Team IT Security - 📰 Alle Kategorien

Microsoft Details Storm-2949 Cloud Attack on Azure and Microsoft 365

Tue, 19 May 2026 08:52:17 +0200

Microsoft Threat Intelligence has disclosed details of a cyberattack carried out by a threat actor tracked as Storm-2949, which escalated from a targeted identity compromise into a large-scale breach of cloud infrastructure and sensitive enterprise systems. The campaign focused heavily on data theft from Microsoft 365 services, Azure-hosted production environments, and cloud storage resources, demonstrating how compromised identities can become gateways to an organization’s entire cloud ecosystem. According to Microsoft, the attack unfolded in two primary stages: an initial identity compromise phase followed by a broader cloud infrastructure takeover. Rather than deploying traditional malware or relying on conventional on-premises attack methods, the attackers abused legitimate cloud administration tools and Azure management features to blend into normal activity while gaining access to high-value systems.

Attackers Abused MFA Reset Processes to Hijack High-Privilege Accounts

The attackers first targeted employees through social engineering techniques linked to Microsoft’s Self-Service Password Reset (SSPR) process. Investigators believe Storm-2949 impersonated internal IT support personnel and persuaded victims to approve multifactor authentication (MFA) requests under the guise of routine account verification or password reset procedures. Once a targeted user applies the MFA prompts, the attackers reset account passwords and remove existing authentication methods, including phone numbers, email addresses, and Microsoft Authenticator registrations. This effectively neutralized MFA protections and locked legitimate users out of their accounts. The attackers then registered their own devices for Microsoft Authenticator access, ensuring persistent control over the compromised accounts. Microsoft said the group repeated this process against multiple employees, including IT staff and senior leadership personnel, indicating deliberate targeting of users with elevated access privileges. After gaining access, Storm-2949 began conducting directory discovery operations using Microsoft Graph API queries executed through a custom Python script. The attackers enumerated users, applications, and service principals within the Microsoft Entra ID tenant to identify privileged accounts and map potential paths for expanding access. The attackers also attempted to establish persistence by adding credentials to a compromised service principal, though this effort reportedly failed because of insufficient permissions. Despite that setback, they continued probing service principals and application identifiers to identify additional long-term access opportunities. The campaign quickly expanded into Microsoft 365 services such as OneDrive and SharePoint. Microsoft said the attackers focused particularly on sensitive IT-related documents involving VPN configurations and remote access procedures, suggesting they were searching for methods to move laterally into other environments. In one instance, Storm-2949 used the OneDrive web interface to download thousands of files in a single operation. Similar exfiltration activity occurred across multiple compromised accounts, likely because each user account had access to different shared folders and repositories.

Azure Key Vaults, SQL Servers, and Storage Accounts Became Primary Targets

With several compromised identities under their control, the attackers shifted attention to Azure subscriptions connected to the organization’s production environment. The accounts they compromised reportedly possessed privileged custom Azure role-based access control (RBAC) permissions, enabling broader access to Azure services and infrastructure. Microsoft said the attackers targeted Azure App Services, Key Vaults, Storage accounts, SQL databases, and virtual machines. One of their key objectives involved compromising a production Azure App Service web application that contained sensitive data. After several failed attempts to directly access the primary application due to network and gateway restrictions, the attackers pivoted to secondary applications within the same ecosystem, including authentication services and internal APIs. Using privileged Azure RBAC permissions, they exploited the “microsoft.Web/sites/publishxml/action” management-plane operation to retrieve publishing profiles containing deployment credentials for services such as FTP, Web Deploy, and the Kudu management console. Kudu, an administrative interface for Azure App Services, enabled the attackers to inspect environment variables, browse application files, and execute commands within compromised applications. However, Microsoft noted that the secondary services did not provide the level of access or sensitive information the attackers ultimately sought. Storm-2949 then redirected its efforts toward Azure Key Vault resources. One compromised account held the Owner role over a Key Vault believed to contain credentials linked to the primary production application. Within a four-minute period, the attackers altered Key Vault access settings and accessed dozens of secrets, including database connection strings and identity credentials. Microsoft believes these secrets ultimately enabled access to the main production web application. After authenticating successfully, the attackers changed the application password to maintain control and began exfiltrating sensitive data. The campaign also involved attacks against Azure SQL servers and Storage accounts. To gain access to SQL infrastructure, the attackers modified firewall rules through the “microsoft.sql/servers/firewallrules/write” operation, then connected using credentials retrieved from the compromised Key Vault. Once data exfiltration was completed, the altered firewall rules were deleted in what Microsoft described as a defense-evasion tactic. Similarly, the attackers manipulated Azure Storage account network access configurations through the “microsoft.storage/storageaccounts/write” operation, enabling public access from attacker-controlled IP addresses. They also used the “microsoft.Storage/storageAccounts/listkeys/action” operation to retrieve storage account keys and Shared Access Signature (SAS) tokens. Using a custom Python script built on the Azure Storage SDK, Storm-2949 downloaded large volumes of data directly from Azure Storage accounts over several days. Microsoft said the attackers alternated between OAuth-based authentication and secret-based authentication methods as defensive controls evolved.

