dfrye120.bsky.social

dfrye120.bsky.social

@dfrye120.bsky.social

GitHub.com/dfrye120 Private chef and cybersecurity enthusiast

208 followers273 following207 posts

dfrye120.bsky.social reposted

Diesel of Sarcasm
@dsng480.bsky.social

Replying to @dril.bsky.social

I saw women once. Could not tell if they were armed. Didn’t wait around to find out - backed up carefully, erasing my footprints with a branch.

dfrye120.bsky.social reposted

David @ InnoVirtuoso
@innovirtuoso.bsky.social

🔒 Protect your accounts with 2FA! It's an extra layer of security that keeps hackers at bay, even if your password gets compromised. Don’t wait until it’s too late—secure your digital life today! #CyberTips #OnlineSafety

dfrye120.bsky.social reposted

WIRED
@wired.com

In this episode of “Uncanny Valley,” our hosts dive into WIRED’s scoop about a secret Trump administration campaign extending right into your backyard. www.wired.com/story/uncann...

wired.com‘Uncanny Valley’: ICE’s Secret Expansion Plans, Palantir Workers’ Ethical Concerns, and AI AssistantsIn this episode of “Uncanny Valley,” our hosts dive into WIRED’s scoop about a secret Trump administration campaign extending right into your backyard.

dfrye120.bsky.social reposted

KateLynne
@bigideakate.bsky.social

Replying to @erincle.bsky.social

Remember when Republicans made the law that would not allow tax money to go toward abortions even though they were legal at that time? They created the precedence for defunding ice detention centers.

dfrye120.bsky.social reposted

Dave Vetter
@davidrvetter.bsky.social

"A modern-day concentration camp ... People have been killed by the staff here." Irish citizen Seamus Culleton has been in ICE detention since September, despite having a valid work permit and his own business in the US.

dfrye120.bsky.social reposted

David @ InnoVirtuoso
@innovirtuoso.bsky.social

🌐 Interpol teams up with cybersecurity giants to combat cybercrime! Discover how they’re joining forces for a safer digital world. 🚀 Read more: https://innovirtuoso.com/cybersecurity/operation-secure-interpol-and-cybersecurity-giants-unite-against-cybercrime/ #Cybersecurity #Interpol #CyberCrime ✨

innovirtuoso.comInterpol and Cybersecurity Giants Unite Against CybercrimeOperation Secure is a major initiative aimed at combating cybercrime, led by Interpol and key cybersecurity firms. Involving law enforcement from 26...

dfrye120.bsky.social reposted

David @ InnoVirtuoso
@innovirtuoso.bsky.social

🚨 Critical Linux Flaws Discovered! 😱 Exploits allowing root access could jeopardize systems. Check out the details to secure your setup! 🔒 #Linux #Cybersecurity #InfoSec https://innovirtuoso.com/cybersecurity/critical-linux-flaws-discovered-allowing-root-access-exploits/

innovirtuoso.comCritical Linux Flaws Discovered Allowing Root Access ExploitsIn a world where cybersecurity threats are increasingly sophisticated, two newly discovered vulnerabilities within Linux systems have grabbed the tech community's attention. These flaws, which could potentially allow unprivileged users to gain root access across popular Linux distributions, undersco

dfrye120.bsky.social reposted

David @ InnoVirtuoso
@innovirtuoso.bsky.social

🚨 Watch out for "spear phishing"! 🎯 Attackers target individuals with personalized emails, often appearing to come from trusted sources. They use this tactic to steal sensitive info. Always verify before clicking! #Phishing #InfoSec

dfrye120.bsky.social reposted

God
@thegodshow.com

If I were to go live to do a marathon fundraising drive for Minneapolis, what charity could I or should I raise money for? Where would a few thousand dollars really help right now?

