packetstormsecurity

• newABB Cylon Aspect 3.07.02 user.properties Default Credentials
  ABB Cylon Aspect version 3.07.02 uses a weak set of default administrative credentials that can be guessed in remote password attacks and used to gain full control of the system.
  - 16 hours ago 11 Oct 24, 3:15pm -
• newABB Cylon Aspect 3.08.00 dialupSwitch.php Remote Code Execution
  ABB Cylon Aspect version 3.08.00 suffers from an authenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through the MODEM HTTP POST parameter called by the dialupSwitch.php script.
  - 16 hours ago 11 Oct 24, 3:13pm -
• newABB Cylon Aspect 3.07.02 sshUpdate.php Unauthenticated Remote SSH Service Control
  ABB Cylon Aspect version 3.07.02 suffers from a vulnerability that allows an unauthenticated attacker to enable or disable the SSH daemon by sending a POST request to sshUpdate.php with a simple JSON payload. This can be exploited to start the SSH se…
  - 16 hours ago 11 Oct 24, 3:12pm -
• newDebian Security Advisory 5788-1
  Debian Linux Security Advisory 5788-1 - Damien Schaeffer discovered a use-after-free in the Mozilla Firefox web browser, which could result in the execution of arbitrary code.
  - 16 hours ago 11 Oct 24, 3:11pm -
• newUbuntu Security Notice USN-7020-4
  Ubuntu Security Notice 7020-4 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
  - 16 hours ago 11 Oct 24, 3:09pm -
• newUbuntu Security Notice USN-7062-1
  Ubuntu Security Notice 7062-1 - It was discovered that libgsf incorrectly handled certain Compound Document Binary files. If a user or automated system were tricked into opening a specially crafted file, a remote attacker could possibly use this issu…
  - 16 hours ago 11 Oct 24, 3:09pm -
• newRed Hat Security Advisory 2024-7994-03
  Red Hat Security Advisory 2024-7994-03 - Red Hat Advanced Cluster Management for Kubernetes 2.11.3 General Availability release images, bug fixes, and updated container images.
  - 16 hours ago 11 Oct 24, 3:09pm -
• newTerraMaster TOS 4.2.29 Code Injection / Local File Inclusion
  TerraMaster TOS version 4.2.29 suffers from a remote code injection vulnerability leveraging a local file inclusion vulnerability.
  - 16 hours ago 11 Oct 24, 3:07pm -
• newRed Hat Security Advisory 2024-7987-03
  Red Hat Security Advisory 2024-7987-03 - An update is now available for Red Hat Satellite 6.15 for RHEL 8. Issues addressed include HTTP request smuggling and null pointer vulnerabilities.
  - 16 hours ago 11 Oct 24, 3:06pm -
• newSolarView Compact 6.00 Code Injection
  SolarView Compact version 6.00 suffers from a PHP code injection vulnerability.
  - 16 hours ago 11 Oct 24, 3:05pm -

