Two disclosures, five days apart, described the same intrusion from opposite ends — 
 one from the victim, one from the party that turned out to be responsible —
This isn&#;x26;#;39;t a new attack, but something I saw "pop-up" in our logs this week: 
Not everything our honeypots detect is an attack. Sometimes it is just "odd traffic", and this is one example: Our "First Seen" list currently includes "http://detectportal.firefox.co 
 m/success.
Wireshark release 4.6.7 fixes 12 vulnerabilities and 16 bugs. 
The stack is a memory region where a program stores temporary data -&#;x26;#;xc2;&#;x26;#;xa0;like local variables and return addresses. Think o
Yesterday, I talked about NAPTR records and how they are related to RCS. But there is another "odd" record that shows up in my DNS logs. This one isn&#;x26;#;39;t new, but
The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure, more than a year after the Trump administration shuttered an existing
Apple released updates for iOS/iPadOS, macOS, and Safari on Monday. There have been no updates for other Apple operating systems (visionOS, watchOS, tvOS). Usually, Apple updates all products at the s
YARA-X&#;x26;#;39;s 1.18.0 release brings 3 improvements and 2 bugfixes. 
Webshells have been popular for a long time. We already covered this topic across multiple diaries[ 1 ][ 2 ]. I spent some time to track them[ 3 ] and slighly paid less a
I detected an interesting phishing email this morning. It targets a major Belgian bank: 
Yesterday, a reader reported to us a malicious ZIP archive (SHA256: a0104921a2d37ab87482ac9a9f5c3713479c118846c3e999178e75b81620c094[ 1 ]). Once unzipped, it contains a VHDX file that disclo
I like it when a fellow handler posts a diary entry about images with malicious content. Last one is Xavier: " The Evil MSI Background is Back! ". 
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
