This show has been flagged as Clean by the host. We just found out that Daniel Persson has his own YouTube Channel. He's currently doing a series called "Cosy News Corner - Your source for Open Source news", and we're posting the audio…

Podcasts & Audio Briefings hackerpublicradio.org 26.11.2025, 01:00 Uhr 3 Min. Lesezeit Cloud & IT-Enterprise

↗ Quelle (hackerpublicradio.org)

Reagiere als Erste:r — dein Feedback zählt!

STANDARD — Regulärer Patch-Zyklus ~2 Min. (379 W.)

Deep Tech

HPR4518: Cosy News Corner for Week 46 - Your source for Open Source news This show has been flagged as Clean by the host.

Angriffsfläche

Enterprise IT / Cloud Infrastruktur

Exploit-Status

⚠️ Öffentlicher Exploit-PoC verfügbar

Sofortmaßnahme

Asset-Inventar prüfen & Upstream-Advisory überwachen

This show has been flagged as Clean by the host.

We just found out that Daniel Persson has his own YouTube Channel.

He's currently doing a series called "Cosy News Corner - Your source for Open Source news", and we're posting the audio of one sample episode here.

The link to the video is https://www.youtube.com/watch?v=5zZCa2neliA

The channel url is https://www.youtube.com/channel/UCnG-TN23lswO6QbvWhMtxpA and you can add the channel to your rss reader opml using the following line.



<outline text="Daniel Persson" title="Daniel Persson" type="rss" xmlUrl="https://www.youtube.com/feeds/videos.xml?channel_id=UCnG-TN23lswO6QbvWhMtxpA"/>

The link to the RSS for the Cozy News Corner podcast is https://www.youtube.com/feeds/videos.xml?playlist_id=PLP2v7zU48xOIq-TXWuBrhGKNJCyZkblMZ

Title: Debian Mandates Rust for APT, Reshaping Ubuntu and Other Linux Distros

By: Steven J. Vaughan-Nichols - TheNewstack

https://thenewstack.io/debian-mandates-rust-for-apt-reshaping-ubuntu-and-other-linux-distros/

The Complexity of Simplicity

Keynote given at TalosCon by Oxide Co-Founder and CTO Bryan Cantrill in Amsterdam on October 17, 2025.

"He went into Rust pretty skeptical honestly and it came back realizing that there were so many things that he viewed to be essential complexity that were actually accidental complexity."

If you have not learned Rust and you are unfamiliar with the most important thing about Rust to someone who's new to Rust is the way it handles errors, right?

https://www.youtube.com/watch?v=Cum5uN2634o

Title: Ubuntu's Rust Transition Hits Another Bump as sudo-rs Security Vulnerabilities Show Up

By: Sourav Rudra - It's FOSS

https://itsfoss.com/news/sudo-rs-issue-ubuntu/

Title: Snapchat Open Sources Cross-Platform UI Framework

By Loraine Lawson - TheNewstack

https://thenewstack.io/snapchat-open-sources-cross-platform-ui-framework/

https://github.com/Snapchat/Valdi

Title: # Solo.io Open Sources Agentregistry, With Support for Agent Skills

By: Heather Joslyn - TheNewstack

https://thenewstack.io/solo-io-open-sources-agentregistry-with-support-for-agent-skills/

Title: FFmpeg Calls Google's AI Bug Reports "CVE Slop"

By: Sourav Rudra - It's FOSS

By: Steven J. Vaughan-Nichols - TheNewstack

https://itsfoss.com/news/ffmpeg-google-fiasco/

https://daniel.haxx.se/

Title: Ubuntu's New 15-Year Commitment Targets Long-Lived Enterprise Systems

By: Sourav Rudra - It's FOSS

https://itsfoss.com/news/ubuntu-15-year-support-commitment/

Title: Mozilla Unveils Plans for New 'AI Window' Browsing Mode in Firefox, Opens Signups

By: Sourav Rudra - It's FOSS

By: Ajit Varma - Distilled

https://itsfoss.com/news/mozilla-ai-window-plans/

https://blog.mozilla.org/en/firefox/ai-window/

https://www.firefox.com/en-US/ai/

Title: Nitrux 5.0.0 Released: A 'New Beginning' That's Not for Everyone (By Design)

By: Sourav Rudra - It's FOSS

https://itsfoss.com/news/nitrux-5-release/

https://nxos.org/

Title: You Can Play Classic D3D7 Games on Linux With This New Project, But Don’t Expect Perfection

By: Sourav Rudra - It's FOSS

https://itsfoss.com/news/play-d3d7-games-on-linux/

https://github.com/WinterSnowfall/d7vk

Provide feedback on this episode.

