Lifetime learner
55.516057,12.20848
Joined November 2008
- Tweets13.8K
- Following773
- Followers493
- Likes529
Some Rank Math PRO downloads on Oct 15-16 carried a backdoor. If a bad copy was activated, updating won't clean it: restore a pre-incident backup, change every password and key, then install the clean release.
youtu.be/lchkz05FltY
#PatchWatch #Cybersecurity #WordPress
October Windows Server updates can break on-prem Exchange under load: OWA fails, mail sticks in Outbox, DAG can stall. Do not uninstall the Windows patches - raise the Endpoint Mapper limit, then reboot.
youtu.be/gthWpp4LaxQ
#PatchWatch #Cybersecurity #Exchange
Drupal core has a critical code execution flaw in Field UI, with a no-login path via contributed modules. Update core and Entity List now, or uninstall Field UI until you can.
youtu.be/dvlw7_jVITc
#PatchWatch #Cybersecurity #Drupal
Nextcloud servers with the Collabora Built-in CODE Server app are being backdoored: no login needed, web shells hunting for passwords and wallets. Update the app or remove it. Disabling is not enough.
youtu.be/voE_H4RggkE
#PatchWatch #Cybersecurity #Nextcloud
BeyondTrust Remote Support zero-day exploited since August: no login needed, attackers got root and stole stored creds. Apply the BT26-05 patch on self-hosted RS and PRA, then hunt for compromise.
youtu.be/NbxK6yF3ZvM
#PatchWatch #Cybersecurity #BeyondTrust
Cisco Secure Email Gateway is being hit by a no-login root flaw: one crafted attachment is enough when File Reputation is on. Update Content Scanner Tools or AsyncOS now, then check the logs.
youtu.be/y7-Ei9aKHxg
#PatchWatch #Cybersecurity #Cisco
October Patch Tuesday: a Windows Shell bug that skips Mark of the Web is already exploited, and Outlook has critical Reading Pane flaws. Patch Windows first, then Office/Outlook, then Exchange.
youtu.be/Tn7MWZMnUOM
#PatchWatch #Cybersecurity #PatchTuesday
Ivanti Connect Secure VPN gateways are being hit by a no-login takeover flaw. Upgrade to the fixed build now, and factory reset or rebuild if the box may be compromised.
youtu.be/MFxDs-3s-_4
#PatchWatch #Cybersecurity #Ivanti
Max-severity GitLab flaw: a crafted regex in CI/CD config can let attackers run code on self-managed servers with no login. Not exploited yet. GitLab.com is patched - upgrade your own instances now.
youtu.be/h0TQJStAGkE
#PatchWatch #Cybersecurity #GitLab
NetScaler again: new critical SAML flaw can mean code execution or a crash. If you patched for the SAML zero-day and run a SAML IdP, upgrade again. Third NetScaler fix in under two weeks.
youtu.be/gq_xnw7V-BI
#PatchWatch #Cybersecurity #Citrix
SonicWall SMA1000: no-login flaw in the WorkPlace interface, and honeypots already see exploitation attempts. Install the October 6 hotfix on every appliance, exposed gateways first.
youtu.be/q5Iam-sHch0
#PatchWatch #Cybersecurity #SonicWall
On-prem Exchange: authenticated same-org mailbox read risk. Original September SU is not enough - install September V2 on every server and Management Tools host. Online already patched.
youtu.be/DBbWxwJrnnc
#PatchWatch #Cybersecurity #Exchange
Critical unauthenticated file-read on self-hosted Atlassian Data Center (Jira, Confluence, Bitbucket + more). Cloud patched. Exploitation attempts after public PoC - upgrade or apply mitigations now.
youtu.be/Oo6yqwQPIpk
#PatchWatch #Cybersecurity #Atlassian
Critical Dell System Update flaw can give remote attackers root on PowerEdge hosts. Not known exploited yet. Find every DSU install and upgrade.
youtu.be/ZJZfcOECnDs
#PatchWatch #Cybersecurity #Dell
Just patched NetScaler for the September RCEs? If you run SAML SP or IdP, patch again — new zero-day is on CISA KEV. Federal deadline October seventh. Upgrade is the fix; deny lists only buy time.
youtu.be/4YXDNyIvTuw
#PatchWatch #Cybersecurity #Citrix
Cisco SD-WAN Manager on the internet can skip login and land as admin. No workaround: upgrade to the fixed release. Live Protect is only a temporary shield.
youtu.be/pzEDQQGCvhg
#PatchWatch #Cybersecurity #Cisco
FortiMail zero-day is being exploited now. A patch is on the way. Until then, disable IBE or take webmail off the internet. US federal deadline is October 4.
youtu.be/fWtBrwPj5zU
#PatchWatch #FortiMail
Cloudflare har siden midt sep default blokeret Googlebot og Bingbot via AI Crawl Control.
Indholdet er det samme. Crawl'en er det ikke.
Fix + live demo: youtu.be/U_xmp7vWyPE
Stærk Taekwondo SummerCamp. Spændende nye artikler og Motivation i Inner Circle.
👉budowarrior.com/posts/budowa…
