VocaLounge

heise online EnglishregreSSHion gap: New SSH feature offers protection, proof of concept is noneA Qualys researcher explained the severity of the problem in an interview with heise security. A major new OpenSSH function additionally secures the service.<a href="https://www.heise.de/en/background/regreSSHion-gap-New-SSH-feature-offers-protection-proof-of-concept-is-none-9788421.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.heise.de/en/background/regreSSHion-gap-New-SSH-feature-offers-protection-proof-of-concept-is-none-9788421.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon</a><a href="https://social.heise.de/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://social.heise.de/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://social.heise.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.heise.de/tags/SSH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSH</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

iX Magazinheise+ | Schwachstellenanalyse: Wie man Zero-Day-Exploits findet – ein BeispielEs gibt prominente Fälle bislang unbekannter Schwachstellen, die Tausende IT-Systeme kompromittieren. Diese Zero-Day-Exploits sind der Schrecken der IT-Welt.<a href="https://www.heise.de/hintergrund/Schwachstellenanalyse-Wie-man-Zero-Day-Exploits-findet-ein-Beispiel-9985671.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.heise.de/hintergrund/Schwachstellenanalyse-Wie-man-Zero-Day-Exploits-findet-ein-Beispiel-9985671.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon</a><a href="https://social.heise.de/tags/Hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hacking</a> <a href="https://social.heise.de/tags/IdentityManagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IdentityManagement</a> <a href="https://social.heise.de/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://social.heise.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.heise.de/tags/Sicherheitsl%C3%BCcken" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sicherheitslücken</a> <a href="https://social.heise.de/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

heise SecurityFortiManager-Update schließt offenbar bereits attackierte SicherheitslückeOhne öffentliche Informationen hat Fortinet Updates für FortiManager veröffentlicht. Sie schließen offenbar attackierte Sicherheitslücken.<a href="https://www.heise.de/news/FortiManager-Update-schliesst-offenbar-bereits-attackierte-Sicherheitsluecke-9990393.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.heise.de/news/FortiManager-Update-schliesst-offenbar-bereits-attackierte-Sicherheitsluecke-9990393.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon</a><a href="https://social.heise.de/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://social.heise.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.heise.de/tags/Sicherheitsl%C3%BCcken" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sicherheitslücken</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

Netzpalaver<a href="https://social.tchncs.de/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>: Meldungen, dass Cyberkriminelle Open-Source-Software mit gefährlichen Exploits oder Backdoors infiltrieren, häufen sich - Open-Source - Tickt in der frei verfügbaren Software eine Security-Zeitbombe? Wie können sich insbesondere Entwickler vor gefährlichen Backdoors oder Malware schützen?Statement von Zac Warren, <a href="https://social.tchncs.de/tags/Tanium" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tanium</a> <a href="https://social.tchncs.de/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://social.tchncs.de/tags/Backdoor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Backdoor</a> <a href="https://social.tchncs.de/tags/OpenSourceSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSourceSoftware</a> <a href="https://social.tchncs.de/tags/Developer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Developer</a> <a href="https://social.tchncs.de/tags/SecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecOps</a> <a href="https://social.tchncs.de/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevSecOps</a> <a href="https://social.tchncs.de/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://social.tchncs.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.tchncs.de/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybercrime</a> <a href="https://social.tchncs.de/tags/Patching" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Patching</a> <a href="https://social.tchncs.de/tags/Schwachstelle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Schwachstelle</a> <a href="https://social.tchncs.de/tags/Cybersicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersicherheit</a>

Jason D. Moss 🇨🇦"A vulnerability with a 9.9 CVSS indicates a low complexity to exploit and signs are pointing to the flaw existing at the core of the system ... Considering this is Linux, the scope of this vulnerability is massive and successful exploitation could be devastating ..." // <a href="https://fosstodon.org/@brian_fox" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@brian_fox</a> <a href="https://geeknews.chat/@theregister" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@theregister</a> <a href="https://mastodon.online/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> <a href="https://mastodon.online/tags/Bug" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bug</a> <a href="https://mastodon.online/tags/Doomsday" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Doomsday</a> <a href="https://mastodon.online/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://www.theregister.com/2024/09/26/unauthenticated_rce_bug_linux/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.theregister.com/2024/09/26/unauthenticated_rce_bug_linux/</a>

