Quick & Dirty Obfuscated JavaScript Analysis, (Sun, Nov 24th) As mentioned in diary entry "Increase In Phishing SVG Attachments", I have a phishing SVG sample wi... 2024-11-24 17:22:41 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu phishing network developer analysis

Decrypting a PDF With a User Password, (Sat, Nov 23rd) In diary entry "Analyzing an Encrypted Phishing PDF", I decrypted a phishing PDF document. Because... 2024-11-24 01:6:46 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu phishing qpdf pdfid didier suitable

Wireshark 4.4.2 Released, (Sat, Nov 23rd) Published: 2024-11-23. Last Updated: 2024-11-23 12:42:31 UTCby Didier Stevens (Version: 1)Wiresh... 2024-11-23 20:42:31 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu didier stevens senior

An Infostealer Searching for « BIP-0039 » Data, (Fri, Nov 22nd) I like obfuscation techniques implemented by malware developers. If their primary purpose is to d... 2024-11-22 11:58:3 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu mnemonic ups bip phrase 0039

ISC Stormcast For Friday, November 22nd, 2024 https://isc.sans.edu/podcastdetail/9230, (Fri, Nov 22nd) 2024-11-22 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 13th papers security feeds

ISC Stormcast For Thursday, November 21st, 2024 https://isc.sans.edu/podcastdetail/9228, (Thu, Nov 21st) 2024-11-21 16:50:4 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security feeds papers 18th

Increase In Phishing SVG Attachments, (Thu, Nov 21st) There is an increase in SVG attachments used in phishing emails (Scalable Vector Graphics, an XML-b... 2024-11-21 11:26:19 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu microsoft phishing blurry hardcoded stevens

ISC Stormcast For Wednesday, November 20th, 2024 https://isc.sans.edu/podcastdetail/9226, (Wed, Nov 20th) ISC Stormcast For Wednesday, November 20th, 2024 https://isc.sans.edu/podcastdetail/9226... 2024-11-20 10:45:6 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc wednesday 20th 9226

Apple Fixes Two Exploited Vulnerabilities, (Tue, Nov 19th) Today, Apple released updates patching two vulnerabilities that have already been exploited. Intere... 2024-11-20 05:56:52 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu malicious exploited attacker

Detecting the Presence of a Debugger in Linux, (Tue, Nov 19th) Hello from Singapore where I'm with Johannes and Yee! This week, I'm teaching FOR710[1]. I spotted... 2024-11-19 13:12:58 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 352 windows tracerpid xavier

ISC Stormcast For Tuesday, November 19th, 2024 https://isc.sans.edu/podcastdetail/9224, (Tue, Nov 19th) 2024-11-19 10:0:1 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security feeds 18th papers 13th

Exploit attempts for unpatched Citrix vulnerability, (Mon, Nov 18th) Last week, Watchtowr Labs released details describing a new and so far unpatched vulnerability in C... 2024-11-18 13:59:56 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu neutral msmq mscorlib

ISC Stormcast For Monday, November 18th, 2024 https://isc.sans.edu/podcastdetail/9222, (Mon, Nov 18th) 2024-11-18 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security 18th isc 13th papers

Ancient TP-Link Backdoor Discovered by Attackers, (Sun, Nov 17th) There are so many vulnerabilities in commonly used routers that attackers often leave many easily e... 2024-11-17 15:7:48 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu tftp routers exploited ullrich

ISC Stormcast For Wednesday, November 13th, 2024 https://isc.sans.edu/podcastdetail/9220, (Wed, Nov 13th) ISC Stormcast For Wednesday, November 13th, 2024 https://isc.sans.edu/podcastdetail/9220... 2024-11-13 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc 9220 stormcast wednesday

Microsoft November 2024 Patch Tuesday, (Tue, Nov 12th) This month, Microsoft is addressing a total of 83 vulnerabilities. Among these, 3 are classified as... 2024-11-13 02:26:59 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu windows elevation remote microsoft exploited

ISC Stormcast For Tuesday, November 12th, 2024 https://isc.sans.edu/podcastdetail/9218, (Tue, Nov 12th) 2024-11-12 10:0:1 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network 23rd 18th monitoring feeds

PDF Object Streams, (Mon, Nov 11th) The first thing to do, when analyzing a potentially malicious PDF, is to look for the /Encrypt name... 2024-11-11 16:21:35 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu pdfid phishing objstm diary malicious

ISC Stormcast For Monday, November 11th, 2024 https://isc.sans.edu/podcastdetail/9216, (Mon, Nov 11th) 2024-11-11 10:0:2 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network 18th 23rd isc

zipdump & PKZIP Records, (Sun, Nov 10th) In yesterday's diary entry "zipdump & Evasive ZIP Concatenation" I showed how one can inspect the P... 2024-11-10 23:14:6 | 阅读: 9 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu pkzip zipdump decompress stevens inflate