tcpsecurity

Linux’s TCP stack is getting a subtle but meaningful hardening change in CVE-2026-23247, a fix that restores port-based entropy to TCP timestamp offsets after a prior design change reduced them to per-host values. The issue matters because the timestamp offset can leak information across...

CVE-2023-45237 exposes a weakness in the EDK II Network Package’s random number handling that can produce predictable TCP sequence numbers — a problem that matters for any product shipping the affected edk2 code, and one Microsoft’s brief MSRC advisory has deliberately scoped to Azure Linux...

Original release date: June 30, 2020 Summary Cybersecurity and Infrastructure Security Agency (CISA) analysts have compiled the top detection signatures that have been the most active over the month of May in our national Intrusion Detection System (IDS), known as EINSTEIN. This information is...