Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, April 5th, 2022 https://isc.sans.edu/podcastdetail.html?id=7950, (Tue, Apr 5th)
[This post was created with help from Jesse La Grew, one of our SANS.edu undergraduate student interns]
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, April 4th, 2022 https://isc.sans.edu/podcastdetail.html?id=7948, (Mon, Apr 4th)
About a mont ago, a fellow handler pointed us to a blog post on a new feature of curl: option –json.
Curl&#;x26;#;39;s version 7.82.0, released early March 2022, has a new option to deal with JSON data: –json.
Continue reading curl 7.82.0 Adds –json Option, (Sat, Apr 2nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, April 1st, 2022 https://isc.sans.edu/podcastdetail.html?id=7946, (Fri, Apr 1st)
Apple today patched two flaws in macOS. One of the flaws has also been fixed for iOS and iPadOS. The AppleAVD flaw patched in across all the operating systems is critical as it allows arbitrary code execution with kernel privileges, and the flaw has been actively exploited.
The Spring project now released a blog post acknowledging the issue so far known as “sping4shell”:
Continue reading Spring Vulnerability Update – Exploitation Attempts CVE-2022-22965, (Thu, Mar 31st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, March 31st, 2022 https://isc.sans.edu/podcastdetail.html?id=7944, (Thu, Mar 31st)
Today, I spent a lot of time working through different issues regarding Java. “Spring4Shell” was one name that has been assigned to at least one of the vulnerabilities. In this post, I am trying to clean up some of the issues around the different vulnerabilities and Java frameworks.
Continue reading Java Springtime Confusion: What Vulnerability are We Talking About, (Wed, Mar 30th)