Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
👥 Mitglieder & Rangliste Karma 💬 Private Nachrichten (DM) ➔
EILMELDUNGEN LIVE
Windows ServerFrank Heemskerk: Niemand in Europa kauft ASML-Chipfertigungsmaschinen - Golem.de(25.09.2026 um 04:08 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-84391 | Fortinet FortiAnalyzer up to 7.6.6 uninitialized pointer (Nessus ID 349790)(25.09.2026 um 06:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-76444 | Cisco Identity Services Engine Software Policy Runtime Repository Table missing authentication (Nessus ID 349789)(25.09.2026 um 06:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-89480 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nvme-tcp nvme_tcp_recv_data information disclosure (Nessus ID 349761)(25.09.2026 um 06:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-4637 | Paessler PRTG Network Monitor up to 25.4.114 Web Interface welcome.htm cross site scripting (WID-SEC-2026-3565)(25.09.2026 um 06:20 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-39965 | Linux Kernel up to 6.6.108/6.12.49/6.16.9 SPI xfrm_alloc_spi state issue (Nessus ID 271415 / WID-SEC-2025-2268)(25.09.2026 um 06:20 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-4638 | Paessler PRTG Network Monitor up to 25.4.114 Demo Sensor windowspassword information disclosure (WID-SEC-2026-3565)(25.09.2026 um 06:20 Uhr)
•
Sichere ProgrammierungDefault Enablement of Copilot Features for Copilot Business and Enterprise(25.09.2026 um 05:13 Uhr)
•
Sichere ProgrammierungI built a tool that makes images bigger, not smaller – here's why(25.09.2026 um 05:56 Uhr)
•
Sichere ProgrammierungAn element entering the viewport is not the same as a survey impression(25.09.2026 um 05:58 Uhr)
•
Windows ServerFrank Heemskerk: Niemand in Europa kauft ASML-Chipfertigungsmaschinen - Golem.de(25.09.2026 um 04:08 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-84391 | Fortinet FortiAnalyzer up to 7.6.6 uninitialized pointer (Nessus ID 349790)(25.09.2026 um 06:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-76444 | Cisco Identity Services Engine Software Policy Runtime Repository Table missing authentication (Nessus ID 349789)(25.09.2026 um 06:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-89480 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nvme-tcp nvme_tcp_recv_data information disclosure (Nessus ID 349761)(25.09.2026 um 06:13 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-4637 | Paessler PRTG Network Monitor up to 25.4.114 Web Interface welcome.htm cross site scripting (WID-SEC-2026-3565)(25.09.2026 um 06:20 Uhr)
•
Sicherheitslücken (CVE)CVE-2025-39965 | Linux Kernel up to 6.6.108/6.12.49/6.16.9 SPI xfrm_alloc_spi state issue (Nessus ID 271415 / WID-SEC-2025-2268)(25.09.2026 um 06:20 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-4638 | Paessler PRTG Network Monitor up to 25.4.114 Demo Sensor windowspassword information disclosure (WID-SEC-2026-3565)(25.09.2026 um 06:20 Uhr)
•
Sichere ProgrammierungDefault Enablement of Copilot Features for Copilot Business and Enterprise(25.09.2026 um 05:13 Uhr)
•
Sichere ProgrammierungI built a tool that makes images bigger, not smaller – here's why(25.09.2026 um 05:56 Uhr)
•
Sichere ProgrammierungAn element entering the viewport is not the same as a survey impression(25.09.2026 um 05:58 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

TuneD 2.26 by Red Hat, released !

Noteworthy changes since the previous release: tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor tuned-ppd: enabled sysfs_acpi_monitor by default tuned-ppd: fixed inotify watch for performance degradation tuned-ppd: pinned…

Linux Tipps & Hardening reddit.com 1 Min. Lesezeit CWE-362
0
↗ Quelle (reddit.com)
Reagiere als Erste:r — dein Feedback zählt!

Noteworthy changes since the previous release:

  • tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  • tuned-ppd: enabled sysfs_acpi_monitor by default
  • tuned-ppd: fixed inotify watch for performance degradation
  • tuned-ppd: pinned virtual files in memory for inotify
  • fixed instance priority inheritance (RHEL-94842)
  • hotplug: added fixes for device remove race condition
  • tuned-main.conf: added startup_udev_settle_wait option (RHEL-88238)
  • functions: silenced errors if module kvm_intel does not exist (RHEL-79943)
  • functions: make calc_isolated_cores return CPU ranges (RHEL-75751)
  • scsi: used 'med_power_with_dipm' for SATA ALPM
  • scsi: do not set ALPM on external SATA ports (RHEL-79913)
  • network_latency: Set non-zero rcutree.nohz_full_patience_delay (RHEL-61801)
  • realtime: Disable appropriate P-State drivers (RHEL-85637)
  • plugin_disk: added support for MMC (MultiMediaCard) devices
  • udev: fix possible traceback in device matcher (RHEL-97087)
  • udev-settle: obey udev buffer size and handle possible tracebacks (RHEL-92637)
  • daemon: re-raise daemon init exception in no-daemon mode (RHEL-71304)
  • vm: deprecate dirty_ratio in favour of dirty_bytes with percents (RHEL-101578)
  • gui: fix the profile deleter script

redhat-performance/tuned: Tuning Profile Delivery Mechanism for Linux

Releases · redhat-performance/tuned

submitted by /u/fenix0000000
[link] [comments]

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - TuneD 2.26 by Red Hat, released !
id: 920b8877-6928-4346-8492-13c03d3caf72
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "TuneD 2.26 by Red Hat, release" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("TuneD 226 by Red Hat released")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*TuneD 226 by Red Hat released*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "TuneD 226 by Red Hat released"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
💡 Tipp: Klicken Sie auf eine TTP, um Gegenmaßnahmen und SIEM-Erkennungsregeln anzuzeigen.Enterprise Matrix v14.1
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Mehr aus dieser Kategorie
More fun with the Kalshi API from the Linux CLI. 10 Weather models. Active weather map for wager visualzation. Detailed Model explanations.
24.09.2026
What Is Open Source? FOSS, Licensing & Community
25.09.2026
Ubuntu 26.10 beta delayed by a week
24.09.2026
Release systemd v262 · systemd/systemd
23.09.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich TuneD 2.26 by Red Hat, released !.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten TuneD 2.26 by Red Hat, released !

Thematisch verwandte Begriffe: TuneD, released · 6 Treffer

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97647 | A security vulnerability has been detected in ningzichun student-managem…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag