Welcome back to yet another episode of "security was taken seriously". Being who we are (and constantly being exposed to what we see…), we recognize we have been doomed to eternal damnation as we keep on watching security best practices crumble behind “secure by design” public statements. And in the

Dropbear has a "kexguess2@matt.ucc.asn.au" key exchange "algorithm" which does not correspond to an actual algorithm (data field NULL, https://github.com/mkj/dropbear/blob/59870ad43153fe8d4f1c96f5d...

Sicherheitsforscher und Administratoren melden massenhafte Spontanreboots betroffener Geräte. Updates sind nun verfügbar und sollten schnell aufgespielt werden.

Security researchers and administrators are reporting massive spontaneous reboots of affected devices. Updates are available and should be applied ASAP.

Sicherheitsforscher und Administratoren melden massenhafte Spontanreboots betroffener Geräte. Diese waren auf dem neuesten Patchstand.

New: iPhones have an automatic reboot feature which quietly reboots the phone after a certain time; cops were freaking out about this when we revealed it in 2024. Now, phone hackers have a way around it, according to a leaked video https://www.404media.co/cops-can-bypass-iphone-automatic-inactivity-reboot-graykey/

Cybercriminals exploit a loophole in the login system for admin privileges. Admins should patch devices and take further action.

Angehängt: 1 Bild We are currently rapidly reacting to rumors that multiple unpatched Citrix NetScaler RCE vulnerabilities are circulating in the wild. While details are scarce, the limited information available is credible, and we are thus imploring organizations to take it seriously. Active watchTowr Platform clients have been made aware of their Citrix NetScaler exposure.

If I restarted blogging semi-regularly (and that's a big "if"), what would you like to read? [ ] News of the week type articles [ ] In-depth commentary on specific topics [ ] nerdy stuff that interests 12 ppl worldwide [ ] "Building my HA web server setup" type admin stuff

Just in case they get uncovered eventually

Sie richtet sich an Unternehmen, deren Produkte softwaregetrieben, vernetzt und sicherheitskritisch sind. Damit sind sie unmittelbar Teil der kritischen Infrastruktur.