Author Archives: SANS Internet Storm Center, InfoCON: green

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, September 19th, 2023 https://isc.sans.edu/podcastdetail/8664, (Tue, Sep 19th)→

Brute-forcing passwords for VPN access has become a standard technique for various actors to access corporate networks to exfiltrate data later or deploy ransomware. After identifying the VPN, an attacker may use simple brute forcing, credential stuffing, or social engineering in some very public cases to obtain access.

Continue reading Internet Wide Multi VPN Search From Single /24 Network, (Mon, Sep 18th)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, September 18th, 2023 https://isc.sans.edu/podcastdetail/8662, (Mon, Sep 18th)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, September 15th, 2023 https://isc.sans.edu/podcastdetail/8660, (Fri, Sep 15th)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, September 14th, 2023 https://isc.sans.edu/podcastdetail/8658, (Thu, Sep 14th)→

[This is a Guest Diary by Allen Ingle, an ISC intern as part of the SANS.edu BACS program]

Continue reading DShield and qemu Sitting in a Tree: L-O-G-G-I-N-G, (Thu, Sep 14th)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, September 13th, 2023 https://isc.sans.edu/podcastdetail/8656, (Wed, Sep 13th)→

This month we got patches for 66 vulnerabilities. Of these, 5 are critical, and 2 are already being exploited, according to Microsoft.

Continue reading Microsoft September 2023 Patch Tuesday, (Tue, Sep 12th)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, September 12th, 2023 https://isc.sans.edu/podcastdetail/8654, (Tue, Sep 12th)→

This update fixes the ImageIO vulnerability Apple patched for current operating systems last week. Now, Apple follows up with a patch for its older, but still supported, operating system versions.

Continue reading Apple fixes 0-Day Vulnerability in Older Operating Systems, (Mon, Sep 11th)→