Author Archives: SANS Internet Storm Center, InfoCON: green

Continue reading An Infostealer Searching for « BIP-0039 » Data, (Fri, Nov 22nd)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, November 22nd, 2024 https://isc.sans.edu/podcastdetail/9230, (Fri, Nov 22nd)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, November 21st, 2024 https://isc.sans.edu/podcastdetail/9228, (Thu, Nov 21st)→

There is an increase in SVG attachments used in phishing emails (Scalable Vector Graphics, an XML-based vector image format).

Continue reading Increase In Phishing SVG Attachments, (Thu, Nov 21st)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, November 20th, 2024 https://isc.sans.edu/podcastdetail/9226, (Wed, Nov 20th)→

Today, Apple released updates patching two vulnerabilities that have already been exploited. Interestingly, according to Apple, the vulnerabilities have only been exploited against Intel-based systems, but they appear to affect ARM (M”x”) systems as well.

Continue reading Apple Fixes Two Exploited Vulnerabilities, (Tue, Nov 19th)→

Hello from Singapore where&#;x26;#;xc2;&#;x26;#;xa0;I&#;x26;#;39;m&#;x26;#;xc2;&#;x26;#;xa0;with Johannes and Yee!&#;x26;#;xc2;&#;x26;#;xa0;This week, I&#;x26;#;39;m teaching&#;x26;#;xc2;&#;x26;#;xa0;FOR710[1]. I spotted another Python script that looked interesting because, amongst the classic detection of virtualized environments, it also tries to detect the presence of a debugger. The script has been developed to target both environments: Windows &#;x26; Linux.

Continue reading Detecting the Presence of a Debugger in Linux, (Tue, Nov 19th)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, November 19th, 2024 https://isc.sans.edu/podcastdetail/9224, (Tue, Nov 19th)→

Last week, Watchtowr Labs released details describing a new and so far unpatched vulnerability in Citrix&#39&#x3b;s remote access solution [1]. Specifically, the vulnerability affects the “Virtual Apps and Desktops.” This solution allows “secure” remote access to desktop applications. It is commonly used for remote work, and I have seen it used in call center setups to isolate individual workstations from the actual desktop. The Watchtowr blog describes it as:

Continue reading Exploit attempts for unpatched Citrix vulnerability, (Mon, Nov 18th)→

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, November 18th, 2024 https://isc.sans.edu/podcastdetail/9222, (Mon, Nov 18th)→