#security (2022-03)

Archive: https://archive.sweetops.com/security/

2022-03-17

Zachary Loeber avatar
Zachary Loeber
01:52:20 PM

https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html

New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containersattachment image

A new vulnerability in the CRI-O engine allows attackers to escape Kubernetes containers and gain root access.

2022-03-19

Jim Park avatar
Jim Park
09:00:17 PM

https://arstechnica.com/information-technology/2022/03/sabotage-code-added-to-popular-npm-package-wiped-files-in-russia-and-belarus/ TL;DR: open source developer releases protestware in popular node library that wipes computers with russian / belarusian ips.

Sabotage: Code added to popular NPM package wiped files in Russia and Belarusattachment image

When code with millions of downloads nukes user files, bad things can happen.

2022-03-21

jaydhulia avatar
jaydhulia
06:01:48 AM

https://twitter.com/mg/status/1506109152665382920?s=21

attachment image

Oh man, if this it what it looks (Okta got popped)… Blue Team everywhere is gonna be crazy busy. https://pbs.twimg.com/media/FObGSr8VIAcOyh2.jpg

attachment image

https://pbs.twimg.com/media/FObGSr6VIAAzyQO.jpg

    keyboard_arrow_up