#security-patch — Public Fediverse posts

🕵️‍♂️🔒 Tails 7.9.1 a fost lansat! Actualizarea repară o vulnerabilitate critică de kernel și actualizează Tor Browser 🧅🛡️

Echipa din spatele Tails (The Amnesic Incognito Live System), faimoasa distribuție Linux axată pe anonimat absolut și confidențialitate, a lansat oficial o actualizare de securitate de urgență: versiunea 7.9.1. Acest release are un caracter critic și este conceput special pentru a proteja utilizatorii împotriva unei vulnerabilități recente descoperite la nivelul kernelului Linux.

Iată principalele modificări din Tails 7.9.1:

🔹 Repararea vulnerabilității de kernel „DirtyClone”:
Actualizarea principală de securitate din această versiune rezolvă o vulnerabilitate severă din kernelul Linux, cunoscută în comunitatea de securitate sub numele de DirtyClone (asociată cu manipularea apelurilor de sistem clone). Această breșă de securitate le-ar fi putut permite atacatorilor sau aplicațiilor malițioase să obțină privilegii de administrator (root) pe sistemul gazdă sau să spargă barierele de izolare ale proceselor (sandbox). Patch-ul inclus în versiunea 7.9.1 închide complet această portiță.

🔹 Actualizare pentru Tor Browser și Clientul Tor:
Fiind un sistem de operare unde tot traficul de internet este redirecționat implicit prin rețeaua Tor, componentele de navigare au fost aduse la zi pentru a asigura o protecție maximă:

Tor Browser a fost actualizat pentru a include cele mai noi patch-uri de securitate upstream de la Mozilla Firefox.

Clientul de fundal Tor a primit optimizări pentru o conexiune mai stabilă și circuite mai sigure, prevenind atacurile de tip „de-anonimizare” sau blocajele în regiunile cu cenzură agresivă.

🔹 Actualizări de componente și corecturi minore:
Pe lângă pachetele critice de securitate, Tails 7.9.1 aduce corecturi pentru utilitarul intern de configurare a stocării persistente (Persistent Storage) și actualizează diverse biblioteci de rețea din amontele Debian pentru a preveni crash-urile la pornire pe anumite configurații hardware mai noi.

Deoarece Tails este un sistem gândit să ruleze direct dintr-o memorie USB sau de pe un DVD fără a lăsa urme pe hard disk, dezvoltatorii recomandă ferm tuturor utilizatorilor să facă upgrade la versiunea 7.9.1 înainte de următoarea sesiune de navigare.

Dacă rulezi deja o versiune recentă de Tails, sistemul îți va propune o actualizare automată (automatic upgrade) la pornire, cu condiția să fii conectat la internet. În caz contrar, poți descărca noua imagine ISO/USB direct de pe site-ul oficial al proiectului.

#TailsOS #Tails791 #TorBrowser #Privacy #Anonymity #Cybersecurity #LinuxKernel #DirtyClone #SecurityPatch #TechNews

🕵️‍♂️🔒 Tails 7.9.1 a fost lansat! Actualizarea repară o vulnerabilitate critică de kernel și actualizează Tor Browser 🧅🛡️

Echipa din spatele Tails (The Amnesic Incognito Live System), faimoasa distribuție Linux axată pe anonimat absolut și confidențialitate, a lansat oficial o actualizare de securitate de urgență: versiunea 7.9.1. Acest release are un caracter critic și este conceput special pentru a proteja utilizatorii împotriva unei vulnerabilități recente descoperite la nivelul kernelului Linux.

Iată principalele modificări din Tails 7.9.1:

🔹 Repararea vulnerabilității de kernel „DirtyClone”:
Actualizarea principală de securitate din această versiune rezolvă o vulnerabilitate severă din kernelul Linux, cunoscută în comunitatea de securitate sub numele de DirtyClone (asociată cu manipularea apelurilor de sistem clone). Această breșă de securitate le-ar fi putut permite atacatorilor sau aplicațiilor malițioase să obțină privilegii de administrator (root) pe sistemul gazdă sau să spargă barierele de izolare ale proceselor (sandbox). Patch-ul inclus în versiunea 7.9.1 închide complet această portiță.

🔹 Actualizare pentru Tor Browser și Clientul Tor:
Fiind un sistem de operare unde tot traficul de internet este redirecționat implicit prin rețeaua Tor, componentele de navigare au fost aduse la zi pentru a asigura o protecție maximă:

Tor Browser a fost actualizat pentru a include cele mai noi patch-uri de securitate upstream de la Mozilla Firefox.

Clientul de fundal Tor a primit optimizări pentru o conexiune mai stabilă și circuite mai sigure, prevenind atacurile de tip „de-anonimizare” sau blocajele în regiunile cu cenzură agresivă.

