oledump’s ! Indicator, (Sun, Nov 15th)
In diary entry “AV Cleaned Maldoc” I analyze a malicious document with VBA code that has been removed by anti-virus.
Author Archives: SANS Internet Storm Center, InfoCON: green
Old Worm But New Obfuscation Technique, (Fri, Nov 13th)
Yesterday I found an interesting JavaSvript script delivered through a regular phishing campaign (SHA256:70c0b9d1c88f082bad6ae01fef653da6266d0693b24e08dcb04156a629dd6f81) and has a VT score of 17/61[1]
Continue reading Old Worm But New Obfuscation Technique, (Fri, Nov 13th)
ISC Stormcast For Friday, November 13th 2020 https://isc.sans.edu/podcastdetail.html?id=7252, (Fri, Nov 13th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, November 13th 2020 https://isc.sans.edu/podcastdetail.html?id=7252, (Fri, Nov 13th)
Preventing Exposed Azure Blob Storage, (Thu, Nov 12th)
In the previous diary, I explained the three public access levels of Azure Blob Storage, and how to investigate the setup for any issues. Until a couple of months ago, there was no reliable way to prevent the problem from occurring in the first place, but thankfully, Microsoft has finally seen the light.
Continue reading Preventing Exposed Azure Blob Storage, (Thu, Nov 12th)
ISC Stormcast For Thursday, November 12th 2020 https://isc.sans.edu/podcastdetail.html?id=7250, (Thu, Nov 12th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, November 12th 2020 https://isc.sans.edu/podcastdetail.html?id=7250, (Thu, Nov 12th)
Exposed Blob Storage in Azure, (Thu, Nov 12th)
With the headline “Improperly Configured AWS S3 Bucket Exposes 10 Million Hotel Guest Records” in this week&#;x26;#;39;s SANS NewsBites, I wanted to shed a little light on the same problem, but in Azure.
Continue reading Exposed Blob Storage in Azure, (Thu, Nov 12th)
ISC Stormcast For Wednesday, November 11th 2020 https://isc.sans.edu/podcastdetail.html?id=7248, (Wed, Nov 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, November 11th 2020 https://isc.sans.edu/podcastdetail.html?id=7248, (Wed, Nov 11th)
Traffic Analysis Quiz: DESKTOP-FX23IK5, (Wed, Nov 11th)
Microsoft November 2020 Patch Tuesday, (Tue, Nov 10th)
This month we got patches for 112 vulnerabilities. Of these, 17 are critical and one was previously disclosed and is already being exploited according to Microsoft.
Continue reading Microsoft November 2020 Patch Tuesday, (Tue, Nov 10th)
ISC Stormcast For Tuesday, November 10th 2020 https://isc.sans.edu/podcastdetail.html?id=7246, (Tue, Nov 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, November 10th 2020 https://isc.sans.edu/podcastdetail.html?id=7246, (Tue, Nov 10th)