JD Bungart - THE JDNEER (Page 5)

cyberbreach

Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-32154 is an out-of-bounds write in MikroTik RouterOS's RADVD that allows remote code execution. It was exploited at Pwn2Own Toronto, but MikroTik says it only learned of it in May 2023 and patched it about five months later.

cyberweapons

[TheHackerNews] Predator Android Spyware: Researchers Uncover New Data Theft Capabilities

Security researchers analyze Predator, an Android spyware marketed by Intellexa. It exploits zero-day flaws, records audio, collects messages, and poses a threat to privacy. Similar spyware like Pegasus is increasingly abused, impacting civil society.

cyberbreach

[US-CISA] CISA and Partners Release Cybersecurity Advisory Guidance detailing PRC state-sponsored actors evading detection by “Living off the Land”

Today, CISA joined the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), and international partners in releasing a joint cybersecurity advisory highlighting recently discovered activities conducted by a People’s Republic of China (PRC) state-sponsored cyber threat actor.

mikrotik

RouterOS v7.10rc1: BFD's Return and New MPLS Fast Reroute (FRR) Support!

After a lengthy break, MikroTik is bringing BFD support back! With Bidirectional Forwarding Detection (BFD), users are empowered to rapidly detect faults between two forwarding engines. It's a robust tool to swiftly pinpoint network failures and initiate quick recovery.

technews

EVE-NG PE v103: Enhanced Security, Improved Performance, and Expanded Support

EVE-NG Professional Edition v103 tightens Docker node security, adds CPU affinity settings to isolate system and lab node CPUs, adds deletion protection for locked labs, and brings partial support for Juniper vEX switches when EVE-NG runs under VMware. It also improves lab display and indexing.

technews

[SecurityWeek] Google Now Lets US Users Search Dark Web for Their Gmail ID

Google announced at Google I/O that Gmail users in the US can now run scans to check whether their Gmail address appears on the dark web. SecurityWeek covers the new feature, which helps users find out if their accounts have shown up in leaked or traded data.

cyberbreach

[Security Intelligence] ChatGPT Confirms Data Breach, Raising Security Concerns

The data leakage in ChatGPT was addressed swiftly with apparently little damage, with impacted paying subscribers making up less than 1% of its users. However, the incident could be a harbinger of the risks that could impact chatbots and users in the future.

mikrotik

RouterOS 7.9 [Stable] released!

RouterOS 7.9 improves performance and stability with enhanced BGP VPN selection, new console features, expanded IPv6 functionality, OVPN configuration import/export, better Wifiwave2 performance, and bug fixes.

vyos

[VyOS] Project April 2023 update

VyOS 1.4 is on the way to becoming the new LTS release. There is no set date for its freeze yet but we expect to do it within this year. We are incredibly proud that our rolling release is already almost free of legacy code.

technews

[Lawrence Systems] 2023 Firewall Features Compared: pfsense | Arista | UniFi | Sophos | Fortinet | Meraki & What We Use

Lawrence Systems compares 2023 firewall features across pfSense, Arista, UniFi, Sophos, Fortinet, and Meraki, and shares which one they use themselves.

cyberweapons

[SentinelOne] Dissecting AlienFox | The Cloud Spammer’s Swiss Army Knife

SentinelLabs analyzes AlienFox, a modular toolkit that attackers share on Telegram and GitHub to harvest API keys and secrets from cloud services such as AWS SES and Microsoft Office 365. The full report includes indicators of compromise, YARA rules, and defensive recommendations.

proxmox

Proxmox Backup Server 2.4 is available!

Proxmox Backup Server 2.4 is available. It's based on Debian 11.6 Bullseye with a choice of Linux kernel 5.15 or 6.2, and it includes ZFS 2.1.9. New features include a dark mode, an LDAP authentication realm with user synchronization, and support for WORM tapes.