News

Assemblyline as a Malware Analysis Sandbox https://isc.sans.edu/diary/Assemblyline%20as%20a%20Malware%20Analysis%20Sandbox/29510 GoAnywhere MFT zero-day Exploited https://www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/ Ransomware targeting VMware ESXi https://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/ Jira Service Managment Server and Data Center Advisory CVE-2023-22501 https://confluence.atlassian.com/jira/jira-service-management-server-and-data-center-advisory-cve-2023-22501-1188786458.html OpenSSH Update https://www.openssh.com/releasenotes.html F5 BigIP Vulnerability CVE-2023-22374 https://my.f5.com/manage/s/article/K000130415

Rotating Packet Captures with pfSense https://isc.sans.edu/diary/Rotating%20Packet%20Captures%20with%20pfSense/29500 BEC Group Incorporates Secondary Impersonated Personas https://intelligence.abnormalsecurity.com/blog/firebrick-ostrich-third-party-reconnaissance-attacks MalVirt .Net Virtualization Thrives in Malvertising Attacks https://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks/ Cisco Remote Code Execution with Persistence https://www.trellix.com/en-us/about/newsroom/stories/research/when-pwning-cisco-persistence-is-key-when-pwning-supply-chain-cisco-is-key.html

In Episode 319, Ben and Scott talk through a fun new way to keep up with updates to the Microsoft 365 roadmap using Office 365 Roadmap watch and them discuss a new item on the roadmap – explicit recording consent for Teams Meetings. Next up they get into IPv6 support Read More

In this episode, host Blythe Brumleve invites Kara Brown, CEO of Lead Coverage - a marketing logistics agency - to dive deep into why it's important for marketers to know their math. Connect with Kara Brown on LinkedinCheck out Lead Coverage TIME STAMPS: 00:04:27 Use data to measure ROI.00:06:20 Invest in marketing technology.00:12:37 Read More

Detecting Malicious OneNote Files https://isc.sans.edu/diary/Detecting%20%28Malicious%29%20OneNote%20Files/29494 Microsoft Defender Device Isolation for Linux https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/announcing-device-isolation-support-for-linux/ba-p/3676400 SH1MMER Exploit for Chromebooks https://sh1mmer.me DOMPDF SVG Parsing Vulnerability https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg

We’re joined by 30 year law enforcement veteran and Law Enforcement Life Coach John Kelly, an expert on breaking the cycle of self destruction. John developed a wellness / leadership program called “Sometimes Heroes Need Help” that addresses the personal, professional, financial, physical and mental health of the first responder. Read More

This week we bring you a very special interview with Encanto voice actor, Adassa!Adassa plays Dolores in Disney's blockbuster hit ``ENCANTO`` and is featured on Billboard's chart-topping song ``We Don't Talk About Bruno.`` As a bilingual Afro-Latino voice actress, singer, and songwriter, Adassa's work spans from animation to arena performances Read More

Send a textDr. Michael Koren sits down with his middle school buddy, Mick LaSalle, a well-known film critic, to discuss changes in the direction of medicine & media. Their "Staten Island humor" is evident as they talk about how the media markets medicine from aspirin to covid, what the media Read More

DShield Honeypot Setup with pfSense https://isc.sans.edu/diary/DShield%20Honeypot%20Setup%20with%20pfSense/29490 Threat Actors Abusing Microsoft's "Verified Publisher" Status https://www.proofpoint.com/us/blog/cloud-security/dangerous-consequences-threat-actors-abusing-microsofts-verified-publisher PoS Malware Can Block Contactless Payments https://securelist.com/prilex-modification-now-targeting-contactless-credit-card-transactions/108569/ Detecting Files Exempt from Anti Malware Scans https://github.com/bananabr/TimeException

In this episode of Everything is Logistics, host Blythe Brumleve interviews Mike Mikulik, the vice president of sales and operations at SPI logistics. Mikulik talks about his experience in logistics over the past 20 years and how he moved from the international side of things to domestic transportation. He explains Read More

