Draconian Fear vulnerability (some NETGEAR smart switches) - gynvael.coldwind//vx.log
- https://gynvael.coldwind.pl/?id=741
- https://gynvael.coldwind.pl/?id=740
- https://gynvael.coldwind.pl/?id=741
- https://gynvael.coldwind.pl/?id=740
gynvael.coldwind.pl
Draconian Fear vulnerability (some NETGEAR smart switches)
Fake pirated software sites serve up malware droppers as a service
https://news.sophos.com/en-us/2021/09/01/fake-pirated-software-sites-serve-up-malware-droppers-as-a-service/
https://news.sophos.com/en-us/2021/09/01/fake-pirated-software-sites-serve-up-malware-droppers-as-a-service/
Sophos News
Fake pirated software sites serve up malware droppers as a service
Sites advertising “cracked” software packages lead into a network that serves up downloads full of malware instead.
Demo-занятии "VxLAN EVPN - настройка eBGP в overlay"
Где будут рассмотрены особенности настройки eBGP и какие существуют неудобства
Вебинар проведет Алексей Кулиничев, ведущий системный инженер и преподаватель онлайн-курса "Дизайн сетей ЦОД" от OTUS
• 15 сентября в 20:00 МСК. Регистрация (через вступительный тест): https://otus.pw/BmTS/
Microsoft MSHTML Remote Code Execution Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444
Proxies are complicated: RCE vulnerability in a 3 million downloads/week NPM package
https://httptoolkit.tech/blog/npm-pac-proxy-agent-vulnerability/
https://httptoolkit.tech/blog/npm-pac-proxy-agent-vulnerability/
Httptoolkit
Proxies are complicated: RCE vulnerability in a 3 million downloads/week NPM package
Pac-Resolver, a widely used NPM dependency, had a high-severity RCE (Remote Code Execution) vulnerability that could allow network administrators or other...
А серт-то протух (licensing.microsoft.com)
P.S. thx for the link to iptest.kz
P.P.S. И это "законодатели" технологической моды 🤦♂
P.S. thx for the link to iptest.kz
P.P.S. И это "законодатели" технологической моды 🤦♂
[Atlassian Confluence CVE-2021–26084]::: The other side of bug report!
https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6
P.S. thx for the link @Thatskriptkid
https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6
P.S. thx for the link @Thatskriptkid
Розыгрыш рюкзаков за минуту-пару минут опроса
Опрос от Zyxel предназначен для специалистов, руководителей, занятых в канале продаж корпоративного сетевого оборудования (дистрибьюторов, реселлеров, системных интеграторов, интернет-магазинов), системных администраторов, сетевых инженеров, корпоративных айтишников
Среди всех принявших участие в опросе будут разыграны три надежных и функциональных рюкзака.
Опрос ЗДЕСЬ
Опрос от Zyxel предназначен для специалистов, руководителей, занятых в канале продаж корпоративного сетевого оборудования (дистрибьюторов, реселлеров, системных интеграторов, интернет-магазинов), системных администраторов, сетевых инженеров, корпоративных айтишников
Среди всех принявших участие в опросе будут разыграны три надежных и функциональных рюкзака.