🔹 Actualizări de componente și corecturi minore:
Pe lângă pachetele critice de securitate, Tails 7.9.1 aduce corecturi pentru utilitarul intern de configurare a stocării persistente (Persistent Storage) și actualizează diverse biblioteci de rețea din amontele Debian pentru a preveni crash-urile la pornire pe anumite configurații hardware mai noi.

Deoarece Tails este un sistem gândit să ruleze direct dintr-o memorie USB sau de pe un DVD fără a lăsa urme pe hard disk, dezvoltatorii recomandă ferm tuturor utilizatorilor să facă upgrade la versiunea 7.9.1 înainte de următoarea sesiune de navigare.

Dacă rulezi deja o versiune recentă de Tails, sistemul îți va propune o actualizare automată (automatic upgrade) la pornire, cu condiția să fii conectat la internet. În caz contrar, poți descărca noua imagine ISO/USB direct de pe site-ul oficial al proiectului.

#TailsOS #Tails791 #TorBrowser #Privacy #Anonymity #Cybersecurity #LinuxKernel #DirtyClone #SecurityPatch #TechNews

🔒🏴‍☠️ Transmission 4.1.3 a fost lansat! Actualizarea repară o vulnerabilitate critică la accesul de la distanță 🛡️🌐

Echipa din spatele popularului client BitTorrent open-source, Transmission, a lansat oficial versiunea 4.1.3. Aceasta este o actualizare de tip „bug-fix” de dimensiuni reduse, dar extrem de importantă, deoarece se concentrează pe rezolvarea unei probleme de securitate ce vizează utilizatorii care controlează aplicația de la distanță.

Iată principalele detalii despre Transmission 4.1.3:

🔹 Repararea unei vulnerabilități CSRF / CORS:
Principala corectură din această versiune rezolvă o problemă potențială de tip CSRF (Cross-Site Request Forgery) care îi afecta pe utilizatorii ce aveau activată opțiunea de acces de la distanță (Remote Access) prin intermediul interfeței web sau RPC. Mai exact, a fost eliminat un bug legat de politicile CORS (Cross-Origin Resource Sharing) care permitea scurgerea (leak) codului de securitate unic anti-CSRF (nonce). Fără acest patch, un atacator ar fi putut încerca să manipuleze de la distanță sesiunea Transmission a utilizatorului.

🔹 Alte corecturi tehnice:

A fost rezolvat un bug de tip use-after-free (o eroare de gestionare a memoriei RAM) localizat în codul care se ocupă de conexiunile de tip peer-to-peer.

S-a remediat o problemă de compilare ce apărea pe sistemele care utilizează biblioteca fmt 12.2.

A fost corectată o eroare de construcție (build error) legată de testele interne, care fusese introdusă din greșeală în versiunea anterioară, 4.1.2.

Transmission 4.1.3 este disponibil deja pentru descărcare pe pagina oficială de GitHub a proiectului, unde se găsesc atât codul sursă, cât și pachetele precompilate pentru diverse platforme. Pentru utilizatorii de distribuții Linux de tip rolling release (cum ar fi Arch Linux), noua versiune va sosi în mod automat în depozite în orele sau zilele următoare. Pentru alte distribuții, pachetul va deveni disponibil de îndată ce maintainerii locali îl vor include în managerul de pachete.

Recomandarea generală este ca toți utilizatorii care folosesc funcția de administrare web de la distanță să treacă la versiunea 4.1.3 cât mai curând posibil.

#Transmission #BitTorrent #Transmission413 #SecurityPatch #Cybersecurity #OpenSource #Linux #TechNews

🔒🏴‍☠️ Transmission 4.1.3 a fost lansat! Actualizarea repară o vulnerabilitate critică la accesul de la distanță 🛡️🌐

Echipa din spatele popularului client BitTorrent open-source, Transmission, a lansat oficial versiunea 4.1.3. Aceasta este o actualizare de tip „bug-fix” de dimensiuni reduse, dar extrem de importantă, deoarece se concentrează pe rezolvarea unei probleme de securitate ce vizează utilizatorii care controlează aplicația de la distanță.

Iată principalele detalii despre Transmission 4.1.3:

🔹 Repararea unei vulnerabilități CSRF / CORS:
Principala corectură din această versiune rezolvă o problemă potențială de tip CSRF (Cross-Site Request Forgery) care îi afecta pe utilizatorii ce aveau activată opțiunea de acces de la distanță (Remote Access) prin intermediul interfeței web sau RPC. Mai exact, a fost eliminat un bug legat de politicile CORS (Cross-Origin Resource Sharing) care permitea scurgerea (leak) codului de securitate unic anti-CSRF (nonce). Fără acest patch, un atacator ar fi putut încerca să manipuleze de la distanță sesiunea Transmission a utilizatorului.

