Security Advisory / Vulns / 0day

[old.Osy]

OpenSSL will release a HIGH priority update on Thursday, March 25 – Security Threat News

 

[old.Osy]

Final Thoughts on Ubiquiti – Krebs on Security

 

[smurkin]

Final Thoughts on Ubiquiti – Krebs on Security

 

[old.Osy]

Hackers exploited 0-day, not 2018 bug, to mass-wipe My Book Live devices [Updated]

Western Digital removed code that would have prevented the wiping of petabytes of data.

arstechnica.com

 

[Embattle]

Guess that answers my thread warning about My Book Lives.

 

[old.Osy]

LinkedIn breach reportedly exposes data of 92% of users, including inferred salaries [U]

A second massive LinkedIn breach reportedly exposes the data of 700M users, which is more than 92% of the total 756M users. The database ...

9to5mac.com

 

[old.Osy]

The next Windows 10 Long Term Servicing Channel (LTSC) release

Find out when the next LTSC release will be available plus when and how LTSC versions are best utilized in an organization.

techcommunity.microsoft.com

 

[old.Osy]

Microsoft's Emergency Patch Fails to Fully Fix PrintNightmare RCE Vulnerability

Microsoft's latest emergency patch update for Windows Print Spooler PrintNightmare RCE vulnerability fails to fully fix the issue

thehackernews.com

 

[old.Osy]

Upgrade to latest if you have Qnap nas

Improper Access Control Vulnerability in Legacy HBS 3 (Hybrid Backup Sync) - Security Advisory

QNAP designs and delivers high-quality network attached storage (NAS) and professional network video recorder (NVR) solutions to users from home, SOHO to small, medium businesses.

www.qnap.com

 

[Embattle]

Disable the Windows print spooler to prevent hacks, Microsoft tells customers

The third serious Windows print flaw in 5 weeks prompts new Microsoft warning.

arstechnica.com

 

[old.Osy]

Apple: Mac Mini M1 Uses One-Third the Electricity of Intel CPU - ExtremeTech

Apple has posted the official figures for power consumption on the M1 Mac mini. The new system draws less than a third the power of an equivalent Intel system.

www.extremetech.com

 

[old.Osy]

Introducing Email Protection: The easy way to block most email trackers and hide your address

We’re excited to announce the beta release of DuckDuckGo’s Email Protection. Our free email forwarding service removes email trackers and protects the privacy of your personal email address without asking you to change email services or apps.

www.spreadprivacy.com

 

[old.Osy]

Razer bug lets you become a Windows 10 admin by plugging in a mouse

A Razer Synapse zero-day vulnerability has been disclosed on Twitter, allowing you to gain Windows admin privileges simply by plugging in a Razer mouse or keyboard.

www.bleepingcomputer.com

 

[Scouse]

Razer bug lets you become a Windows 10 admin by plugging in a mouse

A Razer Synapse zero-day vulnerability has been disclosed on Twitter, allowing you to gain Windows admin privileges simply by plugging in a Razer mouse or keyboard.

www.bleepingcomputer.com

That could hit loads of stuff.

 

[old.Osy]

Samsung says it can remotely disable stolen TVs

When the TVs connect to the internet they’re remotely disabled

www.theverge.com

 

[old.Osy]

View: https://twitter.com/binitamshah/status/1430543644109406210?s=19

 

[MYstIC G]

Samsung says it can remotely disable stolen TVs

When the TVs connect to the internet they’re remotely disabled

www.theverge.com

Another reason not to buy a smart TV there. It's already bad that they don't maintain software

 

[old.Osy]

View: https://www.reddit.com/r/ProtonMail/comments/pil6xi/climate_activist_arrested_after_protonmail/hbqha63/

 

[old.Osy]

Quad9 Files Official Objection Opposing Sony Music’s German Court Ruling | Quad9

The objection we are filing against the injunction is extensive with many procedural and jurisdictional arguments, all of which we believe are valid reasons for dismissal or which support those reasons.

quad9.net

 

[old.Osy]

Mikrotik's DDNS domain got suspended by the registrar, impacting users that make use of DDNS.

Cloud DNS Seems to be down! - MikroTik

forum.mikrotik.com

 

[old.Osy]

https://www.washingtonpost.com/us-policy/2021/09/23/chip-shortage-forecast-automakers/

 

[old.Osy]

Multiple Vulnerabilities in Sevone Network Management System (NMS)

SevOne Network Management System suffers from multiple vulnerabilties including command injection, SQL injection, and CSV formula injection. The traceroute functionality of SevOne allows authenticated users to input an IP address to perform traceroute command in the server with the user-supplied...

sec-consult.com

Critical security issues in SevOne NMS – RussianSecurity

russiansecurity.expert

I caught this randomly as I was logging into our own SevOne platform - some of the vulns and default passwords listed in the 2nd url were active on our system. If you use this in your company, do check it.

 

[old.Osy]

Cloudflare Is Taking a Shot at Email Security

The internet infrastructure company wants to protect your inbox from targeted threats, starting with the launch of two new tools.

www.wired.com

 

[old.Osy]

FinSpy: unseen findings

FinSpy, also known as FinFisher or Wingbird, is an infamous surveillance toolset that has been tracking since 2011. We decided to share our unseen findings about the actual state of FinSpy implants.

securelist.com

 

[old.Osy]

https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

 

[old.Osy]

View: https://twitter.com/Sinoc229/status/1445639261974261766

 

[old.Osy]

View: https://twitter.com/Sinoc229/status/1445639261974261766

Related


View: https://twitter.com/KnowS0mething/status/1445663228831297545

 

[old.Osy]

View: https://twitter.com/h4x0r_dz/status/1445401960371429381

 

[old.Osy]

View: https://twitter.com/campuscodi/status/1446143711751061504

 

[old.Osy]

Major hosting company OVH is down


View: https://twitter.com/ovh_status/status/1448176189290389508