dfrye120.bsky.social reposted

InfoSec
@infosec.skyfleet.blue

Claude Opus 4.6 Released with Improved Cybersecurity, Validating 500+ high-severity Vulnerabilities

cybersecuritynews.comClaude Opus 4.6 Released with Improved Cybersecurity, Validating 500+ high-severity VulnerabilitiesAnthropic’s latest AI model autonomously identifies critical flaws in decades-old codebases, raising the stakes for both defenders and attackers Anthropic released Claude Opus 4.6 on February 5, 2026, with dramatically enhanced cybersecurity capabilities that have already identified more than 500 previously unknown high-severity vulnerabilities in open-source software. The AI model discovered these zero-day flaws without specialized tooling or custom scaffolding, demonstrating that large language models can now match or exceed traditional vulnerability discovery methods in both speed and sophistication. Unlike traditional fuzzing tools that bombard code with random inputs, Claude Opus 4.6 employs human-like reasoning to identify vulnerabilities. The model reads Git commit histories, analyzes code patterns, and understands programming logic to construct targeted exploits. In testing against some of the most extensively fuzzed codebase projects with millions of CPU hours invested in automated testing, Claude discovered high-severity vulnerabilities that had remained undetected for decades. Anthropic’s research team placed Claude in a virtual machine environment with access to standard development utilities and vulnerability analysis tools, but provided no specialized instructions. This “out-of-the-box” testing approach revealed the model’s inherent capability to reason about cybersecurity without task-specific training. Notable Vulnerability Discoveries GhostScript: Git History Analysis When fuzzing and manual analysis failed to yield results in GhostScript (a widely-used PostScript and PDF processor), Claude pivoted to examining the project’s Git commit history. The model identified a security-relevant commit related to stack bounds checking for font handling, then reasoned that if bounds checking was added, the code before that commit was vulnerable. Claude subsequently located similar unpatched vulnerabilities in other code paths, specifically finding that a function call in gdevpsfx.c lacked the bounds checking that had been added elsewhere. OpenSC: Unsafe String Operations For OpenSC, a smart card data processing utility, Claude identified multiple strcat operations that concatenated strings without proper length validation. The model recognized that a 4096-byte buffer could overflow when specific conditions were met, demonstrating the ability to reason about memory safety in C code. Traditional fuzzers had rarely tested this code path due to its numerous preconditions, but Claude focused directly on the vulnerable fragment. CGIF: Compression Algorithm Exploitation Perhaps most impressively, Claude discovered a vulnerability in the CGIF library that required a deep understanding of the LZW compression algorithm used in GIF files. The model recognized that CGIF assumed compressed data would always be smaller than the original, normally a safe assumption, but then reasoned how to trigger the edge case where LZW compression produces output larger than input. Claude generated a proof of concept by deliberately maxing out the LZW symbol table to force the insertion of “clear” tokens, causing a buffer overflow. This vulnerability is particularly significant because even 100% line and branch coverage from traditional testing would not have detected it the flaw requires a very specific sequence of operations that demands conceptual understanding of the algorithm. To prevent false