sky_nox

A critical command injection vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. The vulnerability, assigned CVE-2024-3400, has a CVSS score of 10.0.

Fixes for PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 are in development and are expected to be released by April 14, 2024.

It's interesting this malware uses DNS over HTTPS to avoid detection.

The best way to prevent abuse is not separating children from their families. In Canada, when the government separated indigenous children from their families through sixties scoop and residential schools, the children suffered tremendous abuse by the teachers and staff members.

The separation policy needs to change.

'Samsung itself is aware of these risks. In its privacy policy, the company warned customers to be aware that "if your spoken words include personal or other sensitive information, that information will be among the data captured and transmitted to a third party through your use of Voice Recognition." The language reminded some of the George Orwell classic dystopian novel 1984.'

It's interesting that Japan also has a conviction rate that exceeds 99%, and Canada has a conviction rate of 97%.

That Canadian man smuggled 200 kilos(440 pounds) of meth into China. If he did that in Singapore or Japan, he would get death penalty too.

"The U.S. State Department is now requiring nearly all applicants for U.S. visas to submit their social media usernames, previous email addresses and phone numbers. It's a vast expansion of the Trump administration's enhanced screening of potential immigrants and visitors."

Does freedom of speech only apply to Americans? Can foreigners get penalized and denied entry for what they say on social media?

It allows anyone who knows the default SSH key pair to login as root. How is that not a backdoor?

Backdoor definition: "A backdoor is a method, often secret, of bypassing normal authentication in a computer system."

If you have the Cisco 9000 Series, patch them now! This SSH backdoor allows an unauthenticated, remote attacker to login as root.

"We have no real (at least not this in depth) assurance that products from rival vendors are more secure"

It should be a requirement to similarly audit every supplier. Cisco has a history of backdoors and serious bugs.

Click on his profile. He's the CTO of the company.

The problem is that Asians hit bamboo ceiling when they try to climb the corporate ladder in the west. It's very difficult for them to get into upper management. Google "bamboo ceiling", it's an interesting read.

I read on Reddit that it was a bad translation of "has had children". We don't know who owns the database. It might be from a life insurance company.

Two plane crashes under six months, something is seriously wrong with this model. New planes never crash this much.

Rest in peace to the 157 deceased.