Script obfuscation using multiple instances of the same function, (Mon, Aug 5th) Threat actors like to make detection and analysis of any malicious code they create as difficult as... 2024-8-5 14:1:11 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu venuh bqozu oowzw payload nhcze

ISC Stormcast For Monday, August 5th, 2024 https://isc.sans.edu/podcastdetail/9082, (Mon, Aug 5th) 2024-8-5 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers feeds vegassep isc

OOXML Spreadsheets Protected By Verifier Hashes, (Sat, Aug 3rd) When I wrote about the internal file format of protected spreadsheets, I mentioned a simple 16-bit... 2024-8-4 15:23:41 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu xls ooxml diary ole

Even Linux users should take a look at this Microsoft KB article., (Fri, Aug 2nd) Secure boot has been a standard feature since at least Windows 8. As the name implies, the feature... 2024-8-3 02:5:8 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu microsoft firmware 2026 validity windows

ISC Stormcast For Friday, August 2nd, 2024 https://isc.sans.edu/podcastdetail/9080, (Fri, Aug 2nd) 2024-8-2 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers isc 4th

Tracking Proxy Scans with IPv4.Games, (Thu, Aug 1st) Today, I saw a proxy scan that was a little bit different:http://ipv4.games/claim?name=ganghttp... 2024-8-2 01:0:53 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu proxy proxies username cheating personally

ISC Stormcast For Thursday, August 1st, 2024 https://isc.sans.edu/podcastdetail/9078, (Thu, Aug 1st) 2024-8-1 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers ullrich diaries

Increased Activity Against Apache OFBiz CVE-2024-32113, (Wed, Jul 31st) As part of its extensive project portfolio, the Apache Foundation supports OFBiz, a Java-based fram... 2024-8-1 01:51:9 | 阅读: 38 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ofbiz 231 erp

ISC Stormcast For Wednesday, July 31st, 2024 https://isc.sans.edu/podcastdetail/9076, (Wed, Jul 31st) 2024-7-31 10:0:2 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers glossary weblogs

Apple Patches Everything. July 2024 Edition, (Tue, Jul 30th) CVE-2024-27844 [moderate] SafariThe issue was addressed with improved checks.A websi... 2024-7-31 01:1:22 | 阅读: 32 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu addressed moderate privileges memory attacker

ISC Stormcast For Tuesday, July 30th, 2024 https://isc.sans.edu/podcastdetail/9074, (Tue, Jul 30th) 2024-7-30 10:0:2 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds papers isc 30th glass

ISC Stormcast For Monday, July 29th, 2024 https://isc.sans.edu/podcastdetail/9072, (Mon, Jul 29th) 2024-7-29 10:0:2 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds stormcast mastodon

CrowdStrike Outage Themed Maldoc, (Mon, Jul 29th) I found a malicious Word document with VBA code using the CrowdStrike outage for social engineering... 2024-7-29 08:3:44 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu crowdstrike grammarly maldoc microsoft dates


Quickie: Password Cracking & Energy, (Sun, Jul 28th) When Johannes talked about my diary entry "Protected OOXML Spreadsheets" on his StormCast podcast,... 2024-7-29 06:40:56 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu consumption electrical didier digging diary

Create Your Own BSOD: NotMyFault, (Sat, Jul 27th) With all the Blue Screen Of Death screenshots we saw lately, I got the idea to write about Sysinter... 2024-7-28 02:10:57 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu machine crash windows bsods

ExelaStealer Delivered "From Russia With Love", (Fri, Jul 26th) Some simple PowerShell scripts might deliver nasty content if executed by the target. I found a ver... 2024-7-26 19:51:44 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security ipconfig exela remnux

ISC Stormcast For Friday, July 26th, 2024 https://isc.sans.edu/podcastdetail/9070, (Fri, Jul 26th) 2024-7-26 10:0:2 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers bluesky friday

XWorm Hidden With Process Hollowing, (Thu, Jul 25th) XWorm is not a brand-new malware family[1]. It's a common RAT (Remote Access Tool) re-use regularly... 2024-7-25 15:21:58 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu delegate remnux norman rpe

ISC Stormcast For Thursday, July 25th, 2024 https://isc.sans.edu/podcastdetail/9068, (Thu, Jul 25th) 2024-7-25 10:0:2 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers podcasts 25th

"Mouse Logger" Malicious Python Script, (Wed, Jul 24th) Keylogging is a pretty common feature of many malware families because recording the key pressed on... 2024-7-24 14:45:59 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu mouse scroll python pynput appendlog