IAintShootinMisWho is paying attention to <a href="https://digitaldarkage.cc/tags/EvilSocket" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EvilSocket</a> on X and wheres the conversation happening? I'd like to follow whoever's mastodon is talking about it. If no one is, then there is a <a href="https://digitaldarkage.cc/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> unauth <a href="https://digitaldarkage.cc/tags/RCE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RCE</a> being disclosed to openwall on the 30th. Appears to affect Linux and <a href="https://digitaldarkage.cc/tags/BSD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BSD</a> with a 9.9 CVSS score. From reading X thread seems to be not kernel or user space. Assuming protocol implementation? <a href="https://x.com/evilsocket/status/1838169889330135132" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://x.com/evilsocket/status/1838169889330135132</a><a href="https://digitaldarkage.cc/tags/ThreatIntel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatIntel</a> <a href="https://digitaldarkage.cc/tags/Vuln" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vuln</a> <a href="https://digitaldarkage.cc/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://digitaldarkage.cc/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://digitaldarkage.cc/tags/cve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cve</a>

Netzpalaver<a href="https://social.tchncs.de/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>: Meldungen, dass Cyberkriminelle Open-Source-Software mit gefährlichen Exploits oder Backdoors infiltrieren, häufen sich - Open-Source - Tickt in der frei verfügbaren Software eine Security-Zeitbombe? Wie können sich insbesondere Entwickler vor gefährlichen Backdoors oder Malware schützen?Statement von Harold Butzbach, <a href="https://social.tchncs.de/tags/Sysdig" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sysdig</a><a href="https://social.tchncs.de/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://social.tchncs.de/tags/Backdoor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Backdoor</a> <a href="https://social.tchncs.de/tags/OpenSourceSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSourceSoftware</a> <a href="https://social.tchncs.de/tags/Developer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Developer</a> <a href="https://social.tchncs.de/tags/SecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecOps</a> <a href="https://social.tchncs.de/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevSecOps</a> <a href="https://social.tchncs.de/tags/TimeBomb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TimeBomb</a> <a href="https://social.tchncs.de/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://social.tchncs.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.tchncs.de/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybercrime</a> <a href="https://social.tchncs.de/tags/Cybersicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersicherheit</a> <a href="https://social.tchncs.de/tags/OpenSourceCommunity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSourceCommunity</a>

Netzpalaver<a href="https://social.tchncs.de/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>: Reports that cybercriminals are infiltrating open source software with dangerous exploits or backdoors are on the rise. Is there a security time bomb ticking in freely available software? How can developers in particular protect themselves against dangerous backdoors or malware?Statement from Nico Dekens, SANS Institute<a href="https://social.tchncs.de/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://social.tchncs.de/tags/Backdoor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Backdoor</a> <a href="https://social.tchncs.de/tags/OpenSourceSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSourceSoftware</a> <a href="https://social.tchncs.de/tags/Developer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Developer</a> <a href="https://social.tchncs.de/tags/SecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecOps</a> <a href="https://social.tchncs.de/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevSecOps</a> <a href="https://social.tchncs.de/tags/TimeBomb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TimeBomb</a> <a href="https://social.tchncs.de/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://social.tchncs.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.tchncs.de/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybercrime</a> <a href="https://social.tchncs.de/tags/Cybersicherheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersicherheit</a> @SANSInstitute <a href="https://social.tchncs.de/tags/Code" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Code</a>

DansLeRuSH ᴱᶰUseful against attempts to exploit <a href="https://floss.social/tags/SSHD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSHD</a> :« <a href="https://floss.social/tags/OpenSSH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSSH</a> introduces options to penalize undesirable behavior […] In a recent commit, Damien Miller (<a href="https://cybervillains.com/@djm" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@djm</a>) introduced the new SSHD configurations options, "PerSourcePenalties" and "PerSourcePenaltyExemptList", to provide a built in facility in SSHD itself to penalize undesirable behavior, and to shield specific clients from penalty, respectively »› <a href="https://undeadly.org/cgi?action=article;sid=20240607042157" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://undeadly.org/cgi?action=article;sid=20240607042157</a> <a href="https://floss.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://floss.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://floss.social/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a>

Soatok DreamseekerSix months of non-response and then hides the disclosure, still doesn't fix it, and still hasn't communicated at all.So early in the year, and we have a contender for Lamest Vendor Response already?<a href="https://furry.engineer/tags/PwnieAwards" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PwnieAwards</a> <a href="https://furry.engineer/tags/Pwnies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pwnies</a> <a href="https://furry.engineer/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://furry.engineer/tags/exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#exploit</a> -_-

