SysAdmin 24x7

Users Warned Against Unofficial Sites Pushing Notepad2 Adware Bundles http://www.ehackingnews.com/2018/11/users-warned-against-unofficial-sites.html

Cisco Releases Security Updates Cisco has released security updates to address vulnerabilities affecting Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. https://www.us-cert.gov/ncas/current-activity/2018/11/07/Cisco-Releases-Security-Updates

Cómo configurar de forma segura los dispositivos móviles #iPhone (#iOS11.x y #IOS12.x). Nuevas guías CCN-STIC-455C y CCN-STIC-455D, disponibles en la parte pública del portal del @CCNCERT. https://www.ccn-cert.cni.es/comunicacion-eventos/comunicados-ccn-cert/7175-guias-practicas-de-seguridad-en-dispositivos-moviles-iphone-ios-11-x-y-ios-12-x.html

Unpatched VirtualBox Zero-Day Vulnerability and Exploit Released Online https://thehackernews.com/2018/11/virtualbox-zero-day-exploit.html

Inyección CSV en IBM API Connect Fecha de publicación: 07/11/2018 Importancia: 4 - Alta Recursos afectados:  IBM API Connect desde la versión 5.0.0.0 hasta la 5.0.8.4 y desde la versión 2018.1 hasta la 2018.3.6 Descripción:  IBM ha publicado una vulnerabilidad de tipo inyección de CSV en sus productos IBM API Connect. https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/inyeccion-csv-ibm-api-connect

Isip - Interactive Sip Toolkit For Packet Manipulations, Sniffing, Man In The Middle Attacks, Fuzzing, Simulating Of Dos Attacks #infosec #hacking #hackers #pentesting #pentest #programming #github #OpenSource https://github.com/halit/isip

Udp2raw-tunnel A Tunnel which turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket, helps you Bypass UDP FireWalls(or Unstable UDP Environment). It can defend Replay-Attack and supports Multiplexing. It also acts as a Connection Stabilizer. https://github.com/wangyu-/udp2raw-tunnel/blob/master/README.md

RHSA-2018:3462: Moderate: Red Hat Security Advisory: [ansible] security and bug fix update https://access.redhat.com/errata/RHSA-2018:3462

The SonicWall Security Center provides a live threat map, actional data from our threat meters and the latest #cybersecurity news, trends, and analysis. #threatmap #cyberattacks #malware #ransomware https://securitycenter.sonicwall.com/m/page/worldwide-attacks

Tsurugi: Linux para investigaciones de DFIR https://www.hackplayers.com/2018/11/tsurugi-linux-nueva-distro-de-dfir.html

Paquetes maliciosos en el repositorio de python PyPI https://unaaldia.hispasec.com/2018/11/paquetes-maliciosos-en-el-repositorio-de-python-pypi.html

Las APTs de habla rusa Turla y Sofacy comparten forma de entrega y coinciden en objetivos en Asia https://cybersecuritynews.es/las-apts-de-habla-rusa-turla-y-sofacy-comparten-forma-de-entrega-y-coinciden-en-objetivos-en-asia/

Amazon services explained by comics. #resources #tutorial #aws #devops @thedevs https://kutt.it/9qrFhq

Vulnerabilidad DoS en Cisco ASA y Cisco FTD Fecha de publicación: 02/11/2018 Importancia: 4 - Alta Recursos afectados:  Versión 9.4 y posteriores del software Cisco ASA y versión 6.0 y posteriores del software Cisco FTD, cuando la inspección SIP está habilitada y el software se está ejecutando en cualquiera de los siguientes productos: 3000 Series Industrial Security Appliance (ISA). ASA 5500-X Series Next-Generation Firewalls. ASA Services Module para Cisco Catalyst 6500 Series Switches y Cisco 7600 Series Routers. Adaptive Security Virtual Appliance (ASAv). Firepower 2100 Series Security Appliance. Firepower 4100 Series Security Appliance. Firepower 9300 ASA Security Module. FTD Virtual (FTDv). https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/vulnerabilidad-dos-cisco-asa-y-cisco-ftd

Intel CPUs impacted by new PortSmash side-channel vulnerability Vulnerability confirmed on Skylake and Kaby Lake CPU series. Researchers suspect AMD processors are also impacted. https://www.zdnet.com/article/intel-cpus-impacted-by-new-portsmash-side-channel-vulnerability/

Mozilla Releases Security Update for Thunderbird ESR https://www.us-cert.gov/ncas/current-activity/2018/10/31/Mozilla-Releases-Security-Update-Thunderbird-ESR

Windows Defender Bug Needs a Restart, Not Shutdown, To Enable Sandbox https://www.bleepingcomputer.com/news/security/windows-defender-bug-needs-a-restart-not-shutdown-to-enable-sandbox/

BleedingBit — Two New Critical #Bluetooth Chip RCE Vulnerabilities (CVE-2018-16986 and CVE-2018-7080) Expose Millions of BLE-Enabled Enterprise Networking Devices to Remote Attacks https://t.co/RRxJ6uNMK9 Cisco, Meraki and Aruba Release Patches for Their Vulnerable Products https://thehackernews.com/2018/11/bluetooth-chip-hacking.html