cPaneladmin

• cPanel 112 Cheat Sheet Now Available
  Our latest cPanel cheat sheet is now available. This one applies to all current versions, specifically 112+. Head over to our Cheat Sheets page to download it!…
  - 14 Jun 23, 6:15pm -
• Elevate: Unable to backup EA4 profile
  When trying to upgrade from CentOS to AlmaLinux, cPanel 110 and earlier might experience the following error: Edit /etc/cpanel/ea4/profiles/pkg-manifest.json and remove the extra comma at the end of any list, for example: Then re-run Elevate and it s…
  - 14 Jun 23, 2:43pm -
• How to Block Emails From the Future Using SpamAssassin In cPanel
  Getting emails from the future is a classic sign of SPAM. Unfortunately, SpamAssassin only bumps the score of these emails by less than 2 points, which isn’t usually enough to get it marked as SPAM. To fix this, you can add a rule to SpamAssassin t…
  - 14 Jun 23, 2:27pm -
• Fixing AutoSSL “provider cannot currently accept incoming requests”
  When using cPanel/Sectigo as the SSL provider for AutoSSL, you may occasionally see this error in the autossl log: The “cPanel (powered by Sectigo)” provider cannot currently accept incoming requests. The system will try again later. This error s…
  - 22 Sep 22, 8:23pm -
• Troubleshooting Website SSL Issues – No Padlock
  Having SSL problems? One of the most common issues our team handles is related to websites not properly displaying over HTTPS, whether it be the website either not loading entirely, or just not showing the green padlock: If you’re sure that the SSL…
  - 18 Mar 19, 6:07pm -
• Safely Removing virtfs on a cPanel Server
  If you’re on a cPanel server, you’ve probably noticed a sizable folder called ‘virtfs’ sitting in /home, which would appear at first to be using a ton of space. Your first inclination might be to delete it, but don’t! Most likely, the files…
  - 14 Jan 19, 7:25pm -
• Custom Exim Filter Examples
  cPanel allows you to easily create custom Exim filters by simply dropping the rules in /usr/local/cpanel/etc/exim/sysfilter/options/ and running: /scripts/buildeximconf service exim restart Here are a couple useful examples of filters we’ve create…
  - 29 Aug 18, 6:08pm -
• How to Set up a Local cPanel FastUpdate Mirror
  If you have more than a few cPanel servers in your network, it may be a good idea to set up your own mirror to serve the files necessary to run cPanel updates. Doing this could save time and bandwidth, as well as prevent problems caused by mirrors be…
  - 17 Feb 16, 5:16pm -
• Installing LetsEncrypt SSL Certificates on CentOS + cPanel Servers
  Update! cPanel supports LetsEncrypt, but you just need to install the plugin for it to work. To do this, run: /scripts/install_lets_encrypt_autossl_provider Once installed, Let’s Encrypt will appear in WHM’s Manage AutoSSL interface (Home >> SSL/…
  - 15 Feb 16, 5:14pm -
• cPanel Update Fails Due to RPM Conflict
  The cPanel update fails due to a problem installing RPMs, but is not specific about what the problem is: [20160203.180007] Testing if the newly downloaded RPMS can be installed without conflict [20160203.180007] Testing RPM transaction [20160203.1800…
  - 3 Feb 16, 6:25pm -

reddit admin

• newXFS Disk Usage
  In process of building a DYI NAS. I prefer RPM distros and run Fedora KDE on my PC, but I wanted something more "stable" for the NAS so I went with Alma KDE. I put a few HDDs in and formatted using XFS. [XXX@NAS DATA]$ df -Th Filesystem Type Size Use…
  - 8 hours ago 11 Oct 24, 11:32pm -
• newAdvice On Securing Internal Linux Server w/ A Minecraft Server On It
  Hey all, I have an ubuntu headless server that I keep inside my home. I mostly use it to run a minecraft server for my friends and that runs in a separate user in a screen (also my ./start.sh file doesn't require root privilege to run). My regular ad…
  - 10 hours ago 11 Oct 24, 9:52pm -
• newQuestion on security finding
  Looking for input on a security question. First thing is I work for a bank and this bank is not one of the top 10, but it is one that has crossed the magic too big to fail line. Our Information security had an audit done, this is just Tuesday, no big…
  - 14 hours ago 11 Oct 24, 5:42pm -
• CIQ Unveils a Version of Rocky Linux for the Enterprise
  submitted by /u/CrankyBear [link] [comments]
  - 2 days ago 10 Oct 24, 6:52pm -
• Btop sufficient to replace Top/htop
  I've been using btop in place of traditional top and htop. Seems to work well to identify possible resource issues or manage processes by hand occasionally. Do you all have a preference? And is btop acceptable to use in the enterprise? submitted b…
  - 2 days ago 10 Oct 24, 4:57pm -
• host an nginx site from single configuration file on internal / external networks at the same time
  I am trying to host a dokuwiki site from an nginx web server by using only single configuration file, but no matter what I try, it just doesn't work right. Requirements are pretty simple, the site should work like following: 1. Be configured in sing…
  - 2 days ago 10 Oct 24, 1:18pm -
• Multipath on ubuntu
  So I got some remanufactured SAS drives to put in my 12-bay disk shelf. The way it's set up there are two SAS cables from the HBA in my server to the two expanders/controllers in the shelf. To manage splitting I/O between these two paths I am useing…
  - 2 days ago 9 Oct 24, 10:52pm -
• Anyone here using kagi?
  My goto search engine is DDG, with bangs depending on the query. I'm satisfied with the results most of the time, but I would be willing to pay for something better. I've seen kagi pop up here and there. Anyone here using it for linux admin stuff? if…
  - 3 days ago 9 Oct 24, 6:57pm -
• Looking for DevOps, SREs, and Observability Experts
  Are you an expert in OpenTelemetry, SigNoz, Grafana, Prometheus or observability tools? Here’s your chance to earn while contributing to open-source! Join the SigNoz Expert Contributors Program and: • Get rewarded for your OSS contributions •…
  - 3 days ago 9 Oct 24, 8:11am -
• XFS or ZFS for 120TB drive with many millions of small files
  Hi all, I need to build a new server in the next couple months, probably Ubuntu 24.04. It will have ~120TB of usable space on a raid5 LVM partition, shared out as SMB shares. (That will be separate from the OS drive on a RAID1 LVM.) It will be used t…
  - 4 days ago 8 Oct 24, 4:36pm -