positives that could burden open-source maintainers, Anthropic implemented extensive validation procedures. The team focused on memory corruption vulnerabilities because they can be validated relatively easily using crash monitoring and address sanitizers. Claude itself critiqued, de-duplicated, and re-prioritized crashes, while Anthropic’s security researchers validated each vulnerability and initially wrote patches by hand. As findings volumes grew, external security researchers were brought in to assist with validation and patch development. All 500+ discovered vulnerabilities have been validated as genuine (not hallucinated) and patches are now landing in affected projects. Anthropic has begun reporting vulnerabilities to maintainers and continues working to patch remaining issues. Recognizing the dual-use risk of enhanced cybersecurity capabilities, Anthropic introduced new detection layers alongside Claude Opus 4.6’s release. The company developed six new cybersecurity-specific probes that measure model activations during response generation to detect potential misuse at scale. Updated enforcement workflows may include real-time intervention to block traffic detected as malicious. Anthropic acknowledges this will create friction for legitimate security research and defensive work, and has committed to working with the security research community to address these challenges. The company trained the model on over 10 million adversarial prompts and implemented refusal protocols for prohibited activities, including data exfiltration, malware deployment, and unauthorized penetration testing. Anthropic’s research demonstrates that AI models can now find meaningful zero-day vulnerabilities in well-tested codebases, potentially exceeding the speed and scale of expert human researchers. The company scored Claude Opus 4.6’s performance across 40 cybersecurity investigations, with the model producing the best results in 38 of 40 cases compared to previous Claude 4.5 models in blind rankings. The development suggests industry-standard 90-day vulnerability disclosure windows may become inadequate for the volume and pace of LLM-discovered bugs. Security teams will need new workflows to keep pace with automated vulnerability discovery at scale. Anthropic is prioritizing open-source software for vulnerability discovery because it runs across enterprise systems and critical infrastructure, with vulnerabilities that ripple across the internet. Many open-source projects are maintained by small teams or volunteers lacking dedicated security resources, making validated bug reports and reviewed patches particularly valuable. The company emphasized this represents an inflection point where defenders must move quickly to secure code while a window of advantage exists. Previous Anthropic research demonstrated that Claude models can execute multi-stage attacks on networks with dozens of hosts using standard open-source tools by finding and exploiting known vulnerabilities, underscoring the importance of prompt patching. Anthropic characterizes this work as just the beginning of scaled efforts to leverage AI for defensive cybersecurity. The company plans to continue automating patch development to reliably remediate bugs as they’re discovered. As language model capabilities continue advancing, the security community faces an urgent need to accelerate defensive AI adoption while managing the risks of offensive misuse. Follow us on Google News , LinkedIn , and X for daily cybersecurity updates. Contact us to feature your stories. The post Claude Opus 4.6 Released with Improved Cybersecurity, Validating 500+ high-severity Vulnerabilities appeared first on Cyber Security News .

