Blue Coat: SSL Visibility Appliance web based vulnerabilities, (Sun, May 31st)
Blue Coat has released a security advisory for SSL Visibility Appliance. The SSL Visibility Appliance is susceptible to multiple web-based vulnerabilities in the administration console. A remote...
View ArticleISC StormCast for Monday, June 1st 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSubmit Dshield ASA Logs, (Mon, Jun 1st)
Recently I made some small modifications to the Dshield Linux Cisco PIX submission perl script (https://www.dshield.org/clients/framework/cisco.tar.gz). This allows anyone with an ASA or Cisco Security...
View ArticleISC StormCast for Tuesday, June 2nd 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleGuest Diary: Xavier Mertens - Playing with IP Reputation with Dshield &...
[Guest Diary: Xavier Mertens] [Playing with IP Reputation with Dshield ">] When investigating incidents or searching for malicious activity in your logs, IP reputation is a nice way to increasethe...
View ArticleMyfax malspam wave with links to malware and Neutrino exploit kit, (Wed, Jun...
Introduction As early as Wednesday2015-05-27, there have been more waves of malicious spam (malspam) spoofing myfax.com. On Tuesday 2015-06-02, the messages contained links to a zip archive ofa Pony...
View ArticleISC StormCast for Wednesday, June 3rd 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleExploit kit roundup - early June 2015, (Thu, Jun 4th)
Introduction Security Operation Center (SOC) analysts investigate alerts on suspicious network activity. However, these analysts might not run across exploit kit (EK) traffic that often. An...
View ArticleISC StormCast for Thursday, June 4th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC StormCast for Friday, June 5th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleNmap 6.49BETA1 released, (Fri, Jun 5th)
Fyodor has announced the release of Nmap 6.49BETA1.This version will have hundreds of improvement, including: Integrated all of the latest OS detection and version/service detection submissions...
View ArticleChecking for BACNet devices inside corporate networks, (Sun, Jun 7th)
Building automation Networks are very common today for intelligent buildings. They interconnect several type of devices like escalators, elevators, power circuits, heating, ventilating and air...
View ArticleISC StormCast for Monday, June 8th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleNoScript as a staple in the toolbox, (Mon, Jun 8th)
I know weve talked about NoScript here before, however it is something worth discussing on a regular basis, as it is a simple, solid product that works. Whenever I build a new desktop or laptop, one of...
View ArticleISC StormCast for Tuesday, June 9th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleWeb Application Security: It doesn't stop with the application, (Tue, Jun 9th)
Most of the time, if a web application gets compromised, we hear about vulnerabilities like cross site scripting or SQL injection being used to gain access. However, many high profile web application...
View ArticleMicrosoft Patch Tuesday Summary for June 2015, (Tue, Jun 9th)
Overview of the June 2015 Microsoft Patches and their status. # Affected Contra Indications - KB Known Exploits Microsoft rating(**) ISC rating(*) clients servers MS15-056 Cumulative Security Update...
View ArticleISC StormCast for Wednesday, June 10th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleVMWare Workstation Guest Escape via Shared Printers on COM1, (Wed, Jun 10th)
Shared hardware has always been a weakness of virtualization products. In some cases side channel attacks can be exploited to collect information from other virtual machines, or bugs in drivers can be...
View ArticleHow much is your IPv4 Space Worth, (Wed, Jun 10th)
Thanks to Rob for reminding me of IPv4auction websites again. I looked at them a couple years ago, but there was very little real activity at the time. Looks like that has changed now. ARIN is...
View Article