Category: Internet News

CROSSTalk — a vulnerability in Intel CPUs that leads to data leaks between cores

A group of researchers from the Free University of Amsterdam has identified a new vulnerability (CVE-2020-0543) in the microarchitectural structures of Intel processors, notable for allowing the recovery of the results of certain instructions executed on another CPU core. This is the first vulnerability of the speculative execution instruction mechanism that permits data leakage between separate CPU cores (previous leaks were limited to different threads of a single core). The researchers named this issue […]

A vulnerability in UPnP suitable for amplifying DDoS attacks and scanning the internal network

Details have been disclosed about a vulnerability (CVE-2020-12695) in the UPnP protocol that allows traffic to be sent to arbitrary recipients using the standard operation 'SUBSCRIBE.' This vulnerability has been given the code name CallStranger. It can be used for data extraction from networks protected by data leak prevention (DLP) systems, for scanning ports of computers within the internal network, and to amplify DDoS attacks using millions of connected […]

GhostBSD 20.04

The GhostBSD project creates a desktop-oriented operating system based on FreeBSD. A new version of GhostBSD 20.04 has been released, addressing a number of issues related to installation and ZFS during setup. Innovations include replacing gnome-mount and hald with FreeBSD devd and Vermaden automount, which make the automatic mounting and unmounting of external devices more stable and […]

New version of the Exim mail server 4.94

After 6 months of development, the release of the Exim mail server 4.94 has occurred, incorporating accumulated fixes and adding new features. According to a May automated survey of about a million mail servers, Exim's share is 57.59% (up from 53.03% last year), Postfix is used on 34.70% (up from 34.51%), Sendmail — 3.75% (down from 4.05%), and Microsoft Exchange — 0.42% (down from 0.57%). Changes in the new […]

Vulnerability in GnuTLS allowing TLS 1.3 session resumption without knowledge of the key

A vulnerability (CVE-2020-13777) has been identified in the GnuTLS library, which is used by default in many packages within Debian, including the package manager APT and many utilities, allowing a previously stopped TLS session to be resumed without the knowledge of the session key. Practically, this vulnerability can be exploited for MITM attacks. The vulnerability is caused by incorrect construction of the session ticket key — the TLS server did not bind the session key […]

Release of Terminal File Manager n³ v3.2

nnn (or n³) is a full-featured terminal file manager. It's incredibly fast, lightweight, and virtually requires no setup. nnn can analyze disk usage, rename files in bulk, launch applications, and select files. There are tons of plugins and documentation in the repository for further extending its capabilities, such as previews, disk mounting, searching, and diffs for files/directories, as well as an independent (neo)vim plugin. […]

The Brave browser has been caught inserting referral links when navigating to certain URLs.

The Brave Browser, a product based on Chromium, has been caught by users inserting referral links when visiting certain websites. For instance, a referral code is added to the link when navigating to 'binance.us', turning the original link into 'binance.us/en?ref=35089877'. Similarly, the browser behaves this way with some other cryptocurrency-related websites. According to available data, the referral link […]

Release of Kuesa 3D 1.2, a package designed to simplify the development of 3D applications on Qt.

The company KDAB has published the release of the Kuesa 3D 1.2 toolkit, providing resources for creating 3D applications based on Qt 3D. The project aims to facilitate collaboration between designers creating models in packages like Blender, Maya, and 3ds Max, and developers writing application code using Qt. Working with models is separated from coding, and Kuesa acts as a bridge […]

uBlock Origin now includes script blocking for scanning network ports.

The EasyPrivacy filter used in uBlock Origin has been updated with rules to block common network port scanning scripts on the user's local system. It is worth noting that in May, port scanning was detected when accessing the eBay.com website. It turned out that this practice is not limited to eBay, as many other websites (Citibank, TD Bank, Sky, GumTree, WePay, etc.) also engage in port scanning […]

SystemRescueCd 6.1.5

On June 8, the release of SystemRescueCd 6.1.5 took place — a popular live distribution based on Arch Linux for data recovery and partition management. Changes: The kernel has been updated to version 5.4.44 LTS. Unnecessary large firmware files have been removed from initramfs. An encrypt hook has been added for booting from encrypted partitions. A bug that prevented DHCP from starting after PXE boot has been fixed. Auto-login to the serial console is enabled. ‘>>>’ […]

Command & Conquer Remastered Collection was cracked on release day, but the collection wasn't particularly protected.

Command & Conquer Remastered Collection was released on June 5 for PC (Steam and Origin) and appeared on piracy sites the same day. The notorious hacking group CODEX is responsible for the breach of the remastered collection. It is worth noting that Petroglyph and Electronic Arts did not attempt to take additional measures to protect the project. It was equipped with the standard DRM protection of the Steam service, which […]

The release of the Network Security Toolkit 32 distribution

The release of the NST (Network Security Toolkit) live distribution 32-11992 has been announced, designed for network security analysis and monitoring its operation. The size of the bootable ISO image (x86_64) is 4.1 GB. A special repository has been prepared for Fedora Linux users, allowing them to install all developments created within the NST project on an already installed system. The distribution is based on Fedora 30 and allows for installation […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster