Exchange Server 0-Day Actively Exploited, (Fri, Sep 30th)
Quick Update (Monday Oct 3rd):
Continue reading Exchange Server 0-Day Actively Exploited, (Fri, Sep 30th)
Author Archives: SANS Internet Storm Center, InfoCON: green
ISC Stormcast For Friday, September 30th, 2022 https://isc.sans.edu/podcastdetail.html?id=8196, (Fri, Sep 30th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, September 30th, 2022 https://isc.sans.edu/podcastdetail.html?id=8196, (Fri, Sep 30th)
PNG Analysis, (Thu, Sep 29th)
I updated my tool pngdump.py to deal with all the different samples tagged with PNG on MalwareBazaar.
ISC Stormcast For Thursday, September 29th, 2022 https://isc.sans.edu/podcastdetail.html?id=8194, (Thu, Sep 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, September 29th, 2022 https://isc.sans.edu/podcastdetail.html?id=8194, (Thu, Sep 29th)
10 Years Later: Attacker re-discovering old VTiger CRM Vulnerability?, (Wed, Sep 28th)
Legacy software has a way of “hanging around.” Just about a week ago I was reminded of a website I created for a friend in or around 1998, which has not changed since then (embarrassing links omitted). It went down after an upgrade to PHP 8.1 ;-).
ISC Stormcast For Wednesday, September 28th, 2022 https://isc.sans.edu/podcastdetail.html?id=8192, (Wed, Sep 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, September 28th, 2022 https://isc.sans.edu/podcastdetail.html?id=8192, (Wed, Sep 28th)
DNS Option 15: Debugging DNSSEC Errors., (Tue, Sep 27th)
DNSSEC has had a rough ride so far. I usually say that the mistake made with DNSSEC was that security came first in the design, ahead of usability. The result is that the implementation of DNSSEC is usually compliance driven and not widespread. There are two parts to implementing DNSSEC:
Continue reading DNS Option 15: Debugging DNSSEC Errors., (Tue, Sep 27th)
ISC Stormcast For Tuesday, September 27th, 2022 https://isc.sans.edu/podcastdetail.html?id=8190, (Tue, Sep 27th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, September 27th, 2022 https://isc.sans.edu/podcastdetail.html?id=8190, (Tue, Sep 27th)
Easy Python Sandbox Detection , (Mon, Sep 26th)
Many malicious Python scripts implement a sandbox detection mechanism, I already wrote diaries about this[1], but it requires some extra code in the script. Because we are lazy (attackers too), why not try to automate this and easily detect the presence of such a security mechanism?
Continue reading Easy Python Sandbox Detection , (Mon, Sep 26th)
ISC Stormcast For Monday, September 26th, 2022 https://isc.sans.edu/podcastdetail.html?id=8188, (Mon, Sep 26th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, September 26th, 2022 https://isc.sans.edu/podcastdetail.html?id=8188, (Mon, Sep 26th)