SANS Internet Storm Center, InfoCON: green – Page 378

SANS Work From Home Deployment Kit. Free Material to Help You Stay Secure While Working From Home https://www.sans.org/security-awareness-training/sans-security-awareness-work-home-deployment-kit, (Mon, Mar 16th)

Posted on March 16, 2020 by SANS Internet Storm Center, InfoCON: green

—
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS Technology Institute
Twitter|

Continue reading SANS Work From Home Deployment Kit. Free Material to Help You Stay Secure While Working From Home https://www.sans.org/security-awareness-training/sans-security-awareness-work-home-deployment-kit, (Mon, Mar 16th)→

VPN Access and Activity Monitoring, (Sun, Mar 15th)

Posted on March 15, 2020 by SANS Internet Storm Center, InfoCON: green

Because most individuals are going to have to work remotely from home, the activity that should be scrutinized over the coming weeks would be ports associated with VPN like OpenVPN (1194) or SSL VPN (TCP/UDP 443, IPsec/IKEv2 UDP 500/4500) with their associated logs to ensure these services are accessed by the right individuals and are not abused, exploited or compromised. It will be very important the VPN service is patched and up-to-date because there will be way more scrutiny (scanning) against these services. Capturing metrics about performance and availability will be very important to ensure mission critical systems and applications can be accessed to avoid downtime.

Continue reading VPN Access and Activity Monitoring, (Sun, Mar 15th)→

Phishing PDF With Incremental Updates., (Sat, Mar 14th)

Posted on March 14, 2020 by SANS Internet Storm Center, InfoCON: green

Someone asked me for help with this phishing PDF.

Continue reading Phishing PDF With Incremental Updates., (Sat, Mar 14th)→

VMware Patches for Bugs in DHCP Service (Workstation, Fusion, Horizon, VMRC), (Fri, Mar 13th)

Posted on March 13, 2020 by SANS Internet Storm Center, InfoCON: green

VMware Security Avisory VMSA-2020-0004 ( https://www.vmware.com/security/advisories/VMSA-2020-0004.html ) outlines a fix for a user-after-free bug in vmnetdhcp that allows guests to execute code in the host. Affected platforms are: VMware Workstation Pro / Player, VMware Fusion Pro / Fusion, VMware Horizon Client for Windows, VMware Remote Console for Windows (VMRC for Windows)

Continue reading VMware Patches for Bugs in DHCP Service (Workstation, Fusion, Horizon, VMRC), (Fri, Mar 13th)→

Microsoft Patches SMBv3 Compression RCE bug – https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796, (Fri, Mar 13th)

Posted on March 13, 2020 by SANS Internet Storm Center, InfoCON: green

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading Microsoft Patches SMBv3 Compression RCE bug – https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796, (Fri, Mar 13th)→

ISC Stormcast For Friday, March 13th 2020 https://isc.sans.edu/podcastdetail.html?id=6908, (Fri, Mar 13th)

Posted on March 13, 2020 by SANS Internet Storm Center, InfoCON: green

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, March 13th 2020 https://isc.sans.edu/podcastdetail.html?id=6908, (Fri, Mar 13th)→

Not all Ethernet NICs are Created Equal – Trying to Capture Invalid Ethernet Frames, (Fri, Mar 13th)

Posted on March 13, 2020 by SANS Internet Storm Center, InfoCON: green

This all started with a simple request. A client had purchased some new, shiny networking gear, and in each failover pair the active unit was sending 1 “Runt” per second.

Continue reading Not all Ethernet NICs are Created Equal – Trying to Capture Invalid Ethernet Frames, (Fri, Mar 13th)→