dfrye120.bsky.social reposted

Simon Willison
@simonwillison.net

The CIA just stopped publishing their World Factbook and took every page, including the archived copies of previous versions! This sucks. It was public domain, so I recovered the 2020 edition (the last one published as a zip file) and shared it to GitHub simonwillison.net/2026/Feb/5/t...

simonwillison.netSpotlighting The World Factbook as We Bid a Fond FarewellSomewhat devastating news today from the CIA: One of CIA’s oldest and most recognizable intelligence publications, The World Factbook, has sunset. There's not even a hint as to why they …
dfrye120.bsky.social
@dfrye120.bsky.social

Cybersecurity news update: Russian state hackers are weaponizing Microsoft office documents to gain persistent access to targeted networks. If you’re managing enterprise environments, this should be in your radar. Source: lnkd.in/eMP-H3a4 #cybersecurity #apt28 #infosec

dfrye120.bsky.social reposted

Aaron Rupar
@atrupar.com

BERNIE SANDERS: Do vaccines cause autism? BHATTACHARYA: I do not believe that the measles vaccine causes autism SANDERS: Nah. Uh uh. I didn't ask measles. Do vaccines cause autism? BHATTACHARYA: I have not seen a study that suggests any single vaccine causes autism

dfrye120.bsky.social reposted

InfoSec
@infosec.skyfleet.blue

30 Wind and Solar Farms in Poland Faced Coordinated Cyberattacks

cybersecuritynews.com30 Wind and Solar Farms in Poland Faced Coordinated CyberattacksOn December 29, 2025, Poland faced a coordinated assault targeting more than 30 wind and solar farms, alongside a large combined heat and power plant and a manufacturing facility. The attacks occurred during severe winter weather, when temperatures dropped and snowstorms threatened the nation’s energy stability. All operations had purely destructive intentions, designed to damage critical infrastructure rather than steal information. These coordinated strikes represent the first documented destructive operation by a sophisticated attack group, marking a significant escalation in threats against European energy infrastructure. The assault targeted power substations serving as connection points between renewable energy sources and the distribution network. Industrial automation devices at these locations became prime objectives for the attackers. These systems included remote terminal units managing telecontrol operations, human-machine interfaces displaying facility status, protection relays guarding against electrical damage, and communication equipment such as routers and network switches. After establishing access to internal networks , attackers conducted detailed reconnaissance before executing their destructive plan through damaged firmware and custom-built wiper malware on December 29 morning. Communication channels between farms and the distribution system operator were disrupted, though electricity generation continued unaffected. Cert.pl analysts identified the attack infrastructure used in the operation, revealing significant overlap with infrastructure associated with threat groups known as “Static Tundra” by Cisco, “Berserk Bear” by CrowdStrike, “Ghost Blizzard” by Microsoft, and “Dragonfly” by Symantec. These researchers noted the attackers demonstrated strong capabilities against industrial devices and historical focus on energy sectors. Public analysis indicated this represented the first destructive campaign publicly attributed to this activity cluster, signaling an important tactical shift in their operations. Wiper Malware Deployment and Infection Mechanism The attackers employed identical wiper malware across multiple targets, deploying custom-built destructive software after gaining privileged access through prolonged infrastructure infiltration. The malware’s operation centered on irreversible data destruction across targeted networks. After establishing footholds through compromised accounts and stolen operational information, attackers prepared partially automated attack sequences ready for simultaneous activation. When deployed against the combined heat and power plant, the malware’s execution was blocked by endpoint detection and response technology already running on the organization’s systems. The manufacturing sector company faced similar coordinated assault, though the specific objective differed from energy targets. This attack pattern demonstrated sophisticated planning, with the malware serving as the final payload following extensive preparation and network reconnaissance across multiple weeks of covert presence within target environments. Follow us on  Google News ,  LinkedIn , and  X  to Get More Instant Updates ,  Set CSN as a Preferred Source in  Google . The post 30 Wind and Solar Farms in Poland Faced Coordinated Cyberattacks appeared first on Cyber Security News .

dfrye120.bsky.social reposted

InfoSec
@infosec.skyfleet.blue

Metasploit Releases 7 New Exploit Modules covering FreePBX, Cacti and SmarterMail

