X XFediYour place in the Fediverse
XFEDI

Conversation

ActivityPub
↳ In reply to a post

9/11 LMCache's multiprocess server runs code from unauthenticated pickle messages. Keep the port off routable addresses until a stable fix ships.
https://secblog.reedcloudsec.com/secblog-weekly-issue-007/#:~:text=Unpatched%20Critical%20LMCache%20Flaw

SecBlogSecBlog Weekly 007: Patch Tuesday, Ivanti Zero-Day, SAP FlawMicrosoft's record Patch Tuesday, an Ivanti zero-day chain, SonicWall exploitation attempts, an IDCF Cloud ransomware outage, SAP's OAuth flaw, npm and certificate-trust hijack risks, an LMCache RCE, and a Ledger implant.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 30, 2026 · 17:00 UTC

Replies
↳ In reply to a post

10/11 Ledger wallets from one reseller carried a hidden implant that steals the recovery phrase. Security hardware must come from an authorized channel.
https://secblog.reedcloudsec.com/secblog-weekly-issue-007/#:~:text=Ledger%20confirms%20spy%20chip

SecBlogSecBlog Weekly 007: Patch Tuesday, Ivanti Zero-Day, SAP FlawMicrosoft's record Patch Tuesday, an Ivanti zero-day chain, SonicWall exploitation attempts, an IDCF Cloud ransomware outage, SAP's OAuth flaw, npm and certificate-trust hijack risks, an LMCache RCE, and a Ledger implant.
↩ Reply ♡ 0 · ↻ 0 ↗ Original