📰 New article by Sofien Abid
Increase application availability: Configure Linux iSCSI multipath with ALUA for Amazon FSx for NetApp ONTAP
#AWS #Storage
Increase application availability: Configure Linux iSCSI multipath with ALUA for Amazon FSx for NetApp ONTAP
#AWS #Storage
Increase application availability: Configure Linux iSCSI multipath with ALUA for Amazon FSx for NetApp ONTAP
When you run production workloads on block storage attached using iSCSI, relying on a single network path between your compute and storage creates an unacceptable single point of failure. For example, if the only path between your Amazon Elastic Compute Cloud (Amazon EC2) instance and your Amazon FSx for NetApp ONTAP file system fails because [...]
aws.amazon.com
November 9, 2026 at 3:56 PM
RFC 10069: 複数経路を活用するMultipath QUICがRFCになった - ASnoKaze blog
RFC 10069: 複数経路を活用するMultipath QUICがRFCになった - ASnoKaze blog
https://asnokaze.hatenablog.com/entry/2026/11/09/000339
asnokaze.hatenablog.com
November 10, 2026 at 1:00 AM
RFC 10069: 複数経路を活用するMultipath QUICがRFCになった - ASnoKaze blog
oh multipath tcp is cool
November 3, 2026 at 8:11 AM
oh multipath tcp is cool
An AI model wrote an exploit that gets root on Linux servers with multipath TCP. CVE-2026-98432 is CVSS 9.8; patch your kernels.
YouTube: www.youtube.com/shorts/1cfFW...
#Cybersecurity #Linux #PatchNow
YouTube: www.youtube.com/shorts/1cfFW...
#Cybersecurity #Linux #PatchNow
AI-Written Linux Root Exploit Hits Multipath TCP
An AI model wrote an exploit that gets root on Linux servers with multipath TCP. CVE-2026-98432 is CVSS 9.8; patch your kernels.
www.youtube.com
November 3, 2026 at 10:00 PM
An AI model wrote an exploit that gets root on Linux servers with multipath TCP. CVE-2026-98432 is CVSS 9.8; patch your kernels.
YouTube: www.youtube.com/shorts/1cfFW...
#Cybersecurity #Linux #PatchNow
YouTube: www.youtube.com/shorts/1cfFW...
#Cybersecurity #Linux #PatchNow
During the 1330-1400 UTC broadcast, 15770 kHz from WRMI Florida, received via SDR in South Australia, interesting short-path-long-path mix in the only two images that decoded. The other images failed probably due to the multipath.
November 4, 2026 at 2:49 PM
During the 1330-1400 UTC broadcast, 15770 kHz from WRMI Florida, received via SDR in South Australia, interesting short-path-long-path mix in the only two images that decoded. The other images failed probably due to the multipath.
Tak pořád je to o nějakém vrstvení bezpečnostních opatření. Když kompromituju server přes PHP nebo multipath v kernelu (wink wink), měly by zapracovat další vrstvy (EDR, segmentace a firewall, IPS, SIEM, ...).
November 4, 2026 at 11:23 AM
Tak pořád je to o nějakém vrstvení bezpečnostních opatření. Když kompromituju server přes PHP nebo multipath v kernelu (wink wink), měly by zapracovat další vrstvy (EDR, segmentace a firewall, IPS, SIEM, ...).
SecPoint MPTCP Scanner: Review Protocol Exposure
Which of your reachable services negotiate Multipath TCP?
Get a FREE vulnerability scan:
www.secpoint.com/free-vulnera...
Become a SecPoint partner:
www.secpoint.com/partner-sign...
#SecPoint #MPTCP #AttackSurfaceManagement #CyberSecurity
Which of your reachable services negotiate Multipath TCP?
Get a FREE vulnerability scan:
www.secpoint.com/free-vulnera...
Become a SecPoint partner:
www.secpoint.com/partner-sign...
#SecPoint #MPTCP #AttackSurfaceManagement #CyberSecurity
November 8, 2026 at 9:24 PM
SecPoint MPTCP Scanner: Review Protocol Exposure
Which of your reachable services negotiate Multipath TCP?