🔹 Alte corecturi tehnice:

A fost rezolvat un bug de tip use-after-free (o eroare de gestionare a memoriei RAM) localizat în codul care se ocupă de conexiunile de tip peer-to-peer.

S-a remediat o problemă de compilare ce apărea pe sistemele care utilizează biblioteca fmt 12.2.

A fost corectată o eroare de construcție (build error) legată de testele interne, care fusese introdusă din greșeală în versiunea anterioară, 4.1.2.

Transmission 4.1.3 este disponibil deja pentru descărcare pe pagina oficială de GitHub a proiectului, unde se găsesc atât codul sursă, cât și pachetele precompilate pentru diverse platforme. Pentru utilizatorii de distribuții Linux de tip rolling release (cum ar fi Arch Linux), noua versiune va sosi în mod automat în depozite în orele sau zilele următoare. Pentru alte distribuții, pachetul va deveni disponibil de îndată ce maintainerii locali îl vor include în managerul de pachete.

Recomandarea generală este ca toți utilizatorii care folosesc funcția de administrare web de la distanță să treacă la versiunea 4.1.3 cât mai curând posibil.

#Transmission #BitTorrent #Transmission413 #SecurityPatch #Cybersecurity #OpenSource #Linux #TechNews

Fastjson 1.2.68 finally patches the Autotype flaw. The update blocks dynamic method calls and tightens type resolution, stopping remote‑code‑execution vectors that arise from deserializing untrusted JSON. If you still run older versions, upgrade now to keep your services safe.

#Fastjson #SecurityPatch #JSONDeserialization #Infosec #OpenSource

🔗 https://www.cnblogs.com/tr1ple/p/13489260.html

Google accidentally exposed details of unfixed Chromium flaw

https://www.bleepingcomputer.com/news/security/google-accidentally-exposed-details-of-unfixed-chromium-flaw/

Read on HackerWorkspace: https://hackerworkspace.com/article/google-accidentally-exposed-details-of-unfixed-chromium-flaw

#vulnerability #exploit #securitypatch

Windows 11 Pursues Feature Stream, User Complaints Persist

Windows 11 users face ongoing bugs despite May 2026 security updates. Learn about performance changes and installation methods.

#Windows11, #Microsoft, #TechUpdate, #SecurityPatch, #SoftwareBugs

https://newsletter.tf/windows-11-may-2026-updates-bugs-security/

Microsoft fixed 137 security flaws in Windows 11 in May 2026, but users still report problems with features like HDR displays.

#Windows11, #Microsoft, #TechUpdate, #SecurityPatch, #SoftwareBugs
https://newsletter.tf/windows-11-may-2026-updates-bugs-security/

SANS Stormcast Friday, May 15th, 2026: Website Fraud; Outlook Link Preview Bug; NGINX Vuln; Cisco 0-Day

https://isc.sans.edu/podcastdetail/9934

Read on HackerWorkspace: https://hackerworkspace.com/article/sans-stormcast-friday-may-15th-2026-website-fraud-outlook-link-preview-bug-nginx-vuln-cisco-0-day

#vulnerability #phishing #securitypatch

Christ flies off to heaven, what else to do than update your Linux servers?

It's cold as hell.... (strange expression) and the rain is pouring down. It's a 'stay inside' day today.

#securitypatch #linux #shitposting

SANS Stormcast Thursday, May 14th, 2026: Flexbile Windows Proxy; News from Nightmare Eclipse; A…

https://www.youtube.com/watch?v=-T1x8rCIblA

#vulnerability #exploit #securitypatch

🚨 Critical Composer Update: 2.9.8 & 2.2.28 fix a GitHub Actions token disclosure!

⚠️ Update NOW or disable GitHub Actions immediately!

https://blog.packagist.com/composer-2-9-8-and-2-2-28-fix-github-actions-token-disclosure-in-error-messages/

#PHP #Composer #ComposerPHP #OpenSource #WebDevelopment #GitHubActions #DevSecOps #CyberSecurity #SoftwareUpdate #PatchRelease #DependencyManagement #SecurityFix #Programming #Packagist #PHPDev #ComposerUpdate #OpenSourceSoftware #WebDevLife #InfoSec #SecurityPatch #CodeSmart #DependencyManagement #SoftwareSecurity #TechUpdate

🚨 Critical Composer Update: 2.9.8 & 2.2.28 fix a GitHub Actions token disclosure!