Decoding DNS over HTTP(s) Requests https://isc.sans.edu/diary/Decoding%20DNS%20over%20HTTP%28s%29%20Requests/29488 Action Needed for GitHub Desktop and Atom Users https://github.blog/2023-01-30-action-needed-for-github-desktop-and-atom-users/ GitHub Checksum Mismatches for .tar.gz Files https://github.com/orgs/community/discussions/45830 Facebook 2FA Bypass https://medium.com/pentesternepal/two-factor-authentication-bypass-on-facebook-3f4ac3ea139c Fortinet Exploit https://wzt.ac.cn/2022/12/15/CVE-2022-42475/ QNAP Vulnerability https://www.qnap.com/en/security-advisory/qsa-23-01

SUPPORT THE PODDERS https://www.buzzsprout.com/1960394/supportBobby recaps 2 comedy shows in St Pete and Tampa Florida, Logan almost gets us canceled by using outdated offensive terms , "work" has Ali feeling VERY good lately? New work husband in the office? Watch the pod to find out! We also talk Gasparilla, how white Read More

We had some AUDIO DIFFICULTIES this pod! Read description!! SUPPORT THE PODDERS https://www.buzzsprout.com/1960394/supportBobby recaps 2 comedy shows in St Pete and Tampa Florida, Logan almost gets us canceled by using outdated offensive terms , "work" has Ali feeling VERY good lately? New work husband in the office? Watch the pod Read More

Because we have consumed A LOT of content over the years, there are many pieces of media that we missed, or just never ended up on our radar. That is what inspired our newest series....Late To The Party! For this episode, we talk about Goodfellas, one of Phil's favorite movies Read More

Microsoft Tips to Patch Your Exchange Servers https://techcommunity.microsoft.com/t5/exchange-team-blog/protect-your-exchange-servers/ba-p/3726001 FCC Treatens to Take Action Against Twilio over Robocalls https://www.fcc.gov/document/fcc-takes-mortgage-scam-robocall-campaign-targeting-homeowners PlugX Variant Spreads via USB https://unit42.paloaltonetworks.com/plugx-variants-in-usbs/ Adware in Google Play Store https://news.drweb.com/show/review/?lng=en&i=14652 Tails 5.9 Update https://tails.boum.org/news/version_5.9/index.de.html

In today's show, we're diving into two big topics: the art of the warm sell and quick website wins. The art of the warm sell is pulled from our weekly appearance on Freightwaves Now and covers how social media can be a digital handshake that pays off at in-person events. Then Read More

The clock struck midnight on the Jacksonville Jaguars in Kansas City after a 27-20 loss in the divisional round. We take some time to analyze where the team came up short, but also look ahead to what offseason moves need to be made. Touchdown Jaguars LinktreeDownload the SeatGeek app & use Read More

Live Linux IR with UAC https://isc.sans.edu/diary/Live%20Linux%20IR%20with%20UAC/29480 Bitwarden Phishing https://community.bitwarden.com/t/phishing-website-bitwardenlogin-com/49704 https://www.reddit.com/r/Bitwarden/comments/10k2aj5/google_search_ads_showing_fake_bitwarden_web/ PY#RATION Attack Campaign Leverages Fernet Encyrption and Websockets https://www.securonix.com/blog/security-advisory-python-based-pyration-attack-campaign/ Skyhigh Security Secure Web Gateway: XSS in Single Sign On Plugin https://www.redteam-pentesting.de/en/advisories/rt-sa-2022-002/-skyhigh-security-secure-web-gateway-cross-site-scripting-in-single-sign-on-plugin Windows Crypto API Vuln PoC https://github.com/akamai/akamai-security-research/tree/main/PoCs/CVE-2022-34689 BIND Patches https://kb.isc.org/docs/cve-2022-3094

In Episode 318, Ben and Scott talk about the Defender debacle from last week and then get into some new Azure previews, including rich application health states with Virtual Machine Scale Sets, the Azure Automation extension for VS Code, and the latest preview of change tracking and inventory management with Read More

SUPPORT THE PODDERS https://www.buzzsprout.com/1960394/supportDon't you hate when your taken friends try to live your single life for you? Bobby joined by Jerry tha Great and Deandre once again for another hilarious episode of TWB. If your outfit has ever looked good at home but not outside your house might have  Read More