Get a FREE vulnerability scan:
www.secpoint.com/free-vulnera...
Become a SecPoint partner:
www.secpoint.com/partner-sign...
#SecPoint #MPTCP #AttackSurfaceManagement #CyberSecurity
Which of your reachable services negotiate Multipath TCP?
Get a FREE vulnerability scan:
www.secpoint.com/free-vulnera...
Become a SecPoint partner:
www.secpoint.com/partner-sign...
#SecPoint #MPTCP #AttackSurfaceManagement #CyberSecurity
‼️ Most Ubuntu releases still lack a regular fix for a critical Linux kernel bug Debian patched on 16 October. Anthropic says its AI built a root exploit.
It needs no login, just packets to a server with a multipath TCP listener. …
It needs no login, just packets to a server with a multipath TCP listener. …
November 3, 2026 at 11:28 AM
‼️ Most Ubuntu releases still lack a regular fix for a critical Linux kernel bug Debian patched on 16 October. Anthropic says its AI built a root exploit.
It needs no login, just packets to a server with a multipath TCP listener. …
It needs no login, just packets to a server with a multipath TCP listener. …
Remote code execution on Linux systems with multipath TCP #devopsish
Remote code execution on Linux systems with multipath TCP
On October 27, LLM provider Anthropic reported on a remotely exploitable use-after-free bug a [...]
lwn.net
November 2, 2026 at 11:03 PM
Remote code execution on Linux systems with multipath TCP #devopsish
Just heard enough of Multipath TCP lately 🙄🐧
November 2, 2026 at 11:08 AM
Just heard enough of Multipath TCP lately 🙄🐧
Ubuntu stages Linux kernel fixes for critical TCP flaw as wider testing continues
Ubuntu has put patched kernels for a critical Linux TCP connection flaw into a testing area for 22.04 LTS and newer. It says updates, not disabling Multipath TCP, are the right defense.
#cybersecurity
Ubuntu has put patched kernels for a critical Linux TCP connection flaw into a testing area for 22.04 LTS and newer. It says updates, not disabling Multipath TCP, are the right defense.
#cybersecurity
Ubuntu stages Linux kernel fixes for critical TCP flaw as wider testing continues
Ubuntu has put patched kernels for a critical Linux TCP connection flaw into a testing area for 22.04 LTS and newer. It says updates, not disabling Multipath TCP, are the right defense.
secquill.com
November 5, 2026 at 3:05 AM
Ubuntu stages Linux kernel fixes for critical TCP flaw as wider testing continues
Ubuntu has put patched kernels for a critical Linux TCP connection flaw into a testing area for 22.04 LTS and newer. It says updates, not disabling Multipath TCP, are the right defense.
#cybersecurity
Ubuntu has put patched kernels for a critical Linux TCP connection flaw into a testing area for 22.04 LTS and newer. It says updates, not disabling Multipath TCP, are the right defense.
#cybersecurity
An AI-written exploit gets root on Linux multipath TCP servers, Siemens IoT2050 devices are under attack, and Ivanti's October fixes didn't stop root escalation.
YouTube: https://www.youtube.com/watch?v=u106UfoTHDQ
#Cybersecurity #Linux #Ivanti
YouTube: https://www.youtube.com/watch?v=u106UfoTHDQ
#Cybersecurity #Linux #Ivanti
AI Malware Targets Your Finances, Ivanti Connect Secure Hacked, Siemens Under Siege
An AI-written exploit gets root on Linux multipath TCP servers, Siemens IoT2050 devices are under attack, and Ivanti's October fixes didn't stop root escalation.
www.youtube.com
November 3, 2026 at 8:20 PM
An AI-written exploit gets root on Linux multipath TCP servers, Siemens IoT2050 devices are under attack, and Ivanti's October fixes didn't stop root escalation.
YouTube: https://www.youtube.com/watch?v=u106UfoTHDQ
#Cybersecurity #Linux #Ivanti
YouTube: https://www.youtube.com/watch?v=u106UfoTHDQ
#Cybersecurity #Linux #Ivanti
RFC 10069: Managing Multiple Paths for a QUIC Connection www.rfc-editor.org/rfc/rfc10069...
