Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, November 3rd 2020 https://isc.sans.edu/podcastdetail.html?id=7236, (Tue, Nov 3rd)
An anonymous reader reported an unusual malicious Office document.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, November 2nd 2020 https://isc.sans.edu/podcastdetail.html?id=7234, (Mon, Nov 2nd)
Wireshark version 3.2.8 and version 3.4.0 were released.
Continue reading Wireshark 3.2.8 and 3.4.0 Released, (Sun, Nov 1st)
A reader submitted a file, that turned out to be a mass mailer project file used by malicious actors.
Continue reading More File Selection Gaffes, (Sat, Oct 31st)
In 2017, we already published a guest diary&#;x26;#;x5b;1&#;x26;#;x5d; about “CAA” or “Certification Authority Authorization”.&#;x26;#;xc2;&#;x26;#;xa0;I was curious about the status of this technique and the adoption level in 2020. Has it been adopted massively since this diary&#;x26;#;x3f; The initial RFC describing&#;x26;#;xc2;&#;x26;#;xa0;CAA has been issued in 2013 (RFC6844&#;x26;#;x5b;2&#;x26;#;x5d;). Since 2019, it is obsolete and has been replaced by RFC8659&#;x26;#;x5b;3&#;x26;#;x5d;. Just a quick reminder about the purpose of this DNS record. It is used to specify which certificate authority(ies) (CAs)&#;x26;#;xc2;&#;x26;#;xa0;is(are) allowed to issue certificates for a domain. When the first diary was posted, not all DNS query tools supported CAA records by default. It was often required to query for a&#;x26;#;xc2;&#;x26;#;xa0;&#;x26;#;39;type257&#;x26;#;39; &#;x26;#;xc2;&#;x26;#;xa0;record, then decode the output. Today, all tools support it pretty well:
Continue reading Quick Status of the CAA DNS Record Adoption, (Fri, Oct 30th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, October 30th 2020 https://isc.sans.edu/podcastdetail.html?id=7232, (Fri, Oct 30th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, October 29th 2020 https://isc.sans.edu/podcastdetail.html?id=7230, (Thu, Oct 29th)
[This post is based on late-breaking news we are still investigating. Please send us any corrections you may have. We are in the process of validating and hopefully understanding all the details ourselves. Check back for updates]