Urgent.News

One page, thousands of outlets. See who else covered it.

Editions

Tech

Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities

The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks. The post Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities appeared first on SecurityWeek .

We haven't written up this one. SecurityWeek has the full story — the link below goes straight to it.

Read the original at securityweek.com →

More in Tech

Laravel env() Outside config/: Catch Deployment Bugs Before config:cache

The bug only appears after configuration caching A Laravel application can behave perfectly during development and then fail after deployment because a service class reads an environment variable…

  • Direct env() calls outside config/ may fail during deployment
  • Laravel Env Guard tool scans for unsafe env() usage
  • Review recommends comparing environment file inventories

The GTA VI leak isn't really about GTA VI — it's an extortion playbook

Originally published in Spanish on El Rack . Browser translation handles the rest of the site fine if you're into homelab/security content.

  • GTA VI leak involves extortion, not accidental release
  • Cyberleek group demands changes in game industry practices
  • Leak follows 2022 attack on Rockstar Games servers

Taking the network away from a Cloud Run job

If you execute other people's code, at some point you have to decide what it is allowed to reach. Mine should reach nothing: no package registry, no pastebin, no callback to a server that tells it the…

  • Use unshare -rn -- ./run-the-untrusted-thing to strip network from Cloud Run job
  • Works only with second-generation Cloud Run environment with microVM
  • Set maxRetries to 0 to prevent automatic retries on failure

A container per job, without a daemon

Some workloads want an image each. A build that needs a specific toolchain, a test that needs a specific database client, a task whose dependencies are described by something other than a human.

  • Individual images for each task without Docker or build daemon
  • Package list provided to tools like apko for reproducible image
  • Eliminates build step, malicious input risk, and build-time entropy

More from Thursday 20 August →