Network Security News Summary for Friday April 29th, 2022

From SANS Internet Storm Center's Daily Network Security News Podcast Johannes B. Ullrich

SMB/RPC Honeypot Results; Azure PostgreSQL Priv Esc; GitHub Update A Day of SMB: What does our SMB/RPC Honeypot see? CVE-2022-26809 https://isc.sans.edu/forums/diary/A+Day+of+SMB+What+does+our+SMBRPC+Honeypot+see+CVE202226809/28594/ Azure PostgreSQL Privilege Escalation https://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql/ Security alert: Attack campaign involving stolen OAuth user tokens https://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens Netatalk Vulnerability Affecting Synology, QNAP, Others? https://www.synology.com/en-global/security/advisory/Synology_SA_22_06 keywords: netatalk; linux; qnap; synology; oauth; travis ci; postgrasql; heroku; azure; smb; rpc; honeypot