Send us a textDr. Michael Bernhardt, a dermatologist and clinical researcher, joins Dr. Erich Schramm to discuss the revolutionary advancements in psoriasis treatment over the past two decades. The doctors discuss how psoriasis is an inflammatory disease more than an autoimmune disease. They discuss what inflammation is, the inflammation pathway Read More
SSH authorized_keys File One of the most common techniques used by many bots is to add rogue keys to the authorized_keys file, implementing an SSH backdoor. Managing these files and detecting unauthorized changes is not hard and should be done if you operate Unix systems. https://isc.sans.edu/diary/Securing%20Your%20SSH%20authorized_keys%20File/31986 REMOTE COMMAND EXECUTION ON Read More
SVG Steganography Steganography is not only limited to pixel-based images but can be used to embed messages into vector-based formats like SVG. https://isc.sans.edu/diary/SVG%20Steganography/31978 Fortinet Vulnerability Details CVE-2025-32756 Horizon3.ai shows how it was able to find the vulnerability in Fortinet s products, and how to possibly exploit this issue. The vulnerability Read More
Resilient Secure Backup Connectivity for SMB/Home Users Establishing resilient access to a home network via a second ISP may lead to unintended backdoors. Secure the access and make sure you have the visibility needed to detect abuse. https://isc.sans.edu/diary/Resilient%20Secure%20Backup%20Connectivity%20for%20SMB%20Home%20Users/31972 BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory An attacker with Read More
New Variant of Crypto Confidence Scam Scammers are offering login credentials for what appears to be high value crypto coin accounts. However, the goal is to trick users into paying for expensive VIP memberships to withdraw the money. https://isc.sans.edu/diary/New%20Variant%20of%20Crypto%20Confidence%20Scam/31968 Malicious Chrome Extensions Malicious Chrome extensions mimick popular services like VPNs Read More
Join us for a compelling episode of Responder Resilience as we speak with Victor Stagnaro, CEO of the National Fallen Firefighters Foundation and the First Responder Center for Excellence. We’ll honor those who made the ultimate sacrifice and discuss the vital mission of NFFF in supporting the mental health and Read More
Send us a textMigraine is a complex brain disease affecting one in five women and one in ten men, with treatments ranging from traditional medications to cutting-edge therapies targeting specific pathways in the brain.• Migraine is not just a severe headache but a primary headache disorder with genetic origins involving Read More
Send us a textDoctor Carolyn Tran joins Neurologist Steven Toenjes to discuss migraines. Migraine is a complex brain disease affecting one in five women and one in ten men, with treatments ranging from traditional medications to cutting-edge therapies targeting specific pathways in the brain. The doctors talk about the causes Read More
Researchers Scanning the Internet A newish RFC, RFC 9511, suggests researchers identify themselves by adding strings to the traffic they send, or by operating web servers on machines from which the scan originates. We do offer lists of researchers and just added three new groups today https://isc.sans.edu/diary/Researchers%20Scanning%20the%20Internet/31964 Cloudy with a Read More
RAT Dropped By Two Layers of AutoIT Code Xavier explains how AutoIT was used to install a remote admin tool (RAT) and how to analyse such a tool https://isc.sans.edu/diary/RAT%20Dropped%20By%20Two%20Layers%20of%20AutoIT%20Code/31960 RVTools compromise confirmed Robware.net, the site behind the popular tool RVTools now confirmed that it was compromised. The site is currently Read More
Send us a textThe FDA has granted full approval to Novavax's COVID-19 vaccine, providing an alternative to mRNA vaccines that works through a different mechanism using proteins and adjuvants. Despite being four years into the pandemic, COVID-19 remains a significant health concern, causing approximately 1 in 200 deaths in the Read More
Send us a textThe FDA has granted full approval to Novavax's COVID-19 vaccine, providing an alternative to mRNA vaccines that works through a different mechanism using proteins and adjuvants. Despite being four years into the pandemic, COVID-19 remains a significant health concern, causing approximately 1 in 200 deaths in the Read More
xorsearch.py: Python Functions Didier s xorsearch tool now supports python functions to filter output https://isc.sans.edu/diary/xorsearch.py%3A%20Python%20Functions/31858 Pwn2Own Berlin 2025 Last weeks Pwn2Own contest in Berlin allowed researchers to demonstrate a number of new exploits with a large focus on privilege escalation and virtual machine escape. https://www.zerodayinitiative.com/blog/2025/5/17/pwn2own-berlin-2025-day-three-results Senior US Officials Impersonated in Read More
Web Scanning SonicWall for CVE-2021-20016 - Update Scans for SonicWall increased by an order of magnitude over the last couple of weeks. Many of the attacks appear to originate from Global Host , a low-cost virtual hosting provider. https://isc.sans.edu/diary/Web%20Scanning%20SonicWall%20for%20CVE-2021-20016%20-%20Update/31952 Google Update Patches Exploited Chrome Flaw Google released an update for Read More
Another day, another phishing campaign abusing google.com open redirects Google s links from it s maps page to hotel listings do suffer from an open redirect vulnerability that is actively exploited to direct users to phishing pages. https://isc.sans.edu/diary/Another%20day%2C%20another%20phishing%20campaign%20abusing%20google.com%20open%20redirects/31950 Adobe Patches Adobe patched 12 different applications. Of particular interest is the Read More
Tune in as John Moon, retired Assistant Chief of Pittsburgh E.M.S. and a former Freedom House Ambulance Service paramedic, shares the powerful story of Freedom House, the first Black-led EMS organization in the U.S. We learn how they revolutionized emergency medical services, providing critical care when it was desperately needed Read More
Send us a textDr. Michael Koren shares exciting news about the revival of an oral COVID vaccine study previously halted by government spending cuts. The non-mRNA vaccine trial represents an important alternative approach that apparently received priority status even under strict budget reviews.• Oral COVID vaccine study in Jacksonville now Read More
Send us a textDr. Michael Koren shares exciting news about the revival of an oral COVID vaccine study previously halted by government spending cuts. The non-mRNA vaccine trial represents an important alternative approach that apparently received priority status even under strict budget reviews.• Oral COVID vaccine study in Jacksonville now Read More
Microsoft Patch Tuesday Microsoft patched 70-78 vulnerabilities (depending on how you count them). Five of these vulnerabilities are already being exploited. In particular, a remote code execution vulnerability in the scripting engine should be taken seriously. It requires the Microsoft Edge browser to run in Internet Explorer mode. https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%3A%20May%202025/31946 Security Read More
Apple Updates Everything Apple patched all of its operating systems. This update ports a patch for a recently exploited vulnerability to older versions of iOS and macOS. https://isc.sans.edu/diary/31942 It Is 2025, And We Are Still Dealing With Default IoT Passwords And Stupid 2013 Router Vulnerabilities Versions of the Mirai botnet Read More
