Security Advisory / Vulns / 0day

[old.Osy]

Microsoft's April 2022 Patch Tuesday tackles two zero-day vulnerabilities

Microsoft has dealt with zero-day bugs in the firm's customary monthly batch of security fixes.

www.zdnet.com

 

[old.Osy]

TraderTraitor: North Korean State-Sponsored APT Targets Blockchain Companies | CISA

www.cisa.gov

 

[old.Osy]

When

ESET research discovers vulnerabilities in Lenovo consumer laptop models that allow attackers with admin rights to expose users to firmware-level malware.

www.welivesecurity.com

 

[old.Osy]

Microsoft Confirms Server Misconfiguration Led to 65,000+ Companies' Data Leak

Microsoft has confirmed that it inadvertently exposed information related to thousands of customers following a security lapse.

thehackernews.com

 

[old.Osy]

EU Gives Final Approval to Law That Will Force iPhone to Switch to USB-C

The European Union today gave final approval to legislation that will force technology companies like Apple to switch to USB-C across a wide range of...

www.macrumors.com

 

[old.Osy]

OpenSSL warns of critical security vulnerability with upcoming patch

We don't have the details yet, but we can safely say that come Nov. 1, everyone -- and I mean everyone -- will need to patch OpenSSL 3.x.

www.zdnet.com

 

[old.Osy]

Intel's Thread Director Coming to Linux 5.18 to Fix Alder Lake Performance Issues

An Alder Lake performance uplift is coming closer

www.tomshardware.com

 

[old.Osy]

openvpn/Changes.rst at release/2.5 · OpenVPN/openvpn

OpenVPN is an open source VPN daemon. Contribute to OpenVPN/openvpn development by creating an account on GitHub.

github.com

New OpenVPN release, remember to check if updates are being presented to you

 

[old.Osy]

View: https://twitter.com/hipotermia/status/1596476791354687489

 

[old.Osy]

Twitter: Stuck on CentOS 7

Twitter was preparing to upgrade from CentOS 7 to CentOS Stream but now everyone's gone and they're looking at a June 2024 end of life. Twitter's relationship with FOSS is getting complicated fast.

lowendbox.com

 

[old.Osy]

Security Incident December 2022 Update - LastPass - The LastPass Blog

<h4><strong>Please refer to the <a href="https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/" target="_blank" rel="noopener">latest article</a> for updated information. </s[..]

blog.lastpass.com

 

[Deebs]

Security Incident December 2022 Update - LastPass - The LastPass Blog

<h4><strong>Please refer to the <a href="https://blog.lastpass.com/2023/03/security-incident-update-recommended-actions/" target="_blank" rel="noopener">latest article</a> for updated information. </s[..]

blog.lastpass.com

Moved from using LastPass years ago when they were acquired.

 

[Deebs]

Makes for an interesting read about LastPass

Jeremi M Gosney :verified: (@epixoip@infosec.exchange)

I recently wrote a post detailing the recent #LastPass breach from a #password cracker's perspective, and for the most part it was well-received and widely boosted. However, a good number of people questioned why I recommend ditching LastPass and expressed concern with me recommending people...

infosec.exchange

 

[Scouse]

Laspass being covered in today's cyber meeting.

Too late Bankers! FH already told me!

 

[old.Osy]

View: https://twitter.com/MSFT365Status/status/1650458920786247681


The list of affected services includes but is not limited to Outlook on the Web, SharePoint Online, Microsoft Teams, and Outlook desktop clients.

 

[Jupitus]

View: https://twitter.com/MSFT365Status/status/1650458920786247681


The list of affected services includes but is not limited to Outlook on the Web, SharePoint Online, Microsoft Teams, and Outlook desktop clients.

I think I may have experienced this earlier today....

 

[old.Osy]

Ex-Ubiquiti engineer behind “breathtaking” data theft gets 6-year prison term

Engineer tried to claim that the hack was an “unsanctioned security drill.”

arstechnica.com

 

[old.Osy]

12ft

 

[Scouse]

12ft

It's always child abuse that's used to justify facism nowadays it seems.

 

[old.Osy]

View: https://youtu.be/NfiIXooD77s

 

[old.Osy]

Well, shit.

can I speak to your manager? hacking root EPP servers to take control of zones

Finding vulnerabilities in global domain infrastructure to take control of ccTLD zones. Vulnerabilities in EPP

hackcompute.com

 

[old.Osy]

Critical MikroTik RouterOS Vulnerability Exposes Over Half a Million Devices to Hacking

Critical Privilege Escalation Vulnerability in MikroTik RouterOS Poses a Severe Threat to Over Half a Million Devices

thehackernews.com

 

[old.Osy]

OpenConnect VPN client.

VPN client compatible with Cisco AnyConnect SSL VPN

www.infradead.org

Yw

 

[old.Osy]

OVHcloud to acquire Edge Computing specialist gridscale

OVHcloud is in exclusive negotiations with gridscale, the Edge Computing specialist. Closing is expected at the beginning of the 2024 fiscal year.

corporate.ovhcloud.com

Expect pricing to increase?

 

[Deebs]

OVHcloud to acquire Edge Computing specialist gridscale

OVHcloud is in exclusive negotiations with gridscale, the Edge Computing specialist. Closing is expected at the beginning of the 2024 fiscal year.

corporate.ovhcloud.com

Expect pricing to increase?

Fucksake, hope not, have 2 servers at OVH.

 

[old.Osy]

Fucksake, hope not, have 2 servers at OVH.

Can always consider this, if that happens - or even if it doesn't.

Exciting Expansion by RackNerd! KVM VPS Now in Strasbourg, France from $17.98/Year!

Wow - RackNerd is now in France! Great offers in Strasbourg starting at only $17.98/YEAR for a 1GB VPS with 3TB (!) of bandwidth. Nice hardware specs, too. Read all about the next evolution of RackNerd's offerings!

lowendbox.com

 

[old.Osy]

End-of-life product list

Recommend you check this out if you have an Asus router. My RT-AC88U for example is now end of life, which means ASUS will no longer provide updates to its firmware.

Merlin said there's one more GPL to merge, but after that it's bye-bye. (Home | Asuswrt-Merlin)

I'm considering the RT-AX88U Pro (different SOC to regular AX88-U). RT-AX88U Pro｜WiFi Routers｜ASUS Global

 

[MYstIC G]

End-of-life product list

Recommend you check this out if you have an Asus router. My RT-AC88U for example is now end of life, which means ASUS will no longer provide updates to its firmware.

Merlin said there's one more GPL to merge, but after that it's bye-bye. (Home | Asuswrt-Merlin)

I'm considering the RT-AX88U Pro (different SOC to regular AX88-U). RT-AX88U Pro｜WiFi Routers｜ASUS Global

Don't a lot of Asus routers support openwrt from memory?

 

[Embattle]

I had a AC88U quite a while ago, nice router but I guess support always has to end after a while. I can't say I stick with routers that long but I do often plan to just as I do with my current system.

 

[old.Osy]

Don't a lot of Asus routers support openwrt from memory?

The Merlin AsusWrt firmware is better than OpenWrt on Asus devices. Not that OpenWrt is not great.