Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, September 11th, 2023 https://isc.sans.edu/podcastdetail/8652, (Mon, Sep 11th)
In diary entry “Creating a YARA Rule to Detect Obfuscated Strings” I explain how to tune a YARA rule with regular expressions for performance.
Continue reading Quickie: Generating a YARA Rule to Detect Obfuscated Strings, (Sun, Sep 10th)
[This is a Guest Diary by Chris Vucic, an ISC intern as part of the SANS.edu BACS program]
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, September 8th, 2023 https://isc.sans.edu/podcastdetail/8650, (Fri, Sep 8th)
| macOS Ventura 13.5.2 | iOS 16.6.1 and iPadOS 16.6.1 | watchOS 9.6.2 |
|---|---|---|
| CVE-2023-41064 [critical] ChatGPT-CVSS: 9.8 *** EXPLOITED *** ImageIO A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. |
||
| x | x | |
| CVE-2023-41061 [moderate] ChatGPT-CVSS: 9.8 *** EXPLOITED *** Wallet A validation issue was addressed with improved logic. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. |
||
| x | x | |
Scareware, software advertised via fake malware messages, or Fleezeware, software providing questionable subscription services, keeps ending up in Apple&#;x26;#;39;s app store, bypassing various controls Apple uses to restrict software available to its users. Part of the difficulty in proactively recognizing this type of software is that these apps are often benign. The issue with this software is that it doesn&#;x26;#;39;t do much, if anything at all. The program becomes more obvious in how the software is advertised.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, September 7th, 2023 https://isc.sans.edu/podcastdetail/8648, (Thu, Sep 7th)
DNS has a big security impact. DNS is partly responsible for your traffic reaching the correct host on the internet. But there is more to DNS than name resolution. I am going to mention a few security-relevant record types here, in no particular order:
Continue reading Security Relevant DNS Records, (Wed, Sep 6th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, September 6th, 2023 https://isc.sans.edu/podcastdetail/8646, (Wed, Sep 6th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, September 5th, 2023 https://isc.sans.edu/podcastdetail/8644, (Tue, Sep 5th)