LinuxActionShow

• Transitioning to LINUX Unplugged, wrapping up this Sub.
  Well look at that LINUX Unplugged is now our longest running Linux show. It's about to hit episode 200 in just a few more weeks. We've been debating what to do with a subreddit that was created for LAS. Since the start of LUP this sub has also been c…
  - 9 May 17, 7:18pm -
• [x-post] [Runs Linux] I put Debian on my Kindle! • r/linux
  [link] [comments]
  - 9 May 17, 7:14pm -
• Deepin 15.4 - See What's New
  submitted by /u/Mongaz [link] [comments]
  - 9 May 17, 6:53pm -
• Thunderbird’s Future Home
  submitted by /u/gabriel_3 [link] [comments]
  - 9 May 17, 2:41pm -
• Chuwi LapBook 12.3 is a 2K Ubuntu Laptop for $329.
  submitted by /u/mitcoes [link] [comments]
  - 9 May 17, 9:14am -
• [Suggestion] Dedicated audio and video rss feeds
  If we could get RSS feeds dedicated to audio intended segments and other feeds for video dedicated segments it would be very easy to get one going to our home media solution and the other to the phone. If not it will be nice if it says in the descrip…
  - 9 May 17, 8:40am -
• Prosody IM - Jabber/XMPP server
  submitted by /u/mitcoes [link] [comments]
  - 9 May 17, 7:56am -
• White Noise 2 officially released with Linux support, along with some major updates
  submitted by /u/Khaotic_Kernel [link] [comments]
  - 9 May 17, 6:56am -
• Google’s “Fuchsia” Smartphone OS Dumps Linux, Has A Wild New UI. Taking A Look At Google's Mysterious Third Operating System.
  submitted by /u/NetWiz69 [link] [comments]
  - 9 May 17, 5:11am -
• openSUSE 101: get started with Free Software now!
  submitted by /u/gabriel_3 [link] [comments]
  - 9 May 17, 4:36am -

