#advisories — Public Fediverse posts

#Pi_hole schließt sechs #Sicherheitslücken -

Die Pi-hole-Entwickler haben ein umfangreiches #Wartungsupdate veröffentlicht, das vor allem sicherheitstechnisch einiges zu bieten hat. Mit dem Release schließen die Entwickler insgesamt sechs #Security- #Advisories in den #Modulen #Core und #FTL.

https://linuxnews.de/pi-hole-schliesst-sechs-sicherheitsluecken/

The daily life of many opensource projects 😭

#opensource #advisories #wallabag

#PSA: As the #HeatWave intensifies, there are '#advisories' going around asking people not to fill their #fueltanks to the full.

Contrary to common sense, this is categorically a *bad idea*! Full #fuel tanks are actually *safer* than partially empty tanks or even fully empty tanks with trace amounts of fuel.

Fuel doesn't explode on its own. Fuel-air mixture does. Empty tanks with trace fuel have the most of it, while full tanks have the least of it.

#Petrol #Diesel #Gasoline

Ground stop at JFK due to staffing
https://www.fly.faa.gov/adv/adv_otherdis?advn=13&adv_date=10312025&facId=JFK&title=ATCSCC%20ADVZY%20013%20JFK/ZNY%2010/31/2025%20CDM%20GROUND%20STOP&titleDate=10/31/2025
#ycombinator #Advisories

Für viele Unternehmen sind die Anforderungen an das #Schwachstellenmanagement in der #Cybersicherheit ein zunehmend dickes Brett.

Neben der reinen Menge an Meldungen ist ein weiteres Problem, dass #Cybersecurity-#Advisories bislang in den unterschiedlichen Formaten, also beispielsweise als PDF, als Website oder als Textfile veröffentlicht werden.

Deshalb empfiehlt das #BSI Unternehmen den #CSAF-Einsatz, um Risiken schneller erfassen und effizienter bewerten zu können:

https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/Broschueren/Management_Blitzlicht/Management_Blitzlicht_CSAF.pdf

#Global #Travel #Advisories put The #U.S. on the 'Warning' list.

traveling to the US is dangerous.

(it was about time).

We have updated FediVuln to make it less verbose, now only sending updates related to newly published #CVE #advisories Sorry for the noise!

From now on, new CVEs retrieved by Vulnerability-Lookup will be posted here:

https://social.circl.lu/@vulnerability_lookup

This makes it a bit more natural while keeping the meaning intact.

#cybersecurity #vulnerability

If you enjoyed the tour of my main @github projects these past few weeks, there’s much more on my homepage:

https://0xdeadbeef.info

Beside #publications, #talks, #security #advisories, #exploits, and #tools I developed over almost three decades of hacking, I’m especially proud of the related works section, where I tried to collect the many projects that in a way or another build upon my previous work.

I’m glad to have provided some inspiration to so many talented hackers… Hack the planet! 🏴‍☠️🌎

#USA, #Michigan: State reminds #hunters of ‘Do Not #Eat’ #health #advisories for Clark’s Marsh, https://www.michigan.gov/mdhhs/inside-mdhhs/newsroom/2024/09/12/2024-clarks

A Do Not Eat #deer advisory remains in effect due to evidence that deer within 3 miles of the marsh were more likely to have various per- and polyfluorinated substances (#PFAS), including perfluorooctane sulfonic acid (#PFOS), in their #livers and #muscle tissue.

The Detection Of A Massive Harmful Algal Bloom In The Arctic Prompts Real-Time Advisories To Western Alaskan Communities
--
https://phys.org/news/2024-07-massive-algal-bloom-arctic-prompts.html <-- shared technical article
--
https://doi.org/10.1002/lol2.10421 <-- shared paper
--
#GIS #spatial #mapping #sampling #publichealth #ecosystem #habitat #climatechange #harmful #agalbloom #HAB #polar #marine #healthimpacts #toxins #Arctic #water #hydrospatial #sampling #model #modeling #BeringStrait #magnitude #scale #density #toxicity #coast #coastal #remote #communities #FirstNation #risk #hazard #response #monitoring #hazardassessment #communication #realtime #advisories #Alaska #WesternAlaska #maritime #subsistence #harvest #fisheries #tracking #spatiotemporal #spatialanalysis #WHOI #PST #algae #foodchain #foodweb #mortality #impacts #subsidence #eventresponse #waterquality

And again some bad new perspectives on #AI and #cybersecurity:

"#OpenAI's #GPT-4 can exploit real vulnerabilities by reading #security #advisories"

"When given the #CVE description, GPT-4 is capable of exploiting 87 percent of these vulnerabilities compared to 0 percent for every other model we test (GPT-3.5, open-source LLMs) and open-source vulnerability scanners (ZAP and Metasploit)."

https://www.theregister.com/2024/04/17/gpt4_can_exploit_real_vulnerabilities/

Starship will attempt a launch this weekend
https://www.fly.faa.gov/adv/adv_spt.jsp
#ycombinator #Advisories

@nixCraft #FreeBSD user on both desktop and server (incl. firewall) as well as #ports maintainer here:

My answer (ASAP) is an approximation.

