Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, June 2nd, 2023 https://isc.sans.edu/podcastdetail/8522, (Fri, Jun 2nd)
Although the SSL/TLS suite of protocols has been instrumental in making secure communication over computer networks into the (relatively) straightforward affair it is today, the beginnings of these protocols were far from ideal.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, June 1st, 2023 https://isc.sans.edu/podcastdetail/8520, (Thu, Jun 1st)
Apache NiFi describes itself as &#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x9c;an easy-to-use, powerful, and reliable system to process and distribute data.&#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x9d; &#;x26;#;x5b;1&#;x26;#;x5d; In simple terms, NiFi implements a web-based interface to define how data is moved from a source to a destination. Users may define various &#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x9c;processors&#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x9d; to manipulate data along the way. This is often needed when processing business data or preparing data for machine learning. A dataset used for machine learning may arrive in one format (let&#;x26;#;39;s say JSON), but to conveniently use it for training, it must be converted to JSON or inserted into a database. The features are not just attractive to machine learning, but many business processes require similar functionality.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, May 31st, 2023 https://isc.sans.edu/podcastdetail/8518, (Wed, May 31st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, May 30th, 2023 https://isc.sans.edu/podcastdetail/8516, (Tue, May 30th)
I was asked how to analyze Office Documents that are embedded inside PPT files. PPT is the “standard” binary format for PowerPoint, it&#;x26;#;39;s an olefile. You can analyze it with oledump.py:
Continue reading Analyzing Office Documents Embedded Inside PPT (PowerPoint) Files, (Mon, May 29th)
Wireshark version 4.0.6 was released with 9 vulnerabilities and 15 bugs fixed.
I read recently that disregarding cyber risks is a way of inviting trouble and unnecessary attention to any organization. Cyber threats is nothing new, everyone is a target taking many forms whether it is by some form of scanning or targeted phishing. For example, Sophos describes the naughty nine which are all some form of services that can be purchased for a price (i.e. access, malware, phishing, crypting, etc). “Just as information technology companies have shifted to &#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x9c;as-a-service&#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x9d; offerings, so has the cybercrime ecosystem.” &#;x26;#;x5b;1&#;x26;#;x5d; This is no surprise that ransomware is still the one thing that affect the most organizations and, in the end, cost the most if you have no choices but to pay the ransom. In the case of the Hospital for Sick Children in Toronto, lockbit , “&#;x26;#;x5b;…&#;x26;#;x5d; issued a brief apology and offered SickKids a free decryptor to unlock its data.” &#;x26;#;x5b;2&#;x26;#;x5d; but this is far from always being the case. In the end, they did not use the decryptor but that isn&#;x26;#;39;t always the case.
Continue reading We Can no Longer Ignore the Cost of Cybersecurity, (Sun, May 28th)