cybersecuritynews.comMetasploit Releases 7 New Exploit Modules covering FreePBX, Cacti and SmarterMailThe latest update to the Metasploit Framework this week provides a significant enhancement for penetration testers and red teamers, introducing seven new exploit modules targeting commonly used enterprise software. The highlight of this release is a sophisticated trio of modules directed at FreePBX , alongside critical remote code execution (RCE) capabilities for Cacti and SmarterMail. This update underscores the continued risk posed by chaining authentication bypass flaws with secondary vulnerabilities to achieve full system compromise. FreePBX Vulnerability Chaining The most significant addition to the framework involves three distinct modules targeting FreePBX, an open-source GUI that controls Asterisk (PBX). Researchers Noah King and msutovsky-r7 have developed a method to chain multiple vulnerabilities to escalate privileges from an unauthenticated state to remote code execution. The attack chain begins with CVE-2025-66039, an authentication bypass vulnerability that allows unauthorized actors to circumvent login protocols. Once the authentication barrier is breached, the framework offers two distinct paths to RCE. The first exploit path leverages a SQL injection vulnerability identified as CVE-2025-61675. By injecting malicious SQL commands, an attacker can manipulate the database to insert a new job into the cron_job table, effectively scheduling the execution of arbitrary code. Alternatively, the second module exploits CVE-2025-61678, an unrestricted file upload flaw present in the firmware upload function. This allows the attacker to upload a webshell directly to the server, granting immediate control. A third auxiliary module in this set utilizes the same SQL injection flaw to simply create a rogue administrator account, demonstrating the versatility of the exploit chain. Critical RCE in Cacti and SmarterMail Beyond the VoIP sector, the update addresses severe flaws in monitoring and communication platforms. A new module targets Cacti, a popular network monitoring tool, specifically exploiting CVE-2025-24367. This vulnerability affects versions prior to 1.2.29 and permits unauthenticated remote code execution via the graph template mechanism. Given Cacti’s widespread use in infrastructure monitoring, this module represents a high-priority test case for network administrators. Simultaneously, the framework has added support for exploiting CVE-2025-52691 in SmarterTools SmarterMail. This unauthenticated file upload vulnerability relies on path traversal manipulation within the guid variable. The module is notably versatile regarding the underlying operating system. If the target is running Windows, the exploit drops a webshell in the webroot directory. Conversely, if the target is a Linux environment, it achieves persistence and execution by creating a cron job in /etc/cron.d . Persistence Tools and Core Fixes The release also enhances post-exploitation capabilities with new persistence modules. A new Burp Suite extension persistence module allows attackers to install a malicious extension on both the Pro and Community versions, causing it to execute whenever the user launches the application. Additionally, the team has consolidated Windows and Linux SSH key persistence into a single, unified module to streamline operations. On the maintenance front, several critical bugs were addressed. A formatting issue that prevented hash data from being compatible with the John the Ripper password cracker has been resolved. Furthermore, a logic error in the SSH login scanner, which previously reported successful logins as failures when sessions could not be opened, has been fixed to ensure accurate reporting during engagements. Module Name CVE ID Target System Impact FreePBX Endpoint SQLi CVE-2025-66039 , CVE-2025-61675 FreePBX Remote Code Execution FreePBX Firmware Upload CVE-2025-66039, CVE-2025-61678 FreePBX Remote Code Execution FreePBX Admin Creation CVE-2025-66039, CVE-2025-61675 FreePBX Privilege Escalation Cacti Graph Template RCE CVE-2025-24367 Cacti (< 1.2.29) Remote Code Execution SmarterMail GUID Upload CVE-2025-52691 SmarterMail Remote Code Execution Burp Extension Persistence N/A Burp Suite Persistence SSH Key Persistence N/A Linux / Windows Persistence Follow us on Google News , LinkedIn , and X for daily cybersecurity updates. Contact us to feature your stories. The post Metasploit Releases 7 New Exploit Modules covering FreePBX, Cacti and SmarterMail appeared first on Cyber Security News .

dfrye120.bsky.social reposted

John Skiles Skinner
@skiles.blue

A manual for ICE's immigrant-targeting computer system, Palantir ELITE, was leaked today. Let's look at it, then step back to evaluate how far we've come along a dangerous road and where that road might take us. 🧵

404media.coHere is the User Guide for ELITE, the Tool Palantir Made for ICE404 Media is publishing a version of the user guide for ELITE, which lets ICE bring up dossiers on individual people and provides a “confidence score” of their address.

dfrye120.bsky.social reposted

WIRED
@wired.com

Plus: AI agent OpenClaw gives cybersecurity experts the willies, China executes 11 scam compound bosses, a $40 million crypto theft has an unexpected alleged culprit, and more. www.wired.com/story/securi...

wired.comJeffrey Epstein Had a ‘Personal Hacker,’ Informant ClaimsPlus: AI agent OpenClaw gives cybersecurity experts the willies, China executes 11 scam compound bosses, a $40 million crypto theft has an unexpected alleged culprit, and more.

