Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, March 6th 2020 https://isc.sans.edu/podcastdetail.html?id=6898, (Fri, Mar 6th)
Thanks to one of our readers who submitted this interesting piece of phishing. Personally, I was not aware of this technique which is interesting to bypass common anti-spam filter and reputation systems. The idea is to create a fake survey on a well-known online service.
Continue reading Will You Put Your Password in a Survey?, (Thu, Mar 5th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, March 5th 2020 https://isc.sans.edu/podcastdetail.html?id=6896, (Thu, Mar 5th)
Let&#;x26;#;39;s Encrypt announced that they will be revoking a large number of certificates today. The revocation is due to an error in how “CAA” records were validated for these certificates.
Continue reading Let’s Encrypt Revoking 3 Million Certificates, (Wed, Mar 4th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, March 4th 2020 https://isc.sans.edu/podcastdetail.html?id=6894, (Wed, Mar 4th)
This is a guest diary by Ahmed Elshaer.
Continue reading Introduction to EvtxEcmd (Evtx Explorer), (Tue, Mar 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, March 3rd 2020 https://isc.sans.edu/podcastdetail.html?id=6892, (Tue, Mar 3rd)
For a very long time, there has been a strong effort aimed toward moving all potentially sensitive network-based communications from unencrypted protocols to the secure and encrypted ones. And with the recently released APWG report noting that 74% of phishing sites used HTTPS in the last quarter of 2019[1] and Apple’s supposed plan to start supporting only TLS certificates with no more than one year period of validity[2], I thought that this might be a good time to take a look the current protocol landscape on the internet. Specifically at how the support for protocols, which offer cryptographic protection to data in transit, has changed in relation to support of cleartext protocols in the last months.
Continue reading Secure vs. cleartext protocols – couple of interesting stats, (Mon, Mar 2nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, March 2nd 2020 https://isc.sans.edu/podcastdetail.html?id=6890, (Mon, Mar 2nd)
Today my honeypot has been capturing scans for the Hazelcast REST API. I checked my logs for the past 2 years and these only started today. The last vulnerability published for Hazelcast was CVE-2018-10654 and related to “There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.”[3]
Continue reading Hazelcast IMDG Discover Scan, (Sat, Feb 29th)