212146

Firefox 85 Cracks Down on Supercookies

https://blog.mozilla.org/security/2021/01/26/supercookie-protections/

Heap-based buffer overflow in Sudo (CVE-2021-3156)

This vulnerability:

- is exploitable by any local user (normal users and system users,
sudoers and non-sudoers), without authentication (i.e., the attacker
does not need to know the user's password);

https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB - January 2021

The update addresses security issues that may lead to denial of service, data loss, and information disclosure

https://nvidia.custhelp.com/app/answers/detail/a_id/5147

Halogen - is a tool to automate the creation of yara rules against image files embedded within a malicious document

https://github.com/target/halogen

The ESXi ransomware post-mortem

https://www.reddit.com/r/sysadmin/comments/kysqsc/the_esxi_ransomware_postmortem/

Ссылка не моя, за что отдельное спасибо подписчику ✌️

New campaign targeting security researchers

Кампания, нацеленная на исследователей безопасности.

Тот случай, когда сам security research'ер становится объектом исследования. В помощь приходит социальная инженерия, соц. сети, фейковые эксплоиты...

https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/

Спасибо за ссылку на интересное исследование Sabyrzhan T. (@novitoll)
Security Researcher in Spectre Security Group

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

Vulnerabilities: Stack-based Buffer Overflow, Out-of-Bounds Read, Out-of-Bounds Write, Access of Uninitialized Pointer, Heap-based Buffer Overflow

ICS Advisory (ICSA-21-026-01):

https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01

Что чакоке IPFS, который поддержали Cloudflare, Microsoft, Brave, Opera

Простыми словами об IPFS и том, кто уже внедрил его поддержку:

https://vc.ru/tech/200883-pochinit-internet-chto-za-proekt-ipfs-kotoryy-podderzhali-microsoft-brave-i-drugie-i-chem-on-polezen-polzovatelyam

Releasing Windows Feature Experience Pack 120.2212.2020.0 to the Beta Channel

We are improving the reliability of screen snipping experience, especially with apps that access the clipboard often.

https://blogs.windows.com/windows-insider/2021/01/26/releasing-windows-feature-experience-pack-120-2212-2020-0-to-the-beta-channel/

Telegram - Перенос чатов из других приложений

Честно говоря только узнал о такой возможности, возможно будет так же кому-либо полезно:

https://telegram.org/blog/move-history/ru