⚠️ Update NOW or disable GitHub Actions immediately!

https://blog.packagist.com/composer-2-9-8-and-2-2-28-fix-github-actions-token-disclosure-in-error-messages/

#PHP #Composer #ComposerPHP #OpenSource #WebDevelopment #GitHubActions #DevSecOps #CyberSecurity #SoftwareUpdate #PatchRelease #DependencyManagement #SecurityFix #Programming #Packagist #PHPDev #ComposerUpdate #OpenSourceSoftware #WebDevLife #InfoSec #SecurityPatch #CodeSmart #DependencyManagement #SoftwareSecurity #TechUpdate

SANS Stormcast Wednesday, May 13th, 2026: Microsoft Patch Tuesday; Large npm/pypi Compromise; R…

https://www.youtube.com/watch?v=aUficRwDQ6s

#malware #vulnerability #securitypatch

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator/

Read on HackerWorkspace: https://hackerworkspace.com/article/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator

#vulnerability #exploit #securitypatch

SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA

https://www.bleepingcomputer.com/news/security/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana/

Read on HackerWorkspace: https://hackerworkspace.com/article/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana

#vulnerability #exploit #securitypatch

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

https://thehackernews.com/2026/05/cpanel-whm-patch-3-new-vulnerabilities.html

Read on HackerWorkspace: https://hackerworkspace.com/article/cpanel-whm-release-fixes-for-three-new-vulnerabilities-patch-now

#vulnerability #exploit #securitypatch

Update WhatsApp now: Two new flaws could expose you to malicious files

https://www.malwarebytes.com/blog/news/2026/05/update-whatsapp-now-two-new-flaws-could-expose-you-to-malicious-files

Read on HackerWorkspace: https://hackerworkspace.com/article/update-whatsapp-now-two-new-flaws-could-expose-you-to-malicious-files

#cybersecurity #vulnerability #securitypatch

SANS Stormcast Tuesday, May 5th, 2026: Honeypot Update; MOVEit Patches; Apache http2 Vuln; (#)

https://www.youtube.com/watch?v=CvUyjR3fPKk

#threatintelligence #vulnerability #securitypatch

Find and fix security vulnerabilities with Claude

https://www.youtube.com/watch?v=0SgCiUfoYo8

#aisecurity #vulnerability #securitypatch

SANS Stormcast Wednesday, April 29th, 2026: Odd Vercel Header Usage; GitHub Vuln Patches; MSFT RDP Notification Bug

https://isc.sans.edu/podcastdetail/9910

Read on HackerWorkspace: https://hackerworkspace.com/article/sans-stormcast-wednesday-april-29th-2026-odd-vercel-header-usage-github-vuln-patches-msft-rdp-notification-bug

#threatintelligence #vulnerability #securitypatch

SANS Stormcast Wednesday, April 29th, 2026: Odd Vercel Header Usage; GitHub Vuln Patches; MSFT RDP Notification Bug

https://isc.sans.edu/podcastdetail/9910

Read on HackerWorkspace: https://hackerworkspace.com/article/sans-stormcast-wednesday-april-29th-2026-odd-vercel-header-usage-github-vuln-patches-msft-rdp-notification-bug

#threatintelligence #vulnerability #securitypatch

Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

https://thehackernews.com/2026/04/microsoft-patches-entra-id-role-flaw.html

Read on HackerWorkspace: https://hackerworkspace.com/article/microsoft-patches-entra-id-role-flaw-that-enabled-service-principal-takeover

#aisecurity #vulnerability #securitypatch

SANS Stormcast Friday April 24rd, 2026: Apple Update; Bitwarden Compromise; ASP.NET Core Patch (#)

https://www.youtube.com/watch?v=W3ju-VoIylA

#vulnerability #exploit #securitypatch

SANS Stormcast Tuesday, April 21st, 2026: CVE and EPSS; Windows Server 2025 OOB; QEMU Abuse; (#)

https://www.youtube.com/watch?v=whqSGs9IzNY

#ransomware #vulnerability #securitypatch

Critical 10.0 Spinnaker Vulns Allow RCE And Production Compromise - ZeroPath Blog

https://zeropath.com/blog/spinnaker-rce-production-compromise

Read on HackerWorkspace: https://hackerworkspace.com/article/critical-10-0-spinnaker-vulns-allow-rce-and-production-compromise-zeropath-blog

#vulnerability #exploit #securitypatch

Critical 10.0 Spinnaker Vulns Allow RCE And Production Compromise - ZeroPath Blog

https://zeropath.com/blog/spinnaker-rce-production-compromise

Read on HackerWorkspace: https://hackerworkspace.com/article/critical-10-0-spinnaker-vulns-allow-rce-and-production-compromise-zeropath-blog

