Widgetized Section
Go to Admin » Appearance » Widgets » and move Gabfire Widget: Social into that MastheadOverlay zone
ISC StormCast for Wednesday, September 26th 2018
Firefox Haveibeenpwned Monitor https://blog.mozilla.org/blog/2018/09/25/introducing-firefox-monitor-helping-people-take-control-after-a-data-breach/Chrome 69 Privacy Issues https://www.bleepingcomputer.com/news/google/chrome-69-keeps-googles-cookies-after-you-clear-browser-data/Cisco FragmentSmack Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragmentMicorsoft Bitlocker Turns itself Off During Updates https://social.technet.microsoft.com/Forums/en-US/0e48536f-40ff-4046-bd08-ed4a39b4840f/bitlocker-automatically-suspending-during-updates?forum=win10itprosecurity…
ISC StormCast for Tuesday, September 25th 2018
More Sextortion Emails https://isc.sans.edu/forums/diary/Sextortion+Spam+and+the+Infinite+Monkey+Theorem/24136/MacOS 10.14 (Mojahve) Security Fixes https://support.apple.com/en-us/HT209139Mojave Privacy Protection Bypass https://vimeo.com/291491984Cloudflare Supporting Encrypted SNI https://blog.cloudflare.com/esni/…
ISC StormCast for Monday, September 24th 2018
Odd DNS Requests from Firewalls https://isc.sans.edu/forums/diary/Suspicious+DNS+Requests+Issued+by+a+Firewall/24128/Securing API Connections https://isc.sans.edu/forums/diary/The+danger+of+sending+information+for+API+consumption+without+adequate+security+measures/24130/Microsoft JET Database 0day https://www.zerodayinitiative.com/advisories/ZDI-18-1075/Western Digital Releases Patch for MyCloud Drives https://support.wdc.com/knowledgebase/answer.aspx?ID=25952&sJob Offers With Malware Attachment https://www.bleepingcomputer.com/news/security/malware-disguised-as-job-offers-distributed-on-freelance-sites/…
ISC StormCast for Friday, September 21st 2018
Hunting for Suspicious Processes with OSSEC https://isc.sans.edu/forums/diary/Hunting+for+Suspicious+Processes+with+OSSEC/24122/NSSLabs Sues Crowdstrike, Symantec, ESET https://www.nsslabs.com/blog/company/advancing-transparency-and-accountability-in-the-cybersecurity-industry/Bitcoin Core Vulnerability https://motherboard.vice.com/amp/en_us/article/qvakp3/a-major-bug-in-bitcoin-software-could-have-crashed-the-currency?__twitter_impression=trueWebAuthn Standard https://paragonie.com/blog/2018/08/security-concerns-surrounding-webauthn-don-t-implement-ecdaa-yet https://fidoalliance.org/…
ISC StormCast for Thursday, September 20th 2018
Adobe Releases Special Patch for Acrobat and Reader https://helpx.adobe.com/security/products/acrobat/apsb18-34.htmlAkamai State of the Internet Report https://www.akamai.com/us/en/about/our-thinking/state-of-the-internet-report/global-state-of-the-internet-security-ddos-attack-reports.jspPeekabo DVR Vulnerability https://www.tenable.com/blog/tenable-research-advisory-peekaboo-critical-vulnerability-in-nuuo-network-video-recorder…
ISC StormCast for Wednesday, September 19th 2018
Certificate Transparency Tools https://isc.sans.edu/forums/diary/Using+Certificate+Transparency+as+an+Attack+Defense+Tool/24114/Kodi Malicious Add-Ons https://www.welivesecurity.com/2018/09/13/kodi-add-ons-launch-cryptomining-campaign/Cloudflare Making DNSSEC Adoption Easier https://blog.cloudflare.com/automatically-provision-and-maintain-dnssec/Western Digital MyCloud Unauthenticated Admin Access https://www.securify.nl/advisory/SFY20180102/authentication-bypass-vulnerability-in-western-digital-my-cloud-allows-escalation-to-admin-privileges.html…
ISC StormCast for Tuesday, September 18th 2018
Analyzing Office Docs https://isc.sans.edu/forums/diary/Dissecting+Malicious+MS+Office+Docs/24108/Apple Updates Everything but macOS https://support.apple.com/en-us/HT209106FBot Botnet https://blog.netlab.360.com/threat-alert-a-new-worm-fbot-cleaning-adbminer-is-using-a-blockchain-based-dns-en/Related STI Paper: Botnet Reciliency via Private Blockchain (Jonathan Sweeny)https://www.sans.org/reading-room/whitepapers/covert/botnet-resiliency-private-blockchains-38050…
ISC StormCast for Monday, September 17th 2018
Reversing Visual Basic Shortcuts https://isc.sans.edu/forums/diary/2020+malware+vision/24104/Not So Random User Agent https://isc.sans.edu/forums/diary/User+Agent+String+uatoolsrandom/24102/Safari DoS https://gist.github.com/pwnsdx/ce64de2760996a6c432f06d612e33aeaWebroot SecureAnywhere macOS Vulnerability https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2018-16962–Webroot-SecureAnywhere-macOS-Kernel-Level-Memory-Corruption/Intel Patches Management Engine Encryption Vulnerability http://blog.ptsecurity.com/2018/09/intel-me-encryption-vulnerability.html…
ISC StormCast for Friday, September 14th 2018
Malicious MHT Files https://isc.sans.edu/forums/diary/Malware+Delivered+Through+MHT+Files/24096/Improved Coldboot Attack https://blog.f-secure.com/cold-boot-attacks/SAP Patches https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993…
ISC StormCast for Thursday, September 13th 2018
So What is Going on With IPv4 Fragments these Days? https://isc.sans.edu/forums/diary/So+What+is+Going+on+With+IPv4+Fragments+these+Days/24092/Magacart Javascript Injection Attacks https://www.bleepingcomputer.com/news/security/feedify-service-compromised-with-magecart-information-stealing-script/Bypassing CSP using Polyglot JPEGs https://portswigger.net/blog/bypassing-csp-using-polyglot-jpegs…