Network Security News Summary for Wednesday April 20th, 2022

From SANS Internet Storm Center's Daily Network Security News Podcast Johannes B. Ullrich

u-boot Password Reset; Oracle CPU; MetaMask iCloud Phishing; Less SMBv1; Lenovo removes accidental backdoors u-boot Password Reset https://isc.sans.edu/forums/diary/Resetting+Linux+Passwords+with+UBoot+Bootloaders/28564/ Oracle CPU https://www.oracle.com/security-alerts/cpuapr2022.html MetaMask iCloud Phishing https://www.bleepingcomputer.com/news/security/hackers-steal-655k-after-picking-metamask-seed-from-icloud-backup/ SMB1 Gone From Windows 11 Home https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb1-now-disabled-by-default-for-windows-11-home-insiders-builds/ba-p/3289473 Lenovo UEFI/BIOS Vulnerability https://support.lenovo.com/us/en/product_security/ps500483-lenovo-system-update-privilege-escalation-vulnerability https://support.lenovo.com/de/de/product_security/LEN-84943 keywords: uboot; oracle; metamask; icloud; cryptocoins; smbv1; windows 11; lenovo; backdoors