Mar 24, 2023

Started

• Closed✓Patched

  GitHub's RSA SSH host key briefly exposed in a public repo

  GitHub's private RSA SSH host key for github.com was briefly exposed in a public repository. GitHub rotated it as a precaution, which meant anyone connecting over SSH with RSA saw a host key mismatch warning until they updated known_hosts.

  GitHub (github.com SSH)·Closed Mar 24, 2023·updated Mar 24, 2023

Updated

• Closed✓Patched

  Outlook zero-click NTLM hash leak used by Russian state hackers (CVE-2023-23397)

  A crafted Outlook reminder with a UNC path made Outlook for Windows send the user's NTLM hash to an attacker's server without any click. Microsoft said a Russia-based actor (APT28) used it against European government, transport, energy and military targets.

  Microsoft Outlook for Windows·Closed Mar 24, 2023·updated Mar 24, 2023