PDFiD False Positives Revisited https://isc.sans.edu/diary/PDFiD%3A%20False%20Positives%20Revisited/30122 CVE-2023-32019 Fix Enabled by Default; https://support.microsoft.com/en-us/topic/kb5028407-how-to-manage-the-vulnerability-associated-with-cve-2023-32019-bd6ed35f-48b1-41f6-bd19-d2d97270f080 CyberPower and Dataprobe Vulnerabilities https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html Ford WiFi Driver Vulnerability https://www.ti.com/lit/er/swra773/swra773.pdf?ts=1691717352391&amp;ref_url=https%253A%252F%252Fmedia.ford.com%252F

PDFiD False Positives Revisited <a href="https://isc.sans.edu/diary/PDFiD%3A%20False%20Positives%20Revisited/30122" rel="nofollow" target="_blank">https://isc.sans.edu/diary/PDFiD%3A%20False%20Positives%20Revisited/30122</a> CVE-2023-32019 Fix Enabled by Default; <a href="https://support.microsoft.com/en-us/topic/kb5028407-how-to-manage-the-vulnerability-associated-with-cve-2023-32019-bd6ed35f-48b1-41f6-bd19-d2d97270f080" rel="nofollow" target="_blank">https://support.microsoft.com/en-us/topic/kb5028407-how-to-manage-the-vulnerability-associated-with-cve-2023-32019-bd6ed35f-48b1-41f6-bd19-d2d97270f080</a> CyberPower and Dataprobe Vulnerabilities <a href="https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html" rel="nofollow" target="_blank">https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html</a> Ford WiFi Driver Vulnerability <a href="https://www.ti.com/lit/er/swra773/swra773.pdf?ts=1691717352391&amp;ref_url=https%253A%252F%252Fmedia.ford.com%252F" rel="nofollow" target="_blank">https://www.ti.com/lit/er/swra773/swra773.pdf?ts=1691717352391&amp;ref_url=https%253A%252F%252Fmedia.ford.com%252F</a>

ISC StormCast for Tuesday, August 15th, 2023

Show Me All Your Windows https://isc.sans.edu/diary/Show%20me%20All%20Your%20Windows!/30116 Zero Touch Pwn https://blog.syss.com/posts/zero-touch-pwn/ Maginot DNS Spoofing Attack https://www.usenix.org/conference/usenixsecurity23/presentation/li-xiang

Show Me All Your Windows <a href="https://isc.sans.edu/diary/Show%20me%20All%20Your%20Windows!/30116" rel="nofollow" target="_blank">https://isc.sans.edu/diary/Show%20me%20All%20Your%20Windows!/30116</a> Zero Touch Pwn <a href="https://blog.syss.com/posts/zero-touch-pwn/" rel="nofollow" target="_blank">https://blog.syss.com/posts/zero-touch-pwn/</a> Maginot DNS Spoofing Attack <a href="https://www.usenix.org/conference/usenixsecurity23/presentation/li-xiang" rel="nofollow" target="_blank">https://www.usenix.org/conference/usenixsecurity23/presentation/li-xiang</a>

ISC StormCast for Monday, August 14th, 2023

Some things never change, such as SQL Authentication "Encryption" https://isc.sans.edu/diary/Some%20things%20never%20change%20%3F%20such%20as%20SQL%20Authentication%20%3Fencryption%3F/30112 Defender Pretender: When Windows Defender Updates Become a Security Risk https://www.blackhat.com/us-23/briefings/schedule/#defender-pretender-when-windows-defender-updates-become-a-security-risk-32706 Dell Compellent Hardcoded Key https://www.dell.com/support/kbdoc/en-us/000216615/dsa-2023-282-security-update-for-dell-storage-integration-tools-for-vmware-dsitv-vulnerabilities Vulnerabilities in Sogou Keyboard https://citizenlab.ca/2023/08/vulnerabilities-in-sogou-keyboard-encryption/

Some things never change, such as SQL Authentication "Encryption" <a href="https://isc.sans.edu/diary/Some%20things%20never%20change%20%3F%20such%20as%20SQL%20Authentication%20%3Fencryption%3F/30112" rel="nofollow" target="_blank">https://isc.sans.edu/diary/Some%20things%20never%20change%20%3F%20such%20as%20SQL%20Authentication%20%3Fencryption%3F/30112</a> Defender Pretender: When Windows Defender Updates Become a Security Risk <a href="https://www.blackhat.com/us-23/briefings/schedule/#defender-pretender-when-windows-defender-updates-become-a-security-risk-32706" rel="nofollow" target="_blank">https://www.blackhat.com/us-23/briefings/schedule/#defender-pretender-when-windows-defender-updates-become-a-security-risk-32706</a> Dell Compellent Hardcoded Key <a href="https://www.dell.com/support/kbdoc/en-us/000216615/dsa-2023-282-security-update-for-dell-storage-integration-tools-for-vmware-dsitv-vulnerabilities" rel="nofollow" target="_blank">https://www.dell.com/support/kbdoc/en-us/000216615/dsa-2023-282-security-update-for-dell-storage-integration-tools-for-vmware-dsitv-vulnerabilities</a> Vulnerabilities in Sogou Keyboard <a href="https://citizenlab.ca/2023/08/vulnerabilities-in-sogou-keyboard-encryption/" rel="nofollow" target="_blank">https://citizenlab.ca/2023/08/vulnerabilities-in-sogou-keyboard-encryption/</a>

ISC StormCast for Friday, August 11th, 2023

Tunnelcrack VPN Vulnerability https://papers.mathyvanhoef.com/usenix2023-tunnelcrack.pdf Mozilla VPN Vulnerablity https://www.openwall.com/lists/oss-security/2023/08/03/1 Non English Exchange Server Patch Issues https://techcommunity.microsoft.com/t5/exchange-team-blog/released-august-2023-exchange-server-security-updates/bc-p/3894481/highlight/true VSCode Token Security https://cycode.com/blog/exposing-vscode-secrets/ Weekly Updates for Google Chrome https://security.googleblog.com/2023/08/an-update-on-chrome-security-updates.html

