Dan LCM
LightNews LightNews
danlcm.bsky.social
Dan LCM
@danlcm.bsky.social
7 followers 31 following 23 posts
IT and Service Management guy... sounds bored, I know 🤷🏻‍♂️
Posts Replies Media Videos
danlcm.bsky.social
@pbustinduy.bsky.social Estimado ministro, HP me impide usar mi impresora con cartuchos compatibles. Ayuda por favor.
January 2, 2026 at 3:38 PM
danlcm.bsky.social
@facua.org @rubensanchez.tw pues aqui los de @cinesa.bsky.social hoy mismo
October 10, 2025 at 7:25 PM
danlcm.bsky.social
@pbustinduy.bsky.social ministro, hay información de esto?
x.com/Ophuscado/st...

data.consilium.europa.eu/doc/document...
x.com
June 2, 2025 at 10:34 AM
danlcm.bsky.social
Red movil de movistar/O2 caida?
April 16, 2025 at 5:11 PM
danlcm.bsky.social
@rubensanchez.tw De los bloqueos indiscriminados en lnternet por culpa del futbol se puede hacer algo?
April 16, 2025 at 5:08 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware
Ivanti has disclosed details of a now-patched critical security vulnerability impacting its Connect Secure that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2025-22457 (CVSS score: 9.0), concerns a case of a stack-based buffer overflow that could be exploited to execute arbitrary code on affected systems. "A stack-based buffer overflow in Ivanti Connect
thehackernews.com
April 4, 2025 at 9:12 AM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
Cybersecurity researchers have shed light on an "auto-propagating" cryptocurrency mining botnet called Outlaw (aka Dota) that's known for targeting SSH servers with weak credentials. "Outlaw is a Linux malware that relies on SSH brute-force attacks, cryptocurrency mining, and worm-like propagation to infect and maintain control over systems," Elastic Security Labs said in a new analysis
thehackernews.com
April 2, 2025 at 2:03 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
New Security Flaws Found in VMware Tools and CrushFTP — High Risk, No Workaround
Broadcom has issued security patches to address a high-severity security flaw in VMware Tools for Windows that could lead to an authentication bypass. Tracked as CVE-2025-22230, the vulnerability is rated 7.8 on the ten-point Common Vulnerability Scoring System (CVSS). "VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control," Broadcom said in an
thehackernews.com
March 26, 2025 at 12:10 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication
A set of five critical security shortcomings have been disclosed in the Ingress NGINX Controller for Kubernetes that could result in unauthenticated remote code execution, putting over 6,500 clusters at immediate risk by exposing the component to the public internet. The vulnerabilities (CVE-2025-24513, CVE-2025-24514, CVE-2025-1097, CVE-2025-1098, and CVE-2025-1974 ), assigned a CVSS score of
thehackernews.com
March 24, 2025 at 9:01 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads
Cybersecurity researchers have warned about a large-scale ad fraud campaign that has leveraged hundreds of malicious apps published on the Google Play Store to serve full-screen ads and conduct phishing attacks. "The apps display out-of-context ads and even try to persuade victims to give away credentials and credit card information in phishing attacks," Bitdefender said in a report shared with
thehackernews.com
March 18, 2025 at 2:03 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017
An unpatched security flaw impacting Microsoft Windows has been exploited by 11 state-sponsored groups from China, Iran, North Korea, and Russia as part of data theft, espionage, and financially motivated campaigns that date back to 2017. The zero-day vulnerability, tracked by Trend Micro's Zero Day Initiative (ZDI) as ZDI-CAN-25373, refers to an issue that allows bad actors to execute hidden
thehackernews.com
March 18, 2025 at 5:01 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
The financially motivated threat actor known as EncryptHub has been observed orchestrating sophisticated phishing campaigns to deploy information stealers and ransomware, while also working on a new product called EncryptRAT. "EncryptHub has been observed targeting users of popular applications, by distributing trojanized versions," Outpost24 KrakenLabs said in a new report shared with The
thehackernews.com
March 6, 2025 at 1:56 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution
Elastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization dashboard software for Elasticsearch that could result in arbitrary code execution. The vulnerability, tracked as CVE-2025-25012, carries a CVSS score of 9.9 out of a maximum of 10.0. It has been described as a case of prototype pollution. "Prototype pollution in Kibana leads to
thehackernews.com
March 6, 2025 at 1:46 PM
Reposted by Dan LCM
zunder-es.bsky.social
💥 ¡Inauguramos oficialmente la Estación de Carga Ultrarrápida más grande de la autovía A-6! Un enclave estratégico para cubrir la ruta Madrid-Galicia en coche eléctrico.

