Information leakage through cloud file storage services, (Wed, Aug 7th)
Cloud services are here to stay. This poses a big challenge for information security professionals, because we cannot longer restrict mobility and thus we need to implement controls to ensure that...
View ArticleISC StormCast for Thursday, August 8th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleDNS servers hijacked in the Netherlands, (Wed, Aug 7th)
Earlier this week reports started to appear that the DNS of several webhosting companies in the Netherlands had been hijacked and those using the services were being redirected to malware sites,...
View ArticleNetworkMiner 1.5 -...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC StormCast for Friday, August 9th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleCopy Machines - Changing Scanned Content, (Fri, Aug 9th)
One of our readers, Tomo dropped us a note in order to assist getting the word out on this one as this issue has a potential to be very far reaching into the fields of military, medical and...
View ArticleBlack Tuesday advanced notification , (Fri, Aug 9th)
The advanced notification for next Tuesday's Microsoft patches are out (http://technet.microsoft.com/en-us/security/bulletin/ms13-aug) 3 Critical and 5 Important ones are listed. One affects every...
View ArticleHP Switches? You may want to look at patching them. , (Fri, Aug 9th)
A little over a week ago HP (Thanks for the link Ugo) put out a fix for an unspecified vulnerability on a fair number of their switches and routers. Both their Procurve as well as the 3COM ranges....
View ArticleSamba Security Update Release, (Sat, Aug 10th)
Samba has released an update to several versions that addresses a denial of service (DOS) on an authenticated or guest connection. This vulnerability impacts all current released versions of Samba. A...
View ArticleISC StormCast for Monday, August 12th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleXATattacks (attacks on xat.com), (Sun, Aug 11th)
Couple of days ago, one of our readers, submitted a script he identified as sending some weird traffic to the IP address of 111.111.111.111. The script in question is a PHP script and was not...
View ArticleISC StormCast for Tuesday, August 13th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleMicrosoft August 2013 Black Tuesday Overview, (Tue, Aug 13th)
Overview of the August 2013 Microsoft patches and their status. # Affected Contra Indications - KB Known Exploits Microsoft rating(**) ISC rating(*) clients servers MS13-059 A multitude of new...
View ArticleMicrosoft security advisories: RDP and MD5 deprecation in Microsoft root...
Microsoft also released a couple of security advisories today. Remote Desktop Protocol SA 2861855 notifies of improvements in the RDP protocol to force users to authenticate themselves before they can...
View ArticleISC StormCast for Wednesday, August 14th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View Article.GOV zones may not resolve due to DNSSEC problems., (Wed, Aug 14th)
Update: looks like this has been fixed now. Of course bad cached data may cause this issue to persist for a while. Currently, many users are reporting that .gov domain names (e.g. fbi.gov) will not...
View ArticleHow to get sufficient funding for your security program (without having a...
This is a "guest diary" submitted by Russell Eubanks. We will gladly forward any responses or please use our comment/forum section to comment publically. The primary reason your security program is...
View ArticleMicrosoft Pulls MS013-061 due to problems with Exchange Server 2013...
------ Johannes B. Ullrich, Ph.D. SANS Technology Institute Twitter (c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC StormCast for Thursday, August 15th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleImaging LUKS Encrypted Drives, (Wed, Aug 14th)
This is a "guest diary" submitted by Tom Webb. We will gladly forward any responses or please use our comment/forum section to comment publically. Tom is currently enrolled in the SANS Masters...
View Article