Author: Yuri Gagarin

Release of NGINX Unit Application Server 1.15.0

The release of NGINX Unit 1.15 is now available, which enhances the solution for running web applications in various programming languages (Python, PHP, Perl, Ruby, Go, JavaScript/Node.js, and Java). Under NGINX Unit, multiple applications in different programming languages can run simultaneously, with launch parameters that can be dynamically changed without having to edit configuration files or restart. Code […]

A vulnerability in Android allows remote code execution when Bluetooth is enabled.

The February update of the Android platform fixes a critical vulnerability (CVE-2020-0022) in the Bluetooth stack, allowing for remote code execution through the sending of specially crafted Bluetooth packets. The issue can be exploited unnoticed by an attacker within Bluetooth range. This vulnerability could potentially be used to create worms that infect neighboring devices. To carry out the attack, it is sufficient to know the MAC address of the victim's device (no prior pairing is required, […]

Proton 5.0

Great news for Linux gamers. Valve has released a new version of Proton, a specialized layer for Wine intended for running Windows games on Linux. It is primarily used for launching games from Steam but can also be utilized for other Windows games. Key changes: The new release is based on Wine version 5.0; Games supporting Direct3D 9 will use Vulkan in […]

Reverse engineering a home router using binwalk. Do you trust your router's firmware?

A few days ago, I decided to perform reverse engineering on the firmware of my router using binwalk. I bought myself a TP-Link Archer C7 home router. It's not the best router, but it’s sufficient for my needs. Every time I buy a new router, I install OpenWRT. Why? Generally, manufacturers don’t care much about supporting their routers, and over time the software […

What is SAP?

Google has announced a plan to introduce new mechanisms to protect against insecure file downloads in Chrome. In Chrome 86, scheduled for release on October 26, the download of all types of files via links from pages opened over HTTPS will only be possible if the files are served using the HTTPS protocol. It is noted that downloading unencrypted files can be used to carry out malicious […]

The initiative to add the Unity 8 desktop and the Mir display server to Debian.

Mike Gabriel, who is involved in maintaining the Qt and Mate packages in Debian, has proposed an initiative to create packages for Unity 8 and Mir for Debian GNU/Linux and their subsequent integration into the distribution. This work is being done in collaboration with the UBports project, which has taken on the development of the mobile platform Ubuntu Touch and the Unity 8 desktop after […]

Unity 8 desktop and Mir display server will be added to Debian

Recently, Mike Gabriel, one of the maintainers of Debian, made an agreement with people from the UBports Foundation to 'package' the Unity 8 desktop for Debian. Why do this? The main advantage of Unity 8 is its convergence: a single codebase for all platforms. It looks equally good on desktops, tablets, and smartphones. Currently, there is no ready-made […]

CentOS 8.1 Release

Unbeknownst to everyone, the development team released CentOS 8.1—a completely free version of the commercial distribution from Red Hat. The innovations are similar to those in RHEL 8.1 (excluding some modified or removed utilities): The kpatch utility is available for 'hot' (non-reboot required) kernel updates. The eBPF (Extended Berkeley Packet Filter) utility has been added—a virtual machine for executing code in kernel space. Support has been added for […]

Recommend what to read. Part 1

It's always nice to share useful information with the community. We asked our employees to recommend resources they visit themselves to stay updated on events in the world of cybersecurity. The selection turned out to be extensive, and we had to split it into two parts. Part one. Twitter NCC Group Infosec—a technical blog of a major cybersecurity company, which regularly releases its research, tools/plugins for Burp. Gynvael Coldwind […]

Seek and you shall find

Many people think about their pressing issues before going to sleep or right after waking up. I am no exception. This morning, a comment from Habr came to my mind: A colleague in the chat shared a story: I had an incredible client two years ago, back when I was taking on fresh ‘crisis’ work. The client had two teams in their dev group, each working on […]

7. Fortinet Getting Started v6.0. Antivirus and IPS

Hello! Welcome to the seventh lesson of the Fortinet Getting Started course. In the previous lesson, we got acquainted with security profiles such as Web Filtering, Application Control, and HTTPS Inspection. In this lesson, we will continue our exploration of security profiles. First, we will cover the theoretical aspects of antivirus operation and intrusion prevention systems, and then we will examine how these security profiles operate […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster