RC RANDOM CHAOS

network-security

5 posts

Cisco warns of five NX-OS bugs that reach root
Article

Cisco warns of five NX-OS bugs that reach root

Cisco patched five critical NX-OS flaws allowing root code execution on Nexus 3000 and 9000 switches, plus regardless-of-config Cisco License bugs.

 The host dials out, the internet walks in
Article

The host dials out, the internet walks in

Cloudflare Quick Tunnels expose a localhost service to the public internet over an outbound connection, with no account and no inbound port opened.

 Keepalive packets bypass Android lockdown
Article

Keepalive packets bypass Android lockdown

A normal Android app can drive NAT-T keepalive packets onto UDP/4500 past Always-on VPN lockdown, leaking the device's real IP.

 Android leaks keepalive packets past its VPN kill switch
Article

Android leaks keepalive packets past its VPN kill switch

A normal Android app can push NAT-T keepalive packets to the physical network on UDP/4500 while Always-on VPN lockdown is enabled, leaking the real IP.

 Google IPv6 crossed 50%, your IPv4 controls didn't follow
Article

Google IPv6 crossed 50%, your IPv4 controls didn't follow

Google measures IPv6 at 50% of users, APNIC at 42%. Why they differ, and why controls scoped to IPv4 miss the v6 path on dual-stack hosts.