Serious Discussion How Does One improve Security ?

[Divine_Barakah]

Guys, please stay on topic. This thread is for discussing "How does one improve security'.

I shared some insights and some links about disclosed vulnerabilities that would help other better understand the threat vectors. Each one of the replies I made is one way or another related to the core of this topic.

Edit:


Correcting misinformation and dismantling unverified claims (on the topic of cyber security) is precisely on-topic.

 

[Parkinsond]

So now you resort to moving the goalposts. Each time you throw some unverified claim

You could politely explained in details the alternative point of view, the way I used to by decent members such as Andy Ful.
But you choosed the hard way to tell; you earned my way of response.

 

[Divine_Barakah]

Security News Thread '16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems'

Yesterday at 11:15 PM

A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.

Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit turns the same bug into full host code execution.

Security researcher Hyunwoo Kim (@v4bel) found and reported the bug. He described Januscape as the first guest-to-host exploit triggerable on both...

• Captain Awesome
• Replies: 1
• Forum: Security News

• 
• 

This completely nukes the fallacy of "up-to-date"

The Januscapel Vulnerability was introduced in the Linux kernel in August 2010, and it was not patched until 2026 (16 years!)

For a decade and a half, Linux system administrators who religiously kept their servers "up-to-date" were still completely vulnerable to this zero-day exploit. An updated OS only protects against known threats; it does nothing to stop a 16-year-old architectural flaw.

 

[Victor M]

Guys, this thread is for posting Methods to Improve Security.

@Divine_Barakah has demo'ed another way, and that is to learn from attack dissections by security researchers. Some call it Open Source Intelligence. (OSINT). Members of MT frequently post these as Security News in the forum. Sometimes, the dissections reveal methods where we can block some of the attacks. For example for ClickFix attacks, we can use Group Policy to forbid use of the Run Box ( accessed by Winkey + R )

 

[stonjean633]

The tech is there. I should say User Awareness. Once people are aware of the do's and don'ts, it will help any organization be it SMB or Enterprise.