Tunnelcrack VPN Vulnerability <a href="https://papers.mathyvanhoef.com/usenix2023-tunnelcrack.pdf" rel="nofollow" target="_blank">https://papers.mathyvanhoef.com/usenix2023-tunnelcrack.pdf</a> Mozilla VPN Vulnerablity <a href="https://www.openwall.com/lists/oss-security/2023/08/03/1" rel="nofollow" target="_blank">https://www.openwall.com/lists/oss-security/2023/08/03/1</a> Non English Exchange Server Patch Issues <a href="https://techcommunity.microsoft.com/t5/exchange-team-blog/released-august-2023-exchange-server-security-updates/bc-p/3894481/highlight/true" rel="nofollow" target="_blank">https://techcommunity.microsoft.com/t5/exchange-team-blog/released-august-2023-exchange-server-security-updates/bc-p/3894481/highlight/true</a> VSCode Token Security <a href="https://cycode.com/blog/exposing-vscode-secrets/" rel="nofollow" target="_blank">https://cycode.com/blog/exposing-vscode-secrets/</a> Weekly Updates for Google Chrome <a href="https://security.googleblog.com/2023/08/an-update-on-chrome-security-updates.html" rel="nofollow" target="_blank">https://security.googleblog.com/2023/08/an-update-on-chrome-security-updates.html</a>

ISC StormCast for Thursday, August 10th, 2023

Microsoft Patch Tuesday https://isc.sans.edu/diary/Microsoft%20August%202023%20Patch%20Tuesday/30106 Adobe Updates https://helpx.adobe.com/security/security-bulletin.html

Microsoft Patch Tuesday <a href="https://isc.sans.edu/diary/Microsoft%20August%202023%20Patch%20Tuesday/30106" rel="nofollow" target="_blank">https://isc.sans.edu/diary/Microsoft%20August%202023%20Patch%20Tuesday/30106</a> Adobe Updates <a href="https://helpx.adobe.com/security/security-bulletin.html" rel="nofollow" target="_blank">https://helpx.adobe.com/security/security-bulletin.html</a>

ISC StormCast for Wednesday, August 9th, 2023

Update: Researchers Scanning the Internet https://isc.sans.edu/diary/Update%3A%20Researchers%20scanning%20the%20Internet/30102 Malicious OpenBullet Configuration Files https://www.kasada.io/threat-intel-openbullet-malware/ Abusing Cloudflare Tunnels https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/

Update: Researchers Scanning the Internet <a href="https://isc.sans.edu/diary/Update%3A%20Researchers%20scanning%20the%20Internet/30102" rel="nofollow" target="_blank">https://isc.sans.edu/diary/Update%3A%20Researchers%20scanning%20the%20Internet/30102</a> Malicious OpenBullet Configuration Files <a href="https://www.kasada.io/threat-intel-openbullet-malware/" rel="nofollow" target="_blank">https://www.kasada.io/threat-intel-openbullet-malware/</a> Abusing Cloudflare Tunnels <a href="https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/" rel="nofollow" target="_blank">https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/</a>

ISC StormCast for Tuesday, August 8th, 2023

Are Leaked Credential Dumps Used by Attackers? https://isc.sans.edu/diary/Are%20Leaked%20Credentials%20Dumps%20Used%20by%20Attackers%3F/30098 New PaperCut RCE Vulnerability https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/ Microsoft mitigates Power Platform Custom Code information disclosure vulnerability https://msrc.microsoft.com/blog/2023/08/microsoft-mitigates-power-platform-custom-code-information-disclosure-vulnerability/ Microsoft Publishes Token theft Playbook https://learn.microsoft.com/en-us/security/operations/token-theft-playbook

Are Leaked Credential Dumps Used by Attackers? <a href="https://isc.sans.edu/diary/Are%20Leaked%20Credentials%20Dumps%20Used%20by%20Attackers%3F/30098" rel="nofollow" target="_blank">https://isc.sans.edu/diary/Are%20Leaked%20Credentials%20Dumps%20Used%20by%20Attackers%3F/30098</a> New PaperCut RCE Vulnerability <a href="https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/" rel="nofollow" target="_blank">https://www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/</a> Microsoft mitigates Power Platform Custom Code information disclosure vulnerability <a href="https://msrc.microsoft.com/blog/2023/08/microsoft-mitigates-power-platform-custom-code-information-disclosure-vulnerability/" rel="nofollow" target="_blank">https://msrc.microsoft.com/blog/2023/08/microsoft-mitigates-power-platform-custom-code-information-disclosure-vulnerability/</a> Microsoft Publishes Token theft Playbook <a href="https://learn.microsoft.com/en-us/security/operations/token-theft-playbook" rel="nofollow" target="_blank">https://learn.microsoft.com/en-us/security/operations/token-theft-playbook</a>

ISC StormCast for Monday, August 7th, 2023

From small LNK to large malicious BAT file with zero VT score https://isc.sans.edu/diary/From%20small%20LNK%20to%20large%20malicious%20BAT%20file%20with%20zero%20VT%20score/30094 Social Engineering via Microsoft Teams https://www.microsoft.com/en-us/security/blog/2023/08/02/midnight-blizzard-conducts-targeted-social-engineering-over-microsoft-teams/ Automating the Search for LOLBAS https://pentera.io/resources/whitepapers/the-lolbas-odyssey-finding-new-lolbas-and-how-you-can-too/ Sneaky Versioning Used to Bypass Scanners https://thehackernews.com/2023/08/malicious-apps-use-sneaky-versioning.html Aruba Patches https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-010.txt Mitel Patches https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0008