#vulnerability #exploit #securitypatch

Microsoft releases Windows 10 KB5082200 extended security update

https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5082200-extended-security-update/

Read on HackerWorkspace: https://hackerworkspace.com/article/microsoft-releases-windows-10-kb5082200-extended-security-update

#cybersecurity #vulnerability #securitypatch

Microsoft releases Windows 10 KB5082200 extended security update

https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5082200-extended-security-update/

Read on HackerWorkspace: https://hackerworkspace.com/article/microsoft-releases-windows-10-kb5082200-extended-security-update

#cybersecurity #vulnerability #securitypatch

Patch Tuesday, April 2026 Edition – Krebs on Security

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

Read on HackerWorkspace: https://hackerworkspace.com/article/patch-tuesday-april-2026-edition-krebs-on-security

#cybersecurity #vulnerability #securitypatch

CVE-2026-0232 Cortex XDR Agent: Local Administrator can disable the agent on Windows

https://security.paloaltonetworks.com/CVE-2026-0232

Read on HackerWorkspace: https://hackerworkspace.com/article/cve-2026-0232-cortex-xdr-agent-local-administrator-can-disable-the-agent-on-windows

#cybersecurity #vulnerability #securitypatch

AuthZ plugin bypass with oversized request body

https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2

Read on HackerWorkspace: https://hackerworkspace.com/article/authz-plugin-bypass-with-oversized-request-body

#cybersecurity #vulnerability #securitypatch

Security Bulletins  |  Cloud Customer Care  |  Google Cloud Documentation

https://docs.cloud.google.com/support/bulletins/index#gcp-2026-015

Short summary: https://hackerworkspace.com/article/security-bulletins-cloud-customer-care-google-cloud-documentation-2

#vulnerability #exploit #securitypatch

Ajax football club hack exposed fan data, enabled ticket hijack

https://www.bleepingcomputer.com/news/security/ajax-football-club-hack-exposed-fan-data-enabled-ticket-hijack/

Short summary: https://hackerworkspace.com/article/ajax-football-club-hack-exposed-fan-data-enabled-ticket-hijack

#databreach #cybersecurity #securitypatch

CVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error

https://aws.amazon.com/security/security-bulletins/rss/2026-010-aws/

Short summary: https://hackerworkspace.com/article/cve-2026-4428-issues-with-aws-lc-crl-distribution-point-scope-check-logic-error

#cybersecurity #vulnerability #securitypatch

If you have a Galaxy A33, there's a crucial update you should install! 🔐📱

Samsung is releasing a new firmware for the Galaxy A33 5G, featuring the January 2026 security fix.

It's currently available for the Korean model SM-A336N as build A336NKSSDGZA1 and will soon reach other regions.

To see if it's ready in your area, go to Settings > Software update > Download and install.

#SamsungUpdate #GalaxyA33 #SecurityPatch #TechNews

If you have a Galaxy A33, there's a crucial update you should install! 🔐📱

Samsung is releasing a new firmware for the Galaxy A33 5G, featuring the January 2026 security fix.

It's currently available for the Korean model SM-A336N as build A336NKSSDGZA1 and will soon reach other regions.

To see if it's ready in your area, go to Settings > Software update > Download and install.

#SamsungUpdate #GalaxyA33 #SecurityPatch #TechNews

https://winbuzzer.com/2026/01/19/pcs-refuse-to-shut-down-after-microsoft-patch-security-update-ironically-breaks-basic-functionality-xcxwbn/

PCs Refuse to Shut Down After Microsoft Patch: Security Update Ironically Breaks Basic Functionality

#Microsoft #Windows11 #SecurityPatch #WindowsUpdate #Windows11Enterprise #SecureLaunch #ITSecurity #SystemUpdate WindowsBug #MicrosoftPatch

https://winbuzzer.com/2026/01/19/pcs-refuse-to-shut-down-after-microsoft-patch-security-update-ironically-breaks-basic-functionality-xcxwbn/

PCs Refuse to Shut Down After Microsoft Patch: Security Update Ironically Breaks Basic Functionality

#Microsoft #Windows11 #SecurityPatch #WindowsUpdate #Windows11Enterprise #SecureLaunch #ITSecurity #SystemUpdate WindowsBug #MicrosoftPatch

Updatet mal euer VLC…

https://www.heise.de/news/VLC-stopft-diverse-Sicherheitslecks-11135921.html?wt_mc=nl.red.security.security-nl.2026-01-12.link.link

#VLC #SecurityPatch #SoftwareUpdate

Two days before Christmas, they put an egg in our nest .. #woocommerce #securitypatch #wordpress https://developer.woocommerce.com/2025/12/22/store-api-vulnerability-patched-in-woocommerce-8-1/

