Number Usage in Passwords, (Wed, Jan 17th) Numbers are often used in passwords to add complexity. Passwords submitted to honeypots are also of... 2024-1-17 08:15:53 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu passwords df jq timestamps counts

Scans for Ivanti Connect "Secure" VPN Vulnerability (CVE-2023-46805, CVE-2024-21887), (Tue, Jan 16th) Last week, Volexity published a blog describing two vulnerabilities in Ivanti's Connect "Secure" VP... 2024-1-16 20:53:48 | 阅读: 49 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ivanti attackers watchtowr volexity

ISC Stormcast For Tuesday, January 16th, 2024 https://isc.sans.edu/podcastdetail/8810, (Tue, Jan 16th) 2024-1-16 10:0:2 | 阅读: 21 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers duty

One File, Two Payloads, (Fri, Jan 12th) It has been a while since I discussed obfuscation techniques in malicious scripts. I found a VB scr... 2024-1-12 14:12:18 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu payload modangrebs j4 652 belize

ISC Stormcast For Friday, January 12th, 2024 https://isc.sans.edu/podcastdetail/8808, (Fri, Jan 12th) 2024-1-12 10:0:2 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers feeds isc friday sensor

New YouTube Video Series: Hacker Tools Origin Stories, (Thu, Jan 11th) Published: 2024-01-11Last Updated: 2024-01-11 12:40:31 UTCby Johannes Ullrich (Version: 1)I rem... 2024-1-11 20:40:31 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes ullrich remembered stepped python

ISC Stormcast For Thursday, January 11th, 2024 https://isc.sans.edu/podcastdetail/8806, (Thu, Jan 11th) 2024-1-11 10:0:2 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers rpi 11th

ISC Stormcast For Wednesday, January 10th, 2024 https://isc.sans.edu/podcastdetail/8804, (Wed, Jan 10th) 2024-1-10 10:0:2 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds johannes

Microsoft January 2024 Patch Tuesday, (Wed, Jan 10th) Microsoft today surprised with a light patch Tuesday. We only received 48 patches for Microsoft pro... 2024-1-10 08:38:10 | 阅读: 33 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu windows microsoft remote elevation bypass

Jenkins Brute Force Scans, (Tue, Jan 9th) Our honeypots saw a number of scans for "/j_acegi_security_check" the last two days. This URL has n... 2024-1-10 01:17:36 | 阅读: 17 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu jenkins username honeypot 112233 honeypots

ISC Stormcast For Tuesday, January 9th, 2024 https://isc.sans.edu/podcastdetail/8802, (Tue, Jan 9th) 2024-1-9 10:0:2 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds diaries honeypot

What is that User Agent?, (Mon, Jan 8th) Devices are connecting to different web resources on a regular basis. One method to identify what i... 2024-1-8 22:34:36 | 阅读: 20 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu windows mozilla agents chrome qualystest

ISC Stormcast For Monday, January 8th, 2024 https://isc.sans.edu/podcastdetail/8800, (Mon, Jan 8th) 2024-1-8 10:0:2 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers duty developers

Suspicious Prometei Botnet Activity, (Sun, Jan 7th) On the 31 Dec 2023, after trying multiple username/password combination, actor using IP 194.30.53.6... 2024-1-8 04:23:34 | 阅读: 17 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 7z prometei honeypot isc

Are you sure of your password?, (Sat, Jan 6th) If many people can detect simple phishing emails these days, some attacks are very well crafted and... 2024-1-6 17:18:30 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu attacker phishing passwords submits victim

Netstat, but Better and in PowerShell, (Fri, Jan 5th) I don't know about you, but in Windows I use netstat pretty frequently.  Netstat is a great tool to... 2024-1-5 10:38:12 | 阅读: 28 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 25660 vpnui powershell 26244

ISC Stormcast For Friday, January 5th, 2024 https://isc.sans.edu/podcastdetail/8798, (Fri, Jan 5th) 2024-1-5 10:0:2 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds vandenbrink

Wireshark updates, (Thu, Jan 4th) The Wireshark Foundation has released 3 new versions of its popular network protocol analyzer. They... 2024-1-5 00:31:33 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu relnotes cves clausing jclausing isc

ISC Stormcast For Thursday, January 4th, 2024 https://isc.sans.edu/podcastdetail/8796, (Thu, Jan 4th) 2024-1-4 10:0:2 | 阅读: 9 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers isc feeds duty honeypot

Interesting large and small malspam attachments from 2023, (Wed, Jan 3rd) At the end of a year, or at the beginning of a new one, I like to go over all malicious attachments... 2024-1-3 21:17:51 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu vbe malicious chrw malspam smallest