Nmap 7.00 is out!, (Sat, Nov 21st)
After 3.5 years, Fyodor has just released Nmap 7. Here are some of the major changes: - 3,200 code commits since Nmap 6 - 171 new NSE scripts - Mature IPv6 support from host discovery, port scanning...
View ArticleAutomatic MIME attachments triage, (Tue, Nov 17th)
Today, we are all receiving a huge amount of spam containing multiple malicious documents (cfr my last diary). If most of them are part of massive spam campaigns and are already well known, others...
View ArticleOpenDNS Research Used to Predict Threat, (Sun, Nov 22nd)
Two researchers (Dhia Mahjoub Thomas Mathew) have recently presented at BruCON on how they have been using DNS to detect patterns that are typical of exploit kits landing domains. Obviously most of us...
View ArticleISC StormCast for Monday, November 23rd 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleBizCN gate actor sends CryptoWall 4.0, (Tue, Nov 24th)
Introduction Earlier this month, the BizCN gate actor switched IP addresses for its gate domains to 46.172.83.0/24. Also, as early as Friday 2015-11-20, this actor started sending CryptoWall 4.0 as one...
View ArticleSuperfish 2.0: Dell Windows Systems Pre-Installed TLS Root CA, (Tue, Nov 24th)
Recently shipped Dell systems have been found to include a special Root CA Certificate and private key, eDellRoot. All systems apparently use the same key and certificate. Using the secret key, anybody...
View ArticleISC StormCast for Tuesday, November 24th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC StormCast for Wednesday, November 25th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleMalicious spam - Subject: RE: Bill, (Wed, Nov 25th)
Introduction Earlier today (Wednesday2015-11-25), one of our readers notified the ISC of malicious spam (malspam) with a Word document designed to infect a Windows computer with malware. I found...
View ArticleKnown “Good” DNS, An Observation, (Thu, Nov 26th)
This has come up enough it seems worth noting for this U.S. Thanks Giving Holiday. The concept of public Domain Name Service (DNS) is not new, but worth discussing both the merits and pitfalls. Weve...
View ArticleISC StormCast for Monday, November 30th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleSHA1 Phase Out Overview, (Mon, Nov 30th)
SHA1 (Secure Hashing Algorithm 1) has been in use for about 20 years. More recently, some weaknesses have been identified in SHA1, and in general, faster computing hardware makes it more and more...
View ArticleISC StormCast for Tuesday, December 1st 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleTracking SSL Certificates, (Tue, Dec 1st)
More and more online services (not only websites)have switched to SSL for a while and, if it increases the end-user security, sometimes its a pain for security peeps who have too perform investigations...
View ArticleCyber Threat Information Sharing Survey Looking for your Feedback -...
----------- Guy Bruneau IPSS Inc. Twitter: GuyBruneau gbruneau at isc dot sans dot edu (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States...
View ArticleMalware SPAM a new run has started. , (Sun, Dec 6th)
Last week Brad mentioned malware being delivered via word documents in SPAM (https://isc.sans.edu/forums/diary/Malicious+spam+Subject+RE+Bill/20417/). Seems like this morning there was another run....
View ArticleISC StormCast for Monday, December 7th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleContinuous Monitoring for Random Strings, (Mon, Dec 7th)
Greeting ISC readers. Mark Baggett here. Back in August I released a tool called freq.py that will help to identify random characters in just about any string by looking at the frequency of occurrence...
View ArticleOffensive Countermeasures against stolen passswords, (Mon, Dec 7th)
A while ago I shared a diary on offensive counter measures against stolen Windows hashes. You can review that diary here. https://isc.sans.edu/forums/diary/Detecting+Mimikatz+Use+On+Your+Network/19311/...
View ArticleISC StormCast for Tuesday, December 8th 2015...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View Article/pic9814888.png)
/fit-in/580x348/filters:format(webp)/english-betterindia/media/media_files/2026/09/17/balaghat-4-2026-09-17-19-01-31.png)