1. Sofort-Triage & Abwehrmaßnahmen

IR-PLAYBOOK-RCEHIGH

Schritte anzeigen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

WAF MitigationSofort

Virtuelles Patchen am Reverse Proxy / WAF für gefährdete URL-Pfade und Payloads aktivieren.

SecRule REQUEST_URI "@rx ..." "id:1001,phase:1,deny,status:403"

Web Shell ScanSofort

Web-Root auf neu angelegte Scripts, anomal modifizierte Dateien und Persistence scannen.

find /var/www -type f -name "*.php" -mmin -120

Outbound FilteringSofort

Ausgehenden Datenverkehr (Reverse Shells zu unbekannten IPs/Ports) blockieren.

ss -tunp | grep -E ":(4444|1337|8080|9001)"

Vendor Patching

Hersteller-Update in Staging validieren und schnellstmöglich in Produktion ausrollen.

apt update && apt --only-upgrade install <pkg>

1-Click Detection Engineering: Multi-Dialect SIEM Rules5 Formate

Regeln anzeigen

Syntax validiert (0 Fehler)

title: Detect Exploitation - HPR4518: Cosy News Corner for Week 46 - Your source for Open Source news
id: e1e1a742-fcc5-4704-83e8-e636df55f520
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

Syntax validiert (0 Fehler)

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "HPR4518: Cosy News Corner for " ascii wide
    condition:
        any of them
}

Syntax validiert (0 Fehler)

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("HPR4518 Cosy News Corner for Week 46 - Y")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

Syntax validiert (0 Fehler)

message: "*HPR4518 Cosy News Corner for Week 46 - Y*"

Syntax validiert (0 Fehler)

CommonSecurityLog
| where Message has "HPR4518 Cosy News Corner for Week 46 - Y"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph3 Knoten / 2 Relationen

CVE / Incident Software MITRE ATT&CK CWE Weakness IoC

🎯

MITRE ATT&CK Matrix Navigator 14 Taktiken

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

💡 Tipp: Klicken Sie auf eine TTP, um Gegenmaßnahmen und SIEM-Erkennungsregeln anzuzeigen.Enterprise Matrix v14.1

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 3 Min

Day 1274 : From Scratch

Sichere Programmierung

NÄCHSTER BEITRAG 1 Min

Google Maps Will Let You Hide Your Identity When Writing Reviews

IT Security NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich HPR4518: Cosy News Corner for Week 46 - .... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC

Schnell-Prompts für Analysten

⚠️ DEFANGED SANDBOX VIEW (tsecurity.de): Alle Netzwerkindikatoren und URLs wurden neutralisiert (2 Indikatoren entschärft). Nur zur defensiven Analyse!

Format: python

#!/usr/bin/env python3
# Exploit Title: PoC for Target
import socket, sys
target = '192[.]168[.]1[.]10'
url = 'hxxp://target[.]local/vuln'
s = socket.socket()
s.connect((target, 80))
s.send(b'GET / HTTP/1.1\r\nHost: target.local\r\n\r\n')

Auch interessante Nachrichten HPR4518: Cosy News Corner for Week 46 - Your source for Open Source news

Thematisch verwandte Begriffe: HPR4518, Cosy, News, Corner · 6 Treffer

Malware / Trojaner / Viren Kategorie: Sicherheit|igor´s

LeakWatch KW 38/2026: 490 Millionen Gyazo-Metadaten, Malware aus der Cloud, OpenAI bis zum internen Code offen und Nova Lake leakt an allen Ecken

vor 6 Tagen 📆 20.09.2026 um 05:30 Uhr

Weiterlesen ↗

AI & KI Nachrichten MarkTechPost

OpenClaw Releases 2026.9.5 With Atomic Updates, Plugin Hot Reload, Conversation Sharing, and Expanded GPT Live

vor 6 Tagen 📆 19.09.2026 um 23:44 Uhr

Weiterlesen ↗

Linux Tipps & Hardening OMG! Ubuntu!