RFC 10069: Managing Multiple Paths for a QUIC Connection
This document specifies a multipath extension for the QUIC protocol to
enable the simultaneous usage of multiple paths for a single connection.
It introduces explicit path identifiers to create, delet...
www.rfc-editor.org
November 9, 2026 at 5:57 PM
RFC 10069: Managing Multiple Paths for a QUIC Connection www.rfc-editor.org/rfc/rfc10069...
A research artificial intelligence took 48 minutes to leak a kernel address and five more to root a multipath TCP listener. CVSS 9.8. Ubuntu still lists three releases vulnerable. Update first. Then Creakboard.
From the Ministry of Truth Bulletin 5.11.26. AI-generated face and voice. #Satire
From the Ministry of Truth Bulletin 5.11.26. AI-generated face and voice. #Satire
November 7, 2026 at 12:06 PM
A research artificial intelligence took 48 minutes to leak a kernel address and five more to root a multipath TCP listener. CVSS 9.8. Ubuntu still lists three releases vulnerable. Update first. Then Creakboard.
From the Ministry of Truth Bulletin 5.11.26. AI-generated face and voice. #Satire
From the Ministry of Truth Bulletin 5.11.26. AI-generated face and voice. #Satire
Linux kernelinde 9.8 CVSS puanlı bir güvenlik açıklığı var: multipath TCP dinleyicilerinde uzaktan root erişimi sağlayabiliyor. Sistem sağlayıcıları hızlı tepki verdi. #Linux #Güvenlik #TCP
Yüksek CVSS Puanlı Linux TCP Açıklığı ve Sistem Sağlayıcılarının Tepkisi
Yüksek CVSS Puanlı Linux TCP Açıklığı ve Sistem Sağlayıcılarının Tepkisi BirLinux kernelindeki 9.8 CVSS puanlı güvenlik açığı, hem sunucu hem de bulut ortamlarında çalışan sistemleri ciddi tehdit altında bırakıyor. Bu açıklık, özellikle multipath TCP (MPTCP) dinleyicisi olan…
almazlar.com
November 3, 2026 at 7:09 AM
⚙️ Lightning Network developers released LND v0.20.7-beta and v0.21.6-beta with Multipath TCP disabled by default, but node operators still need patched kernels to address the underlying vulnerability.
November 4, 2026 at 11:09 PM
⚙️ Lightning Network developers released LND v0.20.7-beta and v0.21.6-beta with Multipath TCP disabled by default, but node operators still need patched kernels to address the underlying vulnerability.
SANS Stormcast Tuesday, November 3rd, 2026: Multipath TCP (MPTCP) Detection; BTCPay Server 2.4.1 Hot Wallet Thefts; Barracuda ESG Flaws (CVE-2026-116606, CVE-2026-111560); Synology DSM Ransomware
https://isc.sans.edu/podcastdetail/10162
https://isc.sans.edu/podcastdetail/10162
November 3, 2026 at 2:00 AM
SANS Stormcast Tuesday, November 3rd, 2026: Multipath TCP (MPTCP) Detection; BTCPay Server 2.4.1 Hot Wallet Thefts; Barracuda ESG Flaws (CVE-2026-116606, CVE-2026-111560); Synology DSM Ransomware
https://isc.sans.edu/podcastdetail/10162
https://isc.sans.edu/podcastdetail/10162
Remote code execution on Linux systems with multipath TCP
Remote code execution on Linux systems with multipath TCP
lwn.net
November 2, 2026 at 10:09 AM
Remote code execution on Linux systems with multipath TCP
The Anthropic researcher who reported the bug in the first place has said an unreleased Claude model has created a working exploit which can give a remote attacker root access to affected servers using Multipath TCP (MPTCP): Ubuntu users slam Canonical over late Linux TCP bug fix buff.ly/80VSbPA
Ubuntu users slam Canonical over late Linux TCP bug fix
Canonical is fixing a critical Linux kernel flaw in Ubuntu, weeks after Debian and other distros did – and users aren't happy about the wait. As of 3
buff.ly
November 5, 2026 at 8:02 PM
The Anthropic researcher who reported the bug in the first place has said an unreleased Claude model has created a working exploit which can give a remote attacker root access to affected servers using Multipath TCP (MPTCP): Ubuntu users slam Canonical over late Linux TCP bug fix buff.ly/80VSbPA
Lightning Labs has released LND v0.20.7-beta and v0.21.6-beta to address a critical Linux flaw by disabling Multipath TCP by default. Node operators still require a patched kernel to fully resolve the underlying vulnerability. #Bitcoin #Lightning
🗞️ thedefiant.io
🗞️ thedefiant.io
Lightning Labs Releases LND Mitigation for Critical Linux Flaw
LND v0.20.7-beta and v0.21.6-beta disable Multipath TCP by default, but operators still need a patched kernel to fix the underlying vulnerability.
