January 2017 Microsoft Patch Tuesday, (Tue, Jan 10th)
If your job today is to apply Microsoft patches: You get to go home early today! I think this is the lightest patch Tuesday ever. Microsoft today released 3 bulletins itself plus one for Adobe. While...
View ArticleISC Stormcast For Wednesday, January 11th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleHancitor/Pony/Vawtrak malspam, (Wed, Jan 11th)
Introduction Until recently, I hadnt personally seen much malicious spam (malspam) using Microsoft office documents with Hancitor-based Visual Basic (VB) macros to send Pony and Vawtrak. It still...
View ArticleJanuary 2017 Edition of Ouch! Security Awareness Newsletter Released:...
--- Johannes B. Ullrich, Ph.D. STI|Twitter|LinkedIn (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSome tools updates, (Thu, Jan 12th)
A coupleof tools were updated and release today. Network Miner was updated. Version 2.1 is not available for download. Network Miner is packet sniffer/analyzer focused on extracting application layer...
View ArticleISC Stormcast For Thursday, January 12th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSystem Resource Utilization Monitor, (Thu, Jan 12th)
The attackers have come and gone and youare left behind to clean up the mess. You arrive on site to figure out how the bad guysgot in, what they took and how badly it will affect the customer. But, the...
View ArticleISC Stormcast For Friday, January 13th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleWho's Attacking Me?, (Fri, Jan 13th)
I started to play with a nice reconnaissance tool that could be helpful in many cases - offensive as well as defensive. IVRE [1] (DRUNK in French) is a tool developed by the CEA, the Alternative...
View ArticleBackup Files Are Good but Can Be Evil, (Sat, Jan 14th)
Since we started to work with computers, we always heard the following advice: Make backups!. Everytime you have to change something in a file or an application, first make a backup of the existing...
View ArticleISC Stormcast For Monday, January 16th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleWhitelisting File Extensions in Apache, (Sun, Jan 15th)
Last week, Xavier published a great diary about the dangers of leaving behind backup files on your web server. There are a few different ways to avoid this issues, and as usual, defense in depth...
View ArticleISC Stormcast For Tuesday, January 17th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View Articledomain_stats.py a web api for SEIM phishing hunts , (Tue, Jan 17th)
Last year, over the Thanksgiving break, Justin Henderson and I worked ona tool to provide a web API interface foranother tool I released last year called freq.py. freq.py is used to identify randomized...
View ArticleISC Stormcast For Wednesday, January 18th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleMaking Windows 10 a bit less "Creepy" - Common Privacy Settings,...
Microsoft regards Windows 10 is the most secure version of Windows out of the box, and I do have to agree thats the case. Which is all well and good, but the question that folks seem to continually ask...
View ArticleOracle Quarterly Critical Patch Updates are out - time to patch all things...
=============== Rob VandenBrink Metafore (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleApple Garage Band Remote Code Exec Patched - v10.1.5 -...
=============== Rob VandenBrink Metafore (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC Stormcast For Thursday, January 19th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC Stormcast For Friday, January 20th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View Article