Read Time:8 Second
FEDORA-2024-8b08786765
Packages in this update:
suricata-7.0.7-1.fc40
Update description:
Various security, performance, accuracy, and stability issues have been fixed.
Daily Archives: October 14, 2024
suricata-7.0.7-1.fc41
Read Time:8 Second
FEDORA-2024-b5da13e80a
Packages in this update:
suricata-7.0.7-1.fc41
Update description:
Various security, performance, accuracy, and stability issues have been fixed.
Multiple Vulnerabilities in Palo Alto Network’s Expedition Could Allow for Arbitrary Code Execution
Read Time:27 Second
Multiple Vulnerabilities in Palo Alto Network’s Expedition have been discovered, the most severe of which could allow for arbitrary code execution on Palo Alto Firewalls. Palo Alto Network’s Expedition is a migration tool designed to help organizations move configurations from other firewall platforms to Palo Alto’s PAN-OS. Successful exploitation of these vulnerabilities could allow for arbitrary code execution in the context of the root user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data.
Upcoming Speaking Engagements
Read Time:17 Second
This is a current list of where and when I am scheduled to speak:
I’m speaking at SOSS Fusion 2024 in Atlanta, Georgia, USA. The event will be held on October 22 and 23, 2024, and my talk is at 9:15 AM ET on October 22, 2024.
The list is maintained on this page.
Telekopye Scammers Target Booking.com and Airbnb Users
Read Time:5 Second
Online scammers are targeting Booking.com and Airbnb users with Telekopye, a Telegram-based toolkit
USN-7040-2: ConfigObj vulnerability
Read Time:15 Second
USN-7040-1 fixed a vulnerability in ConfigObj. This update
provides the corresponding update for Ubuntu 14.04 LTS.
Original advisory details:
It was discovered that ConfigObj contains regex that is susceptible to
catastrophic backtracking. An attacker could possibly use this issue to
cause a regular expression denial of service.
USN-7014-3: nginx vulnerability
Read Time:20 Second
USN-7014-1 fixed a vulnerability in nginx. This update
provides the corresponding update for Ubuntu 14.04 LTS.
Original advisory details:
It was discovered that the nginx ngx_http_mp4 module incorrectly handled
certain malformed mp4 files. In environments where the mp4 directive is in
use, a remote attacker could possibly use this issue to cause nginx to
crash, resulting in a denial of service.
CISA Urges Encryption of Cookies in F5 BIG-IP Systems
Read Time:5 Second
CISA urged organizations to tackle security risks from unencrypted cookies in F5 BIG-IP LTM systems
USN-6968-3: PostgreSQL vulnerability
Read Time:20 Second
USN-6968-1 fixed CVE-2024-7348 in PostgreSQL-12, PostgreSQL-14, and
PostgreSQL-16.
This update provides the corresponding updates for PostgreSQL-9.3 in
Ubuntu 14.04 LTS and PostgreSQL-10 in Ubuntu 18.04 LTS.
Original advisory details:
Noah Misch discovered that PostgreSQL incorrectly handled certain
SQL objects. An attacker could possibly use this issue to execute
arbitrary SQL functions as the superuser.
US DoD Tightens Cybersecurity Standards for Defense Contractors
Read Time:7 Second
The US DoD has finalized the Cybersecurity Maturity Model Certification (CMMC) Program, which defense contractors must pass to bid for government contracts