Microsoft Says Cloud Management Features Were Weaponized for Stealthy Data Exfiltration

Virtual machines also became a target. The attackers abused Azure VM extensions, including VMAccess and Run Command, to establish administrator-level access on compromised systems. By deploying the VMAccess extension, they created new local administrator accounts on targeted VMs. The attackers also attempted to exploit managed identities assigned to virtual machines by requesting access tokens from the Azure Instance Metadata Service (IMDS). They then tried using those tokens to access production-related Key Vaults, though Microsoft said these attempts failed because the managed identities lacked sufficient permissions. Additional Run Command activity involved deploying PowerShell scripts designed to disable Microsoft Defender Antivirus protections, including real-time monitoring and behavior-based detection. The scripts also attempted to interfere with security services, clear Windows event logs, erase command histories, and remove temporary files to reduce forensic visibility. Microsoft said the attackers installed ScreenConnect remote management software from infrastructure under their control and disguised the installation to resemble legitimate Windows software updates. The malicious service was renamed to mimic authentic Windows components in an effort to avoid detection. The attackers later used ScreenConnect to perform reconnaissance activities across compromised systems, including collecting host configuration data, enumerating users and groups, searching for exposed credentials, and exfiltrating .pfx certificate files that may have contained private keys useful for future access. Despite extensive activity on endpoint systems, investigators found limited evidence that Storm-2949 successfully obtained high-value endpoint data. Microsoft said the endpoint compromises primarily served operational purposes such as credential harvesting, reconnaissance, and expanding access throughout the victim’s environment. Throughout the intrusion, Microsoft Defender generated multiple alerts that enabled analysts to correlate cloud, identity, and endpoint telemetry into a unified investigation. Microsoft said the incident demonstrates the growing importance of integrated detection and response capabilities as attackers target cloud identities and management planes instead of relying solely on traditional endpoint-focused attacks.

Kudu bündelt Windows-Wartung

Sat, 09 May 2026 11:01:15 +0200

Kudu bündelt Windows-Wartung

Lars Nitsch Sa., 09.05.2026 - 07:00

Wenn Windows-Systeme über längere Zeit genutzt werden, sammeln sich schnell unnötige Dateien und Altlasten an. "Kudu" bündelt zentrale Funktionen zur Systemreinigung und Wartung in einer Oberfläche und erleichtert so die Pflege von Windows-Installationen, ohne dass Anwender zwischen verschiedenen Systemwerkzeugen wechseln müssen.

Weiterlesen über Kudu bündelt Windows-Wartung

Kudu - System Cleaner 1.36.0 Englisch

Thu, 23 Apr 2026 19:00:39 +0200

Mit Kudu steht ein umfangreiches Open-Source-Tool für die Systempflege bereit. Es kombiniert klassische Reinigungsfunktionen mit Sicherheits- und Datenschutz-Features.

Ubuntu 26.04 Snapshot 4 is now available to download

Fri, 27 Feb 2026 03:21:06 +0100

Canonical’s engineers have announced the fourth and final monthly snapshot of Ubuntu 26.04, ahead of next month’s all important beta release. Ubuntu 26.04 Snapshot 4, like all other monthly snapshots, not a blessed build intended for mainstream usage. It’s a “throwaway artifact” that enables the distro’s engineers to fine-tune and hone a new automated build system. Compared to the January release of snapshot 3, there’s more ‘of note’ packed inside of this one, like the Linux 6.19 kernel and more GNOME 50 beta components (Mutter, Files, etc). In announcing the release of Snpshot 4, Canonical’s Utkarsh Gupta also notes Ubuntu […]

You're reading Ubuntu 26.04 Snapshot 4 is now available to download, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Ubuntu 26.04 Snapshot 3 is available to download

Sat, 31 Jan 2026 10:09:21 +0100

The third Ubuntu 26.04 snapshot is out, giving you an easy way to test the 'Resolute Raccoon' ahead of its stable release in April. Details and links inside.

You're reading Ubuntu 26.04 Snapshot 3 is available to download, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Wie der Kudukopf ins Alte Forsthaus kam

Tue, 20 Jan 2026 15:46:48 +0100

Das Alte Forsthaus in St Michael hat nun endlich eine Geweihtrophäe – ein mächtiger Kudu-Bock aus Südafrika. Ich habe ihn allerdings nicht selbst geschossen. Ich habe ihn am Straßenrand in Namibia entdeckt bei einer Fotosafari von Windhoek zu den Viktorianfällen … Weiterlesen →

The post Wie der Kudukopf ins Alte Forsthaus kam first appeared on tim@cole.de.

CHERIoT 1.0 released

Tue, 04 Nov 2025 14:51:34 +0100

Version 1.0 of the Capability Hardware Extension to RISC-V for IoT (CHERIoT) specification has been released. CHERIoT is a hardware-software system for secure embedded devices, and the specification provides a full description of the ISA and its intended use by CHERIoT RTOS. David Chisnall has written a blog post about the release that explains its significance as well as plans for CHERIoT 2.0 and beyond:

The last change that we made to the ISA was in December 2024, so we are confident that this is a stable release that we can support in hardware for a long time. This specification was implemented by the 1.0 release of CHERIoT Ibex and by CHERIoT Kudu (which has not yet had an official release). These two implementations demonstrate that the ISA scales from three-stage single-issue pipelines to six-stage dual-issue pipelines, roughly the same range of microarchitectures supported by Arm's M profile.

We at SCI have the first of our ICENI chips, which use the CHERIoT Ibex core, on the way back from the fab now and will be scaling up to mass production in the new year. I am not allowed to speak for other folks building CHERIoT silicon, but I expect 2026 to be an exciting year for the CHERIoT project!

Ubuntu 25.10 Snapshot 3 is Available to Download

Thu, 31 Jul 2025 19:28:13 +0200

The third monthly snapshot of Ubuntu 25.10 (Questing Quokka) is available to download, if you feel like joining the furry chap on his adventures to stable status. Ubuntu’s new monthly snapshot releases are images produced by a new automated build and testing process Canonical’s engineers are working on. The aim is to to create a pipeline that needs ‘little to no human intervention’ and creates ISOs faster and more reliably. These monthly snapshots are not in any sense ‘stable’ or ‘production ready’. They are not alpha or beta builds, and no more reliable than a daily build. For the avoidance […]

You're reading Ubuntu 25.10 Snapshot 3 is Available to Download, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Ubuntu 25.10 Snapshot 2 is Now Available to Download

Thu, 26 Jun 2025 16:52:42 +0200

The second monthly snapshot of Ubuntu Questing Quokka (which will formally become Ubuntu 25.10 when released on October 9 2025) is now available for testing. Last month Canonical’s engineers announced plans to change development builds building through greater automated testing and build reproducibility, creating new OS images faster and ‘with little to no human intervention.’ It’s a passive-sounding approach that is technically pragmatic. New build systems processes and workflow integrations that are transparent, amendable and auditable could mean volunteers spend less time doing menial checks and more time building new things. It also may mean that major issues that might […]

You're reading Ubuntu 25.10 Snapshot 2 is Now Available to Download, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

First Ubuntu Monthly Snapshot Now Available to Download

Thu, 29 May 2025 19:36:33 +0200

Ubuntu's announced new monthly snapshot releases. The development builds use new automated release processes, but won't replace stable releases.