Two days before Christmas, they put an egg in our nest .. #woocommerce #securitypatch #wordpress https://developer.woocommerce.com/2025/12/22/store-api-vulnerability-patched-in-woocommerce-8-1/

A tiny flaw in a common math eval library is opening the door to remote attacks across hundreds of projects. How did a simple overlook snowball into a security crisis—and what fixes can save the day?

https://thedefendopsdiaries.com/understanding-and-mitigating-the-expr-eval-javascript-library-rce-vulnerability/

#rce
#javascriptsecurity
#cve202512735
#opensource
#cybersecurity
#vulnerabilitymanagement
#expr-eval
#remotecodeexecution
#securitypatch

Neuer Artikel im Blog:

TYPO3 Sicherheitsupdate: 7 Lücken in einem Rutsch gefixt

https://wwagner.net/blog/a/typo3-sicherheitsupdate-7-luecken-in-einem-rutsch-gefixt

#TYPO3Update #CyberSecurity #SecurityPatch

Qualcomm just squashed three zero-day bugs in its Adreno GPU drivers that were being exploited in targeted attacks. What do you think this means for the security of your everyday devices?

https://thedefendopsdiaries.com/qualcomms-swift-response-to-adreno-gpu-zero-day-vulnerabilities/

#qualcomm
#zeroday
#cybersecurity
#adrenogpu
#securitypatch

Na dann wolln wir mal...
Auf dass das Tröten mit euch noch besser funzt!
#SecurityPatch

Ivanti's latest patch locks down a vulnerability that let hackers sneak in like uninvited guests. Are your systems still at risk? Discover how these zero-day fixes could be your digital lifesaver.

https://thedefendopsdiaries.com/ivantis-security-patch-addressing-critical-vulnerabilities-in-epmm/

#ivanti
#zeroday
#cybersecurity
#securitypatch
#epmm

Fortinet just pulled off a rapid counterattack against a dangerous zero-day exploit in their FortiVoice systems. How did they turn a potential crisis into a showcase of quick, effective cybersecurity? Read on to find out.

https://thedefendopsdiaries.com/fortinets-swift-response-to-zero-day-exploits-in-fortivoice-systems/

#fortinet
#zeroday
#cybersecurity
#infosec
#securitypatch

Researchers warn a Next.js flaw, present for years, could've allowed hackers to bypass middleware-based authentication. Vercel patched it on March 18. #Nextjs #Cybersecurity #Vercel #TechNews #DataBreach #Authentication #SecurityPatch #Hacking

Apple has released iOS 18.3.2 & iPadOS 18.3.2 to fix a zero-day vulnerability (CVE-2025-24201) in WebKit, which was exploited in targeted iPhone attacks. Update your devices now! 📱💻 More info: https://cyberinsider.com/apple-patches-zero-day-flaw-used-in-targeted-iphone-attacks/ #Apple #iOS #SecurityPatch #ZeroDay #oldnewz

The Joomla! Project announces the release of Joomla 5.2.2. This is a security and bug fix release for the 5.x series of Joomla.
Read about all the updates and bug fixes here:
https://www.joomla.org/announcements/release-news/5918-joomla-5-2-2-security-bugfix-release.html
#Joomla #CMS #SecurityPatch #OpenSource

Microsoft Warns Of Windows Kernel Vulnerability Exploitation https://cybersecuritynews.com/ms-windows-kernel-vulnerability/ #WindowsVulnerability #CyberSecurityNews #Vulnerability #SecurityPatch #CVE202437985 #Microsoft

CERT-In Highlights Critical Vulnerabilities in Adobe, IBM WebSphere, and Joomla https://thecyberexpress.com/cert-in-vulnerability-adobe-ibm-joomla/ #TheCyberExpressNews #CybersecurityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #securitypatch #Vulnerability #IBMWebSphere #CERTIn #Joomla #Update #Adobe

RADIUS protocol vulnerable to new Blast-RADIUS attack

https://stackdiary.com/radius-protocol-vulnerable-to-new-blast-radius-attack/

#BlastRADIUS #Cybersecurity #NetworkSecurity #RADIUS #Vulnerability #MD5 #UDP #Hack #ManInTheMiddle #Encryption #Authentication #Authorization #SecurityThreat #DataBreach #CyberAttack #NetworkProtection #SecureNetworks #TLS #SecurityPatch #NetworkAdmin #TechNews #ITSecurity #DigitalDefense #Infosec #SecureProtocol #CryptoStandards #SecurityUpdate #TechSecurity #NetworkSafety #CyberDefense #DataSecurity

