Security Advisory / Vulns / 0day

[ECA]

I bet the CIA/mossad/etc are pissed this got out.

LANtenna attack reveals Ethernet cable traffic contents

What's a long length of electrical wire? A transmitter, of course

www.theregister.com

Although the russians have been back at the typewriters for the last 10 years, cuz they couldn't keep the americans out.

 

[old.Osy]

Windows 10, Linux, iOS, Chrome and Many Others at Hacked Tianfu Cup 2021

Chinese hackers disclose vulnerabilities in Windows 10, Linux, iOS, Chrome and Many Others at Tianfu Cup 2021

thehackernews.com

 

[old.Osy]

Intel | Data Center Solutions, IoT, and PC Innovation

Intel's innovation in cloud computing, data center, Internet of Things, and PC solutions is powering the smart and connected digital world we live in.

www.intel.com

 

[old.Osy]

Hackers Apologize to Arab Royal Families for Leaking Their Data

“Bluntly, UAE sends assassination teams to deal with people they don’t like. [...] Even ransomware groups are subject to political pressure."

www.vice.com

 

[old.Osy]

REvil Ransom Arrest, $6M Seizure, and $10M Reward – Krebs on Security

 

[old.Osy]

View: https://twitter.com/Ohsaay/status/1458059312723419136

 

[old.Osy]

Mediamarkt cyber attack: hackers demand $50 million in Bitcoin

The attack has seriously affected European branches of the company with staff asked to unplug computers and not to restart systems, RTL Nieuws reported.

www.brusselstimes.com

 

[old.Osy]

HPE says hackers breached Aruba Central using stolen access key

HPE has disclosed that data repositories for their Aruba Central network monitoring platform were compromised, allowing a threat actor to access collected data about monitored devices and their locations.

www.bleepingcomputer.com

 

[old.Osy]

Google services outages in Europe as we speak:

Google Workspace Status Dashboard

www.google.com

 

[old.Osy]

The FBI’s email system was hacked to send out fake cybersecurity warnings

The phony emails reached over 100,000 inboxes.

www.theverge.com

 

[old.Osy]

Critical Root RCE Bug Affects Multiple Netgear SOHO Router Models

A critical pre-authentication RCE as root vulnerability affects several models of Netgear SOHO routers.

thehackernews.com

 

[old.Osy]

Document

 

[old.Osy]

Windows 10 RCE: The exploit is in the link | Positive Security

Chaining a misconfiguration in IE11/Edge Legacy with an argument injection in a Windows 10/11 default URI handler and a bypass for a previous Electron patch, we developed a drive-by RCE exploit for Windows 10. The main vulnerability in the ms-officecmd URI handler has not been patched yet and...

positive.security

 

[old.Osy]

If you remember the recent AWS outage - willing to bet the below is related.

Understanding the Log4j Exploit and How to Mitigate It

Learn about the Log4j vulnerability and how you can combat it. Read this comprehensive guide to get actionable tips.

blog.sonatype.com

 

[Deebs]

If you remember the recent AWS outage - willing to bet the below is related.

Understanding the Log4j Exploit and How to Mitigate It

Learn about the Log4j vulnerability and how you can combat it. Read this comprehensive guide to get actionable tips.

blog.sonatype.com

Already seeing in the FH logs.

 

[old.Osy]

Facelift for TCPView

TCPView for Windows - Sysinternals

Active socket command-line viewer.

docs.microsoft.com

 

[old.Osy]

Not a security item, but for those working with Windows Servers and older legacy clients (industrial, PLC, label printers, etc)

https://social.technet.microsoft.com/wiki/contents/articles/20204.how-to-enable-and-disable-explicit-congestion-notification-in-windows.aspx

Explicit Congestion Notification (ECN) slows down outbound connections - Sysadmins of the North

Enabling Explicit Congestion Notification (ECN) in Windows Server may slowdown outbound network connections

www.saotn.org

 

[old.Osy]

For pihole users:


View: https://www.reddit.com/r/pihole/comments/rx9zv8/cyrillic_domains_invalid_after_update/

 

[caLLous]

A bug lurking for 12 years gives attackers root on most major Linux distros

It's likely only a matter of time before PwnKit is exploited in the wild.

arstechnica.com

 

[old.Osy]

Microsoft: Windows needs at least 8 hours online to update reliably

Microsoft says that Windows devices need to be online for at least eight hours to get the latest updates and have them correctly installed after they're released through Windows Update.

www.bleepingcomputer.com

 

[old.Osy]

PwnKit, Linux Polkit Privilege Escalation Vulnerability | Stackscale

Polkit Privilege Escalation Vulnerability, PwnKit, has been hidden for 12 years and patches have been made available by major Linux distros.

www.stackscale.com

 

[old.Osy]

US version of Pegasus spyware was bought and tested by the FBI in 2019, but never used

A special US version of Pegasus smartphone spyware was created by NSO, and purchased by the FBI, a new report reveals today...

9to5mac.com

 

[old.Osy]

Critical Flaws Discovered in Cisco Small Business RV Series Routers

Cisco has released security patches for multiple critical vulnerabilities affecting its Small Business RV Series routers.

thehackernews.com

 

[old.Osy]

https://www.akamai.com/newsroom/press-release/akamai-to-acquire-linode

 

[old.Osy]

Fresh from the oven, new AMD AM4 chipset drivers, dated yesterday:

https://drivers.amd.com/drivers/amd_chipset_software_4.03.03.431.exe

 

[old.Osy]

Russian Cyclops Blink botnet launches assault against Asus routers

The only option available might be a return to factory settings for infected routers.

www.zdnet.com

If you have an Asus router, might want to check if your remote access is off.

 

[caLLous]

Lapsus$ hackers leak 37GB of Microsoft's alleged source code

The Lapsus$ hacking group claims to have leaked the source code for Bing, Cortana, and other projects stolen from Microsoft's internal Azure DevOps server.

www.bleepingcomputer.com

 

[old.Osy]

Okta investigating reports of possible digital breach | CNN Business

Okta, an identity authentication service with more than 15,000 customers, said Tuesday that an attacker had access to a support engineer's laptop for five days in January. But the service itself was not breached, according to the company.

edition.cnn.com

 

[ECA]

Lapsus$: Oxford teen accused of being multi-millionaire cyber-criminal

Police say they've arrested seven teenagers as part of their investigation into a hacking group.

www.bbc.co.uk

 

[old.Osy]

CISA Advises Owners of Certain D-Link Routers to Urgently Retire Them

The US Cybersecurity and Infrastructure Security Agency, or CISA, is advising consumers and businesses to retire a whole range of D-Link routers, due to the devices being EOL. This is due to a severe vulnerability that affects the devices that goes under the CVE-ID of CVE-2021-45382. This is a...

www.techpowerup.com