News

0.0.0.0 in Emotet Spambot Traffic https://isc.sans.edu/forums/diary/0000+in+Emotet+Spambot+Traffic/28254/ Linux Patch to Make 0.0.0.0/8 Routable https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96125bf9985a WebKit Patch for Cross Origin Database Name Leak https://trac.webkit.org/changeset/288078/webkit ACER Care Center Privilege Escalation https://aptw.tf/2022/01/20/acer-care-center-privesc.html Imporper Input Validation Vulnerability in Serv-U https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35247

⚑ On this episode, David speaks with 911 Emergency Dispatcher Craig Tinneny and 31 year veteran Senior Operator Catharine D'Vileskis about how dispatchers are often left out of conversations involving First Responders. We discuss:➤ What are some of the sensory challenges of being a dispatcher?➤ How do you remain calm when Read More

Welcome back to our monthly series, The Game Room Where It Happens! Since we've been gaming practically our entire lives, we occasionally discuss different gaming franchises on the podcast. This month, @PhilTheFilipino & @MrEricAlmighty talk about God of War, which just so happens to have recently found it's way on Read More

Phishing E-Mail With an Advertisement https://isc.sans.edu/forums/diary/Phishing+email+withan+advertisement/28250/ Virustotal Credential https://www.safebreach.com/blog/2022/the-perfect-cyber-crime/ Oracle Quarterly Critical Patch Update https://www.oracle.com/security-alerts/cpujan2022.html Box MFA Bypass https://www.varonis.com/blog/box-mfa-bypass-sms

It's a common phrase in sales to say "the riches are in the niches."But what if I told you that the same can be said about marketing?In this episode, I'm going to break down some recent studies that can help you not only reach your target audience on the platforms Read More

Log4Shell Attacks Getting Smarter https://isc.sans.edu/forums/diary/Log4Shell+Attacks+Getting+Smarter/28246/ Microsoft Releases Special Update to Deal with January Update Fail https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-oob-updates-for-january-windows-update-issues/ Cisco Unified Contact Center Management Portal and Unifed Contact Center Domain Manager Privilege Escalation Vulnerablity https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ccmp-priv-esc-JzhTFLm4 Zoho Critical Security Patch Released in Desktop Central and Desktop Central MSP https://pitstop.manageengine.com/portal/en/community/topic/a-critical-security-patch-released-in-desktop-central-and-desktop-central-msp-for-cve-2021-44757-17-1-2022 Google Chrome Restricting Private Network Read More

Learn about the role of the state attorney in local government and in the criminal justice system.

There's little doubt that you missed all the hype around the Netflix animated show called Arcane. You may also have heard us talk about it winning Best TV Show of 2021 during our End of Year Awards. If you haven't seen it though, stop what you are doing, and binge Read More

Use of Alternate Data Streams in Research Scans https://isc.sans.edu/forums/diary/Use+of+Alternate+Data+Streams+in+Research+Scans+for+indexjsp/28240/ Microsoft Resumes Windows Server 2019 Cumulative Updates https://www.bleepingcomputer.com/news/microsoft/microsoft-resumes-rollout-of-january-windows-server-updates/ Safari Index DB Leak https://fingerprintjs.com/blog/indexeddb-api-browser-vulnerability-safari-15/

MSFT Patch Issues https://borncity.com/win/2022/01/12/patchday-windows-8-1-server-2012-r2-updates-11-januar-2022-mgliche-boot-probleme/ https://support.microsoft.com/en-us/topic/january-11-2022-kb5009624-monthly-rollup-23f4910b-6bdd-475c-bb4d-c0e961aff0bc https://support.microsoft.com/en-us/topic/january-11-2022-kb5009595-security-only-update-060870c2-ad08-40e5-b000-a9f6d40c0831 Jenkins Security Advisory 2022-01-1 https://www.jenkins.io/security/advisory/2022-01-12/ Qakbot Configuration Decryptor https://github.com/drole/qakbot-registry-decrypt Android allows Disabling 2G https://www.bleepingcomputer.com/news/security/android-users-can-now-disable-2g-to-block-stingray-attacks/ Weakness in Microsoft Defender https://twitter.com/splinter_code/status/1481073265380581381