From small LNK to large malicious BAT file with zero VT score <a href="https://isc.sans.edu/diary/From%20small%20LNK%20to%20large%20malicious%20BAT%20file%20with%20zero%20VT%20score/30094" rel="nofollow" target="_blank">https://isc.sans.edu/diary/From%20small%20LNK%20to%20large%20malicious%20BAT%20file%20with%20zero%20VT%20score/30094</a> Social Engineering via Microsoft Teams <a href="https://www.microsoft.com/en-us/security/blog/2023/08/02/midnight-blizzard-conducts-targeted-social-engineering-over-microsoft-teams/" rel="nofollow" target="_blank">https://www.microsoft.com/en-us/security/blog/2023/08/02/midnight-blizzard-conducts-targeted-social-engineering-over-microsoft-teams/</a> Automating the Search for LOLBAS <a href="https://pentera.io/resources/whitepapers/the-lolbas-odyssey-finding-new-lolbas-and-how-you-can-too/" rel="nofollow" target="_blank">https://pentera.io/resources/whitepapers/the-lolbas-odyssey-finding-new-lolbas-and-how-you-can-too/</a> Sneaky Versioning Used to Bypass Scanners <a href="https://thehackernews.com/2023/08/malicious-apps-use-sneaky-versioning.html" rel="nofollow" target="_blank">https://thehackernews.com/2023/08/malicious-apps-use-sneaky-versioning.html</a> Aruba Patches <a href="https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-010.txt" rel="nofollow" target="_blank">https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-010.txt</a> Mitel Patches <a href="https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0008" rel="nofollow" target="_blank">https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0008</a>

ISC StormCast for Friday, August 4th, 2023

Zeek and Defender Endpoint https://isc.sans.edu/diary/Zeek%20and%20Defender%20Endpoint/30088 New Ivanti MobileIron Core Vulnerability https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US Salesforce Phishing https://labs.guard.io/phishforce-vulnerability-uncovered-in-salesforces-email-services-exploited-for-phishing-32024ad4b5fa Abusing the Amazon Web Services SSM Agent as a Remote Access Trojan https://www.mitiga.io/blog/abusing-the-amazon-web-services-ssm-agent-as-a-remote-access-trojan

Zeek and Defender Endpoint <a href="https://isc.sans.edu/diary/Zeek%20and%20Defender%20Endpoint/30088" rel="nofollow" target="_blank">https://isc.sans.edu/diary/Zeek%20and%20Defender%20Endpoint/30088</a> New Ivanti MobileIron Core Vulnerability <a href="https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US" rel="nofollow" target="_blank">https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US</a> Salesforce Phishing <a href="https://labs.guard.io/phishforce-vulnerability-uncovered-in-salesforces-email-services-exploited-for-phishing-32024ad4b5fa" rel="nofollow" target="_blank">https://labs.guard.io/phishforce-vulnerability-uncovered-in-salesforces-email-services-exploited-for-phishing-32024ad4b5fa</a> Abusing the Amazon Web Services SSM Agent as a Remote Access Trojan <a href="https://www.mitiga.io/blog/abusing-the-amazon-web-services-ssm-agent-as-a-remote-access-trojan" rel="nofollow" target="_blank">https://www.mitiga.io/blog/abusing-the-amazon-web-services-ssm-agent-as-a-remote-access-trojan</a>

ISC StormCast for Thursday, August 3rd, 2023

DNS Over HTTPS Summary https://isc.sans.edu/diary/Summary%20of%20DNS%20over%20HTTPS%20requests%20against%20our%20honeypots./30084 Malware Infects Airgapped Networks https://usa.kaspersky.com/about/press-releases/2023_kaspersky-uncovers-malware-for-targeted-data-exfiltration-from-air-gapped-environments Google Deleting Inactive Accounts https://support.google.com/accounts/answer/12418290?visit_id=638264210155158507-1346504535&amp;p=inactive_account_policy_blog&amp;rd=1 Google AMP Service Used for Phishing https://cofense.com/blog/google-amp-the-newest-of-evasive-phishing-tactic/

DNS Over HTTPS Summary <a href="https://isc.sans.edu/diary/Summary%20of%20DNS%20over%20HTTPS%20requests%20against%20our%20honeypots./30084" rel="nofollow" target="_blank">https://isc.sans.edu/diary/Summary%20of%20DNS%20over%20HTTPS%20requests%20against%20our%20honeypots./30084</a> Malware Infects Airgapped Networks <a href="https://usa.kaspersky.com/about/press-releases/2023_kaspersky-uncovers-malware-for-targeted-data-exfiltration-from-air-gapped-environments" rel="nofollow" target="_blank">https://usa.kaspersky.com/about/press-releases/2023_kaspersky-uncovers-malware-for-targeted-data-exfiltration-from-air-gapped-environments</a> Google Deleting Inactive Accounts <a href="https://support.google.com/accounts/answer/12418290?visit_id=638264210155158507-1346504535&amp;p=inactive_account_policy_blog&amp;rd=1" rel="nofollow" target="_blank">https://support.google.com/accounts/answer/12418290?visit_id=638264210155158507-1346504535&amp;p=inactive_account_policy_blog&amp;rd=1</a> Google AMP Service Used for Phishing <a href="https://cofense.com/blog/google-amp-the-newest-of-evasive-phishing-tactic/" rel="nofollow" target="_blank">https://cofense.com/blog/google-amp-the-newest-of-evasive-phishing-tactic/</a>

ISC StormCast for Wednesday, August 2nd, 2023

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

great podcast! brief but with info you need.

a very brief daily update

Great recap of the latest cyber security news.

Great recap of the latest cyber security news

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at <a href="https://isc.sans.edu/contact.html" rel="nofollow" target="_blank">https://isc.sans.edu/contact.html</a> .

