SysAdmin 24x7

Windows Client Guidance for IT Pros to protect against speculative execution side-channel vulnerabilities https://support.microsoft.com/en-us/help/4073119/windows-client-guidance-for-it-pros-to-protect-against-speculative-exe

Aviso desde XEN Information leak via side effects of speculative execution https://xenbits.xen.org/xsa/advisory-254.html

PiKarma Python Script Helps You Identify Malicious WiFi Networks https://www.bleepingcomputer.com/news/security/pikarma-python-script-helps-you-identify-malicious-wifi-networks/

Today's CPU vulnerability: what you need to know [...These vulnerabilities affect many CPUs, including those from AMD, ARM, and Intel, as well as the devices and operating systems running on them...] https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html

Vulnerability Alert! 77% of #Android devices may allow remote screenshot and audio capture. Learn how to stay protected. #Cybersecurity #mobilesecurity https://blog.checkpoint.com/2017/11/30/77-android-devices-still-endanger-users-due-design-flaws/

Meltdown and Spectre Bugs in modern computers leak passwords and sensitive data. https://meltdownattack.com/

VMware Releases Security Updates https://www.us-cert.gov/ncas/current-activity/2018/01/02/VMware-Releases-Security-Updates

📺 ¡Nuevo vídeo! "Las novedades del Reglamento General de Protección de Datos" https://www.youtube.com/watch?v=ZDz9sVanMfg

ExplodingCan An implementation of ExplodingCan's exploit extracted from FuzzBunch, the "Metasploit" of the NSA. https://github.com/danigargu/explodingcan

Múltiples vulnerabilidades en productos con WPA y WPA2 de Cisco Fecha de publicación: 03/01/2018 Importancia: 3 - Media Recursos afectados:  El listado de productos Cisco afectados por una o más vulnerabilidades se han categorizado de la siguiente manera: Clientes punto final y Clientes software Routing y Switching - Empresa y proveedor de servicio Dispositivos de comunicaciones de voz y unificadas Wireless https://www.certsi.es/alerta-temprana/avisos-seguridad/multiples-vulnerabilidades-productos-wpa-y-wpa2-cisco

Escaping Docker container using waitid() – CVE-2017-5123 https://www.twistlock.com/2017/12/27/escaping-docker-container-using-waitid-cve-2017-5123/

'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign https://www.theregister.co.uk/AMP/2018/01/02/intel_cpu_design_flaw/

Publicada vulnerabilidad en macOS presente desde hace más de 15 años http://unaaldia.hispasec.com/2018/01/publicada-vulnerabilidad-en-macos.html

Security Vulnerabilities in Star Wars A fun video describing some of the many Federation security vulnerabilities in the first Star Wars movie. Happy New Year, everyone. https://vimeo.com/148946917

Hackers can remotely control thousands of Sonos and Bose speakers http://securityaffairs.co/wordpress/67292/hacking/hacking-speakers.html

IOHIDeous Siguza, 01. Dec 2017 (published 31. Dec 2017) IOHIDeous “IOHIDFamily once again.” Introduction This is the tale of a macOS-only vulnerability in IOHIDFamily that yields kernel r/w and can be exploited by any unprivileged user. https://siguza.github.io/IOHIDeous/

Desde Sysadmin24x7 os deseamos un FELIZ Y PRÓSPERO 2018

COMUNIDAD HIGHSEC Punto de encuentro para personas interesadas en ciberseguridad. Permitiéndonos aprender de forma teórica y sobre todo practica las principales técnicas de hacking y seguridad desde un punto de vista ofensivo y defensivo. http://highsec.es/