dfrye120.bsky.social reposted

InfoSec
@infosec.skyfleet.blue

SCADA Vulnerability Triggers DoS, Potentially Disrupting Industrial Operations

cybersecuritynews.comSCADA Vulnerability Triggers DoS, Potentially Disrupting Industrial OperationsA medium-severity vulnerability in the Iconics Suite SCADA system that could allow attackers to trigger denial-of-service conditions on critical industrial control systems. The flaw, tracked as CVE-2025-0921, affects supervisory control and data acquisition infrastructure widely deployed across automotive, energy, and manufacturing sectors. Vulnerability Overview CVE-2025-0921 stems from an execution-with-unnecessary-privileges weakness in multiple services within Mitsubishi Electric Iconics Digital Solutions GENESIS64. The vulnerability has a CVSS score of 6.5, which is classified as medium severity. Successful exploitation enables attackers to misuse privileged file system operations to elevate privileges and corrupt critical system binaries, ultimately compromising system integrity and availability. CVE Identifier Vulnerability Description CVSS Score CVE-2025-0921 Execution with unnecessary privileges vulnerability in multiple services of Mitsubishi Electric Iconics Digital Solutions GENESIS64 6.5 (Medium) The vulnerability was discovered during a comprehensive security assessment conducted by Unit 42 researchers Asher Davila and Malav Vyas in early 2024. This finding represents one of six vulnerabilities identified in Iconics Suite versions 10.97.2 and earlier for Microsoft Windows platforms. The researchers previously disclosed five related vulnerabilities affecting the same SCADA platform, with CVE-2025-0921 emerging as an additional threat during their investigation. Permissions of GraphWorX64(source: paloaltonetworks) According to Mitsubishi Electric’s security advisory, the vulnerability impacts all versions of GENESIS64, MC Works64, and GENESIS version 11.00. Iconics Suite maintains hundreds of thousands of installations across more than 100 countries, spanning critical infrastructure sectors such as government facilities, military installations, water and wastewater treatment plants, utilities, and energy providers. Technical Exploitation Details The vulnerability resides in the Pager Agent component of AlarmWorX64 MMX, the alarm management system that monitors industrial processes. Attackers with local access can exploit the flaw by manipulating the SMSLogFile path configuration stored in the IcoSetup64.ini file located in the C:\ProgramData\ICONICS directory. newly altered cng.sys file created by the exploit(source:PaloAltonetwork) The attack chain involves creating symbolic links from the log file location to target system binaries. When administrators send test messages or the system automatically triggers alerts, logging information follows the symbolic link and overwrites critical drivers such as cng.sys, which provides cryptographic services for Windows system components. Upon system reboot, the corrupted driver causes boot failures, trapping the machine in an endless repair loop and rendering the OT engineering workstation inoperable. Endless Windows boot loop caused by the corrupted driver (source: paloaltonetworks) Researchers demonstrated that exploitation becomes significantly easier when combined with CVE-2024-7587, a previously disclosed vulnerability in the GenBroker32 installer that grants excessive permissions to the C:\ProgramData\ICONICS directory, allowing any local user to modify critical configuration files. However, attackers could still exploit CVE-2025-0921 independently if log files become writable due to misconfiguration, other vulnerabilities, or social engineering . Mitsubishi Electric has released patches for GENESIS version 11.01 and later, which customers can download from the Iconics Community Resource Center. For GENESIS64 users, a fixed version is currently under development and will be released in the near future. The vendor has indicated no plans to release patches for MC Works64, requiring customers to implement mitigations in the meantime. Follow us on Google News , LinkedIn , and X for daily cybersecurity updates. Contact us to feature your stories. The post SCADA Vulnerability Triggers DoS, Potentially Disrupting Industrial Operations appeared first on Cyber Security News .