You're reading First Ubuntu Monthly Snapshot Now Available to Download, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Ubuntu 25.10 Daily Builds Now Available to Download

Wed, 07 May 2025 15:51:28 +0200

Get early access to Ubuntu 25.10 'Questing Quokka' through official daily builds. Download, test and contribute to Ubuntu's development before its October release.

You're reading Ubuntu 25.10 Daily Builds Now Available to Download, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

UCLA’s Comparative Lit Course Debuts First-of-Its-Kind AI Textbook Platform “Kudu”

Wed, 18 Dec 2024 15:15:41 +0100

The University of California, Los Angeles (UCLA), will introduce a comparative literature course in 2025 that uses a textbook and assignments generated by an AI platform. Taught by Professor Zrinka Stahuljak, the course materials were created using an artificial intelligence model named Kudu and cover literature from the Middle Ages to the 17th century. Kudu […]

The post UCLA’s Comparative Lit Course Debuts First-of-Its-Kind AI Textbook Platform “Kudu” appeared first on eWEEK.

You Can Now Download Daily Builds of Ubuntu 25.04

Tue, 19 Nov 2024 04:21:25 +0100

A sure-fire way to tell that development has moved up a gear: Ubuntu 25.04 daily builds are now available to download. Development formally got underway on Ubuntu 25.04 ‘Plucky Puffin’ last month, with the final stable release of Ubuntu 25.04 arriving on Thursday April 17, 2025. You’re probably wondering what sort of new features Ubuntu 25.04 may offer and the daily builds will get everyone ample chance to find out, first-hand, nice and early. Only, there’s not much new to see — yet. What’s Coming in Ubuntu 25.04? There are plans to ship a new document viewer app in Ubuntu […]

You're reading You Can Now Download Daily Builds of Ubuntu 25.04, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

Ubuntu 24.04 Daily Builds Now Available for Download

Wed, 01 Nov 2023 17:45:55 +0100

Daily builds for Ubuntu 24.04 are now available for download. Development on Ubuntu 24.04 ‘Noble Numbat’, which will become the next long-term support (LTS) release upon its official release in April 2024, kicked off last week. As you might expect this early in the development cycle, there’s not a lot of “new” things to see, hear, or talk about at the time of writing this post (Nov 1). This will change in the coming weeks and months. What are Ubuntu Daily Builds? Ubuntu daily builds are pre-release versions of Ubuntu generated every day as a ‘snapshot’ of progress. They are […]

This post, Ubuntu 24.04 Daily Builds Now Available for Download is from OMG! Ubuntu. Do not reproduce elsewhere without permission.

How to Upgrade to Ubuntu 23.04 From 22.10 LTS (Kinetic to Lunar)

Thu, 20 Apr 2023 20:30:43 +0200

Here are the steps on how to upgrade your current Ubuntu 22.10 Kinetic Kudu to Ubuntu 23.04 Lunar Lobster. Ubuntu 23.04 was released on April 20, 2023, with the latest and greatest GNOME 44 desktop, Linux Kernel 6.2 and a good amount of new features – which you can check out at my dedicated feature...

The post How to Upgrade to Ubuntu 23.04 From 22.10 LTS (Kinetic to Lunar) appeared first on DebugPoint.com. Do not reproduce this post without permission.

Warum Linux schöner ist als Windows und macOS

Fri, 10 Mar 2023 10:16:29 +0100

Linux-Distributionen, also freie Betriebssysteme auf Basis des von Linus Torvalds herausgegebenen Linux-Kernels, sind ganz besonders stark anpassbar und dadurch nicht selten deutlich hübscher als Windows und macOS.

Die Desktops machen den Unterschied

Anders als Windows und macOS, die auf ein fest von Microsoft und Apple definiertes GUI (“Graphical User Interface”) samt Shell, Panel und Desktop setzen und dem Anwender dabei nur wenig Spielraum für optische Anpassungen lassen, können Linux-Distributionen mit einer Vielzahl an Desktop-Umgebungen und Fenstermanagern kombiniert und individualisiert werden.

Dem Anwender sind dabei kaum Grenzen gesetzt und so können nicht nur Desktop-Hintergrund (“Wallpaper”), sondern auch Taskleisten (“Panels”), Symbole (“Icons”) und Fensterdekorationen sowie Boot- und Sperrbildschirme bis ins kleinste Detail an die persönlichen Wünsche angepasst werden.

Einen großen Unterschied machen hier die sogenannten Desktop-Umgebungen, von denen KDE Plasma, Gnome und Xfce sowie das von Linux Mint bekannte Cinnamon die relevantesten sind.

Anwender, die ein besonders ressourcensparendes Systen bevorzugen, setzen auf einen reinen Fenstermanager wie Openbox, Fluxbox, i3 oder awesome und erhalten so einen besonders reduziertes Erscheinungsbild.

Fünf Gründe gegen Linux – darum scheitert der Umstieg (angeblich)

KDE Plasma, Gnome und Xfce als Standard

Linux-Einsteiger und Windows-Umsteiger kommen bei ihren ersten Gehversuchen unter Linux in der Regel mit einem der drei großen Desktops in Kontakt: KDE Plasma, Gnome oder Xfce. Alle drei Arbeitsumgebungen lassen sich weitreichend anpassen und laufen absolut problemlos unter jeder Linux-Distribution.