Free Software FoundationDoes your device have [critical vulnerabilities that only the manufacturer may remove?](<a href="https://u.fsf.org/42a" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://u.fsf.org/42a</a>)? If so, try GNU, as well as other freedom-respecting software, today! Enjoy DRM-free usability; the freedom to study, tinker, and identify malicious code before it reaches your device; the freedom to fix and repair; the freedom to patch; the freedom to share and sell; enjoy all these freedoms and more! Try GNU now: <a href="https://www.gnu.org/gnu/gnu.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.gnu.org/gnu/gnu.html</a> <a href="https://hostux.social/tags/GNU" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GNU</a> <a href="https://hostux.social/tags/Apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Apple</a> <a href="https://hostux.social/tags/iMessage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iMessage</a> <a href="https://hostux.social/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> ;)

Greg Lloyd<a href="https://mastodon.social/@arstechnica" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@arstechnica</a> 🧵Triangulation exploitA deep dive into a remarkable Apple silicon exploit that threaded a needle through four zero-day CVE vulnerabilities to own an iPhone or Mac that read a poisoned iMessage.<a href="https://federate.social/tags/kaspersky" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#kaspersky</a> <a href="https://federate.social/tags/exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#exploit</a> <a href="https://federate.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Marcus "MajorLinux" SummersYet again, go update yo shit!iOS 17.0.3 fixes security breach that had been actively exploited <a href="https://9to5mac.com/2023/10/04/ios-17-0-3-security-breach-exploit/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://9to5mac.com/2023/10/04/ios-17-0-3-security-breach-exploit/</a><a href="https://toot.majorshouse.com/tags/iOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iOS</a> <a href="https://toot.majorshouse.com/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://toot.majorshouse.com/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vulnerability</a> <a href="https://toot.majorshouse.com/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://toot.majorshouse.com/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://toot.majorshouse.com/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://toot.majorshouse.com/tags/TechNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechNews</a>

Marco IvaldiEscaping the Google <a href="https://infosec.exchange/tags/kCTF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#kCTF</a> Container with a Data-Only <a href="https://infosec.exchange/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a><a href="https://h0mbre.github.io/kCTF_Data_Only_Exploit/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://h0mbre.github.io/kCTF_Data_Only_Exploit/</a>

John Scott-Railton ☕3/. This kind of exploit delivery through injection DOES NOT require a target to click as our collaborator, the brilliant Maddie stone points out in her post.It's a seriously dangerous kind of attack & hard to protect against.<a href="https://blog.google/threat-analysis-group/0-days-exploited-by-commercial-surveillance-vendor-in-egypt/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.google/threat-analysis-group/0-days-exploited-by-commercial-surveillance-vendor-in-egypt/</a><a href="https://mastodon.social/tags/google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#google</a> <a href="https://mastodon.social/tags/spyware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spyware</a> <a href="https://mastodon.social/tags/predator" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#predator</a> <a href="https://mastodon.social/tags/zeroday" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zeroday</a> <a href="https://mastodon.social/tags/exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#exploit</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://mastodon.social/@citizenlab" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@citizenlab</a> <a href="https://infosec.exchange/@maddiestone" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@maddiestone</a>

CatSalad🐈🥗 (D.Burch) :blobcatrainbow:If you use <a href="https://infosec.exchange/tags/Android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Android</a>, do not forget to update <a href="https://play.google.com/store/apps/details?id=com.google.android.webview" rel="nofollow noopener noreferrer" target="_blank">Webview</a> along with your browser apps to fix the libwebp vulnerability currently being exploited in the wild.💥⁠<a href="https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/</a>One alternate method for downloading the update is to use <a href="https://apkpure.com/android-system-webview/com.google.android.webview" rel="nofollow noopener noreferrer" target="_blank">ApkPure</a>, but intermediate Android knowledge is needed because of possible <a href="https://apkpure.com/trichrome-library/com.google.android.trichromelibrary" rel="nofollow noopener noreferrer" target="_blank">Trichrome library</a> requirement on newer devices.<a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/libwebp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#libwebp</a> <a href="https://infosec.exchange/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://infosec.exchange/tags/Android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Android</a> <a href="https://infosec.exchange/tags/Webview" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Webview</a> <a href="https://infosec.exchange/tags/CVE_2023_4863" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE_2023_4863</a> <a href="https://infosec.exchange/tags/CVE20234863" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE20234863</a> <a href="https://infosec.exchange/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vulnerability</a> <a href="https://infosec.exchange/tags/Trichrome" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Trichrome</a> <a href="https://infosec.exchange/tags/CatSalad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CatSalad</a>

