Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, June 26th 2020 https://isc.sans.edu/podcastdetail.html?id=7056, (Fri, Jun 26th)
As mentioned during our “Tech Tuesday” session, the session itself was not recorded. Instead, I will be releasing three “stand alone” videos covering the major parts of the workshop.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, June 25th 2020 https://isc.sans.edu/podcastdetail.html?id=7054, (Thu, Jun 25th)
Probably anyone who has used any modern version of Windows is aware of their file-based shortcuts, also known as LNKs or Shell Link files. Although they were intended as a simple feature to make Windows a bit more user-friendly, over the years, a significant number[;1]; of vulnerabilities were identified in handling of LNKs. Many of these vulnerabilities lead to remote code execution and one (CVE-2010-2568) was even used in creation of the Stuxnet worm.
VMware issued a new security advisory yesterday – VMSA-2020-0015[1]. It covers patches (in some cases still pending) for 10 different CVEs with a use-after-free vulnerability in ESXi, Workstation and Fusion being the most important one (CVSSv3 base score of 9.3).
Continue reading VMware security advisory VMSA-2020-0015, (Wed, Jun 24th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, June 24th 2020 https://isc.sans.edu/podcastdetail.html?id=7052, (Wed, Jun 24th)
This post was written by SANS.edu graduate student Karim Lalji in cooperation with Johannes Ullrich.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, June 23rd 2020 https://isc.sans.edu/podcastdetail.html?id=7050, (Tue, Jun 23rd)
Sometimes I have to compare the internals of Office documents (OOXML files, e.g. ZIP container with XML files, …). Since they are ZIP containers, I have to compare the files within. I used to do this with with zipdump.py tool, but recently, I started to use WinMerge because of its graphical user interface.
Continue reading Comparing Office Documents with WinMerge, (Mon, Jun 22nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, June 22nd 2020 https://isc.sans.edu/podcastdetail.html?id=7048, (Mon, Jun 22nd)