Wie stark sich die drei Platzhirsche anpassen lassen, demonstrieren die Tutorials des auf Linux und Open Source spezialisierten YouTube-Kanals “LinuxScoop” und auch der Cinnamon-Desktop erhält ein entsprechendes “Modding”.

Ein individueller Desktop auf Basis von Gnome

Betriebssystem: Fedora 37 Workstation
Desktop: Gnome 43

Ein individueller Desktop auf Basis von KDE Plasma

Betriebssystem: Fedora 37 Workstation
Desktop: KDE Plasma 5.27

Ein individueller Desktop auf Basis von Xfce

Betriebssystem: Kali Linux
Desktop: Xfce 4.18

Ein individueller Desktop auf Basis von Cinnamon

Betriebssystem: Linux Mint
Desktop: Cinnamon 5.6

Alle Ressourcen sind als Open Source kostenlos

Wie die Videos demonstrieren, sind nur wenige kostenlos und frei verfügbare Ressourcen nötig, um das Erscheinungsbild eines Linux-Betriebssystems ganz den eigenen Vorstellungen und Wünschen anzupassen und auch ist die Wahl der bevorzugten Distribution für das Erscheinungsbild nicht entscheidend.

Für Linux-Einsteiger und Windows-Umsteiger eignen sich die nachfolgenden Distributionen aufgrund ihrer hilfsbereiten Community und ausführlichen Dokumentation besonders gut.

Linux Mint
Ubuntu Linux (davon erscheint demnächst eine neue Version: Ubuntu 23.04 Lunar Lobster)
Fedora Workstation
Manjaro Linux
Pop!_OS

Neben ihrer leichten und weitreichenden Anpassbarkeit eignen sich diese freien Betriebssysteme auch besonders gut für das Spielen unter Linux.

Gaming unter Linux: Eine echte Alternative zum Spielen unter Windows

Alle genannten Linux-Betriebssysteme bringen bereits alle benötigten Paketquellen für die benötigten Softwarepakete wie Wine, Steam und Mesa 3D mit und müssen nach der Installation lediglich über den integrierten Paketmanager aktualisiert werden. Im Anschluss kann das eigene System nach Lust und Laune individualisiert und für Gaming genutzt werden.

Nützliche Werkzeuge und Helfer

Anwender, die eine Out-of-the-Box-Lösung bevorzugen, können auch entsprechende Tools verwenden, welche die Benutzeroberfläche unter Linux mit nur wenigen Mausklicks anpassen können. Die bekanntesten Vertreter dieser Art sind What If und Just Perfection.

Personal Software

New Microsoft Azure Vulnerability Uncovered — Experts Warn of RCE Attacks

Thu, 19 Jan 2023 16:46:05 +0100

A new critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to completely take control of a targeted application. "The vulnerability is achieved through CSRF (cross-site request forgery) on the ubiquitous SCM service Kudu," Ermetic researcher Liv Matan said in a report shared with The Hacker News. "By

CSRF Vulnerability in Kudu SCM Allowed Code Execution in Azure Services

Thu, 19 Jan 2023 15:31:06 +0100

A cross-site request forgery (CSRF) vulnerability impacting the source control management (SCM) service Kudu could be exploited to achieve remote code execution (RCE) in multiple Azure services, cloud infrastructure security firm Ermetic has discovered.

Quiz: Wie gut ist Ihr Allgemeinwissen?

Wed, 11 Jan 2023 11:32:06 +0100

Fragen zu Film, Tieren und Fußballtrikots

Ubuntu 23.04 Lunar Lobster: Erste Daily Builds verfügbar

Mon, 28 Nov 2022 12:31:14 +0100

Ubuntu 23.04 heißt “Lunar Lobster”

Die nächste Ubuntu-Version 23.04, die Canonical im April 2023, wohl am 27.4., veröffentlichen wird, trägt den Codenamen “Lunar Lobster”, also “Mond-Hummer”. Das ließ Canonical in einem recht kryptischen Tweet durchsickern und ist auch hier zu lesen. Die Fan-Gemeinde nahm das geheimnisvolle Posting mit humorvollen Spekulationen auf.

could be lazy lama, but lunar lobster is cool. pic.twitter.com/jCf8EgwmJz
— Ikan154 (@ikan154) October 28, 2022

Supportzeitraum

Ubuntu 23.04 ist genauso wie das kürzlich erschienene Ubuntu 22.10 eine Version, für die Canonical nur neun Monate lang Updates bereitstellen wird.

Neuerungen von Ubuntu 23.04

Mehr ist über 23.04 noch nicht bekannt, doch in der Linux-Szene wird natürlich bereits über die Neuerungen wie Gnome 44 spekuliert. Das aktuelle Ubuntu 22.10 verwendet Gnome 43.

Download von Ubuntu 23.04 Lunar Lobster

Ab sofort (24. November 2022) stehen von Ubuntu 23.04 Lunar Lobster Daily Builds zum Download bereit. Sie sollten sich aber darüber im Klaren sein, dass diese absolut experimentell und keinesfalls für Produktivsysteme geeignet sind. Der Zweck der Daily Builds besteht darin, dass Sie damit einen Einblick in den aktuellen Entwicklungsstand der neuen Ubuntuversion bekommen. Zielgruppe der Daily Builds sind also experimentierfreudige und neugierige Linux-Enthusiasten. Idealerweise probieren Sie Daily Builds in einer virtuellen Maschine aus.