For the base system, I read the published #advisories ASAP. I decide whether I'm affected, and how exposed my different machines are. If necessary, I rebuild base from source and update all machines needing the update ASAP.

For ports, I try to keep an eye on "exposed services" (like e.g. my MTA) for servers and at least browsers for desktops. Actually installing an update can take two or three days because I'm building my own package repository using #poudriere.

If you didn't see much #frost or a #freeze in your part of the #Northland Sunday night, another chance is coming Monday night.

New Freeze #Warnings and Frost #Advisories are in effect as temperatures will drop to and slightly below the #freezing point.

This will help make the #fall #colors pop a bit more, with #peak pretty much here. Now's the time to enjoy it!

#wxtooter #weather #wx #MNwx #WIwx #UPwx

Congratulations, Cybersecurity and Infrastructure Security Agency, and Jen Easterly (CISA) on publishing the #OT #Advisories as #oCSAF! 👏

This is an important step which will allow all asset owners a faster and more effective review of security advisories.
@certbund already put you up on our #oCSAF Lister: https://wid.cert-bund.de/.well-known/csaf-aggregator/aggregator.json

The NWS will be getting rid of Special Weather Statements and most advisories in replace of plain language headlines by 2025.

For example, a special weather statement will most likely appear as something like:

"Strong Thunderstorm Statement"

I highly recommend everyone at least glance through these two documents put out by the NWS. There will be times a warning replaces a statement.

NWS Statement: https://www.weather.gov/media/notification/pdf_2023_24/pns23-49_nws_alerting_system_plain_language.pdf

NWS Examples: https://www.weather.gov/media/notification/PDDs/PDD_Haz_Simp.pdf

#Weather #WX #Advisories

#CISA Releases Six Industrial Control Systems Advisories
02/09/2023 10:00 AM EST

Original release date: February 9, 2023
CISA released six Industrial Control Systems (#ICS) advisories on February 9, 2023. These advisories provide timely information about current #security issues, #vulnerabilities, and #exploits surrounding ICS.
CISA encourages users and administrators to review the newly released ICS #advisories for technical details and mitigations:
• ICSA-23-040-01 Control By Web X-400, X-600M
• ICSA-23-040-02 LS Electric XBC-DN32U
• ICSA-23-040-03 Johnson Controls System Configuration Tool (CST)
• ICSA-23-040-04 Horner Automation Cscape Envision RV
• ICSA-22-179-02 Omron SYSMAC CS-CJ-CP Series and NJ-NX Series (Update A)
• ICSA-22-354-03 ARC Informatique PcVue (Update A)

Continuing the tour of my @github projects, here’s my public #security #advisories, also spanning about 20 years.

https://github.com/0xdea/advisories

"Testing can prove the presence of bugs, but not their absence."
-- Edsger W. Dijkstra

As a side note, please, please stop calling it responsible #disclosure. The proper name is #coordinated #disclosure. Thanks 🙏

With #snow & #freezing #rain in the #forecast , which may cause #dangerous road conditions, #travel #advisories are in place for many areas of B.C., including the #FraserValley and mid- & south #VancouverIsland from Thursday, Dec. 22 until Saturday, Dec. 24. 
People should also be prepared for potential #PowerOutages .

https://news.gov.bc.ca/releases/2022EMCR0070-001940

#BritishColumbia #BCWeather #StayTheFuckHome #Winter #StormSeason
#PNW #StormWeather #PacificNorthwest #Westcoast

#CISA released six Industrial Control Systems (ICS) #advisories on December 20, 2022. These advisories provide timely information about current #security issues, #vulnerabilities, and #exploits surrounding #ICS. https://www.cisa.gov/uscert/ncas/current-activity/2022/12/20/cisa-releases-six-industrial-control-systems-advisories

The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP).

https://nvd.nist.gov/

#security #vulnerability #advisories #reference #automation #scanning