Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, February 9th, 2022 https://isc.sans.edu/podcastdetail.html?id=7872, (Wed, Feb 9th)
This month we got patches for 70 vulnerabilities. Of these, none is critical, 1 was previously disclosed and none is being exploited according to Microsoft.
Continue reading Microsoft February 2022 Patch Tuesday, (Tue, Feb 8th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, February 8th, 2022 https://isc.sans.edu/podcastdetail.html?id=7870, (Tue, Feb 8th)
You may not quite understand what “web3” is all about (I do not claim to do so), but it appears phishers may already use it. At least a particular web3 platform, “Skynet,” aka “siasky.net,” is already being abused. [FWIW: the page was reported to report@siasky.net]
The platform is pretty much a free file hosting platform. You upload an HTML file, which will display at a particular “slasky.net” URL. Like all similar file hosting platforms, it is ready to be abused by phishing scams.
Aside from being hosted on this newish platform, the JavaScript used to implement the phishing page is interesting. Not only does it customize the login dialog with the company logo, but it also replaces the entire page with a screenshot of the domain homepage.
Continue reading web3 phishing via self-customizing landing pages, (Mon, Feb 7th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, February 7th, 2022 https://isc.sans.edu/podcastdetail.html?id=7868, (Mon, Feb 7th)
I recently installed network devices fed with power over ethernet, and wondered how much heat was dissipated in the ethernet cables.
Continue reading Power over Ethernet and Thermal Imaging, (Sat, Feb 5th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, February 4th, 2022 https://isc.sans.edu/podcastdetail.html?id=7866, (Fri, Feb 4th)
Various commercial services that promise to keep track of your “attack surface” are sprouting like tulips in the spring (yes… for you up north: Spring is near). But what options are there in particular for smaller companies to track your attack surface “on the cheap”?
Continue reading Keeping Track of Your Attack Surface for Cheap, (Thu, Feb 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, February 3rd, 2022 https://isc.sans.edu/podcastdetail.html?id=7864, (Thu, Feb 3rd)
elFinder is an interesting open-source project implementing a file manager in JavaScript and PHP. The file manager promises a user experience similar to the “Finder” in macOS. Once you have elFinder installed, uploading/downloading files to your web server will be a lot easier.
Continue reading Finding elFinder: Who is looking for your files?, (Wed, Feb 2nd)