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

Ultrasonic Triggers for Cellphone Assistants. https://source.wustl.edu/2020/02/surfing-attack-hacks-siri-google-with-ultrasonic-waves/ Comparing Information Leakage from Different Browsers https://www.scss.tcd.ie/Doug.Leith/pubs/browser_privacy.pdf Cloud Snooper Attack https://news.sophos.com/en-us/2020/02/25/cloud-snooper-attack-bypasses-firewall-security-measures/

Ultrasonic Triggers for Cellphone Assistants. <a href="https://source.wustl.edu/2020/02/surfing-attack-hacks-siri-google-with-ultrasonic-waves/" rel="nofollow" target="_blank">https://source.wustl.edu/2020/02/surfing-attack-hacks-siri-google-with-ultrasonic-waves/</a> Comparing Information Leakage from Different Browsers <a href="https://www.scss.tcd.ie/Doug.Leith/pubs/browser_privacy.pdf" rel="nofollow" target="_blank">https://www.scss.tcd.ie/Doug.Leith/pubs/browser_privacy.pdf</a> Cloud Snooper Attack <a href="https://news.sophos.com/en-us/2020/02/25/cloud-snooper-attack-bypasses-firewall-security-measures/" rel="nofollow" target="_blank">https://news.sophos.com/en-us/2020/02/25/cloud-snooper-attack-bypasses-firewall-security-measures/</a>

ISC StormCast for Friday, February 28th 2020

Microsoft Patch Tuesday https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200005 https://isc.sans.edu/diary.html?storyid=25886

Microsoft Patch Tuesday <a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200005" rel="nofollow" target="_blank">https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200005</a> <a href="https://isc.sans.edu/diary.html?storyid=25886" rel="nofollow" target="_blank">https://isc.sans.edu/diary.html?storyid=25886</a>

ISC StormCast for Wednesday, March 11th 2020

Applocker vs. Living off the Land Attacks https://isc.sans.edu/forums/diary/Using+AppLocker+to+Prevent+Living+off+the+Land+Attacks/26032/ Netlink GPON 0-Day https://blog.netlab.360.com/multiple-fiber-routers-are-being-compromised-by-botnets-using-0-day-en/ Windows Security Crashing After Definition Update https://www.askwoody.com/2020/reports-of-windows-security-nee-microsoft-security-essentials-crashing-after-installing-this-mornings-definition-updates/ 700 Malicious Ruby Gems Found https://thehackernews.com/2020/04/rubygem-typosquatting-malware.html vCenter Exploit for CVE-2020-3952 https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/

Applocker vs. Living off the Land Attacks <a href="https://isc.sans.edu/forums/diary/Using+AppLocker+to+Prevent+Living+off+the+Land+Attacks/26032/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Using+AppLocker+to+Prevent+Living+off+the+Land+Attacks/26032/</a> Netlink GPON 0-Day <a href="https://blog.netlab.360.com/multiple-fiber-routers-are-being-compromised-by-botnets-using-0-day-en/" rel="nofollow" target="_blank">https://blog.netlab.360.com/multiple-fiber-routers-are-being-compromised-by-botnets-using-0-day-en/</a> Windows Security Crashing After Definition Update <a href="https://www.askwoody.com/2020/reports-of-windows-security-nee-microsoft-security-essentials-crashing-after-installing-this-mornings-definition-updates/" rel="nofollow" target="_blank">https://www.askwoody.com/2020/reports-of-windows-security-nee-microsoft-security-essentials-crashing-after-installing-this-mornings-definition-updates/</a> 700 Malicious Ruby Gems Found <a href="https://thehackernews.com/2020/04/rubygem-typosquatting-malware.html" rel="nofollow" target="_blank">https://thehackernews.com/2020/04/rubygem-typosquatting-malware.html</a> vCenter Exploit for CVE-2020-3952 <a href="https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/" rel="nofollow" target="_blank">https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/</a>

ISC StormCast for Friday, April 17th 2020

Exploring the Sysmon 11 File Deletion Protection https://isc.sans.edu/forums/diary/Sysmon+and+File+Deletion/26084/ Digicert CT Compromise https://groups.google.com/a/chromium.org/forum/#!topic/ct-policy/aKNbZuJzwfM WebLogic Flaw (new one..) Exploited in the Wild https://blogs.oracle.com/security/apply-april-2020-cpu

Exploring the Sysmon 11 File Deletion Protection <a href="https://isc.sans.edu/forums/diary/Sysmon+and+File+Deletion/26084/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Sysmon+and+File+Deletion/26084/</a> Digicert CT Compromise <a href="https://groups.google.com/a/chromium.org/forum/#!topic/ct-policy/aKNbZuJzwfM" rel="nofollow" target="_blank">https://groups.google.com/a/chromium.org/forum/#!topic/ct-policy/aKNbZuJzwfM</a> WebLogic Flaw (new one..) Exploited in the Wild <a href="https://blogs.oracle.com/security/apply-april-2020-cpu" rel="nofollow" target="_blank">https://blogs.oracle.com/security/apply-april-2020-cpu</a>

ISC StormCast for Tuesday, May 5th 2020

More about Curl on Windows https://isc.sans.edu/forums/diary/curl+and+SSPI/25812/ WHO Warns of Coronavirus Phishing https://www.who.int/about/communications/cyber-security DUO Security / Google Identify Malicous Chrome Extensions https://duo.com/labs/research/crxcavator-malvertising-2020

More about Curl on Windows <a href="https://isc.sans.edu/forums/diary/curl+and+SSPI/25812/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/curl+and+SSPI/25812/</a> WHO Warns of Coronavirus Phishing <a href="https://www.who.int/about/communications/cyber-security" rel="nofollow" target="_blank">https://www.who.int/about/communications/cyber-security</a> DUO Security / Google Identify Malicous Chrome Extensions <a href="https://duo.com/labs/research/crxcavator-malvertising-2020" rel="nofollow" target="_blank">https://duo.com/labs/research/crxcavator-malvertising-2020</a>