PrivacyDigestExploited 0-days, an incomplete fix, and a botched disclosure: <a href="https://mas.to/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://mas.to/tags/snafu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#snafu</a> reigns <a href="https://mas.to/tags/0day" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#0day</a> <a href="https://mas.to/tags/exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#exploit</a> <a href="https://mas.to/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://arstechnica.com/?p=1954819" rel="nofollow noopener noreferrer" target="_blank">https://arstechnica.com/?p=1954819</a>

heise SecurityJetzt patchen! Cybergangster bauen Botnetz aus Zyxel-FirewallsAngreifer attackieren derzeit Firewalls des Netzwerkausrüsters Zyxel. Sicherheitsupdates stehen zum Download bereit. <a href="https://www.heise.de/news/Jetzt-patchen-Cybergangster-bauen-Botnetz-aus-Zyxel-Firewalls-9154531.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege" rel="nofollow noopener noreferrer" target="_blank">https://www.heise.de/news/Jetzt-patchen-Cybergangster-bauen-Botnetz-aus-Zyxel-Firewalls-9154531.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege</a><a href="https://social.heise.de/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://social.heise.de/tags/Firewall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Firewall</a> <a href="https://social.heise.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.heise.de/tags/Sicherheitsl%C3%BCcken" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sicherheitslücken</a> <a href="https://social.heise.de/tags/Updates" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Updates</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

PhoenixSerenityAlso - <a href="https://mastodon.sdf.org/tags/FuckOff" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FuckOff</a> with male <a href="https://mastodon.sdf.org/tags/foreign" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#foreign</a> <a href="https://mastodon.sdf.org/tags/tourists" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tourists</a> in <a href="https://mastodon.sdf.org/tags/Asia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Asia</a> trying to <a href="https://mastodon.sdf.org/tags/exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#exploit</a> locals so they become more <a href="https://mastodon.sdf.org/tags/popular" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#popular</a> online. Almost NONE of these <a href="https://mastodon.sdf.org/tags/tourist" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tourist</a> <a href="https://mastodon.sdf.org/tags/FuckARonis" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FuckARonis</a> donated to ANY meaningful causes on their <a href="https://mastodon.sdf.org/tags/elitist" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#elitist</a> <a href="https://mastodon.sdf.org/tags/vacations" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vacations</a> but many had <a href="https://mastodon.sdf.org/tags/NoProblems" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NoProblems</a> <a href="https://mastodon.sdf.org/tags/exploiting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#exploiting</a> <a href="https://mastodon.sdf.org/tags/ChildSexSlaves" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ChildSexSlaves</a> - <a href="https://mastodon.sdf.org/tags/WTF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WTF</a> is wrong with you <a href="https://mastodon.sdf.org/tags/UK" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UK</a> & <a href="https://mastodon.sdf.org/tags/NorthAmerica" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NorthAmerica</a> - stop letting <a href="https://mastodon.sdf.org/tags/pedophiles" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pedophiles</a> abuse <a href="https://mastodon.sdf.org/tags/children" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#children</a> everywhere!<a href="https://mastodon.sdf.org/tags/AsianMastodon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AsianMastodon</a> <a href="https://mastodon.sdf.org/tags/FAFO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FAFO</a>

heise SecurityKritische Word-Lücke: Proof-of-Concept-Code veröffentlichtDer Entdecker einer kritischen Lücke bei der Anzeige von RTF-Dokumenten hat mit seiner Sicherheitsmeldung auch Proof-of-Concept-Code veröffentlicht.<a href="https://www.heise.de/news/Kritische-Word-Luecke-Proof-of-Concept-Code-veroeffentlicht-7537267.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege" rel="nofollow noopener noreferrer" target="_blank">https://www.heise.de/news/Kritische-Word-Luecke-Proof-of-Concept-Code-veroeffentlicht-7537267.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege</a><a href="https://social.heise.de/tags/Exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Exploit</a> <a href="https://social.heise.de/tags/MicrosoftOffice" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MicrosoftOffice</a> <a href="https://social.heise.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.heise.de/tags/Sicherheitsl%C3%BCcken" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sicherheitslücken</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

Recent searches

Search options

Administered by:

Server stats:

#exploit