thedefiant.io
November 4, 2026 at 9:01 PM
Lightning Labs has released LND v0.20.7-beta and v0.21.6-beta to address a critical Linux flaw by disabling Multipath TCP by default. Node operators still require a patched kernel to fully resolve the underlying vulnerability. #Bitcoin #Lightning
🗞️ thedefiant.io
🗞️ thedefiant.io
Claro que el GPS tiene error multipath en ciudad y claro que parametrizarlo para que sea un sistema que priorice reducir velocidad por encima de seguridad es inseguro xd, pero creo que esos edge cases son bastante fáciles de solventar
November 5, 2026 at 8:57 PM
Claro que el GPS tiene error multipath en ciudad y claro que parametrizarlo para que sea un sistema que priorice reducir velocidad por encima de seguridad es inseguro xd, pero creo que esos edge cases son bastante fáciles de solventar
📰 **Remote code execution on Linux systems with multipath TCP**
On October 27, LLM provider Anthropic reported on a remotely exploitable use-after-free bug affecting systems with multipath TCP listeners open. The bug works by triggering a response to a retransm...
📰 Source: LWN.net
🔗 Link […]
On October 27, LLM provider Anthropic reported on a remotely exploitable use-after-free bug affecting systems with multipath TCP listeners open. The bug works by triggering a response to a retransm...
📰 Source: LWN.net
🔗 Link […]
Original post on igeek.gamer-geek-news.com
igeek.gamer-geek-news.com
November 1, 2026 at 4:13 PM
📰 **Remote code execution on Linux systems with multipath TCP**
On October 27, LLM provider Anthropic reported on a remotely exploitable use-after-free bug affecting systems with multipath TCP listeners open. The bug works by triggering a response to a retransm...
📰 Source: LWN.net
🔗 Link […]
On October 27, LLM provider Anthropic reported on a remotely exploitable use-after-free bug affecting systems with multipath TCP listeners open. The bug works by triggering a response to a retransm...
📰 Source: LWN.net
🔗 Link […]
not to dismiss the severity of the bug but how many folks even use multipath tcp? i've been asking that for a few days now.
this does not feel like a default-exploitable configuration which reduces the blast radius significantly.
this does not feel like a default-exploitable configuration which reduces the blast radius significantly.
November 1, 2026 at 11:09 PM
not to dismiss the severity of the bug but how many folks even use multipath tcp? i've been asking that for a few days now.
this does not feel like a default-exploitable configuration which reduces the blast radius significantly.
this does not feel like a default-exploitable configuration which reduces the blast radius significantly.
🚨 EUVD-2026-106990
📊 5.1/10
📝 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-106990
#cybersecurity #infosec #cve #euvd
📊 5.1/10
📝 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-106990
#cybersecurity #infosec #cve #euvd
November 5, 2026 at 5:01 PM
🚨 EUVD-2026-106990
📊 5.1/10
📝 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-106990
#cybersecurity #infosec #cve #euvd
📊 5.1/10
📝 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-106990
#cybersecurity #infosec #cve #euvd