Dowload: Ubuntu 23.04 „Lunar Lobster“ Daily Build

Berichte über Vorgängerversionen von Ubuntu:

Personal Software

Ubuntu 23.04 („Lunar Lobster“): Linux-Distribution soll am 20. April 2023 erscheinen

Mon, 14 Nov 2022 14:49:37 +0100

Der britische Linux-Distributor Canonical hat den Development- und Releasezyklus für das kommende Ubuntu 23.04 bekanntgegeben: „Lunar Lobster“ soll am 20. April 2023 erscheinen und auf Ubuntu 22.10 („Kinetic Kudu“) folgen. Nachdem der Startschuss bereits am 27. Oktober gefallen ist steht jetzt auch die gesamte finale Roadmap.

Is it a bad idea to install linux on relatively new laptop if I don't know what I'm doing?

Thu, 10 Nov 2022 10:15:12 +0100

So I first used linux back in 2019, on a 2017 msi laptop. Installed linuxmint and everything worked right out of the box.
Later around 2020, I also installed it on 2015 Samsung laptop, this too worked right out of the box.

I used linux until mid 2020, for like a year. After that my job required me to use windows(needed to use adobe suite) so that ended my short but good experience with linux.

I kinda wanted to get back to trying linux again, so I got a new personal laptop to install linux mint on it. I mean past two times it worked perfectly, what could go wrong?

So yesterday I got my new laptop and was installing linuxmint on it(2022 Lenovo). And a lot of things were borked: Wifi, Bluetooth, Accelerometer(it's a laptop with tablet mode), Fn Lock etc.

Digging around on google and mint forums I eventually fixed Wifi and Bluetooth, but while trying to get Accelerometer working, I borked wifi again.

Feeling kinda frustrated, I abandoned Linux mint and tried the newest ubuntu kindetic kudu. While testing it on bootable usb drive, I noticed accelerometer, bluetooth and Fn Lock were detected and working. Wifi was still not working but while trying it on linux mint, I had basic idea on how to fix it. So I installed it, thinking I only need to fix the wifi, and...after the installation, accelerometer doesn't work... I booted usb again and it works there, it just doesn't work when I actually install it... Oh and just noticed stylus pen pressure is not working as well.

If I'm a noob, should I just wait it out until things get fixed and new versions are released? Guess I'll have to use windows in the mean time...

submitted by /u/gooverofme1
[link] [comments]

Canonical Releases Ubuntu 22.10 Kinetic Kudu

Fri, 21 Oct 2022 21:33:18 +0200

Canonical blog: Codenamed "Kinetic Kudu," this interim release improves the experience of enterprise developers and IT administrators. It also includes the latest toolchains and applications with a particular focus on the IoT ecosystem. Ubuntu 22.10 delivers toolchain updates to Ruby, Go, GCC and Rust. OpenSSH in Ubuntu 22.10 is configured by default to use systemd socket activation, meaning that sshd will not be started until an incoming connection request is received. This reduces the memory footprint of Ubuntu Server on smaller devices, VMs or LXD containers. Ubuntu 22.10 also comes with a new debuginfod service to help developers and admins debug programs shipped with Ubuntu. Debugging tools like gdb will automatically download the required debug symbols over HTTPS. Ubuntu 22.10 now supports MicroPython on a variety of microcontrollers, including the Raspberry Pi Pico W. rshell, thonny and mpremote are all available in the Ubuntu repositories. The Ubuntu graphics stack transition to kms means developers can run Pi-based graphical applications using frameworks like Qt outside of a desktop session and without Pi specific drivers. This complements expanded support for a range of embedded displays for the Raspberry Pi, including the Inky eInk HAT series, Hyperpixel range and the Raspberry Pi Official Touchscreen. [...] All users will benefit from the refinements in GNOME 43, including GTK4 theming for improved performance and consistency. Quick Settings now provide faster access to commonly used options such as wifi, bluetooth, dark mode and power settings.

Linux-Distribution Ubuntu 22.10: Aktueller Kernel, Desktop und Pipewire an Bord

Fri, 21 Oct 2022 17:04:33 +0200

Canonical hat turnusgemäß die nächste Version von Ubuntu Linux veröffentlicht, 22.10, mit Codenamen Kinetic Kudu. Neben viel Versionspflege, einer aktuellen Gnome-Version und einem erneuerten Audio-Unterbau für das System dürfen Unity-Fans sich über ein ...

Ubuntu 22.10 („Kinetic Kudu“): Linux 5.19 und Gnome 43 nicht nur für die Ein- und Umsteiger

Fri, 21 Oct 2022 16:02:22 +0200

Der britische Linux-Distributor Canonical hat mit Ubuntu 22.10 („Kinetic Kudu“) und dessen acht offiziellen Derivaten die nächsten regulären Releases veröffentlicht, die jetzt bis zum 20. Juli 2023 mit Updates und Support unterstützt werden. Auf der Basis von Linux 5.19 und Gnome 43 eignet sich Ubuntu für die breite Masse.

Kinetic Kudu: Ubuntu 22.10 verbessert Raspberry-Pi- und IoT-Support

Fri, 21 Oct 2022 12:04:34 +0200

Ubuntu verbessert den Grafikstack für den Raspberry Pi, Entwickler bekommen einen Debugging-Daemon und Pulseaudio verschwindet. (Ubuntu, Gnome)

Distribution Release: Lubuntu 22.10

Fri, 21 Oct 2022 10:15:04 +0200

Simon Quigley has announced the release of Lubuntu 22.10, the latest version of the project's official Ubuntu flavour with LXQt as the preferred desktop environment: "Thanks to all the hard work from our contributors, Lubuntu 22.10 has been released. With the code name 'Kinetic Kudu', Lubuntu 22.10 is....

Distribution Release: Ubuntu Studio 22.10

Fri, 21 Oct 2022 07:34:59 +0200

Ubuntu Studio, an official variant of Ubuntu that comes pre-installed with a selection of the most common free multimedia applications available, has been upgraded to version 22.10: "The Ubuntu Studio team is pleased to announce the release of Ubuntu Studio 22.10, code-named 'Kinetic Kudu'. This marks Ubuntu Studio's....