dfrye120.bsky.social reposted

InfoSec
@infosec.skyfleet.blue

Wireshark 4.6.3 Released With Vulnerabilities Dissector and Parser Crash

cybersecuritynews.comWireshark 4.6.3 Released With Vulnerabilities Dissector and Parser CrashThe Wireshark Foundation has officially released Wireshark 4.6.3, the latest update to the world’s most popular network protocol analyzer. This release is critical for network administrators, security analysts, and developers, as it addresses multiple security vulnerabilities that could lead to denial-of-service (DoS) conditions through dissector and parser crashes. Given Wireshark’s widespread use in troubleshooting, software development, and educational contexts, these stability fixes are essential for maintaining reliable network visibility. Wireshark is a cornerstone tool for inspecting network traffic, but its complex parsing engines can sometimes be susceptible to malformed packets. The 4.6.3 update specifically targets flaws where crafted packets could trigger infinite loops or crash the application, effectively blinding a security team during an analysis session. Security Vulnerabilities Fixed The primary focus of this release is the remediation of four specific vulnerabilities identified in the dissector and parser modules. These flaws allow attackers to disrupt Wireshark operations by injecting malformed data into a network stream or capture file. The following table details the security issues resolved in version 4.6.3: Vulnerability ID Component Issue Type Reference wnpa-sec-2026-01 BLF File Parser Application Crash Issue 20880 wnpa-sec-2026-02 IEEE 802.11 Dissector Dissector Crash Issue 20939 wnpa-sec-2026-03 SOME/IP-SD Dissector Dissector Crash Issue 20945 wnpa-sec-2026-04 HTTP3 Dissector Infinite Loop Issue 20944 The most notable among these is the HTTP3 dissector infinite loop ( wnpa-sec-2026-04 ). Infinite loops are particularly dangerous in automated monitoring environments, as they can consume excessive CPU resources, rendering the analysis machine unresponsive. Similarly, the crashes in the IEEE 802.11 (Wi-Fi) and SOME/IP-SD modules highlight the risks associated with analyzing wireless and automotive service-oriented protocols. Bug Fixes and Stability Beyond security patches, Wireshark 4.6.3 includes several functional improvements and bug fixes that enhance the user experience across different platforms. Solaris Build Fix : A compilation error affecting Wireshark 4.6.0 on Solaris systems (related to pcapio.c ) has been resolved, restoring compatibility for users on that infrastructure. RTP Player : A frustrating bug where RTP player streams could not be stopped has been fixed, allowing for smoother analysis of VoIP traffic. Data Parsing Errors : Issues with missing data in HomePlug messages and incorrect parsing of IEEE 802.11 QoS fields when A-MSDU is present have been corrected. MaxMind DB : A crash occurring when switching profiles with MaxMind DB enabled or disabled has been patched. As with every release , the Wireshark development team has updated support for a wide array of protocols to ensure accurate decoding of modern network traffic. New or updated support is available for: Core Protocols : DHCP, SSH, HTTP3, and QUIC. Telecommunications : LTE RRC, NAS-5GS, and H.248. Industrial/IoT : HomePlug AV, SOME/IP-SD, and IEEE 802.11. Additionally, capture file support has been improved for 3GPP TS 32.423 Trace, BLF, NetScreen, and Viavi Observer formats. Wireshark is maintained by the Wireshark Foundation, a nonprofit dedicated to promoting protocol analysis education. The project relies on community contributions to sustain its development. Professionals looking to deepen their expertise can attend SharkFest, the official developer and user conference, or pursue the Wireshark Certified Analyst credential. Users are strongly advised to upgrade to Wireshark 4.6.3 immediately to mitigate the risks associated with the patched vulnerabilities. The installer and source code are available on the official Wireshark download page. Follow us on Google News , LinkedIn , and X for daily cybersecurity updates. Contact us to feature your stories. The post Wireshark 4.6.3 Released With Vulnerabilities Dissector and Parser Crash appeared first on Cyber Security News .

dfrye120.bsky.social reposted

Zack Whittaker
@zackwhittaker.com

A failed cyberattack that targeted parts of Poland's energy grid in late-December was caused by Russian government hackers known as Sandworm, according to ESET. The security firm obtained a copy of the "wiper" malware that tried to destroy computers critical to keeping homes warm and powered.

techcrunch.comResearchers say Russian government hackers were behind attempted Poland power outage | TechCrunchSecurity researchers have attributed the attempted use of destructive "wiper" malware across Poland's energy infrastructure in late December to a Russian-backed hacking group known for causing power o...