Ongoing Facebook Phishing campaign Without a Sender and (almost) without Linkshttps://isc.sans.edu/diary/Ongoing%20Facebook%20phishing%20campaign%20without%20a%20sender%20and%20%28almost%29%20without%20links/29848Intel Microcode Updates Do N
Geolocating IPs is Harder Than You Thinkhttps://isc.sans.edu/diary/Geolocating%20IPs%20is%20harder%20than%20you%20think/29834Pre-Infected Mobile Phoneshttps://www.theregister.com/2023/05/11/bh_asia_mobile_phones/Dragos Breachhttps://www
Exploratory Data Analysis with CISSM Cyber Attacks Database Part 2https://isc.sans.edu/diary/Exploratory%20Data%20Analysis%20with%20CISSM%20Cyber%20Attacks%20Database%20-%20Part%202/29828Microsoft Patched Outlook (actually Windows) vulnerabi
Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20May%202023%20Patch%20Tuesday/29826GitHub "Push Protection" now out of Betahttps://github.blog/2023-05-09-push-protection-is-generally-available-and-free-for-all-public-reposito
QR Codes Used in Fake Parking Tickets and Surveyshttps://www.bleepingcomputer.com/news/security/qr-codes-used-in-fake-parking-tickets-surveys-to-steal-your-money/Microsoft Edge Updatehttps://learn.microsoft.com/en-us/deployedge/microsoft-e
What Setting Live Traps For Cybercriminals Taught Me About Securityhttps://isc.sans.edu/diary/What%20Setting%20Live%20Traps%20for%20Cybercriminals%20Taught%20Me%20About%20Security%20%5BGuest%20Diary%5D/31038TeamViewer Compromisehttps://www
TCP Latency Sidechannelhttps://www.snailload.com/snailload.pdfMicrosoft Management Console for Intial Access and Evasionhttps://www.elastic.co/security-labs/grimresourceWyze Camera Vulnerabilitieshttps://forums.wyze.com/t/security-advis
Sysinternals Process Monitor Version 4 Releasedhttps://isc.sans.edu/diary/Sysinternals%27%20Process%20Monitor%20Version%204%20Released/31026Kaspersky Sanctionshttps://home.treasury.gov/news/press-releases/jy2420Phoenix UEFI Buffer Overflo
No Excuses: Free Tools to Help Secure Authentication in Ubuntuhttps://isc.sans.edu/diary/No%20Excuses%2C%20Free%20Tools%20to%20Help%20Secure%20Authentication%20in%20Ubuntu%20Linux%20%5BGuest%20Diary%5D/31024Handling BOM MIME Fileshttps://i
New NetSupport Campaign Deleivered Through MSIX Packageshttps://isc.sans.edu/diary/New%20NetSupport%20Campaign%20Delivered%20Through%20MSIX%20Packages/31018D-Link Router Backdoorhttps://www.twcert.org.tw/en/cp-139-7880-629f5-2.htmlhttps:
Overview of My Tools That Handle JSON Datahttps://isc.sans.edu/diary/Overview%20of%20My%20Tools%20That%20Handle%20JSON%20Data/31012Python Serialization and "Sleepy Pickle"https://x.com/MarkBaggett/status/1801732554740969561Detecting Headl
The Art of JQ and Command-Line Fuhttps://isc.sans.edu/diary/The%20Art%20of%20JQ%20and%20Command-line%20Fu%20%5BGuest%20Diary%5D/31006Microsoft Outlook Vulnerablity Detailshttps://blog.morphisec.com/cve-2024-30103-microsoft-outlook-vulnerab
Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20June%202024/31000JetBrains IntelliJ Based IDE GitHub Plugin Vulnerabilityhttps://blog.jetbrains.com/security/2024/06/updates-for-security-issue-affecting-intel
Veeam Exploit CVE-2024-29849https://summoning.team/blog/veeam-enterprise-manager-cve-2024-29849-auth-bypass/SORBS Shutdownhttps://www.theregister.com/2024/06/07/sorbs_closed/Rogue Cell Tower Shut Down in Londonhttps://www.cityoflondon.p
WatchGuard VPN Brutefordinghttps://isc.sans.edu/diary/Brute%20Force%20Attacks%20Against%20Watchguard%20VPN%20Endpoints/30984TotalRecall Tool To Extract Data from Microsoft Recallhttps://github.com/xaitax/TotalRecallWebEx Flawhttps://www
No Defender Yes Defenderhttps://isc.sans.edu/diary/No-Defender%2C%20Yes-Defender/30980Fake Job Ads Lead to Stolen Crypto Currencyhttps://www.ic3.gov/Media/Y2024/PSA240604Zyxel NAS Vulnerabilitieshttps://outpost24.com/blog/zyxel-nas-crit