ISC StormCast for Tuesday, February 18th 2020

More Covid19 Malware https://isc.sans.edu/forums/diary/More+COVID19+Themed+Malware/25930/ Working Exploit for the Kr00k Wifi Exploit https://hexway.io/research/r00kie-kr00kie/ ZDI Pwn2Own Results https://www.zerodayinitiative.com/blog/2020/3/17/welcome-to-pwn2own-2020-the-schedule-and-live-results

More Covid19 Malware <a href="https://isc.sans.edu/forums/diary/More+COVID19+Themed+Malware/25930/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/More+COVID19+Themed+Malware/25930/</a> Working Exploit for the Kr00k Wifi Exploit <a href="https://hexway.io/research/r00kie-kr00kie/" rel="nofollow" target="_blank">https://hexway.io/research/r00kie-kr00kie/</a> ZDI Pwn2Own Results <a href="https://www.zerodayinitiative.com/blog/2020/3/17/welcome-to-pwn2own-2020-the-schedule-and-live-results" rel="nofollow" target="_blank">https://www.zerodayinitiative.com/blog/2020/3/17/welcome-to-pwn2own-2020-the-schedule-and-live-results</a>

ISC StormCast for Monday, March 23rd 2020

Quakbot Malspam Sent From an Infected Windows Host https://isc.sans.edu/forums/diary/Qakbot+malspam+sent+from+an+infected+Windows+host/25972/ TPOT Cowrie to ISC Logs https://isc.sans.edu/forums/diary/TPOTs+Cowrie+to+ISC+Logs/25976/ SSH Issues After MacOS Update https://feed.tyler.io/so-uh-i-think-catalina-10154-broke-ssh/ Cloudflare DNS For Families https://blog.cloudflare.com/introducing-1-1-1-1-for-families/ Zoom Leaks Windows Password Hashes via UNC Links https://twitter.com/hackerfantastic/status/1245133371262619654

Quakbot Malspam Sent From an Infected Windows Host <a href="https://isc.sans.edu/forums/diary/Qakbot+malspam+sent+from+an+infected+Windows+host/25972/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Qakbot+malspam+sent+from+an+infected+Windows+host/25972/</a> TPOT Cowrie to ISC Logs <a href="https://isc.sans.edu/forums/diary/TPOTs+Cowrie+to+ISC+Logs/25976/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/TPOTs+Cowrie+to+ISC+Logs/25976/</a> SSH Issues After MacOS Update <a href="https://feed.tyler.io/so-uh-i-think-catalina-10154-broke-ssh/" rel="nofollow" target="_blank">https://feed.tyler.io/so-uh-i-think-catalina-10154-broke-ssh/</a> Cloudflare DNS For Families <a href="https://blog.cloudflare.com/introducing-1-1-1-1-for-families/" rel="nofollow" target="_blank">https://blog.cloudflare.com/introducing-1-1-1-1-for-families/</a> Zoom Leaks Windows Password Hashes via UNC Links <a href="https://twitter.com/hackerfantastic/status/1245133371262619654" rel="nofollow" target="_blank">https://twitter.com/hackerfantastic/status/1245133371262619654</a>

ISC StormCast for Thursday, April 2nd 2020

A Quick Summary of Current Reflective DNS DDoS Attacks https://isc.sans.edu/forums/diary/A+Quick+Summary+of+Current+Reflective+DNS+DDoS+Attacks/25916/ Trickbot gtag red5 distributed as DLL File https://isc.sans.edu/forums/diary/Trickbot+gtag+red5+distributed+as+a+DLL+file/25918/ Is Cryptojacking Dead after Coinhive Shutdown https://arxiv.org/pdf/2001.02975.pdf Adobe Patches https://helpx.adobe.com/security/products/acrobat/apsb20-13.html

A Quick Summary of Current Reflective DNS DDoS Attacks <a href="https://isc.sans.edu/forums/diary/A+Quick+Summary+of+Current+Reflective+DNS+DDoS+Attacks/25916/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/A+Quick+Summary+of+Current+Reflective+DNS+DDoS+Attacks/25916/</a> Trickbot gtag red5 distributed as DLL File <a href="https://isc.sans.edu/forums/diary/Trickbot+gtag+red5+distributed+as+a+DLL+file/25918/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Trickbot+gtag+red5+distributed+as+a+DLL+file/25918/</a> Is Cryptojacking Dead after Coinhive Shutdown <a href="https://arxiv.org/pdf/2001.02975.pdf" rel="nofollow" target="_blank">https://arxiv.org/pdf/2001.02975.pdf</a> Adobe Patches <a href="https://helpx.adobe.com/security/products/acrobat/apsb20-13.html" rel="nofollow" target="_blank">https://helpx.adobe.com/security/products/acrobat/apsb20-13.html</a>

ISC StormCast for Wednesday, March 18th 2020

Comparing the same Phishing Campaign 3 Months Appart https://isc.sans.edu/forums/diary/Look+at+the+same+phishing+campaign+3+months+apart/26018/ Setting 3D Printers On Fire https://www.coalfire.com/The-Coalfire-Blog/April-2020/With-IoT-Common-Devices-Pose-New-Threats Junos OS: vMX Default Credentials https://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10998 DNS is Changing: So What? (@Mic Webinar) https://www.sans.org/webcasts/113635

Comparing the same Phishing Campaign 3 Months Appart <a href="https://isc.sans.edu/forums/diary/Look+at+the+same+phishing+campaign+3+months+apart/26018/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Look+at+the+same+phishing+campaign+3+months+apart/26018/</a> Setting 3D Printers On Fire <a href="https://www.coalfire.com/The-Coalfire-Blog/April-2020/With-IoT-Common-Devices-Pose-New-Threats" rel="nofollow" target="_blank">https://www.coalfire.com/The-Coalfire-Blog/April-2020/With-IoT-Common-Devices-Pose-New-Threats</a> Junos OS: vMX Default Credentials <a href="https://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10998" rel="nofollow" target="_blank">https://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10998</a> DNS is Changing: So What? (@Mic Webinar) <a href="https://www.sans.org/webcasts/113635" rel="nofollow" target="_blank">https://www.sans.org/webcasts/113635</a>