linuxfoundation

linuxinsider

• newStrong Basics: The Building Blocks of Software Engineering
  The following observations were compiled with software engineering in mind, as I identified them while working in that discipline. However, these practices apply universally. The post Strong Basics: The Building Blocks of Software Engineering appeare…
  - 14 hours ago 11 Oct 24, 5:43pm -
• New Distro Derivative Expands Open-Source Enterprise Linux Ecosystem
  The eLxr project enables organizations challenged with high-performance edge and enterprise needs to meet stringent performance and operational requirements for a wide range of markets and emerging use cases. These include autonomous vehicles, aerosp…
  - 25 days ago 17 Sep 24, 1:00pm -
• Kubuntu Focus Iridium Laptops Set New Built-for-Linux Standard
  The pre-built Linux Kubuntu Focus Iridium laptop line is an unexpectedly good alternative to running any Linux operating system on converted Windows PCs. The post Kubuntu Focus Iridium Laptops Set New Built-for-Linux Standard appeared first on LinuxI…
  - 46 days ago 27 Aug 24, 1:00pm -
• Wolfi Linux Might Be the Next Cloud Security Savior
  Wolfi takes a novel approach focused on the rapid adoption of containerized and cloud-native workloads. One important principle of its design is prioritizing update speed over stability. The post Wolfi Linux Might Be the Next Cloud Security Savior ap…
  - 86 days ago 18 Jul 24, 12:00pm -
• Enhancing Web Performance With Nginx Load Balancing on Linux Systems
  Nginx is a versatile and high-performance server known for its capabilities in web serving, reverse proxying, caching, load balancing, and media streaming. Its asynchronous, event-driven architecture has made it one of the most efficient and reliable…
  - 95 days ago 9 Jul 24, 12:00pm -
• Essential Tips for Reliable Linux Backups
  These Linux backup strategies help protect data and system files, avoid the pitfalls of unreliable backups, and streamline recovery in case of disaster. The post Essential Tips for Reliable Linux Backups appeared first on LinuxInsider.
  - 25 Jun 24, 3:00pm -
• Upgrade to Ubuntu Pro for 5 Years of Free Extended Support
  Ubuntu Pro subscriptions are free for personal use, and you can extend long-term support for your OS by an additional five years. With this extended support, you'll receive security and bug fixes without needing to perform a manual OS upgrade. The po…
  - 12 Jun 24, 3:45pm -
• Dynebolic Linux Return Falls Short of Creative Goals
  The beta 4.0 release of Dynebolic Linux announced innovations for creatives looking for a self-contained production and publishing tool. If you are unfamiliar with distributions built on the KDE desktop and others, you could easily be misled about it…
  - 3 Jun 24, 11:47pm -
• Can Public-Private Partnerships Improve Open-Source Security?
  Better collaboration between public and private sectors to advance open-source security is a major unresolved technology concern, especially as open-source software gains global dominance alongside artificial intelligence technology. The post Can Pub…
  - 30 May 24, 12:00pm -
• Post-Open Licensing Could Offer Software Devs Funding Alternatives
  The open-source community faces pressing challenges with licensing and revenue, prompting a shift toward more sustainable and clearly defined models to protect and advance its foundational principles. The post Post-Open Licensing Could Offer Software…
  - 7 May 24, 4:23pm -

arstechnica

• Coder deletes open source add-on for Chef in protest over ICE contract
  CEO said multiple Chef customers affected; now Chef won't renew contract.
  - 23 Sep 19, 6:59pm -
• Debian 10: Playing catch-up with the rest of the Linux world (that’s a good thing)
  If you skipped the last release, Debian 10 (Buster) should encourage an update into 2019.
  - 11 Sep 19, 11:40am -
• Hack in the box: Hacking into companies with “warshipping”
  For under $100, compact hardware can turn a shipped package into a Trojan horse for attacks.
  - 13 Aug 19, 9:24pm -
• Microsoft publishes first Edge for macOS preview, promises to make it truly “Mac-like”
  Microsoft is making sure to take advantage of the Mac's hardware and design.
  - 20 May 19, 10:40pm -
• Windows dual booting no longer looking likely on Pixelbooks
  Development work appeared to grind to a halt last December.
  - 15 May 19, 10:50pm -
• Microsoft open sources algorithm that gives Bing some of its smarts
  You can ask "How tall is the tower in Paris?" and it knows what you're talking about.
  - 15 May 19, 3:51pm -
• Microsoft: The open source company
  The times, they are a-changin'—even bits of Windows will be open source.
  - 10 May 19, 9:51pm -
• Windows 10 will soon ship with a full, open source, GPLed Linux kernel
  The new Windows Subsystem for Linux will use a real Linux kernel.
  - 6 May 19, 8:20pm -
• Microsoft’s plan for Edge: Integrated IE compatibility, better privacy
  New features will make Edge more than just a reskinned Chrome.
  - 6 May 19, 4:27pm -
• Developers love Python and TypeScript, get paid for Clojure, and aren’t using blockchain
  Visual Basic remains as unpopular as ever.
  - 10 Apr 19, 7:44pm -

