THE JDNEER
  • Home
  • Guides
  • Projects
  • Cybersec
OVHcloud CLI Releases Were Swapped for a Secret-Stealing Build for 94 Minutes
Security

OVHcloud CLI Releases Were Swapped for a Secret-Stealing Build for 94 Minutes

Attackers used a hijacked developer account to replace OVHcloud CLI v0.11.0 to v0.15.0 binaries on GitHub with a secret-stealing build on October 19. If you installed or updated in that window, rotate every secret on the machine and move to v0.16.0.
Read more
Aiko Tanaka
China Mobile Hong Kong Lights Up the City's First Upper 6GHz Network in Mong Kok
telecom

China Mobile Hong Kong Lights Up the City's First Upper 6GHz Network in Mong Kok

China Mobile Hong Kong says it has completed testing of Hong Kong's first U6G network at its Mong Kok store, using 100MHz of upper 6GHz spectrum bought in 2024. It claims 3Gbps with carrier aggregation. Here is what is known and what is not.
Read more
Aiko Tanaka
Attackers Used ConnectWise Cloud Backup App Identities to Get Into Microsoft 365 Tenants
Security

Attackers Used ConnectWise Cloud Backup App Identities to Get Into Microsoft 365 Tenants

Attackers abused application identities from ConnectWise Cloud Backup, formerly SkyKick, to sign in to customer Microsoft 365 tenants. ConnectWise has suspended the service. MSPs need to disable the apps in every tenant and hunt for added credentials.
Read more
Aiko Tanaka
PwnEscape (CVE-2026-99999): A Linux IPv4 Stack Bug Lets a VM Escape to Its Host
cybersecurity

PwnEscape (CVE-2026-99999): A Linux IPv4 Stack Bug Lets a VM Escape to Its Host

PwnEscape (CVE-2026-99999) is a critical bug in the Linux host's IPv4 stack, not KVM, that lets a guest VM read host memory, crash the host and, in the lab, run code on it. Proxmox, Debian and Fedora have fixes, but they only help after a reboot.
Read more
Aiko Tanaka
PEERSTITCH: How One Hacked FortiManager Exposed 500 Firewalls at a Telco MSP
cybersecurity

PEERSTITCH: How One Hacked FortiManager Exposed 500 Firewalls at a Telco MSP

Attackers broke into a telco MSP's FortiManager through CVE-2024-47575, stole configs and keys for 500+ FortiGates, then used a FortiOS path traversal flaw to plant PEERSTITCH, a memory-only implant. Here is what happened, what to patch, and how to hunt for it.
Read more
Aiko Tanaka
AWS Will Cut Its European Sovereign Cloud Off From the Global Backbone for Several Hours on Saturday
cloud

AWS Will Cut Its European Sovereign Cloud Off From the Global Backbone for Several Hours on Saturday

On Saturday, October 24, AWS plans to run its European Sovereign Cloud for several hours without the AWS Global Network backbone, using only EU internet providers. Here is what AWS says will happen, and what customers may notice.
Read more
Aiko Tanaka
The Leap Second Is Being Retired. UTC Goes Continuous on May 20, 2027
news

The Leap Second Is Being Retired. UTC Goes Continuous on May 20, 2027

The world's timekeepers voted to stop adding leap seconds to UTC from May 20, 2027, letting clocks drift up to an hour from Earth's rotation. The goal is to avoid a first negative leap second, a risk for networks, GPS-timed systems and servers.
Read more
Aiko Tanaka
Supreme Court E-Notarization Goes Live Today: What Filipinos Need to Know
news

Supreme Court E-Notarization Goes Live Today: What Filipinos Need to Know

Electronic notarization goes live today, October 19. Accredited electronic notaries can now notarize documents for clients anywhere in the Philippines. Here is what the Supreme Court's rules cover, what is excluded, how identity checks work, and who offers it.
Read more
Aiko Tanaka
Attackers Are Exploiting a SiteGuard WAF Bug to Run Commands as Root or SYSTEM
Security

Attackers Are Exploiting a SiteGuard WAF Bug to Run Commands as Root or SYSTEM

A command injection flaw in SiteGuard Server Edition's statistics feature, on by default, is being exploited to run commands as root or SYSTEM. EG Secure Solutions has fixes and a patch. Save diagnostic data before you update, or attack traces may be lost.
Read more
Aiko Tanaka
CXMT's DDR5 Is Fast and Scaling Fast, but a RAM Flood Is Not Here Yet
hardware

CXMT's DDR5 Is Fast and Scaling Fast, but a RAM Flood Is Not Here Yet

A viral clip says Chinese DDR5 is about to flood the market. CXMT's speed results are real but date from July, and its capacity is growing fast. TrendForce still sees DRAM contract prices rising 10 to 15% in Q4 2026, so cheaper RAM is not here yet.
Read more
Aiko Tanaka
The Volunteer-Built BetterGov.PH Is Becoming the Official Gov.PH Portal, and Its Code Will Be Open
philippines

The Volunteer-Built BetterGov.PH Is Becoming the Official Gov.PH Portal, and Its Code Will Be Open

DICT and the BetterGov.PH volunteer network will co-develop the official Gov.PH portal, with the codebase opening on GitHub for public contributions. eGov platform version 2 is due November 9. Here is what was announced and what developers can do now.
Read more
Aiko Tanaka
New DICT Secretary de Claro Takes Office, Vows Cheaper Internet and Faster ISP Licensing
philippines

New DICT Secretary de Claro Takes Office, Vows Cheaper Internet and Faster ISP Licensing

Robert Joseph de Claro formally took over the DICT from Henry Aguda on October 19 and used his first flag ceremony to promise lower internet prices, better telco service, and less red tape in licensing internet service providers.
Read more
Aiko Tanaka
THE JDNEER © 2026
  • Consulting
  • My Software
Powered by Ghost