ISC StormCast for Tuesday, April 14th 2020

RDP Scanning Increase https://isc.sans.edu/forums/diary/Increase+in+RDP+Scanning/25994/ Atlassian Advices Users To Secure Jira Service Desk https://community.atlassian.com/t5/Jira-Service-Desk-articles/Tips-for-setting-customer-permissions-in-Jira-Service-Desk/ba-p/1340617 Android Updates https://support.google.com/pixelphone/thread/38337876

RDP Scanning Increase <a href="https://isc.sans.edu/forums/diary/Increase+in+RDP+Scanning/25994/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Increase+in+RDP+Scanning/25994/</a> Atlassian Advices Users To Secure Jira Service Desk <a href="https://community.atlassian.com/t5/Jira-Service-Desk-articles/Tips-for-setting-customer-permissions-in-Jira-Service-Desk/ba-p/1340617" rel="nofollow" target="_blank">https://community.atlassian.com/t5/Jira-Service-Desk-articles/Tips-for-setting-customer-permissions-in-Jira-Service-Desk/ba-p/1340617</a> Android Updates <a href="https://support.google.com/pixelphone/thread/38337876" rel="nofollow" target="_blank">https://support.google.com/pixelphone/thread/38337876</a>

ISC StormCast for Wednesday, April 8th 2020

Collecting IOCs from IMAP Folder https://isc.sans.edu/forums/diary/Collecting+IOCs+from+IMAP+Folder/26070/ Attack Traffic on TCP Port 9673 https://isc.sans.edu/forums/diary/Attack+traffic+on+TCP+port+9673/26074/ Saltstack Authorization Bypass https://labs.f-secure.com/advisories/saltstack-authorization-bypass Mac Sandbox Escape https://lapcatsoftware.com/articles/sandbox-escape.html

Collecting IOCs from IMAP Folder <a href="https://isc.sans.edu/forums/diary/Collecting+IOCs+from+IMAP+Folder/26070/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Collecting+IOCs+from+IMAP+Folder/26070/</a> Attack Traffic on TCP Port 9673 <a href="https://isc.sans.edu/forums/diary/Attack+traffic+on+TCP+port+9673/26074/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Attack+traffic+on+TCP+port+9673/26074/</a> Saltstack Authorization Bypass <a href="https://labs.f-secure.com/advisories/saltstack-authorization-bypass" rel="nofollow" target="_blank">https://labs.f-secure.com/advisories/saltstack-authorization-bypass</a> Mac Sandbox Escape <a href="https://lapcatsoftware.com/articles/sandbox-escape.html" rel="nofollow" target="_blank">https://lapcatsoftware.com/articles/sandbox-escape.html</a>

ISC StormCast for Friday, May 1st 2020

ScrollToTextFragment Privacy Concerns in Google Chrome 80 https://github.com/WICG/ScrollToTextFragment/issues/76#issue-538137989 https://docs.google.com/document/d/1YHcl1-vE_ZnZ0kL2almeikAj2gkwCq8_5xwIae7PVik/edit#heading=h.uoiwg23pt0tx Another OpenSMTPD Vulnerability https://github.com/OpenSMTPD/OpenSMTPD/releases WhatsApp Group Invite Links in Search Engines https://twitter.com/JordanWildon/status/1230829082662842369

ScrollToTextFragment Privacy Concerns in Google Chrome 80 <a href="https://github.com/WICG/ScrollToTextFragment/issues/76#issue-538137989" rel="nofollow" target="_blank">https://github.com/WICG/ScrollToTextFragment/issues/76#issue-538137989</a> <a href="https://docs.google.com/document/d/1YHcl1-vE_ZnZ0kL2almeikAj2gkwCq8_5xwIae7PVik/edit#heading=h.uoiwg23pt0tx" rel="nofollow" target="_blank">https://docs.google.com/document/d/1YHcl1-vE_ZnZ0kL2almeikAj2gkwCq8_5xwIae7PVik/edit#heading=h.uoiwg23pt0tx</a> Another OpenSMTPD Vulnerability <a href="https://github.com/OpenSMTPD/OpenSMTPD/releases" rel="nofollow" target="_blank">https://github.com/OpenSMTPD/OpenSMTPD/releases</a> WhatsApp Group Invite Links in Search Engines <a href="https://twitter.com/JordanWildon/status/1230829082662842369" rel="nofollow" target="_blank">https://twitter.com/JordanWildon/status/1230829082662842369</a>

ISC StormCast for Tuesday, February 25th 2020

Hunting Without IOCs https://isc.sans.edu/forums/diary/No+IOCs+No+Problem+Getting+a+Start+Hunting+for+Malicious+Office+Files/26026/ Cloudflare/Online Banking Outages https://twitter.com/eastdakota/status/1250520852354854912 Crypto Currency Stealing Browser Extensions https://medium.com/mycrypto/discovering-fake-browser-extensions-that-target-users-of-ledger-trezor-mew-metamask-and-more-e281a2b80ff9

Hunting Without IOCs <a href="https://isc.sans.edu/forums/diary/No+IOCs+No+Problem+Getting+a+Start+Hunting+for+Malicious+Office+Files/26026/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/No+IOCs+No+Problem+Getting+a+Start+Hunting+for+Malicious+Office+Files/26026/</a> Cloudflare/Online Banking Outages <a href="https://twitter.com/eastdakota/status/1250520852354854912" rel="nofollow" target="_blank">https://twitter.com/eastdakota/status/1250520852354854912</a> Crypto Currency Stealing Browser Extensions <a href="https://medium.com/mycrypto/discovering-fake-browser-extensions-that-target-users-of-ledger-trezor-mew-metamask-and-more-e281a2b80ff9" rel="nofollow" target="_blank">https://medium.com/mycrypto/discovering-fake-browser-extensions-that-target-users-of-ledger-trezor-mew-metamask-and-more-e281a2b80ff9</a>

