/ POC for CVE-2022-22972 affecting VMware Workspace ONE, vIDM, and vRealize Automation 7.6.

https://github.com/horizon3ai/CVE-2022-22972

/ High-severity vulnerabilities in a mobile framework owned by mce Systems

mce Systems used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote (albeit complex) or local attacks..:

http://www.microsoft.com/security/blog/2022/05/27/android-apps-with-millions-of-downloads-exposed-to-high-severity-vulnerabilities/

/ GhostTouch: Targeted Attacks on Touchscreens without Physical Touch

* https://www.usenix.org/conference/usenixsecurity22/presentation/wang-kai

/ Follina — a Microsoft Office code execution vulnerability

* https://doublepulsar.com/follina-a-microsoft-office-code-execution-vulnerability-1a47fce5629e

/ Compromised US Academic Credentials Identified Across Various Public and Dark Web Forums

FBI warns

* https://www.ic3.gov/Media/News/2022/220526.pdf

/ Linux Kernel use-after-free write in netfilter

A use-after-free write vulnerability was identified within the netfilter subsystem
which can be exploited to achieve privilege escalation to root:

https://www.openwall.com/lists/oss-security/2022/05/31/1

/ NIST 800-63b Password Guidelines and Best Practices

https://specopssoft.com/blog/nist-800-63b/

Quick POC to replicate the 'Follina' Office RCE:

https://github.com/chvancooten/follina.py

/ Horde Webmail - Remote Code Execution via Email

https://blog.sonarsource.com/horde-webmail-rce-via-email/

/ Over 3.6 million exposed MySQL servers on IPv4 and IPv6

https://www.shadowserver.org/news/over-3-6m-exposed-mysql-servers-on-ipv4-and-ipv6/

/ Vulnerability within the UNISOC baseband opens mobile phones communications to remote hacker attacks

https://research.checkpoint.com/2022/vulnerability-within-the-unisoc-baseband/

/ New Windows Search zero-day added to Microsoft protocol nightmare

https://www.bleepingcomputer.com/news/security/new-windows-search-zero-day-added-to-microsoft-protocol-nightmare/

R4IoT: When Ransomware Meets IoT and OT

Next-generation ransomware report:

https://www.forescout.com/resources/r4iot-next-generation-ransomware-report

Open BLD DNS Updating News: Pre-release BLD, Debian migration and Alerting infrastructure
 
I'm happy to present BLD DNS pre-release services already in production. What's new:

🚀 Speedup:
• Cache and updating process of additional blocking lists, was improved
• Improved memory handling. Redis cluster added.
• Improved DNS prefetching process

🛸 Security:
• Fully removed support olders TLS versions
• All code depenses (include vulnerabilities fixes) was updated
• Added cross check server availability with alerts
• All BLD servers has A statuses in SSLLABS
• All BLD servers divided to specified categories
• Added notifications (alerts) to Telegram Bot

🪚 Stability:
• Added additional systemd timers for watching BLD services statuses
• Added DNS tracking service and automatic restart of BLD services

🚜 Migration:
• All migration (from distro to distro) processes 90% automated
• All CentOS servers deprecated and changed to Debian 🎉

🛰 Today, the BLD infrastructure has 10 servers located around the world 🎈🎈🎉

BLD works without agents or any additional tools, but you can use secure and clean Internet in/on:
• Browsers (Chrome, Brave, Firefox, Edge and etc)
• Mobile devices (Android, iOS)
• Computers or networks (Primaty/Secondary DNS)

If you not tried BLD DNS - get more details on official BLD site:
• https://lab.sys-adm.in

#free #bld #sys-admin #sevices

/ Microsoft Vulnerabilities Report 2022

Historically, the report has delivered a holistic annual view of the vulnerabilities within Microsoft’s platforms and products, and has established an
undeniable business case for the importance of removing admin rights to reduce risk…

/ Technical Advisory – Multiple Vulnerabilities in U-Boot (CVE-2022-30790, CVE-2022-30552)

U-boot is a popular boot loader for embedded systems with implementations for a large number of architectures and prominent in most Linux based embedded systems such as ChromeOS and Android Devices:

https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/

/ What is DNSCrypt

DNSCrypt is a protocol that encrypts, authenticates and optionally anonymizes communications between a DNS client and a DNS resolver. It prevents DNS spoofing. It uses cryptographic signatures to verify that responses originate from the chosen DNS resolver and haven’t been tampered with.

It is an open specification, with free and open source reference implementations, and it is not affiliated with any company nor organization:

https://dnscrypt.info/