More Military Cryptanalytics, Part III

Late last year, the NSA declassified and released a redacted version of Lambros D. Callimahoss Military Cryptanalytics, Part III. We just got most of the index. Its hard to believe that there are any real secrets left in this 44-year-old volume...

5 high-profile DDoS attacks that should chill you to the bone

Distributed denial of service DDoS attacks are malicious attempts to make an online service unavailable to users, usually by temporarily interrupting or suspending the services of its hosting server. Data revealed in the 2021 DDoS Threat Landscape Report strongly suggests attacks are constantly...

macOS 11’s hidden security improvements

A deep dive into macOS 11s internals reveals some security surprises that deserve to be more widely known. Contents 1. Introduction 1. Disclaimers 2. macOS 11s better known security improvements 1. Secret messages revealed? 3. CPU security mitigation APIs 1. The NOSMT mitigation 2. The TECS...

August 10, 2021—KB5005094 (Security-only update)

None None...

August 10, 2021—KB5005099 (Monthly Rollup)

None None...

August 10, 2021—KB5005076 (Monthly Rollup)

None None...

August 10, 2021—KB5005106 (Security-only update)

None None...

mdadm bug fix and enhancement update

An update is available for mdadm. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mdadm packages contain a utility for creating, managing, and monitoring Lin...

mdadm bug fix and enhancement update

The mdadm packages contain a utility for creating, managing, and monitoring Linux multiple disk MD devices. Bug Fixes and Enhancements: FJ8.2 Bug: RAID volume status is not updated when multiple drives fail. BZ1965414...

Congratulations to the MSRC 2021 Most Valuable Security Researchers!

The MSRC Researcher Recognition Program offers public thanks and acknowledgement to the researchers who help protect customers through discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure. Today, we are excited to recognize this year’s Most Valuable Security...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Container Platform for Windows Containers 3.0.0 security and bug fix update

The components for Red Hat OpenShift Container Platform for Windows Containers 3.0.0 are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug

A privilege escalation bug, affecting versions of Windows 10, received a workaround fix by Microsoft Wednesday to prevent attackers from accessing data and creating new accounts on compromised systems. The bug, dubbed SeriousSAM, affects the Security Accounts Manager SAM database in all versions ...

Exploit for CVE-2021-36934

Invoke-HiveNightmare PowerShell-based PoC for CVE-2021-36934,...

Windows SAM secrets leak - HiveNightmare

Due to mismanagement of SAM and SYSTEM hives in Windows 10, it is possible for an unprivileged user to read those files. But, as they are locked while Windows is running we are not able to read them directly. The trick is to take advantage of Volume Shadow Copy, which is generally enabled, to...

PT-2023-3545 · Podman +6 · Podman +6

Name of the Vulnerable Software and Affected Versions: podman affected versions not specified Description: A Time-of-check Time-of-use TOCTOU flaw was found in podman, which may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume. This could allow...

July 13, 2021—KB5004285 (Security-only update)

None None...

July 13, 2021—KB5004307 (Security-only update)

None None...

July 13, 2021—KB5004298 (Monthly Rollup)

None None...

July 13, 2021—KB5004294 (Monthly Rollup)

None None...

Helpful iSCSI Commands

This article contains helpful iSCSI commands. Requirements CLI access to hosts iSCSI storage connections Discover available targets from a discovery portal: iscsiadm -m discovery -t sendtargets -p ipaddress Login to all targets: iscsiadm -m node -l Log into a specific target: iscsiadm -m node -T...