In Episode 264, Ben and Scott kick off 2022 with some Azure CLI follow-up from 2021, and then they talk about some new settings available for managing per-user meeting expiration policies. Sponsors Intelligink - We focus on the Microsoft Cloud so you can focus on your business Show Notes Streamline Read More

A Quick CVE-2022-21907 FAQ https://isc.sans.edu/forums/diary/A+Quick+CVE202221907+FAQ+work+in+progress/28234/ Details Released Regarding Patched Sonicwall Vulnerabilities https://www.rapid7.com/blog/post/2022/01/11/cve-2021-20038-42-sonicwall-sma-100-multiple-vulnerabilities-fixed-2/ iOS/iPad OS Fixing HomeKit Vulnerability / Private Relay issues https://support.apple.com/en-us/HT201222 https://www.macrumors.com/2022/01/12/apple-icloud-private-relay-ios-15-2/ Atticking RDP From Inside https://www.cyberark.com/resources/threat-research-blog/attacking-rdp-from-inside Nanocore, Netwire and AsyncRAT Spreading Campaign Uses Public Cloud Infrastructre https://blog.talosintelligence.com/2022/01/nanocore-netwire-and-asyncrat-spreading.html

In this episode, Dr. Stacy Raymond, Bonnie Rumilly, LCSW/EMT and Lt. David Dachinger (Ret.) talk about Institutional Abandonment in emergency services:➤ Why are so many responders feeling abandoned by their institutions and by their superiors?➤ What are the benefits of after action reviews and proper mental health debriefings after difficult Read More

The revival of Dexter: New Blood just finished it's season finale and fans of the popular Showtime series are torn once again on the ending. @PhilTheFilipino & @MrEricAlmighty go into FULL spoilers and talk about the season episode-by-episode. Looking for more Dexter content to binge? Go listen to previous episodes Read More

Microsoft Patch Tuesday - January 2022 https://isc.sans.edu/forums/diary/Microsoft+Patch+Tuesday+January+2022/28230/ Adobe Updates https://helpx.adobe.com/security.html

New MacOS Vulnerability Could Lead to Unauthorized User Data Access https://www.microsoft.com/security/blog/2022/01/10/new-macos-vulnerability-powerdir-could-lead-to-unauthorized-user-data-access Exploiting URL Parsers https://claroty.com/wp-content/uploads/2022/01/Exploiting-URL-Parsing-Confusion.pdf NPM libs "colors" and "faker" sabotaged by developer https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/

I Work Hard On This Show, Help Me Quit My Day Job Here: Patreon - https://www.patreon.com/join/MaybeBobby? Anchor - https://anchor.fm/bobby-brown-jr4/supportWELCOME BACK to The Writer's Block Pod! Thanks for 10k listens/downloads! Check out my StandUp on YouTube: https://youtu.be/UKsdbd-wLXwThis week Bobby & Mikey discuss (1) Bobby releasing Standup on YouTube, (2) Podcasters are dropping Read More

I love talking to brilliant people. And despite what you may have heard about nothing but dancing videos on TikTok, some of the most brilliant people I’ve stumbled upon on that app are educators talking about futuristic concepts. That’s today’s guest in a nutshell because we’ve got one of my favorite Read More

@MrEricAlmighty is back with a remastered episode from his recurring series "Why you should watch ______ in less than 10 minutes!" and this week, we talk about Attack on Titan. Find out what the show's strengths are, what it's all about, and why you should find the time to watch Read More

Extracting Cobalt Strike Beacons from MSBuild Scripts https://isc.sans.edu/forums/diary/Extracting+Cobalt+Strike+Beacons+from+MSBuild+Scripts/28200/ The JNDI Strikes Back: Unauthenticated RCE in H2 Database Console https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/ Trojanized dnSpy app drops malware cocktail https://www.bleepingcomputer.com/news/security/trojanized-dnspy-app-drops-malware-cocktail-on-researchers-devs/ FIN7 Attackers Sending Malicious USB Sticks https://www.bleepingcomputer.com/news/security/fbi-hackers-use-badusb-to-target-defense-firms-with-ransomware/