Kubuntu Linux 22.10 (Kinetic Kudu)

Thu, 20 Oct 2022 22:00:12 +0200

submitted by /u/jlpcsl
[link] [comments]

Canonical releases Ubuntu 22.10 Kinetic Kudu

Thu, 20 Oct 2022 20:49:40 +0200

If you want a bleeding-edge take on Linux, the brand-new Ubuntu 22.10 is for you.

Distribution Release: Ubuntu 22.10

Thu, 20 Oct 2022 19:35:19 +0200

Canonical has announced the release of Ubuntu 22.10. The new release will be supported for nine months and carries the codename "Kinetic Kudu". "Ubuntu 22.10 delivers toolchain updates to Ruby, Go, GCC and Rust. OpenSSH in Ubuntu 22.10 is configured by default to use systemd socket activation, meaning....

Ubuntu 22.10 veröffentlicht

Thu, 20 Oct 2022 18:19:37 +0200

Das reichen wir einmal gerne für Nutzer und Ausprobierfreudige durch: Ubuntu 22.10 wurde veröffentlicht. Diese Zwischenversion mit dem Codenamen „Kinetic Kudu“ verbessert die Erfahrungen für Unternehmensentwickler und IT-Administratoren mit dem System, so die Entwickler. Ubuntu 22.10 enthält auch die neuesten...

Zum Beitrag: Ubuntu 22.10 veröffentlicht

Zum Blog: Caschys Blog

Der ungekürzte RSS-Feed wird präsentiert von:

Ubuntu 22.10 released

Thu, 20 Oct 2022 18:15:17 +0200

Ubuntu 22.10 has been released. "Codenamed 'Kinetic Kudu', this interim release improves the experience of enterprise developers and IT administrators. It also includes the latest toolchains and applications with a particular focus on the IoT ecosystem." See the release notes for details.

Ubuntu 22.10 Kinetic Kudu erschienen

Thu, 20 Oct 2022 17:17:47 +0200

Die neue Zwischenversion Canonical Ubuntu 22.10 Kinetic Kudu unterstützt IoT-Entwickler und IT-Administratoren. Neu sind Toolchain-Updates für Ruby, Go, GCC und Rust.

Canonical releases Ubuntu 22.10 Kinetic Kudu

Thu, 20 Oct 2022 17:13:13 +0200

submitted by /u/ouyawei
[link] [comments]

Ubuntu MATE 22.10 Release Notes

Thu, 20 Oct 2022 13:30:15 +0200

submitted by /u/ouyawei
[link] [comments]

Ubuntu 22.10 (Kinetic Kudu) was released today ! ( 20 October 2022 )

Thu, 20 Oct 2022 11:13:13 +0200

submitted by /u/Blocikinio
[link] [comments]

Ubuntu 22.10: What’s New? [Video]

Thu, 20 Oct 2022 00:15:10 +0200

Ubuntu 22.10 is primed, ready to release on October 20 and to help ratchet up the excitement I’ve put together a short video to showcase the release’s most exciting new features. Not that any of them will be a surprise if you read this blog often enough! All told, Ubuntu 22.10 is a fairly modest update to Ubuntu 22.04 LTS. While the inclusion GNOME 43 and the switch to PipeWire as its underlying audio stack are very positive changes, they’re not enough luscious enough to lure long-term support fans away from the bosom of stability. There’s still plenty to enjoy, […]

This post, Ubuntu 22.10: What’s New? [Video] is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Kinetic Kudu is now available as an Ubuntu beta release

Mon, 03 Oct 2022 21:19:35 +0200

Canonical has released the first beta of Ubuntu 22.10, and here are all the details.

Ubuntu Unity 22.10 „Kinetic Kudu“ Beta

Fri, 30 Sep 2022 09:30:22 +0200

Ubuntu Unity ist ein offizielles Ubuntu-Derivat mit der Desktop-Umgebung Unity. Es bietet die von Ubuntu gewohnte Unterstützung von Snappy und kann vor der Installation mit grafischem Installer als Live-Medium ausprobiert werden.

Development Release: Ubuntu 22.10 Beta

Fri, 30 Sep 2022 07:17:59 +0200

Development Release: Ubuntu 22.10 Beta^Brian Murray has announced the availability of the final beta build of Ubuntu 22.10, code-named "Kinetic Kudu": "The Ubuntu team is pleased to announce the beta release of the Ubuntu 22.10 Desktop, Server and Cloud products. Ubuntu 22.10, codenamed 'Kinetic Kudu', continues Ubuntu's proud....

Ubuntu 22.10 Beta is Now Available to Download

Fri, 30 Sep 2022 07:13:09 +0200

Links to download the Ubuntu 22.10 beta are live. The beta build allows users to test all of the new features in the "Kinetic Kudu" first hand, right now.

This post, Ubuntu 22.10 Beta is Now Available to Download is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Ubuntu 22.10 (Kinetic Kudu) Beta now available for download

Fri, 30 Sep 2022 06:00:08 +0200

submitted by /u/jorgesgk
[link] [comments]

Ubuntu 22.10’s New Wallpaper is an Absolute Knock-Out

Thu, 22 Sep 2022 14:45:12 +0200

Ubuntu 22.10’s default wallpaper has been revealed. The new background image will grace the desktop of users who install or upgrade to Ubuntu 22.10 in October. Per tradition, all new versions of Ubuntu come with a custom-designed background image that carries a carefully-rendered character based on the codename mascot, which in this case is an African kudu. But in a break with the past, the mascot depicted in this drape has not been drawn using rigid geometry or bisecting circles, as previous ones have (to get effect, I should add). Instead, the leaping Kudu in the new wallpaper is a […]

This post, Ubuntu 22.10’s New Wallpaper is an Absolute Knock-Out is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Vote for the next Ubuntu wallpapers!

