Tag: infrastructure

  • Simon Willison’s Weblog: Quoting Rob Cheung

    Source URL: https://simonwillison.net/2024/Dec/11/rob-cheung/ Source: Simon Willison’s Weblog Title: Quoting Rob Cheung Feedly Summary: (echo “PID COMMAND PORT USER"; lsof -i -P -n | grep LISTEN | awk ‘{print $2, $1, $9, $3}’ | sort -u | head -n 50; echo;) | column -t | llm "what servers are running on my machine and do some…

  • The Register: US names Chinese national it alleges was behind 2020 attack on Sophos firewalls

    Source URL: https://www.theregister.com/2024/12/11/sichuan_silence_sophos_zeroday_sanctions/ Source: The Register Title: US names Chinese national it alleges was behind 2020 attack on Sophos firewalls Feedly Summary: Also sanctions his employer – an outfit called Sichuan Silence linked to Ragnarok ransomware The US Departments of Treasury and Justice have named a Chinese business and one of its employees as the…

  • Krebs on Security: Patch Tuesday, December 2024 Edition

    Source URL: https://krebsonsecurity.com/2024/12/patch-tuesday-december-2024-edition/ Source: Krebs on Security Title: Patch Tuesday, December 2024 Edition Feedly Summary: Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common……

  • Cisco Talos Blog: Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities

    Source URL: https://blog.talosintelligence.com/december-patch-tuesday-release/ Source: Cisco Talos Blog Title: Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities Feedly Summary: The Patch Tuesday for December of 2024 includes 72 vulnerabilities, including four that Microsoft marked as “critical.” The remaining vulnerabilities listed are classified as “important.”  AI Summary and Description: Yes **Summary:** The December 2024 Patch…

  • Simon Willison’s Weblog: ChatGPT Canvas can make API requests now, but it’s complicated

    Source URL: https://simonwillison.net/2024/Dec/10/chatgpt-canvas/#atom-everything Source: Simon Willison’s Weblog Title: ChatGPT Canvas can make API requests now, but it’s complicated Feedly Summary: Today’s 12 Days of OpenAI release concerned ChatGPT Canvas, a new ChatGPT feature that enables ChatGPT to pop open a side panel with a shared editor in it where you can collaborate with ChatGPT on…

  • Hacker News: AMD’s trusted execution environment blown wide open by new BadRAM attack

    Source URL: https://arstechnica.com/information-technology/2024/12/new-badram-attack-neuters-security-assurances-in-amd-epyc-processors/ Source: Hacker News Title: AMD’s trusted execution environment blown wide open by new BadRAM attack Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses significant vulnerabilities related to physical access to cloud servers, particularly spotlighting a proof-of-concept attack known as BadRAM that exploits security assurances offered by AMD’s microprocessors.…

  • Alerts: Adobe Releases Security Updates for Multiple Products

    Source URL: https://www.cisa.gov/news-events/alerts/2024/12/10/adobe-releases-security-updates-multiple-products Source: Alerts Title: Adobe Releases Security Updates for Multiple Products Feedly Summary: Adobe released security updates to address vulnerabilities in multiple Adobe software products including Adobe Acrobat, Adobe Illustrator, and Adobe InDesign. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.       CISA encourages users…

  • Alerts: Microsoft Releases December 2024 Security Updates

    Source URL: https://www.cisa.gov/news-events/alerts/2024/12/10/microsoft-releases-december-2024-security-updates Source: Alerts Title: Microsoft Releases December 2024 Security Updates Feedly Summary: Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates:…

  • Cloud Blog: Unleash a new era of PostgreSQL: AlloyDB redefines what’s possible

    Source URL: https://cloud.google.com/blog/products/databases/a-postgresql-database-users-guide-to-benefits-of-alloydb/ Source: Cloud Blog Title: Unleash a new era of PostgreSQL: AlloyDB redefines what’s possible Feedly Summary: It’s been more than two and a half years since we introduced AlloyDB for PostgreSQL, our 100% PostgreSQL-compatible database that offers superior performance, availability, and scale. AlloyDB reimagines PostgreSQL with Google’s cutting-edge technology. It includes a…