http://www.circl.lu/News and security alerts from CIRCL, the national CERT of Luxembourg. Computer Incident Response Center Luxembourghttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170310-struts2Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability Affecting Cisco Products https://t.co/ICENyOC3MXhttps://cve.circl.lu/cve/CVE-2017-6444The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets https://t.co/l4IJuFFszvhttp://www.twitter.com/circl_lu/status/840891899401646080RT @JohnLaTwC: Strange tales from VT: It wasn't the RAT loaded with PowerShell that surprised me. It was the hacker chatting me up live in…http://www.twitter.com/circl_lu/status/840891642785779714RT @S_Team_Approved: Derniers préparatifs avant présentation des projets @Gameofcode_lu @Hack4Kids @circl_lu @secin_lu @BEESECURE https://t…https://cve.circl.lu/cve/CVE-2017-5638Saturday security update reminder for Apache Struts https://t.co/F7ALS6DHd1 #infosechttps://krebsonsecurity.com/2017/03/dahua-hikvision-iot-devices-under-siege/"Dahua, Hikvision IoT Devices Under Siege" https://t.co/4vWRoXlPzGhttps://www.eventbrite.com/e/misp-training-march-edition-tickets-32112187417Don't forget to join us for the @MISPProject training in Luxembourg Mon, March 20, 2017 https://t.co/X5NmhEBJbr #ThreatIntelhttps://support.apple.com/en-us/HT201518About EFI and SMC firmware updates for Intel-based Mac computers https://t.co/y0kNECxKfehttps://www.misp.software/2017/03/10/MISP.2.4.69.released.htmlRT @MISPProject: MISP 2.4.69 has been released including security fixes https://t.co/zlOIv44vB3 thanks to @FortiGuardLabs for the reporting.https://www.circl.lu/pub/tr-48/RT @rtaban: #GDPR vendors! MISP (https://t.co/GI5vxFOMtP) is coming to town, you better watch out! #MISP @circl_luhttps://cve.circl.lu/cve/CVE-2017-6798Trend Micro Endpoint Sensor 1.6 has a DLL hijacking vulnerability allows remote attackers to execute arbitrary code https://t.co/XwRsI5kcYuhttps://www.qurium.org/news-media-websites-attacked-from-governmental-infrastructure-in-azerbaijan/RT @arzugeybulla: News media websites attacked from Governmental Infrastructure in #Azerbaijan | Qurium https://t.co/DUsf8aTR0chttps://twitter.com/circl_lu/status/839763646897082368This is an important to update to Apache Struts. PoC exploit is distributed. https://t.co/ZgiqWLGDnghttp://radare.today/posts/Radare2-capstone/RT @Maijin212: 📚 Here are the reasons why comparing @capstone_engine and @radareorg is irrelevant - https://t.co/A5Ley0vrAd #infosec #Rever…https://www.first.org/conference/2017/program#pblackhole-networks-an-underestimated-source-for-information-leaksWe will present "Blackhole Networks - an Underestimated Source for Information Leaks" https://t.co/SysTrxlJaF at @FIRSTdotOrg conference