Wed, 21 Sep 2022 23:13:11 +0200

This one by user jt05 is my favorite! I like a lot of other ones too.

https://discourse.ubuntu.com/t/kinetic-kudu-22-10-wallpaper-competition-voting/30645/15?u=jt05

submitted by /u/3DArtist2021
[link] [comments]

Ubuntu 22.10 („Kinetic Kudu“): Canonical macht Unity zum offiziellen Desktop

Fri, 02 Sep 2022 16:05:16 +0200

Mit dem bevorstehenden Release von Ubuntu 22.10 („Kinetic Kudu“) im kommenden Monat macht der britische Linux-Distributor Canonical den 2010 selbst eingeführten Desktop Unity wieder zu einer der offiziellen Benutzeroberflächen seines populären freien Betriebssystems. Ubuntu Unity wird damit zu einem offiziellen Ubuntu-Derivat.

Ubuntu 22.10: Release Date & New Features

Tue, 30 Aug 2022 19:00:12 +0200

Excited for Ubuntu 22.10? Here's everything we know about the next major release of Ubuntu, including stable release date and planned new features.

This post, Ubuntu 22.10: Release Date & New Features is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

GNOME Shell 43 Arrives in Ubuntu 22.10 Daily Builds

Thu, 25 Aug 2022 17:30:12 +0200

The latest GNOME Shell beta just hit the Ubuntu 22.10 updates channel. It brings GNOME 43's revamped system menu and, no lie, I'm in love with it.

This post, GNOME Shell 43 Arrives in Ubuntu 22.10 Daily Builds is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Nautilus 43 Beta Arrives in Ubuntu 22.10 Daily Builds

Tue, 16 Aug 2022 20:13:10 +0200

Nautilus 43 beta has arrived in the latest daily builds of Ubuntu 22.10 “Kinetic Kudu”. “And?”, you quizzically quip. Well, it’s not that big of a deal. However, I was eager to see ‘what the plan was’ for GTK4/libadwaita apps within the context of Ubuntu’s Yaru theme. Ubuntu 22.04, for those who’ve forgotten, intentionally held back on shipping a number of GTK4/libadwaita ports that were part of GNOME 42 — Nautilus among them. Well, I’m pleased to see (and say) that the new-look GTK4/libadwaita version of the Nautilus file manager sits proud within Ubuntu’s Yaru-themed desktop. Any custom Yaru accent […]

This post, Nautilus 43 Beta Arrives in Ubuntu 22.10 Daily Builds is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Nautilus 43 Beta Arrives in Ubuntu 22.10 Daily Builds

Tue, 16 Aug 2022 20:13:10 +0200

This post, Nautilus 43 Beta Arrives in Ubuntu 22.10 Daily Builds is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Ubuntu 22.10 Replaces Gedit with New Text Editor

Mon, 30 May 2022 22:15:13 +0200

The latest daily builds of Ubuntu 22.10 'Kinetic Kudu' come with GNOME's new GTK4-based text editing tool by default. Find out why Gedit has been replaced.

This post, Ubuntu 22.10 Replaces Gedit with New Text Editor is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Ubuntu 22.10 Makes PipeWire Default

Sun, 22 May 2022 22:15:11 +0200

PipeWire is the default audio server in Ubuntu 22.10. The latest daily builds of the development release (which is codenamed ‘Kinetic Kudu’) ship with Pipewire in place of Pulseaudio out of the box, no workarounds required. The last time Ubuntu made made a major change to its audio stack was (fittingly) in the last ‘K’-named release, Ubuntu 9.10 ‘Karmic Koala’. Ubuntu trails its distro rivals in adopting this next-gen sound server tech. The roots of PipeWire go back to 2015. The tech was initially conceived as a “PulseAudio for video”, but was later expanded to include audio streams. Fedora adopted […]

This post, Ubuntu 22.10 Makes PipeWire Default is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

We’re Off — Ubuntu 22.10 Daily Builds Available to Download

Thu, 12 May 2022 16:18:21 +0200

Download the latest Ubuntu 22.10 daily build to help test the next version of Ubuntu as 'Kinetic Kudu' development kicks into gear and new features added.

This post, We’re Off — Ubuntu 22.10 Daily Builds Available to Download is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Ubuntu 22.10 ‘Kinetic Kudu’ is Open for Development

Fri, 29 Apr 2022 00:46:12 +0200

And we’re off — development is now open for Ubuntu 22.10 “Kinetic Kudu”. “We’re pleased to announce that kinetic is now open for development. auto-sync has been enabled and will run soon”, writes Ubuntu’s Brian Murray in his starting-pistol post to Ubuntu’s main development mailing list. “As usual, we expect a large influx of builds and autopkgtests in this initial period, which will cause delays. Please help fixing any breakage that occurs,” he adds, somewhat ominously! Art this stage in development there isn’t much “new” stuff to mention, much less see. But if you’re into bug hunting then honestly: this […]

This post, Ubuntu 22.10 ‘Kinetic Kudu’ is Open for Development is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Ubuntu 22.10 Codename Revealed – And It’s a Kookily Killer Choice

Mon, 25 Apr 2022 16:00:20 +0200

The codename of the next Ubuntu version has been revealed. Ubuntu 22.10 is the “Kinetic Kudu” — a kingly combination with which to crown the next short-term release of this colossally popular desktop Linux distro (yes, I’m running out of K words already). But what does it mean? Kinetic is a kooky if fitting choice. The word itself means “relating to or resulting from motion”. Given that 221.10 is the first post-LTS release it feels like a knowing adjective. Why? Well, Ubuntu desktop has some real gas in its tank right now and those stewarding the release will likely use […]

This post, Ubuntu 22.10 Codename Revealed – And It’s a Kookily Killer Choice is from OMG! Ubuntu!. Do not reproduce elsewhere without permission.

Developer Snapshots: Programmierer-News in ein, zwei Sätzen

Fri, 22 May 2020 17:17:48 +0200

Unsere Übersicht der kleinen, aber interessanten Meldungen enthält diese Woche unter anderem JetBrains, Elastic, ONNX, Loki und Apache Kudu.