📍Se encuentra ubicada junto al Restaurante "El Raso", en Villalpando

⚡️20 puntos de carga de hasta 400 kW de potencia.
February 21, 2025 at 2:23 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
PCI DSS 4.0 Mandates DMARC By 31st March 2025
The payment card industry has set a critical deadline for businesses handling cardholder data or processing payments- by March 31, 2025, DMARC implementation will be mandatory! This requirement highlights the importance of preventative measures against email fraud, domain spoofing, and phishing in the financial space. This is not an optional requirement as non-compliance may result in monetary
thehackernews.com
February 20, 2025 at 3:21 PM
Reposted by Dan LCM
aemet.es
¿Qué tiempo nos espera este viernes y el fin de semana?

Viernes: 🌨️Chubascos en la mitad oeste peninsular, comenzando a primera hora por Galicia con acumulaciones significativas. Vientos fuertes o muy fuertes en el norte y oeste peninsular.
Sábado: Chubascos más irregulares en península y Baleares
🧵
February 20, 2025 at 12:01 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
Cisco has confirmed that a Chinese threat actor known as Salt Typhoon gained access by likely abusing a known security flaw tracked as CVE-2018-0171, and by obtaining legitimate victim login credentials as part of a targeted campaign aimed at major U.S. telecommunications companies. "The threat actor then demonstrated their ability to persist in target environments across equipment from multiple
thehackernews.com
February 21, 2025 at 9:06 AM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
Ivanti Patches Critical Flaws in Connect Secure and Policy Secure – Update Now
Ivanti has released security updates to address multiple security flaws impacting Connect Secure (ICS), Policy Secure (IPS), and Cloud Services Application (CSA) that could be exploited to achieve arbitrary code execution. The list of vulnerabilities is below - CVE-2024-38657 (CVSS score: 9.1) - External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy
thehackernews.com
February 12, 2025 at 8:15 AM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
New Veeam Flaw Allows Arbitrary Code Execution via Man-in-the-Middle Attack
Veeam has released patches to address a critical security flaw impacting its Backup software that could allow an attacker to execute arbitrary code on susceptible systems. The vulnerability, tracked as CVE-2025-23114, carries a CVSS score of 9.0 out of 10.0. "A vulnerability within the Veeam Updater component that allows an attacker to utilize a Man-in-the-Middle attack to execute arbitrary code
thehackernews.com
February 5, 2025 at 1:59 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More
Apple has released software updates to address several security flaws across its portfolio, including a zero-day vulnerability that it said has been exploited in the wild. The vulnerability, tracked as CVE-2025-24085, has been described as a use-after-free bug in the Core Media component that could permit a malicious application already installed on a device to elevate privileges. "Apple is
thehackernews.com
January 28, 2025 at 7:04 AM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
RANsacked: Over 100 Security Flaws Found in LTE and 5G Network Implementations
A group of academics has disclosed details of over 100 security vulnerabilities impacting LTE and 5G implementations that could be exploited by an attacker to disrupt access to service and even gain a foothold into the cellular core network. The 119 vulnerabilities, assigned 97 unique CVE identifiers, span seven LTE implementations – Open5GS, Magma, OpenAirInterface, Athonet, SD-Core, NextEPC,
thehackernews.com
January 24, 2025 at 3:40 PM
Reposted by Dan LCM
bleepingcomputer.com
Microsoft has reminded Windows administrators that driver synchronization in Windows Server Update Services (WSUS) will be deprecated on April 18, 90 days from now.
Microsoft to deprecate WSUS driver synchronization in 90 days
Microsoft has reminded Windows administrators that driver synchronization in Windows Server Update Services (WSUS) will be deprecated on April 18, 90 days from now.
www.bleepingcomputer.com
January 24, 2025 at 8:13 PM
Reposted by Dan LCM
bleepingcomputer.com
Zyxel is warning that a bad security signature update is causing critical errors for USG FLEX or ATP Series firewalls, including putting the device into a boot loop.
Zyxel warns of bad signature update causing firewall boot loops
Zyxel is warning that a bad security signature update is causing critical errors for USG FLEX or ATP Series firewalls, including putting the device into a boot loop.
www.bleepingcomputer.com
January 24, 2025 at 8:39 PM
danlcm.bsky.social
Estoy confuso, en X no hacían mas que seguirme perfiles abiertos hace un mes con un OF, y aquí me salen tios en pelotas... no ganompara bloqueos.
January 24, 2025 at 9:13 PM
Reposted by Dan LCM
thehackernews.com.web.brid.gy
CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday placed a now-patched security flaw impacting the popular jQuery JavaScript library to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The medium-severity vulnerability is CVE-2020-11023 (CVSS score: 6.1/6.9), a nearly five-year-old cross-site scripting (XSS) bug that could be
thehackernews.com
January 24, 2025 at 8:01 AM