Multiple Malware Dropped Through MSI Package, (Wed, Aug 14th) One of my hunting rules hit on potentially malicious PowerShell code. The file was an MSI package (... 2024-8-14 16:15:29 | 阅读: 19 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu windows remnux powershell 20240812 bart

ISC Stormcast For Wednesday, August 14th, 2024 https://isc.sans.edu/podcastdetail/9096, (Wed, Aug 14th) 2024-8-14 10:0:2 | 阅读: 9 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers vegassep 9th 4th

Microsoft August 2024 Patch Tuesday, (Tue, Aug 13th) This month we got patches for 92 vulnerabilities. Of these, 9 are critical, and 9 are zero-days (3... 2024-8-14 03:44:36 | 阅读: 100 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu windows remote elevation microsoft chromium

ISC Stormcast For Tuesday, August 13th, 2024 https://isc.sans.edu/podcastdetail/9094, (Tue, Aug 13th) 2024-8-13 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers feeds 9th 4th

ISC Stormcast For Monday, August 12th, 2024 https://isc.sans.edu/podcastdetail/9092, (Mon, Aug 12th) 2024-8-12 10:0:1 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers feeds isc vegassep

Video: Same Origin, CORS, DNS Rebinding and Localhost, (Mon, Aug 12th) Published: 2024-08-12. Last Updated: 2024-08-12 00:26:11 UTCby Johannes Ullrich (Version: 1)Tryi... 2024-8-12 08:26:11 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ullrich johannes illustrate network ph

ISC Stormcast For Friday, August 9th, 2024 https://isc.sans.edu/podcastdetail/9090, (Fri, Aug 9th) 2024-8-9 10:0:2 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security 9th 4th papers

ISC Stormcast For Thursday, August 8th, 2024 https://isc.sans.edu/podcastdetail/9088, (Thu, Aug 8th) 2024-8-8 18:50:5 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security vegassep feeds isc

ISC Stormcast For Wednesday, August 7th, 2024 https://isc.sans.edu/podcastdetail/9086, (Wed, Aug 7th) 2024-8-7 10:0:1 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security feeds 4th vegassep

Same Scripts, Different Day: What My DShield Honeypot Taught Me About the Importance of Security Fundamentals [Guest Diary], (Wed, Aug 7th) [This is a Guest Diary by Riché Wiley, an ISC intern as part of the SANS.edu BACS program]I first... 2024-8-7 08:42:13 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu honeypot isc ssh security realized

A Survey of Scans for GeoServer Vulnerabilities, (Tue, Aug 6th) A little bit over a year ago, I wrote about scans for GeoServer [1][2]. GeoServer is a platform to... 2024-8-6 22:20:15 | 阅读: 27 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu geoserver wicket isc

ISC Stormcast For Tuesday, August 6th, 2024 https://isc.sans.edu/podcastdetail/9084, (Tue, Aug 6th) 2024-8-6 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security isc vegassep feeds papers

Script obfuscation using multiple instances of the same function, (Mon, Aug 5th) Threat actors like to make detection and analysis of any malicious code they create as difficult as... 2024-8-5 14:1:11 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu venuh bqozu oowzw payload nhcze

ISC Stormcast For Monday, August 5th, 2024 https://isc.sans.edu/podcastdetail/9082, (Mon, Aug 5th) 2024-8-5 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers feeds vegassep isc

OOXML Spreadsheets Protected By Verifier Hashes, (Sat, Aug 3rd) When I wrote about the internal file format of protected spreadsheets, I mentioned a simple 16-bit... 2024-8-4 15:23:41 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu xls ooxml diary ole

Even Linux users should take a look at this Microsoft KB article., (Fri, Aug 2nd) Secure boot has been a standard feature since at least Windows 8. As the name implies, the feature... 2024-8-3 02:5:8 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu microsoft firmware 2026 validity windows

ISC Stormcast For Friday, August 2nd, 2024 https://isc.sans.edu/podcastdetail/9080, (Fri, Aug 2nd) 2024-8-2 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers isc 4th

Tracking Proxy Scans with IPv4.Games, (Thu, Aug 1st) Today, I saw a proxy scan that was a little bit different:http://ipv4.games/claim?name=ganghttp... 2024-8-2 01:0:53 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu proxy proxies username cheating personally

ISC Stormcast For Thursday, August 1st, 2024 https://isc.sans.edu/podcastdetail/9078, (Thu, Aug 1st) 2024-8-1 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers ullrich diaries

Increased Activity Against Apache OFBiz CVE-2024-32113, (Wed, Jul 31st) As part of its extensive project portfolio, the Apache Foundation supports OFBiz, a Java-based fram... 2024-8-1 01:51:9 | 阅读: 38 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ofbiz 231 erp