Gli ultimi otto messaggi ricevuti dalla Federazione
-
Amazon contro gli hacker nordcoreani: sventati oltre 1800 attacchi
📌 Link all'articolo : https://www.redhotcyber.com/post/amazon-contro-gli-hacker-nordcoreani-sventati-oltre-1800-attacchi/
#redhotcyber #news #amazon #sicurezzainformatica #hacking #cyberattacchi #nordcorea #fattoriedilaptop #arizona
-
セキュリティアップデート: Hollo 0.6.19 リリース
FedifyのHTMLパースコードにおけるセキュリティ脆弱性に対応したHollo 0.6.19をリリースしました。
この脆弱性 (CVE-2025-68475) は ReDoS (正規表現によるサービス拒否) の問題であり、攻撃者がフェデレーション操作中に特別に細工されたHTMLレスポンスを送信することで、サービス停止を引き起こす可能性があります。悪意のあるペイロードは小さい (約170バイト) ですが、Node.jsのイベントループを長時間ブロックする可能性があります。
すべてのHollo運営者の皆様には、直ちにバージョン 0.6.19 へのアップグレードを強くお勧めします。
項目 詳細 CVE CVE-2025-68475 深刻度 高 (CVSS 7.5) 対応 Hollo 0.6.19 にアップグレード#Hollo #セキュリティ #fediverse #ActivityPub
-
보안 업데이트: Hollo 0.6.19 릴리스
Fedify의 HTML 파싱 코드에서 발견된 보안 취약점을 수정한 Hollo 0.6.19를 릴리스했습니다.
이 취약점(CVE-2025-68475)은 ReDoS(정규 표현식 서비스 거부) 문제로, 공격자가 연합 작업 중 특수하게 조작된 HTML 응답을 보내 서비스 장애를 유발할 수 있습니다. 악성 페이로드는 작지만(약 170바이트), Node.js 이벤트 루프를 장시간 차단할 수 있습니다.
모든 Hollo 운영자분들께 즉시 버전 0.6.19로 업그레이드하실 것을 강력히 권고드립니다.
항목 상세 CVE CVE-2025-68475 심각도 높음 (CVSS 7.5) 조치 Hollo 0.6.19로 업그레이드#Hollo #보안 #페디버스 #연합우주 #ActivityPub
-
Security Update: Hollo 0.6.19 Released
We have released Hollo 0.6.19 to address a security vulnerability in Fedify's HTML parsing code.
This vulnerability (CVE-2025-68475) is a ReDoS (Regular Expression Denial of Service) issue that could allow an attacker to cause service unavailability by sending specially crafted HTML responses during federation operations. The malicious payload is small (approximately 170 bytes) but can block the Node.js event loop for extended periods.
We strongly recommend all Hollo operators upgrade to version 0.6.19 immediately.
Field Details CVE CVE-2025-68475 Severity High (CVSS 7.5) Action Upgrade to Hollo 0.6.19#Hollo #Security #Fediverse #ActivityPub
-
Kimwolf, la botnet che ha trasformato smart TV e decoder in un’arma globale
📌 Link all'articolo : https://www.redhotcyber.com/post/kimwolf-la-botnet-che-ha-trasformato-smart-tv-e-decoder-in-unarma-globale/
#redhotcyber #news #cybersecurity #hacking #malware #botnet #ddos #sicurezzainformatica
-
35 anni fa nasceva il World Wide Web: il primo sito web della storia
📌 Link all'articolo : https://www.redhotcyber.com/post/35-anni-fa-la-nascita-del-world-wide-web-il-primo-sito-web-della-storia/
#redhotcyber #news #storiadiinternet #timbernerslee #cern #sitioweb #worldwideweb #informazione #scienziati #rete
-
ATM sotto tiro! 54 arresti in una gang che svuotava i bancomat con i malware
📌 Link all'articolo : https://www.redhotcyber.com/post/atm-sotto-tiro-54-arresti-in-una-gang-che-svuotava-i-bancomat-con-i-malware/
#redhotcyber #news #cybersecurity #hacking #malware #atmjackpotting #trenDearaguas #criminalitàinformatica
-
🚨 Security Advisory: CVE-2025-68475
A ReDoS (Regular Expression Denial of Service) vulnerability has been discovered in Fedify's HTML parsing code. This vulnerability could allow a malicious federated server to cause denial of service by sending specially crafted HTML responses.
CVE ID CVE-2025-68475 Severity High (CVSS 7.5) Affected versions ≤1.9.1 Patched versions 1.6.13, 1.7.14, 1.8.15, 1.9.2If you're running Fedify in production, please upgrade to one of the patched versions immediately.
For full details, see the security advisory:
https://github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93Thank you to Yue (Knox) Liu for responsibly reporting this vulnerability.
#Fedify #ActivityPub #security #fediverse #fedidev