Опрос ЗДЕСЬ
Sys-Admin InfoSec pinned « Обновление Sys-Admin DoH. Скоро. Всем привет недавно был анонсирован бесплатный проект "чистого интернета", который называется Sys-Admin DoH ( https://news.1rj.ru/str/sysadm_in_channel/3285 ) На сегодня все работает, как говорится обрывов небыло (при совокупном 1m+…»
Research shows over 10% of sampled Firebase instances open
https://decoded.avast.io/vladimirmartyanov/research-shows-over-10-of-sampled-firebase-instances-open/
https://decoded.avast.io/vladimirmartyanov/research-shows-over-10-of-sampled-firebase-instances-open/
Avast Threat Labs
Research shows over 10% of sampled Firebase instances open - Avast Threat Labs
Firebase is Google’s mobile and web app development platform. Developers can use Firebase to facilitate developing mobile and web apps, especially for the Android mobile platform. At the end of July 2021 we did research into open Firebase instances. In that…
Одно время пользовался Zoho
Возможно кому-то будет полезным:
- https://www.manageengine.com/products/self-service-password/kb/how-to-fix-authentication-bypass-vulnerability-in-REST-API.html
- https://us-cert.cisa.gov/ncas/current-activity/2021/09/07/zoho-releases-security-update-adselfservice-plus
Возможно кому-то будет полезным:
- https://www.manageengine.com/products/self-service-password/kb/how-to-fix-authentication-bypass-vulnerability-in-REST-API.html
- https://us-cert.cisa.gov/ncas/current-activity/2021/09/07/zoho-releases-security-update-adselfservice-plus
Manageengine
Fixing the authentication bypass vulnerability affecting REST APIs | ManageEngine ADSelfService Plus
TeamTNT with new campaign aka “Chimaera” | AT&T Alien Labs
https://cybersecurity.att.com/blogs/labs-research/teamtnt-with-new-campaign-aka-chimaera
https://cybersecurity.att.com/blogs/labs-research/teamtnt-with-new-campaign-aka-chimaera
LevelBlue
TeamTNT with new campaign aka
Executive summary LevelBlue Labs™ has discovered a new campaign by threat group TeamTNT that is targeting multiple operating systems and applications. The campaign uses multiple shell/batch noscripts, new open source tools, a cryptocurrency miner, the TeamTNT…
PYSA Ransomware Gang adds Linux Support - Lacework
https://www.lacework.com/blog/pysa-ransomware-gang-adds-linux-support/
https://www.lacework.com/blog/pysa-ransomware-gang-adds-linux-support/
Fortinet
Cloud-Native Application Protection Platform (CNAPP)
Lacework FortiCNAPP is the most comprehensive cloud-native application protection platform available. AI-driven and organically developed, it empowers organizations to easily secure everything from code to cloud.
Millions of Microsoft web servers powered by vulnerable legacy software | CyberNews
https://cybernews.com/security/millions-of-microsoft-web-servers-powered-by-vulnerable-legacy-software/
https://cybernews.com/security/millions-of-microsoft-web-servers-powered-by-vulnerable-legacy-software/
Cybernews
Millions of Microsoft web servers powered by vulnerable legacy software
CyberNews researchers identified more than 2 million web servers worldwide still running on outdated and vulnerable versions of Microsoft Internet Information Services software. These legacy versions are no longer supported by Microsoft, which makes millions…
Critical vulnerability in HAProxy | JFrog Security Research Team
https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
JFrog
Critical Vulnerability in HAProxy (CVE-2021-40346): Integer Overflow Enables HTTP Smuggling
JFrog Security research teams are constantly looking for new and previously unknown vulnerabilities in popular open-source projects to help improve their security posture. As part of this effort, we recently discovered a potentially critical vulnerability…
Weekly newsletters (GhostScript RCE, Takeover in Azure, Attacking Google Chrome)
RCE-0-day-for-GhostScript-9.50
* https://github.com/duc-nt/RCE-0-day-for-GhostScript-9.50
Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances
* https://unit42.paloaltonetworks.com/azure-container-instances/
Attacking Google Chrome's Strict Site Isolation via Speculative Execution and Type Confusion
* https://www.spookjs.com
Предложение об отказ от постоянного отображения попапов по сбору cookie:
* https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2021/09/ico-to-call-on-g7-countries-to-tackle-cookie-pop-ups-challenge/
SOVA: New Android Banking Trojan
* https://www.threatfabric.com/blogs/sova-new-trojan-with-fowl-intentions.html
* Fortinet leak
* https://gist.github.com/crypto-cypher/f216d6fa4816ffa93c5270b001dc4bdc
RCE-0-day-for-GhostScript-9.50
* https://github.com/duc-nt/RCE-0-day-for-GhostScript-9.50
Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances
* https://unit42.paloaltonetworks.com/azure-container-instances/
Attacking Google Chrome's Strict Site Isolation via Speculative Execution and Type Confusion
* https://www.spookjs.com
Предложение об отказ от постоянного отображения попапов по сбору cookie:
* https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2021/09/ico-to-call-on-g7-countries-to-tackle-cookie-pop-ups-challenge/
SOVA: New Android Banking Trojan
* https://www.threatfabric.com/blogs/sova-new-trojan-with-fowl-intentions.html
* Fortinet leak
* https://gist.github.com/crypto-cypher/f216d6fa4816ffa93c5270b001dc4bdc
GitHub
GitHub - duc-nt/RCE-0-day-for-GhostScript-9.50: RCE 0-day for GhostScript 9.50 - Payload generator
RCE 0-day for GhostScript 9.50 - Payload generator - duc-nt/RCE-0-day-for-GhostScript-9.50