HPCSec @hpc_sec

Raising the bar for High Performance Computer security #HPC #Supercomputer #Cyber #Security hpcsec.com Joined July 2018

Tweets

101
Followers

158
Following

115
Likes

53

CISA Cyber @CISACyber

2 years ago

We’re responding to CVE-2024-3094, a reported supply chain compromise affecting XZ Utils versions 5.6.0 and 5.6.1. XZ Utils may be present in Linux distributions. See our additional guidance at cisa.gov/news-events/al….

21 536 1K 284K 231

HPCSec @hpc_sec

2 years ago

"ldd --version" should give you all the info you need to check if you are vulnerable to CVE-2023-6246, local privilege escalation in glibc hpcsec.com/security-feed/

0 0 0 42 0

HPCSec @hpc_sec

2 years ago

Looney Tunables: Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911) qualys.com/2023/10/03/cve…

0 1 0 163 0

HPCSec @hpc_sec

2 years ago

There will almost certainly be exploit code for this by the end of July. If you're on a 6.1-6.4 kernel then this local privilege escalation is one to be patching [CVE-2023-3269] openwall.com/lists/oss-secu… #Linux

0 1 1 217 0

HPCSec @hpc_sec

2 years ago

Lucky enough to have a registration code? Then set up a webhook in your favourite chat client and get protecting your HPC systems hpcsec.com/hpcsec-managed…

0 0 0 71 0

Download Image

HPCSec @hpc_sec

3 years ago

We often get asked about ransomware and supercomputers. It's something we track really closely and we have tooling to address it, so it only felt right to share some of our thoughts: hpcsec.com/2023/02/12/ran… #HPC

0 0 0 69 0

HPCSec @hpc_sec

3 years ago

Four steps for securing #BeeGFS installations from common security configuration issues: 1. connAuthFile 2. connAuthFile permissions 3. nosuid 4. connNetFilter / connInterfaces != security More info: hpcsec.com/2023/01/02/bee… #HPC

0 1 1 198 2

HPCSec @hpc_sec

3 years ago

Keep an eye on this upcoming critical OpenSSL vulnerability which will be fixed 1st November To see what version of OpenSSL you have installed run "openssl version" Only OpenSSL 3 is affected. The issue is fixed in 3.0.7. #OpenSSL

0 0 0 0 0

HPCSec @hpc_sec

3 years ago

Upgrades to BeeGFS 7.3.2 / 7.2.8 require a connAuthFile to be set up. A smart move which significantly bolsters BeeGFS security for very little effort. You should also set one up even if you are running an older version

0 0 0 0 2

HPCSec @hpc_sec

3 years ago

Quick check for bad activity in your auth logs: "grep Accepted /var/log/auth.log | grep -F -f <(curl -s hxxps://threat-exchange.hpcsec.com/sshbrute-latest.txt)" #infosec

0 1 3 0 2

HPCSec @hpc_sec

3 years ago

We've updated our list of IP addresses distributing Linux malware. You'll find it here: threat-exchange.hpcsec.com

0 1 1 0 0

HPCSec @hpc_sec

3 years ago

When we uncover an IP address distributing Linux malware it gets added to our "Linux malware distribution" list. You can download that list here: threat-exchange.hpcsec.com If you see your systems connecting to one of these IPs then it's definitely worth investigating. #ThreatIntel

0 0 0 0 0

HPCSec @hpc_sec

3 years ago

Most of our threat intel will never land in the public domain for obvious reasons, but here is some we can share - IPs targeting SSH servers - worry if any of these have successfully authenticated to your system(s): threat-exchange.hpcsec.com (free, updated hourly, curl friendly)

0 0 1 0 1

HPCSec @hpc_sec

3 years ago

A few Linux Kernel vulnerabilities allowing local privilege escalation lately. We're tracking them here: hpcsec.com/security-feed/ Exploit code is in the the wild, so updates is strongly recommended

0 1 0 0 2

BeeGFS - The leading Parallel File System @BeeGFS

3 years ago

@HPC_Guru Thanks, @HPCGuru - our head of engineering has just published a blog on the importance of using connAuthFile in BeeGFS. beegfs.io/c/the-importan… #BeeGFS

0 3 4 0 1

HPCSec @hpc_sec

3 years ago

Yesterday SchedMD released versions 21.08.8 & 20.11.9 of Slurm which address three security vulnerabilities. One of which (CVE-2022-29500) appears significant, affects all versions, and allows an unprivileged user a mechanism to execute code as root: hpcsec.com/security-feed/ #HPC

0 0 0 0 0

HPCSec @hpc_sec

3 years ago

IBM have patched CVE-2022-22368 - a vulnerability in Spectrum Scale (GPFS) which could allow an attacker to decrypt highly sensitive information. Our tracker for HPC security vulnerabilities is available here: hpcsec.com/security-feed/

0 0 1 0 0

HPCSec @hpc_sec

3 years ago

We're still seeing clusters with vulnerable Spectrum Scale (GPFS) instances. It's quite easy to check if you're vulnerable and to fix it: hpcsec.com/2020/07/03/spe… < - includes technical exploit analysis #HPC #Supercomputer