Collaborate Disseminate
Last night, news broke that the Java Spring framework may release an update fixing a significant security vulnerability. The project added a patch to the Spring framework GitHub repository that appears to fix a deserialization vulnerability [1].
Inspired by Xavier&#;x26;#;39;s diary entry “XLSB Files: Because Binary is Stealthier Than XML“, I took a look at Microsoft&#;x26;#;39;s XLSB specification.
Continue reading Quickie: Parsing XLSB Documents, (Wed, Mar 30th)
Inspired by Xavier&#;x26;#;39;s diary entry “XLSB Files: Because Binary is Stealthier Than XML“, I took a look at Microsoft&#;x26;#;39;s XLSB specification.
Continue reading Quickie: Parsing XLSB Documents, (Wed, Mar 30th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, March 30th, 2022 https://isc.sans.edu/podcastdetail.html?id=7942, (Wed, Mar 30th)
After publishing the post about look-alike Twitter accounts impersonating Olena Zlenska &#;x26;#;x5b;1&#;x26;#;x5d;, Jesse La Grew, one of our SANS.edu undergraduate interns, wrote scripts to look for more accounts advertising the same cryptocurrency addresses or advertising similar cryptocurrency donations requests. We assume that these requests are fake because they do not advertise addresses used by other legit charities, and they do attempt to impersonate personalities associated with Ukraine&#;x26;#;39;s government. The name “Olena Zelenska” may not be unique. We did not flag any accounts using this name as long as they didn&#;x26;#;39;t advertise the cryptocurrency addresses used by the original fake account.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, March 29th, 2022 https://isc.sans.edu/podcastdetail.html?id=7940, (Tue, Mar 29th)
Earlier today, RTComm.ru started to advertise&#;x26;#;xc2;&#;x26;#;xa0;104.244.42.0/24, a prefix used by Twitter. RTComm.ru is a sizeable Russian telecom provider. Russian ISPs have started restricting access to Twitter after Russia&#;x26;#;39;s invasion of Ukraine led to many Twitter posts critical of Russia&#;x26;#;39;s war.&#;x26;#;xc2;&#;x26;#;xa0;
Continue reading BGP Hijacking of Twitter Prefix by RTComm.ru, (Mon, Mar 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, March 28th, 2022 https://isc.sans.edu/podcastdetail.html?id=7938, (Mon, Mar 28th)
In this video I made for diary entry “Maldoc Cleaned by Anti-Virus“, I follow a slightly different proecudre than shown in the diary entry itself:
Continue reading Video: Maldoc Cleaned by Anti-Virus, (Sun, Mar 27th)
Wireshark version 3.6.3 was released.