Apache Impala up to 2.9.x Kudu Table privilege escalation

Thu, 21 Nov 2019 18:47:13 +0100

A vulnerability was found in Apache Impala up to 2.9.x and classified as critical. This issue affects an unknown function of the component Kudu Table Handler. Upgrading to version 2.10.0 eliminates this vulnerability.

Other suggestions for 17" laptop that's penguin friendly

Wed, 16 Jan 2019 02:30:20 +0100

Greetings... To the credit of Linux and System76 I'm about to pass a decade of use from my laptop which is a 17" PanP 5 I bought in 2009. It's now running Kubuntu 18.04 and still runs like a champ. Now my needs have grown to where I need to build Windows and Linux VM's for work and play, and the 4 Gigs of ram and 2 cores just won't cut it. So now I'm pricing laptops. Since System76 has done me well I'm eyeing the Kudu 17" with 16 gigs ram (can expand to 32 gigs later), i7-8750h processor, 120 Gig boot drive, and 2 TB secondary drive .. this is under $1300 which IMO beats most prices I'm seeing elsewhere. What other 17" laptops are out there that I should be considered? I've looked at the Dell XPS as many suggest, but it's like 13" and I really need 17". Also most of the other 17" laptops are around $2K or more, but I need to hang around $1500 or less. Thanks for any input.

submitted by /u/samalex01
[link] [comments]

Other suggestions for 17" laptop that's penguin friendly

Wed, 16 Jan 2019 02:30:20 +0100

submitted by /u/samalex01
[link] [comments]

Update 4 für Azure App Service auf Azure Stack veröffentlicht

Sat, 17 Nov 2018 20:07:09 +0100

Das vierte Update für Azure App Service auf Azure Stack wurde veröffentlicht. Diese Version aktualisiert den Ressourcenanbieter und enthält die folgenden wichtigen Funktionen und Korrekturen:

Lösung für die Cross Site Scripting-Sicherheitsanfälligkeit in CVE 2018-8600.
Unterstützung für die API-Version des App Service 2018-02-01 wurde hinzugefügt
Updates für App Service Tenant, Admin, Funktionsportale und Kudu-Tools. Entspricht der SDK-Version von Azure Stack Portal.
Updates für NodeJs, NPM, Zulu OpenJDK, Tomcat, PHP und Python
Alle anderen Fixes und Updates sind in den Versionshinweisen für App Service on Azure Stack Update Four enthalten.

Sie können das neue Installationsprogramm und die Helper Scripts herunterladen:

Installationsprogramm - https://aka.ms/appsvcupdate4installer
Helper Scripts - https://aka.ms/appsvconmashelpers

Bitte lesen Sie die aktualisierte Dokumentation, bevor Sie mit der Bereitstellung beginnen:

Bevor Sie mit dem App Service auf Azure Stack beginnen
Stellen Sie den App Service Resource Provider bereit für neue Deployments
Aktualisieren Sie den App Service Resource Provider, um vorhandene Bereitstellungen zu aktualisieren

Apache Impala bis 2.9.x Kudu Table erweiterte Rechte

Wed, 04 Oct 2017 08:51:50 +0200

Eine kritische Schwachstelle wurde in Apache Impala bis 2.9.x gefunden. Hierbei geht es um eine unbekannte Funktion der Komponente Kudu Table Handler. Durch die Manipulation mit einer unbekannten Eingabe kann eine erweiterte Rechte-Schwachstelle ausgenutzt werden. Klassifiziert wurde die Schwachstelle durch CWE als CWE-269. Auswirkungen hat dies auf Vertraulichkeit, Integrität und Verfügbarkeit.

Die Schwachstelle wurde am 04.10.2017 herausgegeben. Auf lists.apache.org kann das Advisory eingesehen werden. Die Verwundbarkeit wird seit dem 21.06.2017 mit der eindeutigen Identifikation CVE-2017-9792 gehandelt. Um eine Ausnutzung durchzusetzen, muss eine einfache Authentisierung umgesetzt werden. Technische Details oder ein Exploit zur Schwachstelle sind nicht verfügbar. Ein Exploit zur Schwachstelle wird momentan etwa USD $5k-$25k kosten (Preisberechnung vom 10/04/2017).

Ein Aktualisieren auf die Version 2.10.0 vermag dieses Problem zu lösen.

CVSSv3

VulDB Base Score: 5.5
VulDB Temp Score: 5.3
VulDB Vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:X
VulDB Zuverlässigkeit: Low

CVSSv2

VulDB Base Score: 4.1 (CVSS2#AV:A/AC:M/Au:S/C:P/I:P/A:P)
VulDB Temp Score: 3.6 (CVSS2#E:ND/RL:OF/RC:ND)
VulDB Zuverlässigkeit: Medium

CPE

cpe:/a:apache:impala:2.9.x

Exploiting

Klasse: Erweiterte Rechte (CWE-269)
Lokal: Ja
Remote: Nein

Verfügbarkeit: Nein

Preisentwicklung: gleichbleibend
Aktuelle Preisschätzung: $0-$5k (0-day) / $0-$5k (Heute)

Gegenmassnahmen

Empfehlung: Upgrade
Status: Offizieller Fix
0-Day Time: 0 Tage seit gefunden

Upgrade: Impala 2.10.0

Timeline

21.06.2017 CVE zugewiesen
04.10.2017 Advisory veröffentlicht
04.10.2017 VulDB Eintrag erstellt
04.10.2017 VulDB letzte Aktualisierung

Quellen

Advisory: lists.apache.org
Bestätigung: issues.apache.org

CVE: CVE-2017-9792 (mitre.org) (nvd.nist.org) (cvedetails.com)

Eintrag

Erstellt: 04.10.2017
Eintrag: 70% komplett