NEW BOT Телеграм, страница

Sys-Admin InfoSec

Cisco SD-WAN vManage Software Vulnerabilities

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy

Cisco

Cisco Security Advisory: Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system.
For more information about these…

3.38K viewsedited 01:11

Sys-Admin InfoSec

Cloudflare уменьшает количество используемых IPv4 адресов

Cloudflare is making infrastructure changes to simplify customer configuration, and reduce the number of IPv4 addresses that could potentially interact with your origin on Cloudflare’s behalf.

If your security model relies on allowing a list of trusted Cloudflare IPs from cloudflare.com/ips (or via API) on your origin, please make the following changes to your allow list by May 7, 2021. This change is safe to make today.

Remove:
104.16.0.0/12

Add:
104.16.0.0/13
104.24.0.0/14

This change delists the 104.28.0.0/14 prefix, which is no longer in use by Cloudflare infrastructure.

Cloudflare

IP Ranges | Cloudflare

This page is intended to be the definitive source of Cloudflare’s current IP ranges.

3.82K viewsedited 01:17

Sys-Admin InfoSec

Linux kernel incorrect computation of branch displacements in BPF JIT compiler can be abused to execute arbitrary code in Kernel mode

https://www.openwall.com/lists/oss-security/2021/04/08/1

3.72K viewsedited 10:42

Sys-Admin InfoSec

Detecting Post-Compromise Threat Activity in Microsoft Cloud Environments

https://us-cert.cisa.gov/ncas/alerts/aa21-008a

3.6K viewsedited 08:24

Sys-Admin InfoSec

Forwarded from Sys-Admin Up (Yevgeniy Goncharov)

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/html-lego-hidden-phishing-at-free-javanoscript-site/

Trustwave

HTML Lego: Hidden Phishing at Free JavaScript Site

This blog investigates an interesting phishing campaign we encountered recently. In this campaign, the email subject pertains to a price revision followed by numbers.

3.03K views04:36

Sys-Admin InfoSec

Forwarded from Sys-Admin Up (Yevgeniy Goncharov)

HAProxy Forwards Over 2 Million HTTP Requests per Second on a Single Arm-based AWS Graviton2 Instance - HAProxy Technologies
https://www.haproxy.com/blog/haproxy-forwards-over-2-million-http-requests-per-second-on-a-single-aws-arm-instance/

HAProxy Technologies

HAProxy Exceeds 2 Million RPS on a Single Arm Instance

First ever software load balancer exceeds 2 million RPS on a single Arm instance! We're near an era where you get the world’s fastest load balancer for free.

3K views04:37

Sys-Admin InfoSec

GitHub - brad-lin/FreePSXBoot: Exploit allowing to load arbitrary code on the PSX using only a memory card (no game needed)
https://github.com/brad-lin/FreePSXBoot

GitHub

GitHub - brad-lin/FreePSXBoot: Exploit to allow loading arbitrary code on the PSX using only a memory card (no game needed)

Exploit to allow loading arbitrary code on the PSX using only a memory card (no game needed) - brad-lin/FreePSXBoot

3.13K views04:38

Sys-Admin InfoSec

An Introduction to File System Monitoring Tools

https://medium.com/100-days-of-linux/an-introduction-to-file-system-monitoring-tools-afd99164ce66

Medium

An Introduction to File System Monitoring Tools

All about inotifywait and iwatch utilities

3.9K viewsedited 04:39

Sys-Admin InfoSec

Malware analysis - IcedID

https://aaqeel01.wordpress.com/2021/04/09/icedid-analysis/

Malware Analysis

IcedID Analysis

IcedID aka (BokBot) is banking malware designed to steal financial information. Lunar Spider is the threat actor behind IcedID which they’ve been running campaigns since at least 2017. Beside…

3.21K viewsedited 01:31

Sys-Admin InfoSec

Malware in the AppGallery - the official app store from the Huawei Android device manufacturer

https://news.drweb.com/show/?lng=en&i=14182&c=9

Dr.Web

Malware found on the AppGallery app store for the first time

Doctor Web’s virus analysts have uncovered the first malware on AppGallery―the official app store from the Huawei Android device manufacturer. They turned out to be dangerous Android.Joker trojans that function primarily to subscribe users to premium mobile…

3.29K viewsedited 01:37

Sys-Admin InfoSec

SSD Advisory – QNAP Pre-Auth CGI_Find_Parameter RCE

https://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce/

SSD Secure Disclosure

SSD Advisory – QNAP Pre-Auth CGI_Find_Parameter RCE - SSD Secure Disclosure

TL;DR Find out how a memory corruption vulnerability can lead to a pre-auth remote code execution on QNAP QTS’s Surveillance Station plugin. Vulnerability Summary QNAP NAS with “Surveillance Station Local Display function can perform monitoring and playback…

3.1K views14:49

Sys-Admin InfoSec

Name:Wreck

Forescout Research Labs and JSOF discover nine new vulnerabilities affecting four popular TCP/IP stacks used in millions of IoT, OT and IT devices:

https://www.forescout.com/research-labs/namewreck/

Forescout

NAME:WRECK - Forescout

NAME:WRECK NAME:WRECK Vedere Labs and JSOF discover nine new vulnerabilities affecting four popular TCP/IP stacks used in millions of IoT, OT and IT devices. Read Report 9 DNS-Related Vulnerabilities 4 TCP/IP Stacks 100M+ Estimated Devices Affected NAME:WRECK…

3.03K viewsedited 01:12

Sys-Admin InfoSec

В новом релизе Chrome закрыт ряд High уязвимостей

https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html?m=1

Chrome Releases

Stable Channel Update for Desktop

The Stable channel has been updated to 89.0.4389.128 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list ...

2.93K viewsedited 01:14

Sys-Admin InfoSec

Released: April 2021 Exchange Server Security Updates

https://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617

https://msrc-blog.microsoft.com/2021/04/13/april-2021-update-tuesday-packages-now-available/