Collaborate Disseminate
After the “OMIGOD” vulnerability details were made public, and it became obvious that exploiting vulnerable hosts would be trivial, researchers and attackers started pretty much immediately to scan for vulnerable hosts. We saw a quick rise of scans, particularly against %%port:1270%%. [1]
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, September 20th, 2021 https://isc.sans.edu/podcastdetail.html?id=7678, (Mon, Sep 20th)
I created a video for the analysis I described in my last diary entry “Simple Analysis Of A CVE-2021-40444 .docx Document“.
Continue reading Video: Simple Analysis Of A CVE-2021-40444 .docx Document, (Sun, Sep 19th)
Analyzing a malicious Word document like prod.docx that exploits %%cve:2021-40444%% is not difficult.
Continue reading Simple Analysis Of A CVE-2021-40444 .docx Document, (Sat, Sep 18th)
Did this threat really disappear? This isn’t a brand new technique to deliver malicious content to mobile devices but it seems that attackers started new waves of spam campaigns based on malicious calendar subscriptions. Being a dad, you can imagine that I always performed security awareness with my daughters. Since they use computers and the Internet, my message was always the same: âDon’t be afraid to ask me, there are no stupid questions or shame if you think you did something wrongâ.
Continue reading Malicious Calendar Subscriptions Are Back?, (Fri, Sep 17th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, September 17th, 2021 https://isc.sans.edu/podcastdetail.html?id=7676, (Fri, Sep 17th)
There are many e-mail subjects that people tend to associate with phishing due to their overuse in this area. Among the more traditional and common phishing subjects, that most people have probably seen at some point, are variations on the âYour account was hackedâ, âYour mailbox is fullâ, âYou have a postal package waitingâ, âHere are urgent payment instructionsâ and âImportant COVID-19 informationâ themes.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, September 16th, 2021 https://isc.sans.edu/podcastdetail.html?id=7674, (Thu, Sep 16th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, September 15th, 2021 https://isc.sans.edu/podcastdetail.html?id=7672, (Wed, Sep 15th)