KasTas

joined 1 year ago
MODERATOR OF
saugumas
sorted by: new top controversial old
4
New Ubuntu Linux security bypasses require manual mitigations (www.bleepingcomputer.com)
3
Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China (gfw.report)
Clone2Leak: Your Git Credentials Belong To Us in c/saugumas@group.lt
[–] KasTas@group.lt 1 points 4 months ago

So, cloning a malicious repository on GitHub Codespaces using GitHub CLI will always leak the access token to the attacker’s hosts.

baha

1
Clone2Leak: Your Git Credentials Belong To Us (flatt.tech)
7
Remote code execution on public RSync <3.4.0 servers (www.bleepingcomputer.com)
15
OpenWRT ditches opkg, goes apk (Alpine) (forum.openwrt.org)
6
PyPI now supports digital attestations - The Python Package Index Blog (blog.pypi.org)
Gedimas be interneto paliko 120 įstaigų: rizikas prognozavo, bet plano B nebuvo in c/bofh@group.lt
[–] KasTas@group.lt 3 points 6 months ago

Kas turbūt su lietuviškaisiais incidentais labiausiai ir erzina... normalus postmortemas būtų naudingas visiems. O "viskas gerai, sutvarkėm" - tik subinės dangstymas lapais :(

Blemba, kuičiau BGP istoriją, tai lyg ir nieko įdomesnio, kaip kažkoks dingęs subnetas, nesugebėjau rasti.

4
Windows infected with backdoored Linux VMs in new phishing attacks (www.bleepingcomputer.com)
 

Laughed my ass off:

"Since QEMU is a legitimate tool that is also digitally signed, Windows does not raise any alarms about it running, and security tools cannot scrutinize what malicious programs are running inside the virtual machine."

3
Gedimas be interneto paliko 120 įstaigų: rizikas prognozavo, bet plano B nebuvo (www.lrt.lt)
 

Tai užpylė serverinę priešgaisriniai čiaupai ar ne? :}

7
Attacking UNIX Systems via CUPS, Part I (www.evilsocket.net)
1
US following EU lead: financial institutions have 30 days to disclose breaches under new rules (arstechnica.com)
1
BreachForums, a key English-language cybercrime forum, seized by the FBI (cyberscoop.com)
1
Novel attack against virtually all VPN apps neuters their entire purpose (arstechnica.com)
view more: next ›