securiCAD Vanguard in a Nutshell

securiCAD Vanguard is a cloud-native SaaS for automated threat modeling and attack simulation of AWS environments. It enables Developers, DevOps teams, and Cloud Architects and Operators to get automated, actionable insights into the cyber security posture of their AWS environments

https://docs.foreseeti.com/docs/vanguard-intro

RCE в Windows IPv6

https://blog.quarkslab.com/analysis-of-a-windows-ipv6-fragmentation-vulnerability-cve-2021-24086.html

По теме

https://www.systemtek.co.uk/2021/02/windows-tcp-ip-rce-and-dos-vulnerabilities-cve-2021-24074-cve-2021-24086-cve-2021-24094/

P.S. Ссылки не мои, за что спасибо приславшему✌️

Cisco SD-WAN vManage Software Vulnerabilities

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy

Cloudflare уменьшает количество используемых IPv4 адресов

Cloudflare is making infrastructure changes to simplify customer configuration, and reduce the number of IPv4 addresses that could potentially interact with your origin on Cloudflare’s behalf.

If your security model relies on allowing a list of trusted Cloudflare IPs from cloudflare.com/ips (or via API) on your origin, please make the following changes to your allow list by May 7, 2021. This change is safe to make today.

Remove:
104.16.0.0/12

Add:
104.16.0.0/13
104.24.0.0/14

This change delists the 104.28.0.0/14 prefix, which is no longer in use by Cloudflare infrastructure.

Linux kernel incorrect computation of branch displacements in BPF JIT compiler can be abused to execute arbitrary code in Kernel mode

https://www.openwall.com/lists/oss-security/2021/04/08/1

Detecting Post-Compromise Threat Activity in Microsoft Cloud Environments

https://us-cert.cisa.gov/ncas/alerts/aa21-008a

HAProxy Forwards Over 2 Million HTTP Requests per Second on a Single Arm-based AWS Graviton2 Instance - HAProxy Technologies
https://www.haproxy.com/blog/haproxy-forwards-over-2-million-http-requests-per-second-on-a-single-aws-arm-instance/

GitHub - brad-lin/FreePSXBoot: Exploit allowing to load arbitrary code on the PSX using only a memory card (no game needed)
https://github.com/brad-lin/FreePSXBoot

An Introduction to File System Monitoring Tools

https://medium.com/100-days-of-linux/an-introduction-to-file-system-monitoring-tools-afd99164ce66

Malware analysis - IcedID

https://aaqeel01.wordpress.com/2021/04/09/icedid-analysis/

Malware in the AppGallery - the official app store from the Huawei Android device manufacturer

https://news.drweb.com/show/?lng=en&i=14182&c=9

Name:Wreck

Forescout Research Labs and JSOF discover nine new vulnerabilities affecting four popular TCP/IP stacks used in millions of IoT, OT and IT devices:

https://www.forescout.com/research-labs/namewreck/

В новом релизе Chrome закрыт ряд High уязвимостей

https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html?m=1

Released: April 2021 Exchange Server Security Updates

https://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617

https://msrc-blog.microsoft.com/2021/04/13/april-2021-update-tuesday-packages-now-available/

Why Brave Disables FLoC | Brave Browser
https://brave.com/why-brave-disables-floc/

Adobe critical vulnerabilities

Security Updates:

- Photoshop: https://helpx.adobe.com/security/products/photoshop/apsb21-28.html
- Bridge: https://helpx.adobe.com/security/products/bridge/apsb21-23.html
- Digital Editions: https://helpx.adobe.com/security/products/Digital-Editions/apsb21-26.html

GitLab Critical Security Release

RCE

https://about.gitlab.com/releases/2021/04/14/security-release-gitlab-13-10-3-released/