Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, December 15th, 2023 https://isc.sans.edu/podcastdetail/8780, (Fri, Dec 15th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, December 14th, 2023 https://isc.sans.edu/podcastdetail/8778, (Thu, Dec 14th)
[This is a Guest Diary by Michael Smith, an ISC intern as part of the SANS.edu BACS program]
Continue reading T-shooting Terraform for DShield Honeypot in Azure [Guest Diary], (Wed, Dec 13th)
One essential behavior of malware is to remain “stealthy” and perform nasty activities below the radar. But sometimes, it can be attractive to interact with the victim to make it&#;x26;#;xc2;&#;x26;#;xa0;more confident and use the script (that&#;x26;#;39;s my guess). I found a malicious Python script that builds a window and displays it to the user. Python can create powerful GUIs with the help of the tkinter[1] library. It adds support to TCL/TK[2] framework. TCL is an old language I did not use for a long time. My last experience with TCL was related to scripting on Cisco IOS[3]!
Continue reading Malicious Python Script with a TCL/TK GUI, (Wed, Dec 13th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, December 13th, 2023 https://isc.sans.edu/podcastdetail/8776, (Wed, Dec 13th)
Microsoft had a rather light patch Tuesday for us today. Today&#;x26;#;39;s set includes 4 critical, 30 important, and one moderate vulnerability. In addition, Microsoft included five Chromium patches that are part of Edge. Only one vulnerability was made public before today. No exploited vulnerabilities are patched today.
Continue reading Microsoft Patch Tuesday December 2023, (Tue, Dec 12th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, December 12th, 2023 https://isc.sans.edu/podcastdetail/8774, (Tue, Dec 12th)
Apple today released updates for iOS, macOS, tvOS and watchOS. This updates 43 vulnerabilities. Two of the vulnerabilities are already being exploited. Last week, these two vulnerabilities received patches for current versions of iOS and macOS. This new update covers older iOS and macOS versions as well.
Everyone seems to be familiar with robots.txt – the contents of that file are normally used to tell search engines what branches of your site to NOT index, or in some misguided cases folks think that this can be used to “secure” your pages for some reason.&#;x26;#;xc2;&#;x26;#;xa0; But what about sitemap.xml, what&#;x26;#;39;s that for?
Continue reading What is sitemap.xml, and Why a Pentester Should Care, (Mon, Dec 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, December 11th, 2023 https://isc.sans.edu/podcastdetail/8772, (Mon, Dec 11th)