SysAdmin 24x7

Distrust of the Symantec PKI: Immediate action needed by site operators https://security.googleblog.com/2018/03/distrust-of-symantec-pki-immediate.html

System Hardening Guide Installing extra software or running extra services creates unnecessary vulnerabilities https://n0where.net/system-hardening-guide#collapse_41_1644444542

Tactical Exploitation: WarBerryPi https://n0where.net/tactical-exploitation-warberrypi

Open Source Firewall: OPNsense https://n0where.net/open-source-firewall-opnsense

Linux privilege escalation auditing tool https://github.com/mzet-/linux-exploit-suggester

For 7 days Russia has been trying to ban Telegram on its territory – with no luck so far. I’m thrilled we were able to survive under the most aggressive attempt of internet censorship in Russian history with almost 18 million IP addresses blocked. If you live in Russia and support free internet, fly a paper plane from your window at 7 PM local time today. Please collect the airplanes in your neighborhood an hour later – remember, today is Earth Day. My thanks to all the members of the #DigitalResistance movement. Keep up your great work setting up socks5-proxies and VPNs and spreading them among your Russian friends and relatives. They will be needed as the country descends into an era of full-scale internet censorship.

Vulnerabilidad en la función autocompletar de LinkedIn podría poner en peligro los datos de los usuarios http://unaaldia.hispasec.com/2018/04/vulnerabilidad-en-la-funcion.html

Over 2 Million Users Installed Malicious Ad Blockers From Chrome Store https://thehackernews.com/2018/04/adblocker-chrome-extention.html

Vulnerabilidad en proxy inverso Squid Fecha de publicación: 20/04/2018 Importancia: 4 - Alta Descripción:  Michael Marshall de Trend Micro ha reportado una vulnerabilidad en varias versiones de Squid cuando se usa la funcionalidad de proxy inverso y que podría permitir a un atacante causar una condición de denegación del servicio debido a un manejo incorrecto de puntero cuando se procesan respuestas ESI. https://www.certsi.es/alerta-temprana/avisos-seguridad/vulnerabilidad-proxy-inverso-squid

Fallo de seguridad CRÍTICO sin parchear en dispositivos de almacenamiento LG http://unaaldia.hispasec.com/2018/04/fallo-de-seguridad-critico-sin-parchear.html

Vulnerabilidad de Cross Site Scripting en Drupal core Fecha de publicación: 19/04/2018 Importancia: 3 - Media Recursos afectados:  Drupal 8 versiones anteriores a 8.5.2 o 8.4.7. Drupal 7 si se instaló CKEditor empleando un método distinto a CDN y si este utiliza una versión de CKEditor desde la 4.5.11 hasta la 4.9.1. Descripción:  El equipo de desarrollo de CKEditor ha detectado una vulnerabilidad de tipo cross site scripting de criticidad media en su editor de texto. https://www.certsi.es/alerta-temprana/avisos-seguridad/vulnerabilidad-cross-site-scripting-drupal-core

iOS Trustjacking Attack Exposes iPhones to Remote Hacking Symantec researchers have found a loophole in how iPhone users pair devices with Mac workstations and laptops. They say attackers can exploit this flaw —which they named Trustjacking— to take over devices without the phone owner's knowledge. https://www.bleepingcomputer.com/news/security/ios-trustjacking-attack-exposes-iphones-to-remote-hacking/

APRENDE COMO FUNCIONA EL ALGORITMO DE FACEBOOK, TWITTER, INSTAGRAM, LINKEDIN Y PINTEREST https://quetepalicuernas.com/aprende-como-funciona-el-algoritmo-de-facebook-twitter-instagram-linkedin-y-pinterest/

Recuperando las contraseñas de las wifi a las que nos hemos conectado – NETSH https://aprendizdesysadmin.com/recuperando-las-contrasenas-de-las-wifi-a-las-que-nos-hemos-conectado-netsh/

Usos de honeytokens en seguridad informática II http://www.gurudelainformatica.es/2018/04/usos-de-honeytokens-en-seguridad.html

WPA3 EL NUEVO CIFRADO WIRELESS PARA EL 2018 https://blog.underc0de.org/wpa3-el-nuevo-cifrado-wireless-para-el-2018/

VirtualBox Images https://www.osboxes.org/virtualbox-images/

Download virtual machines Test Microsoft Edge and versions of IE8 through IE11 using free virtual machines you download and manage locally. https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/

Aircrack-ng 1.2 Aircrack-ng is a complete suite of tools to assess WiFi network security. http://aircrack-ng.org/