ISC StormCast for Thursday, April 16th 2020

Twitter Cache Bug in Firefox  https://privacy.twitter.com/en/blog/2020/data-cache-firefox MS-SQL Server Attack https://www.guardicore.com/2020/04/vollgar-ms-sql-servers-under-attack/ More Zoom Vulnerabilities  https://objective-see.com/blog/blog_0x56.html Covid-19 Economic Impact Payments Scams https://www.justice.gov/usao-edky/press-release/file/1265371/download Safari Camera Access Bug https://www.ryanpickren.com/webcam-hacking-overview

Twitter Cache Bug in Firefox <a href="https://privacy.twitter.com/en/blog/2020/data-cache-firefox" rel="nofollow" target="_blank">https://privacy.twitter.com/en/blog/2020/data-cache-firefox</a> MS-SQL Server Attack <a href="https://www.guardicore.com/2020/04/vollgar-ms-sql-servers-under-attack/" rel="nofollow" target="_blank">https://www.guardicore.com/2020/04/vollgar-ms-sql-servers-under-attack/</a> More Zoom Vulnerabilities <a href="https://objective-see.com/blog/blog_0x56.html" rel="nofollow" target="_blank">https://objective-see.com/blog/blog_0x56.html</a> Covid-19 Economic Impact Payments Scams <a href="https://www.justice.gov/usao-edky/press-release/file/1265371/download" rel="nofollow" target="_blank">https://www.justice.gov/usao-edky/press-release/file/1265371/download</a> Safari Camera Access Bug <a href="https://www.ryanpickren.com/webcam-hacking-overview" rel="nofollow" target="_blank">https://www.ryanpickren.com/webcam-hacking-overview</a>

ISC StormCast for Friday, April 3rd 2020

Mystery SMB3 Flaw Update https://isc.sans.edu/forums/diary/Critical+SMBv3+Vulnerability+Remote+Code+Execution/25890/ COVID19 Malware https://blog.reasonsecurity.com/2020/03/09/covid-19-info-stealer-the-map-of-threats-threat-analysis-report/ Agent Tesla Spread by Fake Canon EOS Notification Email https://isc.sans.edu/forums/diary/Agent+Tesla+Delivered+via+Fake+Canon+EOS+Notification+on+Free+OwnCloud+Account/25884/

Mystery SMB3 Flaw Update <a href="https://isc.sans.edu/forums/diary/Critical+SMBv3+Vulnerability+Remote+Code+Execution/25890/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Critical+SMBv3+Vulnerability+Remote+Code+Execution/25890/</a> COVID19 Malware <a href="https://blog.reasonsecurity.com/2020/03/09/covid-19-info-stealer-the-map-of-threats-threat-analysis-report/" rel="nofollow" target="_blank">https://blog.reasonsecurity.com/2020/03/09/covid-19-info-stealer-the-map-of-threats-threat-analysis-report/</a> Agent Tesla Spread by Fake Canon EOS Notification Email <a href="https://isc.sans.edu/forums/diary/Agent+Tesla+Delivered+via+Fake+Canon+EOS+Notification+on+Free+OwnCloud+Account/25884/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Agent+Tesla+Delivered+via+Fake+Canon+EOS+Notification+on+Free+OwnCloud+Account/25884/</a>

ISC StormCast for Thursday, March 12th 2020

Crashing Windows Explorer Without a Click https://isc.sans.edu/forums/diary/Crashing+explorerexe+without+a+click/25966/ Zoom Privacy Policy https://blogs.harvard.edu/doc/2020/03/27/zoom/ Zoom Bombing https://www.fbi.gov/contact-us/field-offices/boston/news/press-releases/fbi-warns-of-teleconferencing-and-online-classroom-hijacking-during-covid-19-pandemic Zoom Related Domains Used for Phishing https://blog.checkpoint.com/2020/03/30/covid-19-impact-cyber-criminals-target-zoom-domains/

Crashing Windows Explorer Without a Click <a href="https://isc.sans.edu/forums/diary/Crashing+explorerexe+without+a+click/25966/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Crashing+explorerexe+without+a+click/25966/</a> Zoom Privacy Policy <a href="https://blogs.harvard.edu/doc/2020/03/27/zoom/" rel="nofollow" target="_blank">https://blogs.harvard.edu/doc/2020/03/27/zoom/</a> Zoom Bombing <a href="https://www.fbi.gov/contact-us/field-offices/boston/news/press-releases/fbi-warns-of-teleconferencing-and-online-classroom-hijacking-during-covid-19-pandemic" rel="nofollow" target="_blank">https://www.fbi.gov/contact-us/field-offices/boston/news/press-releases/fbi-warns-of-teleconferencing-and-online-classroom-hijacking-during-covid-19-pandemic</a> Zoom Related Domains Used for Phishing <a href="https://blog.checkpoint.com/2020/03/30/covid-19-impact-cyber-criminals-target-zoom-domains/" rel="nofollow" target="_blank">https://blog.checkpoint.com/2020/03/30/covid-19-impact-cyber-criminals-target-zoom-domains/</a>

ISC StormCast for Tuesday, March 31st 2020

Privacy Preserving Protocols to Trace Covid19 Exposure https://isc.sans.edu/forums/diary/Privacy+Preserving+Protocols+to+Trace+Covid19+Exposure/26066/ Google Chrome Update https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_27.html https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security Updated Version of Sysmon https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon https://techcommunity.microsoft.com/t5/sysinternals-blog/sysmon-v11-0-livekd-v5-63-process-explorer-v16-32-coreinfo-v3-5/ba-p/1345153 Shade Ransomware Keys Released https://github.com/shade-team/keys/blob/master/README.md Exploiting the Exploiters https://medium.com/@curtbraz/exploiting-the-exploiters-46fd0d620fd8

