#zen

► https://FunHouseRadio.com <- TUNE IN #meme #memes #zen #garden #cat #caturday #zengarden #mashup #pets

дзен умер но этого мало умерло и (условное) общение поэтому вконтакт - идёт лесом #introduction #zen #дзен #VK_goes_to_hell

@yourautisticlife@mast.yourautisticlife.com This has happened for me as far back as I can remember. It's somewhat like a lava lamp but the blobs go in any direction, not merely up and down. It is never absolutely pitch black when my eyes are closed. I do not know why they occur. They tend to be ignored now. #meditation #Zen #clouds

🚨 [CISA-2026:0727] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0727)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-68686 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-68686)

• Name: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: Fortinet
• Product: FortiOS
• Notes: https://fortiguard.fortinet.com/psirt/FG-IR-25-934 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-68686

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260727 #cisa20260727 #cve_2025_68686 #cve202568686

"A man is not called wise because he talks and talks again; but if he is peaceful, loving and fearless then he is in truth called wise." – Gautama Buddha Daily #Zen #Buddhism #Buddha #GautamaBuddha

To renounce things is not to give them up. It is to acknowledge that all things go away. Shunryu Suzuki #zen #buddhism #impermanence #shunryusuzuki

"I don’t mind what happens. That is the essence of inner freedom." – Jiddu Krishnamurti Daily #Zen #Buddhism #Krishnamurti #JidduKrishnamurti

I'm trying to track down a story from my youth and this forum seems it might have the right people - I think it was called "White Horse" and it was about training in Zen Buddhism to "be the white horse". It would have been in a short-story anthology ~80s/90s available either in a school or public library in Australia (so not too obscure), possibly a science fiction, speculative fiction, or fantasy collection. Anyone have any suggestions? @gregeganSF@mathstodon.xyz ? #ShortStories #Zen #WhiteHorse #SF

🚨 RefluXFS (CVE-2026-64600) has been identified as a notable vulnerability. In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK RefluXFS is a local privilege escalation vulnerability in the Linux kernel's XFS filesystem copy-on-write path. It allows local users to overwrite protected files and gain root access. ℹ️ Additional details on ZEN SecDB https://secdb.nttzen.cloud/updates/1d26eb14-ce27-4846-a8ce-bae087fb1e46/refluxfs-vulnerability #infosec #refluxfs #linux #kernel #xfs #lpe #nttdata #zen #secdb

A brush of sunlight #taiwan #formosa #photography #sunset #zen #alishan_national_forest_recreation_area #cherry_trees #small_mountainous_island_country

@darkuncle@infosec.exchange #Haiga #haiku #zen #digitalart

"Give, even if you only have a little. " – Gautama Buddha Daily #Zen #Buddhism #Buddha #GautamaBuddha

"Do not overrate what you have received, nor envy others. He who envies others does not obtain peace of mind." – Gautama Buddha Daily #Zen #Buddhism #Buddha #GautamaBuddha

🚨 [CISA-2026:0722] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-16232 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)

• Name: Check Point SmartConsole Improper Authentication Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: Check Point
• Product: SmartConsole
• Notes: https://support.checkpoint.com/results/sk/sk185169/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-16232

⚠️ CVE-2026-50522 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-50522)

• Name: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: Microsoft
• Product: SharePoint
• Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-50522

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260722 #cisa20260722 #cve_2026_16232 #cve_2026_50522 #cve202616232 #cve202650522

🚨 [CISA-2026:0721] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2021-27137 (https://secdb.nttzen.cloud/cve/detail/CVE-2021-27137)

• Name: DD-WRT Stack-Based Buffer Overflow Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: DD-WRT
• Product: DD-WRT
• Notes: This vulnerability affects a common open-source component, third-party library, proprietary implementation, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://svn.dd-wrt.com/changeset/45724 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-27137

⚠️ CVE-2026-0770 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0770)

• Name: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: Langflow
• Product: Langflow
• Notes: https://github.com/langflow-ai/langflow/releases/tag/v1.9.0 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0770

⚠️ CVE-2026-60137 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-60137)

• Name: WordPress Core SQL Injection Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: WordPress
• Product: Core
• Notes: https://wordpress.org/news/2026/07/wordpress-7-0-2-release/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-60137

⚠️ CVE-2026-63030 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63030)

• Name: WordPress Core Interpretation Conflict Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: WordPress
• Product: Core
• Notes: https://wordpress.org/news/2026/07/wordpress-7-0-2-release/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-63030

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260721 #cisa20260721 #cve_2021_27137 #cve_2026_0770 #cve_2026_60137 #cve_2026_63030 #cve202127137 #cve20260770 #cve202660137 #cve202663030

"'In a mind clear as still water, even the waves, breaking, are reflecting its light." – Dōgen Daily #Zen #Buddhism #Dogen

🪷 Buddhistdoor Quote for Today: Shunmyo Masuno 🪷 ✨ If the world is not going the way you want it to, perhaps it is better to change yourself. — Shunmyo Masuno ✨ 🔗 Go deeper: buddhistdoor.net #Buddhism #Buddha #Dharma #Zen #Mahayana #SelfReflection #Awakening #Mindfulness #Meditation #Spirituality

Get the PRINT! https://gricklemart.com/countryside-chill/ #grickledoodle #godzilla #cows #chill #zen #cartoon #art #drawing #kaiju #funny #humor

"Human beings are afraid of dying. They are always running after something: money, honor, and pleasure. But if you had to die now, what would you want?" – Taisen Deshimaru Daily #Zen #Buddhism #Deshimaru #TaisenDeshimaru

🚨 [CISA-2026:0715] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0715)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2023-4346 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-4346)

• Name: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: KNX Association
• Product: KNX Protocol Connection Authorization Option 1
• Notes: https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-4346

⚠️ CVE-2026-46817 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46817)

• Name: Oracle E-Business Suite Improper Privilege Management Vulnerability
• Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
• Known To Be Used in Ransomware Campaigns? Unknown
• Vendor: Oracle
• Product: E-Business Suite
• Notes: https://www.oracle.com/security-alerts/cspumay2026.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46817

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260715 #cisa20260715 #cve_2023_4346 #cve_2026_46817 #cve20234346 #cve202646817