circl

circl, 3 days ago to random

@DNSresolver circl.lu

circl, 1 month ago to infosec

vulnerability-lookup version v0.7.0 has been released.

• News feed added
• Support for CSAF sources (CERT Bund, RedHat, Siemens, CISA, CISCO, Nozomi Networks, OpenXchange, SICK)
• OSSF Malicious packages repository
• Pagination for recent vulnerabilities (API & Web)

🔗 Source code https://github.com/cve-search/vulnerability-lookup/releases/tag/v0.7.0

🔗 Vulnerability lookup online https://vulnerability.circl.lu/

#cve #vulnerability #vulnerabilities #csaf #infosec

circl, 1 month ago to infosec

TR-83 - Linux Boot Hardening HOWTO

#infosec #linux #kernel #security

🔗 https://www.circl.lu/pub/tr-83/

circl, 1 month ago to infosec

TR-82 - backdoor discovered in xz-utils - CVE-2024-3094

🔗 For more information including detection and information about vulnerable distribution https://www.circl.lu/pub/tr-82/

#xz #vulnerability #infosec #backdoor #vulnerabilities #cve20243094

circl, 3 months ago to infosec

A out-of-bounds write vulnerability [CWE-787] in FortiOS may allow a remote unauthenticated attacker to execute arbitrary code or command via specially crafted HTTP requests.

"Workaround : disable SSL VPN (disable webmode is NOT a valid workaround)"

🔗 https://www.fortiguard.com/psirt/FG-IR-24-015

#fortinet #vulnerability #infosec

circl, 3 months ago to privacy

Pandora is an analysis framework designed to determine if a file is suspicious, conveniently displaying the results. Pandora provides a user-friendly content preview interface for large documents, including a preview of the metadata. This allows users to view files without the need to open them locally and don't put their computer at risk.

🔗 https://www.circl.lu/services/pandora-document-analysis/

#privacy #infosec #malicious

circl, 3 months ago to opensource

Cybersecurity Unites Across Borders - FETTA (Federated European Team for Threat Analysis) Project Launched to Strengthen EU Cyber Threat Intelligence

🔗 https://www.circl.lu/pub/press/20240131/

#opensource #ThreatIntelligence #ThreatIntel #cti #europe #infosec

@misp

circl, 3 months ago to random

New Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

"Threat actors are continuing to leverage vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways to capture credentials and/or drop webshells that enable further compromise of enterprise networks. "

#Ivanti #CISA #vulnerability

🔗 https://www.cisa.gov/news-events/alerts/2024/01/30/new-mitigations-defend-against-exploitation-ivanti-connect-secure-and-policy-secure-gateways

circl, 4 months ago to infosec

TR-78 - CVE-2023-46805 (Authentication Bypass) & CVE-2024-21887 (Command Injection) for Ivanti Connect Secure and Ivanti Policy Secure Gateways

It's a critical. We sent notification to various ISPs in Luxembourg. Review your equipments it's important.

🔗 https://www.circl.lu/pub/tr-78/

A specific @misp MISP event has been published including the @volexity IOCs. It's in the CIRCL MISP OSINT feed.

#infosec #vulnerability #ivanti

circl, 5 months ago to random

Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages that appear to originate from the Exim server, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

🔗 https://cvepremium.circl.lu/cve/CVE-2023-51766

#vulnerability #exim

circl, 5 months ago to opensource

TR-567d30 - CIRCL Unveils Festive Nostalgic Initiatives - Gopher Protocol and Bulletin Board System Revival

🔗 https://www.circl.lu/pub/tr-567d30/

Enjoy your holidays! 🎄 🥳

#opensource #retrocomputing #bbs #infosec

Access to the BBS via Telnet.

circl, 5 months ago to infosec

🚀 New release! The enhanced version of our online typosquatting finder service is now live! Explore the updated features and improvements here: https://typosquatting-finder.circl.lu/

Additionally, we've updated the underlying open-source library and web services. Dive into the advancements on GitHub: https://github.com/typosquatter/ail-typo-squatting

#typosquatting #infosec #domain #typo #opensource

circl, 6 months ago to opensource

New forensic training materials including the latest one from the cyberday.lu 2023 are now published.

https://www.circl.lu/services/forensic-training-materials/

#cyberday_lu #forensic #dfir #opensource

circl, 6 months ago to random

A new version of the @circl_lu Passive DNS service has been released. The API is backward compatible and version 2.0 includes new functionalities. It has been activated today with new sources.

https://www.circl.lu/services/passive-dns/

#passivedns #ThreatIntelligence #threatintel

circl, 8 months ago to infosec

The Ransomlook.io fediverse bot has been updated

@Ransomlook now includes group name as tag.

🔗 https://github.com/RansomLook/RansomLook

🔗 https://www.ransomlook.io/

#ransomware #infosec #opensource #fediverse

circl, 8 months ago to infosec

ISC has disclosed two vulnerabilities in BIND 9 (CVE-2023-3341, CVE-2023-4236)

https://www.openwall.com/lists/oss-security/2023/09/20/2

#vulnerabilities #infosec #bind

circl, 8 months ago to mastodon

Don't forget to upgrade your Mastodon sever to the latest version v4.1.8 due to the CVE-2023-42451 and CVE-2023-42452 vulnerabilities.

#mastodon #infosec #vulnerability

🔗 https://github.com/mastodon/mastodon/releases/tag/v4.1.8

🔗 https://cvepremium.circl.lu/cve/CVE-2023-42451
🔗 https://cvepremium.circl.lu/cve/CVE-2023-42452

circl, 8 months ago to infosec

If you are hit by our SSH scanner and wondering why we do so, we have a dedicated page about the scanning project(s):

https://www.circl.lu/projects/scanning/

#scanning #infosec

circl, 10 months ago to security

TR-74 - A heap-based buffer overflow vulnerability [CWE-122] in FortiOS - CVE-2023-27997

If you are running FortiOS devices, patch and also trigger an incident response procedure to review the devices.

https://www.circl.lu/pub/tr-74/

#security #infosec #vulnerability

circl, 10 months ago to opensource

We are at @passthesaltcon conference presenting various tools from
@circl and you can watch those talks live today and tomorrow at

https://passthesalt.ubicast.tv/lives/live-pass-the-salt-2023/

#opensource #infosec #conference

0x58, 10 months ago to infosec

Anyone at @passthesaltcon 🇫🇷 today? How are things going there? #passthesalt

#infosec #event #cybersecurity #france