Ernesto Pérez E.

MSc | ECIH | CEH | SecurityX | Linux+
Rocky/AlmaLinux | docker | KVM

Ciberseguridad, Soporte para Linux
English spoken

[Da7rkx0 @da7rkx0]

LiteLLM just got a CVSS 10.0 exploit chain. CVE-2026-42271 command injection plus a Starlette host header bypass equals unauthenticated RCE on your AI gateway. If you are running LiteLLM in production without patching, attackers can steal every API key your proxy touches.

[Ernesto Pérez E. @EcuaLinux]

@Issu3012 Unconfirmed. Primer paso es: confirmar. Parte del triage.

[AlmaLinux @AlmaLinux]

Patched kernels for CVE-2026-46333 are now in production repos.

A single dnf upgrade and reboot gets you patched kernels for ssh-keysign-pwn and Fragnesia 👇 https://t.co/BdTyfPA9z1

[Calif @calif_io]

Introducing HTTP/2 Bomb: a remote DoS in nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora. A single client pins 32GB of server memory in 10s. Found by Codex.

Blog post: https://t.co/WO9MeExoun

PoCs: https://t.co/NpVgEHBHPl

[Ernesto Pérez E. @EcuaLinux]

@RaminNasibov Magical Kid Wiz.

[Aikido Security @AikidoSecurity]

GitHub was hacked via a malicious VS Code extension that compromised an employee’s laptop.

This is *exactly* why we built 'Aikido Device Protection'
https://t.co/kfS8HRkZOV

It protects devices from installing malicious IDE extensions, browser extensions, and packages.

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Ernesto Pérez E. @EcuaLinux]

@alfredovelazco Aquí también se usa

[Cyber Security News @The_Cyber_News]

🚨 cPanel 0-Day Vulnerability Actively Exploited in the Wild — PoC Released

Source: https://t.co/VdRPPtkM3W

A critical authentication bypass vulnerability in cPanel & WHM has been confirmed to be actively exploited in the wild, sending shockwaves through the global web hosting industry.

The flaw, tracked as CVE-2026-41940, allows unauthenticated attackers to bypass login mechanisms entirely, potentially granting root-level access to affected hosting control panels. A public proof-of-concept (PoC) exploit has since been released, raising the urgency for immediate patching.

The vulnerability resides in the authentication layer of cPanel & WHM software, including DNSOnly deployments.

#cybersecuritynews #Cpanel

[Linuxiac @linuxiac]

Firefox 149 quietly adds Brave’s adblock-rust engine as an experimental content-blocking prototype, disabled by default and without filter lists.
https://t.co/ATX5QVDVK3

#Mozilla #Firefox #OpenSource

[SoyITPro @SoyITPro]

🚨 Nueva vulnerabilidad crítica en Linux

El fallo Pack2TheRoot (CVE-2026-41651) afecta a PackageKit y permite a usuarios locales obtener permisos root.

👉 Presente desde 2014 en múltiples distros (Ubuntu, Debian, Fedora, RockyLinux).

[Ernesto Pérez E. @EcuaLinux]

@MicrosoftHelps myuser@linux4ever:~$ cat /etc/redhat-release
AlmaLinux release 10.1 (Heliotrope Lion)

[karen @killmyaffairs]

los q confunden "a ver" con "haber" deberian hirviendo como corregir eso

[Branko @brankopetric00]

A backup isn't a backup until you have successfully restored from it. Until then, it is just a very expensive file upload called 'Schrödinger's Data'.

[ꜱᴀɴᴊɪɪɪ @RowdyRx07]

Finally, I've completed my 2025 goals! 😎

[Ernesto Pérez E. @EcuaLinux]

https://t.co/jwDbby0s1I

[Dr Paul Dorfman @dorfman_p]

'Seemingly unstoppable growth of renewable energy worldwide 2025 Breakthrough of the Year'.
https://t.co/8mZH7fpC13

[Peter Girnus 🦅 @gothburz]

Last quarter I rolled out Microsoft Copilot to 4,000 employees.

$30 per seat per month.

$1.4 million annually.

I called it "digital transformation."

The board loved that phrase.

They approved it in eleven minutes.

No one asked what it would actually do.

Including me.

I told everyone it would "10x productivity."

That's not a real number.

But it sounds like one.

HR asked how we'd measure the 10x.

I said we'd "leverage analytics dashboards."

They stopped asking.

Three months later I checked the usage reports.

47 people had opened it.

12 had used it more than once.

One of them was me.

I used it to summarize an email I could have read in 30 seconds.

It took 45 seconds.

Plus the time it took to fix the hallucinations.

But I called it a "pilot success."

Success means the pilot didn't visibly fail.

The CFO asked about ROI.

I showed him a graph.

The graph went up and to the right.

It measured "AI enablement."

I made that metric up.

He nodded approvingly.

We're "AI-enabled" now.

I don't know what that means.

But it's in our investor deck.

A senior developer asked why we didn't use Claude or ChatGPT.

I said we needed "enterprise-grade security."

He asked what that meant.

I said "compliance."

He asked which compliance.

I said "all of them."

He looked skeptical.

I scheduled him for a "career development conversation."

He stopped asking questions.

Microsoft sent a case study team.

They wanted to feature us as a success story.

I told them we "saved 40,000 hours."

I calculated that number by multiplying employees by a number I made up.

They didn't verify it.

They never do.

Now we're on Microsoft's website.

"Global enterprise achieves 40,000 hours of productivity gains with Copilot."

The CEO shared it on LinkedIn.

He got 3,000 likes.

He's never used Copilot.

None of the executives have.

We have an exemption.

"Strategic focus requires minimal digital distraction."

I wrote that policy.

The licenses renew next month.

I'm requesting an expansion.

5,000 more seats.

We haven't used the first 4,000.

But this time we'll "drive adoption."

Adoption means mandatory training.

Training means a 45-minute webinar no one watches.

But completion will be tracked.

Completion is a metric.

Metrics go in dashboards.

Dashboards go in board presentations.

Board presentations get me promoted.

I'll be SVP by Q3.

I still don't know what Copilot does.

But I know what it's for.

It's for showing we're "investing in AI."

Investment means spending.

Spending means commitment.

Commitment means we're serious about the future.

The future is whatever I say it is.

As long as the graph goes up and to the right.

[Linuxiac @linuxiac]

Ventoy 1.1.08, an open-source tool for creating a bootable USB drive to load multiple ISO files, now supports FreeBSD 15.0.
https://t.co/fBGYH7sDsK

#OpenSource #FreeBSD

[Phoronix @phoronix]

FreeBSD 15.0 Now Officially Available With Many Software Updates, Reproducible Builds

Really great release with FreeBSD 15! Benchmarks soon.

https://t.co/9fNShFkbID