Craigslist Outage, (Mon, Nov 24th)
We were notified this evening by Matt H. that Craigslist is suffering an outage of some sort. Briefly checking the sitefrom the west coast I am finding web access basically unavailable, and access via...
View ArticleSomeone is using this? PoS: Compressor, (Mon, Nov 24th)
Hello Dear Readers, This diary comes to you by way of the real world and was taken very recently. Has anyone seen anything like this before? This handler was stunned into silence before the years of...
View ArticleISC StormCast for Tuesday, November 25th 2014...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleClik here to view.
Guest diary: Detecting Suspicious Devices On-The-Fly, (Tue, Nov 25th)
If you apply classic hardening rules (keep the patch level, use an AV, enable the firewall and use them with due diligence), modern operating systems are more and more difficult to compromise today....
View ArticleSecurity update for Adobe Flash player, (Tue, Nov 25th)
Adobe has released an out of band security update for the Adobe Flash player. This is an additional update for CVE-2014-8439. Everyone either update or double check that Flash either is not installed...
View ArticleLess is, umm, less?, (Tue, Nov 25th)
Following vulnerabilities discovered in tools many Linux and Information Security enthusiasts use such as the strings command and the bash shell, a new series of issues have been discovered in the less...
View ArticleISC StormCast for Wednesday, November 26th 2014...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSyrian Electronic Army attack leads to malvertising, (Thu, Nov 27th)
A number of online services were impacted by what has been referred to by multiple sources as a redirection attack by Syrian Electronic Army (SEA) emanating from the Gigya CDN. The issue was described...
View ArticleLots of Black Friday SPAM & Phishing, (Fri, Nov 28th)
Likely every reader out there, their friends and family, even their pets with email accounts, have received Black Friday SPAM or phishing attempts today. Our own Dr. J sent the handlers an Amazon...
View ArticleDo you have a Data Breach Response Plan?, (Mon, Dec 1st)
The Ponemon Institute conducted and released a paper in September on its second annual study on data breaches. Some of the data collected shows interesting results. Based on their survey, 68% of...
View ArticleISC StormCast for Monday, December 1st 2014...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleFlushing out the Crypto Rats - Finding "Bad Encryption" on your Network,...
Just when folks get around to implementing SSL, we need to retire SSL! Not a week goes buy that a client isnt asking me about SSL (or more usually TLS) vulnerabilities or finding issues on their...
View ArticleDridex Phishing Campaign uses Malicious Word Documents, (Mon, Dec 1st)
This is a guest diary submitted by Brad Duncan. During the past few months, Botnet-based campaigns have sent waves of phishing emails associated with Dridex. Today, well examine a wave that occurred...
View ArticleISC StormCast for Tuesday, December 2nd 2014...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleWe will be performing some extensive updates to our backend today. Sorry for...
--- Johannes B. Ullrich, Ph.D. STI|Twitter|LinkedIn (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleDoes Your Vulnerability Scanner Speak Portuguese?, (Tue, Dec 2nd)
Rodrigo Montoro and Joaquim Espinharadid an interesting test, and like so many interesting tests, it is actually pretty obvious in hindsight: They looked at different vulnerability scanners, and...
View ArticleOpenVPN server DoS vulnerability fixed, (Tue, Dec 2nd)
The OpenVPN folks released a security advisory and updates to its server software yesterday for a vulnerability that has existed in the source code since 2005. CVE-2014-8104 is a vulnerability that can...
View ArticleISC StormCast for Wednesday, December 3rd 2014...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC StormCast for Thursday, December 4th 2014...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleAutomating Incident data collection with Python, (Thu, Dec 4th)
One of my favorite Python modules isImpacketby the guys at Core Labs. Among other things it allows me to create Python scripts that can speak to Windows computers over SMB. I can use it to map network...
View Article