Samedi, Grenoble, Manif.
Mastodon Digest
Posts
I may* have gone a bit overboard with aircon at home in prep for the summer
2x 12000BTU inverters with external units downstairs
1x 12000BTU in office
1x 18000BTU in bedroom
1x 9000BTU gaming room 1
1x 12000BTU gaming room 2
🚨🇺🇸 Routine FAA equipment upgrade blamed for nationwide flight shutdown, over 11,000 flights canceled
U.S. Transportation Secretary Sean Duffy says Friday's nationwide ground stop was triggered by routine maintenance involving an upgrade from copper wiring to fiber-optic cable by FAA contractor L3Harris.
Following the upgrade, a router reportedly overloaded critical air traffic control communication systems, forcing the FAA to ground flights nationwide for more than four hours.
More than 8,200 flights were canceled Friday, with at least another 3,000 canceled Saturday. Officials are investigating whether the failure resulted from installation errors or faulty equipment.
The FAA says there is no evidence of a cyberattack or AI-related involvement.
🚨 A Windows Common Log File System flaw can let a local attacker escalate privileges to SYSTEM; CVE-2023-28252
PoC: https://github.com/Joe1sn/CVE_2023_28252
The vulnerability is a heap-based buffer overflow in the Windows CLFS driver. Successful exploitation can allow a local attacker to elevate privileges and execute code with SYSTEM-level permissions.
Microsoft patched the flaw in April 2023, and CISA added it to the Known Exploited Vulnerabilities catalog the same day.
Windows CLFS | Local Privilege Escalation:
• CVSS: 7.8 High
• Attack: Local
• Impact: Privilege escalation to SYSTEM
• CWE: CWE-122 Heap-based Buffer Overflow
• Status: Actively exploited in the wild / patched by Microsoft
The PoC demonstrates exploitation of the vulnerable CLFS driver on affected Windows systems.
Boosts
We’re going to find out that USA air traffic control is dependent on a spreadsheet that gets emailed daily via Office365, aren’t we?