Blog
Security, networks and the occasional questionable decision, mostly with the Philippines in view.
[RockyLinux] Rocky Linux Expresses Confidence Despite Red Hat's Announcement
Rocky Linux, a prominent community-driven open-source distribution of Enterprise Linux (EL), remains confident in its ability to continue as a bug-for-bug compatible and freely available alternative to Red Hat Enterprise Linux (RHEL), despite changes in accessibility
[AlmaLinux] Impact of RHEL changes to AlmaLinux
Yesterday, RedHat announced another massive shift that impacts all rebuilds and forks of Red Hat Enterprise Linux. Going forward, Red Hat will now only be releasing the source code for RHEL RPMs behind their customer portal.
[FOSS Post] Red Hat is Shooting Itself in the Foot, Again!
Red Hat announced that it would start locking the source code for RHEL packages behind a subscription paywall, making it very much harder to build derivative and RHEL-compatible distributions like Rocky Linux and others.
[TheHackerNews] Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari
Apple has released updates for iOS, iPadOS, macOS, watchOS, and Safari to fix a set of vulnerabilities it says were actively exploited in the wild. The Hacker News covers the zero-days and the affected platforms.
VyOS 1.3.3 LTS release
VyOS 1.3.3 (Equuleus) LTS release is now available for download to subscribers and contributors. Still, it's finally out, with significant feature backports, multiple minor improvements, and of course, bug fixes — read on for details!
[Microsoft] Response to Layer 7 Distributed Denial of Service (DDoS) Attacks
Beginning in early June 2023, Microsoft identified surges in traffic against some services that temporarily impacted availability. Microsoft promptly opened an investigation and subsequently began tracking ongoing DDoS activity by the threat actor that Microsoft tracks as Storm-1359.
[VulnCheck] Fake Security Researcher GitHub Repositories Deliver Malicious Implant
As part of VulnCheck’s Exploit Intelligence offering, we monitor and review large amounts of GitHub repositories. The review process exists to filter out useless, malicious, and/or scam repositories.
[SecurityWeek] Swiss Fear Government Data Stolen in Cyberattack
Switzerland says government operational data may have been stolen in a ransomware attack on a technology firm that supplies software to several federal departments. SecurityWeek reports on the incident.
Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2023-32154 is an out-of-bounds write in MikroTik RouterOS's RADVD that allows remote code execution. It was exploited at Pwn2Own Toronto, but MikroTik says it only learned of it in May 2023 and patched it about five months later.
[TheHackerNews] Predator Android Spyware: Researchers Uncover New Data Theft Capabilities
Security researchers analyze Predator, an Android spyware marketed by Intellexa. It exploits zero-day flaws, records audio, collects messages, and poses a threat to privacy. Similar spyware like Pegasus is increasingly abused, impacting civil society.
