Qualys published a blog posts with details regarding a critical remote code execution vulnerability [1] This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: SSH “regreSSHion” Remote Code Execution Vulnerability in OpenSSH., (Mon,…
Tag: SANS Internet Storm Center, InfoCON: green
Support of SSL 2.0 on web servers in 2024, (Fri, Jun 28th)
We last discussed SSLv2 support on internet-exposed web servers about a year ago, when we discovered that there were still about 450 thousand web servers that supported this protocol left on the internet[1]. We also found that a significant portion…
ISC Stormcast For Friday, June 28th, 2024 https://isc.sans.edu/podcastdetail/9040, (Fri, Jun 28th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, June 28th, 2024…
ISC Stormcast For Thursday, June 27th, 2024 https://isc.sans.edu/podcastdetail/9038, (Thu, Jun 27th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Thursday, June 27th, 2024…
What Setting Live Traps for Cybercriminals Taught Me About Security [Guest Diary], (Wed, Jun 26th)
[This is a Guest Diary by Kelly Fiocchi-Tapani, an ISC intern as part of the SANS.edu BACS program] This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: What Setting Live Traps for Cybercriminals…
ISC Stormcast For Wednesday, June 26th, 2024 https://isc.sans.edu/podcastdetail/9036, (Wed, Jun 26th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, June 26th, 2024…
ISC Stormcast For Tuesday, June 25th, 2024 https://isc.sans.edu/podcastdetail/9034, (Tue, Jun 25th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Tuesday, June 25th, 2024…
Configuration Scanners Adding Java Specific Configuration Files, (Mon, Jun 24th)
Hunting for configuration files is one of the favorite tricks we typically see used against our honeypots. Traditionally, standard and more generic configuration files like “.env” or “.config” are the target, with some cloud-specific configuration files sprinkled in. This article…
ISC Stormcast For Monday, June 24th, 2024 https://isc.sans.edu/podcastdetail/9032, (Mon, Jun 24th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, June 24th, 2024…
Sysinternals’ Process Monitor Version 4 Released, (Sat, Jun 22nd)
Version 4.01 of Sysinternals' Process Monitor (procmon) was released (just one day after the release of version 4.0). This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: Sysinternals’ Process Monitor Version 4 Released,…
ISC Stormcast For Friday, June 21st, 2024 https://isc.sans.edu/podcastdetail/9030, (Fri, Jun 21st)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, June 21st, 2024…
No Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary], (Thu, Jun 20th)
[This is a Guest Diary by Owen Slubowski, an ISC intern as part of the SANS.edu BACS program] This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: No Excuses, Free Tools to Help…
Handling BOM MIME Files, (Wed, Jun 19th)
A reader contacted me with an eml file (which turned out to be benign) that emldump.py could not parse correctly. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: Handling BOM MIME Files,…
Video Meta Data: DJI Drones, (Sun, Jun 16th)
Many years ago, I wrote about the EXIF data in pictures taken with Smartphones. Smartphones often record extensive meta data including GPS and accelerometer data. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original…
ISC Stormcast For Tuesday, June 18th, 2024 https://isc.sans.edu/podcastdetail/9028, (Tue, Jun 18th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Tuesday, June 18th, 2024…
New NetSupport Campaign Delivered Through MSIX Packages, (Mon, Jun 17th)
It's amazing to see how attackers reuse and combine known techniques to target their victims with new campaigns! Last week, I spotted some malicious MSIX packages on VT that drop a NetSupport[1] client preconfigured to phone home to an attacker's…
ISC Stormcast For Monday, June 17th, 2024 https://isc.sans.edu/podcastdetail/9026, (Mon, Jun 17th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, June 17th, 2024…
Overview of My Tools That Handle JSON Data, (Sat, Jun 15th)
I wrote a couple of diary entries showing my tools that produce and consume JSON data. Like “Analyzing PDF Streams”, “Another PDF Streams Example: Extracting JPEGs” and “Analyzing MSG Files”. This article has been indexed from SANS Internet Storm Center,…
ISC Stormcast For Friday, June 14th, 2024 https://isc.sans.edu/podcastdetail/9024, (Fri, Jun 14th)
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, June 14th, 2024…
The Art of JQ and Command-line Fu [Guest Diary], (Thu, Jun 13th)
[This is a Guest Diary by Kaela Reed, an ISC intern as part of the SANS.edu BACS program] This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: The Art of JQ and Command-line…