Internet News Section
GitHub has released a report detailing notifications of intellectual property violations and the publication of illegal content received in the first half of 2022. Previously, such reports were published annually, but now GitHub has switched to biannual disclosures. In accordance with the Digital Millennium Copyright Act (DMCA) in the United States, in […]
Researchers from Faraday Security presented at DEFCON details of the exploitation of a critical vulnerability (CVE-2022-27255) in the SDK for Realtek RTL819x chips, allowing code execution on the device through the sending of specially crafted UDP packets. The vulnerability is notable because it allows attacks on devices where access to the web interface for external networks is disabled — an attack can be carried out simply by sending a single UDP packet. […]
Google has released update 104.0.5112.101 for Chrome, which fixes 10 vulnerabilities, including a critical vulnerability (CVE-2022-2852) that allows bypassing all levels of browser protection and executing code on the system outside of the sandbox environment. Details are not yet disclosed, but it is known that the critical vulnerability is related to a use-after-free issue in the implementation of the FedCM (Federated Credential Management) API, […]
Valve has released project Proton 7.0-4, which is based on the Wine project codebase and aims to enable the running of Linux gaming applications created for Windows and available in the Steam catalog. The project’s developments are distributed under the BSD license. Proton allows the direct launching of Windows-only gaming applications in the Linux client of Steam. The package includes the implementation of […]
Developers of the open messenger Signal have disclosed information about a targeted attack aimed at gaining control over some users' accounts. The attack was carried out through a breach of the Twilio service, which is used by Signal to send SMS messages with confirmation codes. Data analysis indicated that the Twilio breach may have affected around 1900 Signal user phone numbers, for which attackers had the ability to re-register the numbers […]
A researcher from the Catholic University of Leuven demonstrated at the Black Hat conference a technique to compromise the Starlink user terminal used to connect subscribers to SpaceX's satellite network. The terminal is equipped with its own 64-bit SoC developed by STMicro specifically for SpaceX. The operating environment is based on Linux. The proposed method allows running custom code on the Starlink terminal, gaining root access, and accessing restricted areas […]
An experimental release of the open implementation of WinAPI — Wine 7.15 has occurred. Since the release of version 7.14, 22 bug reports have been closed, and 226 changes have been made. The most significant changes include: support for command lists in Direct2D (the ID2D1CommandList object, which provides methods for saving the state of a command set that can be recorded and replayed). Support for the RSA encryption algorithm has been implemented. In […]
The release of the Toybox 0.8.8 system utility suite has been announced, which, like BusyBox, is formatted as a single executable file optimized for minimal system resource consumption. The project is developed by a former maintainer of BusyBox and is distributed under the 0BSD license. The main purpose of Toybox is to provide manufacturers with a minimalist set of standard utilities without disclosing the source code of modified components. Toybox's capabilities are still […]
The release of the GNU Binutils 2.39 system utility suite has been announced, which includes programs such as the GNU linker, GNU assembler, nm, objdump, strings, and strip. In the new version: The ELF linker now issues a warning when enabling the ability to execute code on the stack, as well as when there are memory segments in the binary file for which […]
A vulnerability (CVE-2022-2590) has been discovered in the Linux kernel, allowing an unprivileged user to modify memory-mapped files and tmpfs files without having write permissions, thereby elevating their privileges in the system. The issue is similar to the Dirty COW vulnerability but is limited to impacts on data in shared memory (shmem).
Microsoft has published an Emoji library that includes over 1,500 icons available in various styles (3D, multicolor, flat, high-contrast). The library's content corresponds to a new set of Emojis introduced to Windows 11 users last year, now enhanced with 3D versions of the icons. The library is open under an MIT license, allowing for derivative works and use of the icons in products. Source: opennet.ru
Canonical has introduced the first maintenance release of the Ubuntu 22.04.1 LTS distribution, which includes updates for several hundred packages related to vulnerability fixes and stability improvements. The new version also addresses installer and bootloader bugs. The release of Ubuntu 22.04.1 marks the completion of the base stabilization for the LTS release — users of Ubuntu 20.04 will now be prompted to upgrade to […]
Russian Russian
Italian
German
Polish
Estonian
Albanian
Bulgarian
Croatian
Czech
Danish
Dutch
English
French
Hungarian
Latvian
Norwegian
Portuguese
Romanian
Slovak
Slovenian
Spanish
Swedish