Privacy Preserving Protocols to Trace Covid19 Exposure <a href="https://isc.sans.edu/forums/diary/Privacy+Preserving+Protocols+to+Trace+Covid19+Exposure/26066/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Privacy+Preserving+Protocols+to+Trace+Covid19+Exposure/26066/</a> Google Chrome Update <a href="https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_27.html" rel="nofollow" target="_blank">https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_27.html</a> <a href="https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security" rel="nofollow" target="_blank">https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security</a> Updated Version of Sysmon <a href="https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon" rel="nofollow" target="_blank">https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon</a> <a href="https://techcommunity.microsoft.com/t5/sysinternals-blog/sysmon-v11-0-livekd-v5-63-process-explorer-v16-32-coreinfo-v3-5/ba-p/1345153" rel="nofollow" target="_blank">https://techcommunity.microsoft.com/t5/sysinternals-blog/sysmon-v11-0-livekd-v5-63-process-explorer-v16-32-coreinfo-v3-5/ba-p/1345153</a> Shade Ransomware Keys Released <a href="https://github.com/shade-team/keys/blob/master/README.md" rel="nofollow" target="_blank">https://github.com/shade-team/keys/blob/master/README.md</a> Exploiting the Exploiters <a href="https://medium.com/@curtbraz/exploiting-the-exploiters-46fd0d620fd8" rel="nofollow" target="_blank">https://medium.com/@curtbraz/exploiting-the-exploiters-46fd0d620fd8</a>

ISC StormCast for Thursday, April 30th 2020

TrendMicro Update https://success.trendmicro.com/solution/000245571 More VMWare Updates https://www.vmware.com/security/advisories/VMSA-2020-0005.html EnigmaSpark Malware https://securityintelligence.com/posts/EnigmaSpark-Politically-Themed-Cyber-Activity-Highlights-Regional-Opposition-to-Middle-East-Peace-Plan/ Recent Ransomware Trends https://www.fireeye.com/blog/threat-research/2020/03/they-come-in-the-night-ransomware-deployment-trends.html

TrendMicro Update <a href="https://success.trendmicro.com/solution/000245571" rel="nofollow" target="_blank">https://success.trendmicro.com/solution/000245571</a> More VMWare Updates <a href="https://www.vmware.com/security/advisories/VMSA-2020-0005.html" rel="nofollow" target="_blank">https://www.vmware.com/security/advisories/VMSA-2020-0005.html</a> EnigmaSpark Malware <a href="https://securityintelligence.com/posts/EnigmaSpark-Politically-Themed-Cyber-Activity-Highlights-Regional-Opposition-to-Middle-East-Peace-Plan/" rel="nofollow" target="_blank">https://securityintelligence.com/posts/EnigmaSpark-Politically-Themed-Cyber-Activity-Highlights-Regional-Opposition-to-Middle-East-Peace-Plan/</a> Recent Ransomware Trends <a href="https://www.fireeye.com/blog/threat-research/2020/03/they-come-in-the-night-ransomware-deployment-trends.html" rel="nofollow" target="_blank">https://www.fireeye.com/blog/threat-research/2020/03/they-come-in-the-night-ransomware-deployment-trends.html</a>

ISC StormCast for Thursday, March 19th 2020

Weaponized RTF Document Generator Mailer in PowerShell https://isc.sans.edu/forums/diary/Weaponized+RTF+Document+Generator+Mailer+in+PowerShell/26030/ Microsoft Fixes Bad Anti-Malware Signatures https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes Sophos Pulls Bad Firmware Update https://community.sophos.com/kb/en-us/135383 Credentials Stolen from Pulse Secure VPN Abused  https://www.us-cert.gov/ncas/alerts/aa20-107a Chrome Update https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_15.html

Weaponized RTF Document Generator Mailer in PowerShell <a href="https://isc.sans.edu/forums/diary/Weaponized+RTF+Document+Generator+Mailer+in+PowerShell/26030/" rel="nofollow" target="_blank">https://isc.sans.edu/forums/diary/Weaponized+RTF+Document+Generator+Mailer+in+PowerShell/26030/</a> Microsoft Fixes Bad Anti-Malware Signatures <a href="https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes" rel="nofollow" target="_blank">https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes</a> Sophos Pulls Bad Firmware Update <a href="https://community.sophos.com/kb/en-us/135383" rel="nofollow" target="_blank">https://community.sophos.com/kb/en-us/135383</a> Credentials Stolen from Pulse Secure VPN Abused <a href="https://www.us-cert.gov/ncas/alerts/aa20-107a" rel="nofollow" target="_blank">https://www.us-cert.gov/ncas/alerts/aa20-107a</a> Chrome Update <a href="https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_15.html" rel="nofollow" target="_blank">https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_15.html</a>

ISC StormCast for Monday, April 20th 2020

Kr00k WiFi Attack https://www.eset.com/int/kr00k/ Impersonating LTE Users https://imp4gt-attacks.net/ Zyxel RCE Vulnerablity https://www.kb.cert.org/vuls/id/498544/

Kr00k WiFi Attack <a href="https://www.eset.com/int/kr00k/" rel="nofollow" target="_blank">https://www.eset.com/int/kr00k/</a> Impersonating LTE Users <a href="https://imp4gt-attacks.net/" rel="nofollow" target="_blank">https://imp4gt-attacks.net/</a> Zyxel RCE Vulnerablity <a href="https://www.kb.cert.org/vuls/id/498544/" rel="nofollow" target="_blank">https://www.kb.cert.org/vuls/id/498544/</a>

ISC StormCast for Thursday, February 27th 2020

The best podcasts on investing. For anyone interested in the stories in the investing industry, whether it's an interview with Ray Dalio or Ed Thorp to the writer of The Big Short. This topic includes the most fascinating stories from all the best investors. Add episodes you're interested into your queue below!

Best Investing Podcasts

The Best Multi-Part Documentaries, with documentaries on Obama, Federer vs Nadal, the making of Star Wars, Netflix vs Blockbuster and more. Add episodes you're interested into your queue below!