El Gordo Redes

| (ノಠ益ಠ)ノ彡┻━┻ |
#Bitcoin

[El Gordo Redes @Guidohk]

@ValtoryDev No veo fallas en su logica

[International Cyber Digest @IntCyberDigest]

‼️🚨 Unauthenticated attackers are gaining SYSTEM on domain controllers with crafted packets.

The vulnerability being exploited is CVE-2026-41089, a CVSS 9.8 hole in Windows Netlogon, and exploitation in the wild has been confirmed.

A patch has existed since May 12. Every DC still behind is not just vulnerable, but according to the Centre for Cybersecurity Belgium are also actively being pwnd.

[El Gordo Redes @Guidohk]

@SeguInfo Cuando salio el Draft hace unos meses se le cagaron de risa muchos, ahora cada vez lo mencionan mas y lo ven posible y una realidad.

[El Gordo Redes @Guidohk]

@sweexx9 De donde sacaste tanto texto para decir tantas pelotudeces juntas? son todas herramientas de Wifi, Bluetooth o de espectros similares, no tenes nada satelital ahi.

[The Hacker News @TheHackersNews]

🚨 Ivanti, Fortinet, and SAP releases patches for critical flaws that could enable code execution, admin takeover, or data exposure.

The worst one hits Ivanti Sentry, a CVSS 10.0 remote root-level RCE with no login needed.

FortiSandbox got a 9.1 command injection fix, and SAP patched four critical bugs, including SAML identity tampering.

Read: https://t.co/nAbhKKRAoP

[Cyber Security News @The_Cyber_News]

🚨 Fortinet FortiSandbox Vulnerability Allows Attackers to Execute Unauthorized Commands

Source: https://t.co/e9XjG1eXZT

Fortinet has disclosed a critical security vulnerability in its FortiSandbox product line that could allow unauthenticated remote attackers to execute arbitrary OS commands through the web interface.

The flaw, tracked as CVE-2026-25089 and assigned a CVSSv3 score of 9.1 (Critical), affects multiple versions of FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS deployments.

The vulnerability stems from an improper neutralization of special elements used in an OS command (CWE-78) commonly known as OS command injection present in the FortiSandbox Web UI.

By sending specifically crafted HTTP requests, a remote, unauthenticated attacker can exploit this flaw to execute unauthorized commands on the underlying system.

#cybersecuritynews

[El Gordo Redes @Guidohk]

@MaxArgento33 un podio falso

[El Gordo Redes @Guidohk]

@SpacePeronista2 Decirte mogolico es poco ya, te queda chico.

[The Hacker News @TheHackersNews]

🚨 A single domain user could run code on your Veeam Backup Server.

Veeam has patched a critical RCE flaw (CVE-2026-44963, CVSS 9.4) in Backup & Replication.

All v12 builds up to 12.3.2.4465 are affected. Fixed in 12.3.2.4854. v13.x is safe.

Patch now: https://t.co/ZIuU1eGBif

[Cyber Security News @The_Cyber_News]

🚨 Microsoft Patch Tuesday June 2026 – 198 Vulnerabilities Fixed, Including 3 Zero-days

Source: https://t.co/Csceg0d4Iv

Microsoft has released its June 2026 Patch Tuesday security updates, addressing a hefty 198 vulnerabilities across its product ecosystem.

The June rollout, published on June 9, 2026, stands out not only for its volume but also for the inclusion of three zero-day vulnerabilities that were actively exploited or publicly known before a fix was available.

Given three actively known zero-days and multiple Critical RCEs, security teams should test and deploy this month's updates without delay, prioritizing BitLocker, HTTP.sys, Remote Desktop, and Hyper-V hosts.

#cybersecuritynews

[BleepingComputer @BleepinComputer]

New Veeam vulnerability exposes backup servers to RCE attacks
https://t.co/EuCuR5no8l

https://t.co/EuCuR5no8l

[El Gordo Redes @Guidohk]

@Marce_I_P Se parcheo mas de 400 vulnerabilidades en cada producto popular, veremos cuantas mas salen despues

[El Gordo Redes @Guidohk]

@perfilrare El 10/10 es subjetivo, pero buscate una joyita, subete ga f ni naru.

[El Gordo Redes @Guidohk]

@Tougi_mahjong si, para nosotros fue la cancion oficial de ese mundial en 2002

[The Hacker News @TheHackersNews]

🚨 WARNING: Google just fixed a Chrome zero-day already used in real attacks.

The bug (CVE-2026-11645) hits V8, Chrome’s JavaScript engine, and can let attackers run code through a crafted HTML page.

Update your browser now.

Read the full story: https://t.co/nt5rUrsDwx

[El Gordo Redes @Guidohk]

@s16_norman @jorgemacri Señora, las ratas de ciudad no contagian hantavirus

Quejate con los sucios que dejan la basura afuera del tacho

[BleepingComputer @BleepinComputer]

Critical UniFi OS bug lets hackers gain root without authentication
https://t.co/qcZgMfWWfV

https://t.co/qcZgMfWWfV

[El Gordo Redes @Guidohk]

@SurferRosa1203 Siempre politizando muertos ustedes.

[El Gordo Redes @Guidohk]

@lanGasparini Si supieras leer podrías ver que es un local

[El Gordo Redes @Guidohk]

@malepichot Siempre usando un muerto políticamente ustedes eh