Widgetized Section
Go to Admin » Appearance » Widgets » and move Gabfire Widget: Social into that MastheadOverlay zone
ISC StormCast for Tuesday, December 18th 2018
Password Protected ZIP with Maldoc https://isc.sans.edu/forums/diary/Password+Protected+ZIP+with+Maldoc/24426/Memes Used as Covert Command and Control Channel https://blog.trendmicro.com/trendlabs-security-intelligence/cybercriminals-use-malicious-memes-that-communicate-with-malware/Shamoon Disk Whipper Malware is Back https://unit42.paloaltonetworks.com/shamoon-3-targets-oil-gas-organization/…
ISC StormCast for Monday, December 17th 2018
Magellan Sqlite Vulnerability https://blade.tencent.com/magellan/index_en.htmlLogitech Options Vulnerability https://bugs.chromium.org/p/project-zero/issues/detail?id=1663Intel NUC BIOS Protection Flaw https://embedi.org/blog/nuclear-explotion/HiddenTear Ransomware Decrypter https://www.bleepingcomputer.com/ransomware/decryptor/how-to-decrypt-hiddentear-ransomware-with-ht-brute-forcer/…
ISC StormCast for Friday, December 14th 2018
Fake E-Mail Bomb Threats https://www.cnn.com/2018/12/13/us/email-bomb-threats/index.htmlPhishing Via Non-Delivery Notices https://isc.sans.edu/forums/diary/Phishing+Attack+Through+NonDelivery+Notification/24412/LamePyre MacOS Malware https://blog.malwarebytes.com/detections/osx-lamepyre/…
Ep. 012 – WordPress worms, Android fraud and Flash fails
In this Naked Security podcast, Anna Brading, Paul Ducklin and Mark Stockley confront the latest cybersecurity threats affecting WordPress, Android and Flash. https://nakedsecurity.sophos.com/massive-botnet-chews-through https://nakedsecurity.sophos.com/android-click-fraud-apps https://nakedsecurity.sophos.com/flash-zero-day-exploit-spotted Music by https://purple-planet.com/…
ISC StormCast for Thursday, December 13th 2018
Yet Another DOSfuscation Sample https://isc.sans.edu/forums/diary/Yet+Another+DOSfuscation+Sample/24408/OpenSSH Backdoors https://www.welivesecurity.com/wp-content/uploads/2018/12/ESET-The_Dark_Side_of_the_ForSSHe.pdfAndroid Malware Bypasses 2FA For Paypal https://www.welivesecurity.com/2018/12/11/android-trojan-steals-money-paypal-accounts-2fa/…
ISC StormCast for Wednesday, December 12th 2018
Microsoft December 2018 Patch Tuesday https://isc.sans.edu/forums/diary/Microsoft+December+2018+Patch+Tuesday/24404/Adobe Patch Tuesday https://helpx.adobe.com/security/products/acrobat/apsb18-41.htmlCertificate Authority Weaknesses https://i.blackhat.com/eu-18/Thu-Dec-6/eu-18-Heftrig-Off-Path-Attacks-Against-PKI.pdf…
ISC StormCast for Tuesday, December 11th 2018
Kubernetes Unauthenticated PoC Exploit for CVE-2018-1002105 https://github.com/evict/poc_CVE-2018-1002105#unauthenticated-pocWebAssembly Brings Buffer Overflows to Browsers https://www.forcepoint.com/blog/security-labs/new-whitepaper-memory-safety-old-vulnerabilities-become-new-webassemblyIncreased Ethereum Miner Attacks https://isc.sans.edu/port.html?port=8545 https://www.zdnet.com/article/hackers-ramp-up-attacks-on-mining-rigs-before-ethereum-price-crashes-into-the-gutterAndroid Click Fraud Apps are Emulating iPhones for Higher Revenue https://www.bleepingcomputer.com/news/security/android-clickfraud-op-impersonates-iphones-to-bump-ad-premiums/…
ISC StormCast for Monday, December 10th 2018
Analyzing Malicious Docker Images https://isc.sans.edu/forums/diary/A+Dive+into+malicious+Docker+Containers/24388/Arrest of Huawei CFO Inspires Advance Fee Scam https://isc.sans.edu/forums/diary/Arrest+of+Huawei+CFO+Inspires+Advance+Fee+Scam/24396/Sextortion Messages Leading to Ransomware https://www.proofpoint.com/us/threat-insight/post/sextortion-side-ransomwareWebKit Exploit Released https://github.com/LinusHenze/WebKit-RegEx-ExploitImplants Found in Russian Banks https://securelist.com/darkvishnya/89169/…
ISC StormCast for Friday, December 7th 2018
Adobe Vulnerability PoC Released https://isc.sans.edu/forums/diary/Is+it+Time+to+Uninstall+Flash+If+you+havent+already/24382/WatchOS Update https://support.apple.com/en-us/HT209343Data Exfiltration During Pentests https://isc.sans.edu/forums/diary/Data+Exfiltration+in+Penetration+Tests/24354/PoC Exploit for Kubernetes Vulnerability https://github.com/evict/poc_CVE-2018-1002105Preston Ackerman: Marketing 2FA https://www.sans.org/reading-room/whitepapers/authentication/swipe-tap-marketing-easier-2fa-increase-adoption-38695…
Ep. 011 – Marriott, Kubernetes and PewDiePie
On the Naked Security podcast this week: Marriott’s huge and scary data breach, a bug in software management software could be a data thief’s goldmine, and a self-righteous “hacker” prints…