Convey is a GTK4/libadwaita fork of Linux email app Geary

vor 6 Tagen 📆 20.09.2026 um 03:31 Uhr

Weiterlesen ↗

IT Security Downloads GitHub · openclaw/openclaw

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

Release v2026.7.34 von openclaw/openclaw auf GitHub: test(release): use entitled Gemini live model (#153189)

vor 6 Tagen 📆 20.09.2026 um 00:00 Uhr

Weiterlesen ↗

IT Nachrichten Caschys Blog

Immer wieder sonntags KW 38: Wero, Revolut, PayPal und Apple und der Blåsbälg

vor 6 Tagen 📆 20.09.2026 um 06:30 Uhr

Weiterlesen ↗

IT Security Tools KitPloit - PenTest Tools!

urx v0.11.0

vor 6 Tagen 📆 20.09.2026 um 00:28 Uhr

Weiterlesen ↗

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

🚀 Auf tsecurity.de entdecken

Kommentare über HPR4518: Cosy News Corner for Week 46 - Your source for Open Source news

💬 Social News Network

Community Debatte 0 Beiträge

Tags:Noch keine Tags.

Noch keine Diskussion eröffnet

Sei der Erste, der seine Einschätzung oder PoC zu diesem Thema teilt.

🚀 Auf tsecurity.de entdecken

Echtzeit-Radar & Feeds

👥 Community & Social

🕒 tsecurity.de Such-Trends & Chronologie

HPR4518: Cosy News Corner for Week 46 - Your source for Open Source news

Title: Debian Mandates Rust for APT, Reshaping Ubuntu and Other Linux Distros

Title: Ubuntu's Rust Transition Hits Another Bump as sudo-rs Security Vulnerabilities Show Up

Title: Snapchat Open Sources Cross-Platform UI Framework

Title: # Solo.io Open Sources Agentregistry, With Support for Agent Skills

Title: FFmpeg Calls Google's AI Bug Reports "CVE Slop"

Title: Ubuntu's New 15-Year Commitment Targets Long-Lived Enterprise Systems

Title: Mozilla Unveils Plans for New 'AI Window' Browsing Mode in Firefox, Opens Signups

Title: Nitrux 5.0.0 Released: A 'New Beginning' That's Not for Everyone (By Design)

Title: You Can Play Classic D3D7 Games on Linux With This New Project, But Don’t Expect Perfection

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

2. Cyber Threat Intelligence & Forensik

MITRE ATT&CK Matrix Navigator 14 Taktiken

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten HPR4518: Cosy News Corner for Week 46 - Your source for Open Source news

LeakWatch KW 38/2026: 490 Millionen Gyazo-Metadaten, Malware aus der Cloud, OpenAI bis zum internen Code offen und Nova Lake leakt an allen Ecken

OpenClaw Releases 2026.9.5 With Atomic Updates, Plugin Hot Reload, Conversation Sharing, and Expanded GPT Live

Convey is a GTK4/libadwaita fork of Linux email app Geary

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

Immer wieder sonntags KW 38: Wero, Revolut, PayPal und Apple und der Blåsbälg

urx v0.11.0

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

HPR4518: Cosy News Corner for Week 46 - Your source for Open Source news

Title: Debian Mandates Rust for APT, Reshaping Ubuntu and Other Linux Distros

Title: Ubuntu's Rust Transition Hits Another Bump as sudo-rs Security Vulnerabilities Show Up

Title: Snapchat Open Sources Cross-Platform UI Framework

Title: # Solo.io Open Sources Agentregistry, With Support for Agent Skills

Title: FFmpeg Calls Google's AI Bug Reports "CVE Slop"

Title: Ubuntu's New 15-Year Commitment Targets Long-Lived Enterprise Systems

Title: Mozilla Unveils Plans for New 'AI Window' Browsing Mode in Firefox, Opens Signups

Title: Nitrux 5.0.0 Released: A 'New Beginning' That's Not for Everyone (By Design)

Title: You Can Play Classic D3D7 Games on Linux With This New Project, But Don’t Expect Perfection

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

2. Cyber Threat Intelligence & Forensik

MITRE ATT&CK Matrix Navigator 14 Taktiken

Mehr aus dieser Kategorie

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten HPR4518: Cosy News Corner for Week 46 - Your source for Open Source news

LeakWatch KW 38/2026: 490 Millionen Gyazo-Metadaten, Malware aus der Cloud, OpenAI bis zum internen Code offen und Nova Lake leakt an allen Ecken

OpenClaw Releases 2026.9.5 With Atomic Updates, Plugin Hot Reload, Conversation Sharing, and Expanded GPT Live

Convey is a GTK4/libadwaita fork of Linux email app Geary

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

Immer wieder sonntags KW 38: Wero, Revolut, PayPal und Apple und der Blåsbälg

urx v0.11.0

tsecurity.de App