Citrix patches critical NetScaler Console vulnerability

(improper auth: 9.4/10 on CVSS)

https://stackdiary.com/citrix-patches-critical-netscaler-console-vulnerability/

#Citrix #NetScaler #Security #Patch #Update #Vulnerability #Critical #Console #Fix #Cybersecurity #Protection #Software #Network #Tech #IT #SecurityUpdate #BugFix #Safety #Defense #Infrastructure #TechNews #SecurityPatch #CyberDefense #TechUpdate #SecurityAlert #Threat #Secure #Risk #ITSecurity #TechSafety #SystemUpdate #CVE

7-Zip quietly fixes a buffer overflow vulnerability

https://stackdiary.com/7-zip-quietly-fixes-a-buffer-overflow-vulnerability/

#CyberSecurity #InfoSec #DataBreach #Vulnerability #SoftwareUpdate #7Zip #TechNews #SecurityPatch #BufferOverflow #DataProtection #SecurityAlert #HackerNews #Malware #SecureSoftware #Privacy #CyberAttack #TechAlert #BugFix #SecurityBreach #DataSecurity #CyberSafety #InfosecNews #TechUpdates #SecurityFirst #Exploit #SecureTech #OnlineSecurity #SecureUpdate #SecurityMatters #TechSafety

GitLab Critical Security Patch Release: 17.1.1

Date: June 26, 2024
CVE: CVE-2024-5655
Vulnerability Type: Improper Authorization
CWE: [[CWE-284]], [[CWE-79]], [[CWE-352]]
Sources: GitLab Patch Release

Synopsis

GitLab released a critical security patch (versions 17.1.1, 17.0.3, and 16.11.5) to address several vulnerabilities, including a critical issue that allows attackers to run pipelines as any user.

Issue Summary

The latest GitLab patch addresses critical and high-severity vulnerabilities that could allow attackers to exploit the system, such as running pipelines as any user and injecting stored XSS in commit notes. These vulnerabilities affect versions from 15.8 to 17.1.0.

CVE-2024-5655 - CRITICAL
An issue was discovered in GitLab CEEE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances.

CVE-2024-6323 - High
Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a public project.

CVE-2024-4901 - High
An issue was discovered in GitLab CEEE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, where a stored XSS vulnerability could be imported from a project with malicious commit notes.

CVE-2024-1816 - Medium
An issue was discovered in GitLab CEEE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows for an attacker to cause a denial of service using a crafted OpenAPI file.

CVE-2024-2191 - Medium
An issue was discovered in GitLab CEEE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.

CVE-2024-3959 - Medium
An issue was discovered in GitLab CEEE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.

CVE-2024-4557 - Medium
Multiple Denial of Service DoS conditions has been discovered in GitLab CEEE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline.

CVE-2024-5430 - Medium
An issue was discovered in GitLab CEEE affecting all versions starting from 16.10 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows a project maintainer can delete the merge request approval policy via graphQL.

CVE-2024-4011 - Low
An issue was discovered in GitLab CEEE affecting all versions starting from 16.1 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows nonproject member to promote key results to objectives.

Technical Key Findings

• Run pipelines as any user: A critical vulnerability (CVSS 9.6) enabling attackers to trigger pipelines under another user's identity.
• Stored XSS in commit notes: High severity vulnerability (CVSS 8.7) allowing XSS injection through imported project commit notes.
• CSRF on GraphQL API: High severity issue (CVSS 8.1) permitting unauthorized GraphQL mutations via CSRF attacks.

Vulnerable Products

• GitLab CE/EE versions from 15.8 to 16.11.4, 17.0 to 17.0.2, and 17.1 to 17.1.0.

Impact Assessment

Exploiting these vulnerabilities can lead to unauthorized code execution, sensitive data exposure, and potential takeover of GitLab instances.

• Run pipelines as any user: This vulnerability enables attackers to execute code and perform actions on behalf of other users without authorization. It bypasses standard access controls, allowing malicious actors to manipulate the CI/CD pipeline as if they were legitimate users. This could lead to unauthorized changes in the codebase, deployment of malicious software, or alteration of critical infrastructure configurations.
• Stored XSS in commit notes: Stored XSS vulnerabilities persist in the application until explicitly removed, with malicious scripts injected into commit notes that can affect every user viewing these notes. The wide attack surface includes multiple users such as developers and project managers, increasing the risk as each view can trigger the malicious script.
• CSRF on GraphQL API: This vulnerability is easy to exploit and has a wide-ranging impact on system confidentiality and integrity, affecting multiple users and components due to the extensive use of GraphQL APIs in GitLab.## Patches or WorkaroundImmediate upgrade to the patched versions 17.1.1, 17.0.3, or 16.11.5 is strongly recommended. Details on upgrading can be found on the GitLab update page.

