[Guest Diary] Insights from August Web Traffic Surge, (Wed, Nov 6th) [This is a Guest Diary by Trevor Coleman, an ISC intern as part of the SANS.edu Bachelor's Degree i... 2024-11-6 12:32:30 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu php isc honeypot dshield

ISC Stormcast For Wednesday, November 6th, 2024 https://isc.sans.edu/podcastdetail/9210, (Wed, Nov 6th) 2024-11-6 10:0:2 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network 18th monitoring feeds papers

Python RAT with a Nice Screensharing Feature, (Tue, Nov 5th) While hunting, I found another interesting Python RAT in the wild. This is not brand new because th... 2024-11-5 16:10:24 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu vidstream victim python remnux

ISC Stormcast For Tuesday, November 5th, 2024 https://isc.sans.edu/podcastdetail/9208, (Tue, Nov 5th) 2024-11-5 10:0:2 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network isc 23rd feeds

Analyzing an Encrypted Phishing PDF, (Mon, Nov 4th) Once in a while, I get a question about my pdf-parser.py tool, not able to decode strings and strea... 2024-11-4 14:10:59 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu pdfs qpdf pdfid viewed analysis

ISC Stormcast For Monday, November 4th, 2024 https://isc.sans.edu/podcastdetail/9206, (Mon, Nov 4th) 2024-11-4 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network isc 18th 23rd monitoring

qpdf: Extracting PDF Streams, (Sat, Nov 2nd) In diary entry "Analyzing PDF Streams" I answer a question asked by a student of Xavier: "how can y... 2024-11-2 21:8:21 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu qpdf exampl diary xavier didier

ISC Stormcast For Thursday, October 31st, 2024 https://isc.sans.edu/podcastdetail/9204, (Thu, Oct 31st) 2024-10-31 10:0:2 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network feeds isc papers

October 2024 Activity with Username chenzilong, (Thu, Oct 31st) After reviewing the Top 10 Not So Common SSH Usernames and Passwords [1] published by Johannes 2 we... 2024-10-31 08:16:9 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu dshield passwords ssh isc username

Scans for RDP Gateways, (Wed, Oct 30th) RDP is one of the most prominent entry points into networks. Ransomware actors have taken down many... 2024-10-31 07:8:30 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu rdweb uptick honeypots ullrich frequent

ISC Stormcast For Wednesday, October 30th, 2024 https://isc.sans.edu/podcastdetail/9202, (Wed, Oct 30th) 2024-10-30 10:0:2 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network 18th 23rd monitoring

ISC Stormcast For Tuesday, October 29th, 2024 https://isc.sans.edu/podcastdetail/9200, (Tue, Oct 29th) 2024-10-29 10:0:1 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network 18th monitoring isc

Apple Updates Everything, (Mon, Oct 28th) Today, Apple released updates for all of its operating systems. These updates include new AI featur... 2024-10-29 04:34:12 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu affects maliciously attacker malicious termination

Self-contained HTML phishing attachment using Telegram to exfiltrate stolen credentials, (Mon, Oct 28th) Phishing authors have long ago discovered that adding HTML attachments to the messages they send ou... 2024-10-28 15:13:3 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu phishing attachment attacker emailgrab zhe

ISC Stormcast For Monday, October 28th, 2024 https://isc.sans.edu/podcastdetail/9198, (Mon, Oct 28th) 2024-10-28 10:0:2 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network 23rd isc feeds monitoring

Two currently (old) exploited Ivanti vulnerabilities, (Sun, Oct 27th) Ivanti products have given us a rich corpus of vulnerabilities in recent months (years). Of course,... 2024-10-28 03:4:42 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu volexity totp

ISC Stormcast For Friday, October 25th, 2024 https://isc.sans.edu/podcastdetail/9196, (Fri, Oct 25th) 2024-10-25 10:0:2 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network monitoring 23rd feeds isc

Development Features Enabled in Prodcution, (Thu, Oct 24th) We do keep seeing attackers "poking around" looking for enabled development features. Developers of... 2024-10-25 01:6:30 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu php attackers phpunit devmode telescope

ISC Stormcast For Thursday, October 24th, 2024 https://isc.sans.edu/podcastdetail/9194, (Thu, Oct 24th) ISC Stormcast For Thursday, October 24th, 2024 https://isc.sans.edu/podcastdetail/9194... 2024-10-24 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc 24th 9194 stormcast

Everybody Loves Bash Scripts. Including Attackers., (Wed, Oct 23rd) Today our "First Seen" page displayed a number of simple URLs:/wp-backup.sh/submit.sh/stage-de... 2024-10-23 20:52:45 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu driverenv holding 191 yesterday 179