technewsworld

• newAlcatraz AI Biometrics Bolsters Workplace Security
  Managing any facility or organizational team now involves greater responsibility for safety, whether in workplaces, campuses, hospitals, or other settings. These challenges are driving demand for safer, opt-in hardware solutions. The post Alcatraz AI…
  - 19 hours ago 11 Oct 24, 12:00pm -
• Streaming TV Industry Snooping on Viewers at Grand Scale: Report
  The streaming television industry has been accused of operating a massive data-driven surveillance apparatus that is transforming TVs into sophisticated monitoring, tracking, and targeting devices. The post Streaming TV Industry Snooping on Viewers a…
  - 3 days ago 9 Oct 24, 1:00pm -
• New Research Waves Red Flag Over Gaming Scams Aimed at Kids
  Cybercriminals are exploiting young gamers' innocence for financial gain, putting their privacy and their families' financial security at risk. Experts emphasize the need for parental awareness, as children are particularly vulnerable to these scams.…
  - 4 days ago 8 Oct 24, 12:00pm -
• Infineon’s Role in Power Efficiency and Innovation in AI Data Centers
  As the demand for compute power continues to surge to unprecedented levels due to AI, Infineon’s participation in developing energy-efficient solutions will be vital in shaping tomorrow’s data center. The post Infineon’s Role in Power Efficien…
  - 5 days ago 7 Oct 24, 3:00pm -
• HP Imagine Showcases Unique AI Innovations
  At HP’s Imagine event last month, we saw a better AI future focused not on deploying AI for its own sake but on developing detailed plans encompassing HP’s internal resources and an impressive number of partners to ensure that AI deployments will…
  - 5 days ago 7 Oct 24, 12:00pm -
• Reddit, Snapchat Ranked Least-Intrusive Social Media Platforms
  A new privacy report ranking the top 15 social media platforms found Reddit and Snapchat as the least intrusive on their users' privacy. At the other end of the spectrum were Meta products Facebook, Messenger and Instagram. The post Reddit, Snapchat…
  - 10 days ago 2 Oct 24, 3:29pm -
• AI Can Improve CX, QA Without Cutting Jobs, Software Expert Says
  Tal Barmeir, co-founder of BlinqIO, sees AI transforming human testers into "AI-assisted testers," where AI enhances productivity and efficiency rather than replacing jobs. The post AI Can Improve CX, QA Without Cutting Jobs, Software Expert Says app…
  - 12 days ago 30 Sep 24, 12:00pm -
• Poisoned Data in AI Training Opens Back Doors to System Manipulation
  These attacks present broader risks that can impact critical infrastructure such as health care systems, autonomous vehicles, financial markets, national security, and military applications. The post Poisoned Data in AI Training Opens Back Doors to S…
  - 16 days ago 26 Sep 24, 12:00pm -
• Bridging the AI Training Gap in the Workplace
  Many employees lack sufficient AI training, creating a significant skills gap. Companies that address this issue can unlock innovation to drive organizational success. The post Bridging the AI Training Gap in the Workplace appeared first on TechNewsW…
  - 18 days ago 24 Sep 24, 12:00pm -
• Agentic AI Set To Revolutionize Business Operations, Decision-Making
  While the technology behind AI-powered chatbots quickly captured the public imagination, an even more powerful application of generative artificial intelligence has been creating a buzz among business leaders. It's called agentic AI. The post Agentic…
  - 25 days ago 17 Sep 24, 12:00pm -