Tags

#GitLab #CVE-2024-5655 #CWE-284 #CWE-79 #CWE-352 #SecurityPatch #Vulnerability #DevOps #CI/CD

PoC released for Critical Privilege Escalation Vulnerability in Linux Kernel

Date: June 5, 2024

CVE: CVE-2023-3390

Vulnerability Type: Use-After-Free

CWE: [[CWE-416]]

Sources: SSD-disclosure NVD, Debian Security Tracker, Snyk

Synopsis

A PoC Exploit has been released for Linux Kernel use-after-free vulnerability, identified as CVE-2023-3390, has been discovered in the Linux kernel's netfilter subsystem. This flaw, present in the nf_tables_api.c file, can allow a local attacker with the ability to execute low-privileged code on the target system to escalate privileges due to mishandled error handling. The vulnerability has been patched.

Issue Summary

CVE-2023-3390 is a critical vulnerability found in the Linux kernel's netfilter subsystem. The issue arises from a use-after-free error in the NFT_MSG_NEWRULE handling, potentially allowing attackers to exploit a dangling pointer within the same transaction. This flaw enables local attackers to gain elevated privileges on affected systems.

Technical Key Findings

The root cause of CVE-2023-3390, a critical privilege escalation vulnerability in the Linux kernel, lies in the improper management of integer values within the nft_parse_register_store function of the Netfilter subsystem. Specifically, this vulnerability is due to an integer overflow issue within the nft_validate_register_store function, which fails to correctly handle certain large values for register indices.

The CVE-2023-3390 vulnerability arises from an integer overflow in the validation logic of the Netfilter subsystem, which fails to properly handle large register values, allowing an attacker to perform out-of-bounds writes to kernel memory. This leads to potential privilege escalation, compromising the affected system. It is crucial to apply patches that correct this validation flaw to mitigate the risk.

For details, see the detailed root cause analysis at SSD Secure Disclosure

Vulnerable Products

The vulnerability affects Debian 11 (Linux Kernel 5.10)

Impact Assessment

Exploiting this vulnerability allows a local attacker to gain root access, which can lead to severe consequences such as system compromise, data breaches, and service disruptions.

Patches or Workaround

Patches for CVE-2023-3390 have been released. Administrators are advised to update their Linux kernel to versions that include the commit 1240eb93f0616b21c675416516ff3d74798fdc97.  an updated kernel in July 2023: https://tracker.debian.org/news/1449040/accepted-linux-510179-3-source-into-oldstable-security

Tags

#CVE-2023-3390 #LinuxKernel #PrivilegeEscalation #UseAfterFree #Netfilter #SecurityPatch #Debian #AlmaLinux #Ubuntu2404

Check Point Vulnerability Report: CVE-2024-24919

Date: May 29, 2024

CVE: CVE-2024-24919

Vulnerability Type: Exposure of Sensitive Information to an Unauthorized Actor

CWE: [[CWE-22]], [[CWE-425]]

Sources: Check Point, [Tenable](CVE-2024-24919 | Tenable®) Tenable Blog

Synopsis

A critical vulnerability (CVE-2024-24919) has been identified in Check Point's CloudGuard Network Security appliance, allowing unauthorized actors to access sensitive information.

Issue Summary

The vulnerability, categorized as an 'Exposure of Sensitive Information to an Unauthorized Actor,' affects Check Point's CloudGuard Network Security appliances. Attackers can exploit this vulnerability to read sensitive information from gateways connected to the Internet and enabled with Remote Access VPN or Mobile Access. The flaw is actively exploited in the wild, making it a high-priority issue for administrators.

Technical Key Findings

The vulnerability arises from a path traversal issue in the appliance's handling of certain HTTP requests. Attackers can manipulate the request paths to access files on the device, bypassing standard access controls. The exploit involves sending crafted HTTP requests to the vulnerable endpoint, allowing unauthorized file reads.

Vulnerable Products

• Check Point CloudGuard Network Security appliances with Remote Access VPN or Mobile Access enabled.

Impact Assessment

Exploiting this vulnerability can lead to unauthorized access to sensitive information, such as configuration files and password hashes. This could potentially escalate to full system compromise if critical files are accessed and misused.

Patches or Workaround

Check Point has released a hotfix to address this vulnerability. Administrators are urged to apply the patch immediately. The company also recommends placing the vulnerable gateway behind another security gateway with IPS and SSL inspection enabled as a temporary mitigation.

Tags

#CheckPoint #CVE-2024-24919 #InformationDisclosure #PathTraversal #NetworkSecurity #CloudGuard #SecurityPatch #VulnerabilityManagement #threatintelligence