Intel proposes Linux to add driver filtering function
According to the mailing list, Intel engineers proposed to add a filter to Linux drivers so that they can set a list of drivers that are allowed or denied to be loaded by the...
Author: Nam Phong
Google launched a new bug bounty platform, unified management of Android, Chrome, and other reward programs
As early as 2010, Google launched the Vulnerability Rewards Programs (VRP), security researchers can directly submit the discovered vulnerabilities to Google. After obtaining the vulnerability report, Google will review the vulnerability report and issue...
Kaseya obtained a decryptor for victims of the REvil ransomware attack
At the beginning of last month, McDonald’s, a world-renowned fast-food brand, issued a statement saying it was attacked by hackers. Hackers stole part of McDonald’s data in the United States, South Korea, and Taiwan,...
Kaspersky found malicious software pretending to be Windows 11 upgrade program
Although Microsoft has announced the Windows 11 system, the official version of this system has not yet been released. Currently, Microsoft is only testing for users participating in the Insider Preview program. Of course,...
CVE-2021-36934: Windows Elevation of Privilege Vulnerability Alert
Recently, Microsoft has issued a risk notice for Windows privilege escalation vulnerability, the vulnerability number is CVE-2021-36934 with the CVSS score of 7.8. Currently, there is no official patch for this vulnerability. An attacker...
CVE-2021-33909: Linux kernel local privilege escalation vulnerability alert
On July 21, 2021, RedHat officially released a risk notice for the Linux kernel local privilege escalation vulnerability, the vulnerability number is CVE-2021-33909. This vulnerability is a type conversion vulnerability in the Linux kernel...
CVE-2021-32761: Redis remote code execution vulnerability alert
On July 21, 2021, Redis officially issued a risk notice for Redis remote code execution vulnerabilities, the vulnerability number is CVE-2021-32761 with the CVSS score of 7.5. Redis is an in-memory database that persists...
CVE-2021-32589: FortiManager & FortiAnalyzer UAF Vulnerability
On July 19, 2021, Fortinet officially released a risk notice for FortiManager & FortiAnalyzer UAF remote code execution, the vulnerability number is CVE-2021-32589 with the CVSSv3 Score of 7.5. FortiManager and FortiAnalyzer can achieve...
Microsoft released its own Linux distribution CBL-Mariner
Recently, Microsoft quietly put its Linux distribution CBL-Mariner on GitHub, which is a product developed by the Windows Subsystem Linux 2 team, mainly used for servers rather than desktops, to build its cloud infrastructure...
CVE-2021-34466: Windows Hello Security Feature Bypass Vulnerability
Microsoft’s Windows Hello biometric verification is considered to have high security, such as infrared cameras and fingerprint recognition are usually not easy to forge. Passing infrared camera certification usually requires a living body test,...
Researcher publishes PoC for CVE-2021-22555 Linux Netfilter Local Privilege Escalation Flaw
On July 14, 2021, security researcher @theflow published an analysis report on the CVE-2021-22555 Linux Netfilter privilege escalation vulnerability. This vulnerability was used in kCTF to attack the kubernetes pod container to achieve virtualization...
Linux has canceled support for IDE drivers in the 5.14 kernel version
For younger computer players, it is estimated that there is not much idea about the IDE interface. Parallel ATA hard drives have also disappeared in the mainstream market for a long time. The PATA...
