Contec SolarView: Critical Bug Unpatched After 14 MONTHS - Security Boulevard

PV OT: VPN PDQ

An easily exploited, critical vuln in #Contec’s #SolarView #SCADA product is still live in hundreds of places—and being exploited.

In today’s #SBBlogwatch, we wonder why they’re on the internet in the first place. At @TechstrongGroup’s @SecurityBlvd: https://t.co/ZbSsUeOltf

— @Richi 🤓 Jennings (@RiCHi) July 7, 2023

Threads: Twitter Killer or Ad-Infested Hellscape? - DevOps.com

The moral of the story: When you cease to dream you cease to live

In this week’s #TheLongView: @Meta launches its much-leaked #Threads microblogging app.

A spinoff from @Instagram, it’s already reached 30M signups at the time of writing. How is Meta’s #DevOps team making it scale?

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/lqHivV95MV

— @Richi 🤓 Jennings (@RiCHi) July 6, 2023

Fortinet Bug: RUN — Don’t Walk — to Patch Critical RCE - Security Boulevard

#Xortigate Xceptional Xploits:

:@Fortinet #FortiOS has yet another nasty bug. Is your shop one of the 300,000 that hasn’t patched #CVE202327997?

But you need to PAY to get the update. In today’s #SBBlogwatch, we’re amazed, astounded and astonished. At @TechstrongGroup’s @SecurityBlvd: https://t.co/ABy7mTyzqr

— @Richi 🤓 Jennings (@RiCHi) July 5, 2023

Here’s MITRE’s top-25 CWE list — with your old vulnerability category favorites - ReversingLabs

It’s not rocket surgery:

:@MITREcorp’s top three are exactly the same as last year. Combined, just those three account for about half the problems.#CWE #1, #4, #7 and #17 are #MemorySafety bugs. In this week’s #SSBlogwatch we point the finger at C/C++. For @ReversingLabs: https://t.co/AaeUWf2C6R

— @Richi 🤓 Jennings (@RiCHi) July 5, 2023