News

Phishing 101: why depend on one suspicious message subject when you can use many https://isc.sans.edu/forums/diary/Phishing+101+why+depend+on+one+suspicious+message+subject+when+you+can+use+many/27842/ PrintNightmare Fix Breaks Network Printing https://www.bleepingcomputer.com/news/security/new-windows-security-updates-break-network-printing/ Malware Taking Advantage of Linux Subsystem for Windows https://blog.lumen.com/no-longer-just-theory-black-lotus-labs-uncovers-linux-executables-deployed-as-stealth-windows-loaders/ Travis CI Patch https://travis-ci.community/t/security-bulletin/12081 IBM System x IMM Vulnerability https://support.lenovo.com/es/en/product_security/len-66347 Fake iTerm installing Malware on OS X https://objective-see.com/blog/blog_0x66.html

In Episode 247, Ben and Scott take a break from Azure and SharePoint to talk about the gear they use for audio remote calls with Microsoft Teams and Zoom. Sponsors ShareGate - ShareGate's industry-leading products help IT professionals worldwide migrate their business to the Office 365 or SharePoint, automate their Read More

In this episode, we’re talking about the introduction of technology to the freight industry and how making those choices can strengthen, or harm,  your overall business. Guiding us through this tech transition is Sandy Vosk of Advanced Technology Solutions to share his lengthy experience with how businesses can set themselves up Read More

Hancitor Campaign Abusing Microsoft's OneDrive https://isc.sans.edu/forums/diary/Hancitor+campaign+abusing+Microsofts+OneDrive/27838/ "Secret"Agent Exposes Azure Customers To Unauthorized Code Execution https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution

You can catch the podcast aired live every Sunday at 7pm EST at https://www.twitch.tv/remnantgamers/You can also view any other scheduled streams or other events going on at our website https://www.remnantgamers.com/Merch:Want a Remnant Gamer Jersey of your own? Head to https://www.remnantgamers.com/copy-of-events and pick out the style that suits you best!You can Read More

@MrEricAlmighty is back with a new episode from his recurring series "Why you should watch ______ in less than 10 minutes!" and this week, we talk about Mushoku Tensei (aka Jobless Reincarnation). Find out what the show's strengths are, what it's all about, and why you should find the time Read More

Microsoft Patches https://isc.sans.edu/forums/diary/Microsoft+September+2021+Patch+Tuesday/27834/ Adobe Patches https://helpx.adobe.com/security/security-bulletin.html

The question I was asked the most while on the road was, "How do I start?" This question was asked mostly by folks who know marketing is important but don't have a dedicated employee to handle the tasks. And if they try to tackle it, it's usually the thing that's put on Read More

Apple Updates Everything https://support.apple.com/en-us/HT201222 Citizenlab Discloses NSO Exploit Details https://citizenlab.ca/2021/09/forcedentry-nso-group-imessage-zero-click-exploit-captured-in-the-wild/ Google Chrome Update https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html WooCommerce Multi Currency Plugin Vulnerablity https://blog.nintechnet.com/vulnerability-fixed-in-wordpress-woocommerce-multi-currency-plugin/

This was a first, we recorded this podcast episode in the lobby The Comedy Zone in Jacksonville Florida, just minutes before comedian Vincent Bryant closed out a hilarious night. Currently touring on the Young Black and Funny Comedy Jam with Leonard Ouzts, Chris Powell, T Murph & Just Nesh, i Read More

@MrEricAlmighty is back with a remastered episode from his recurring series "Why you should watch ______ in less than 10 minutes!" and this week, we talk about Your Name. Find out what the strengths of the film are, what it's all about, and why you should find the time to Read More

Shipping Microsoft DNS Logs to Elasticsearch https://isc.sans.edu/forums/diary/Shipping+to+Elasticsearch+Microsoft+DNS+Logs/27828/ Exploit Generator for CVE-2021-40444 https://github.com/lockedbyte/CVE-2021-40444 Windows Lock Screen Bypass https://halove23.blogspot.com/2021/09/zdi-21-1053-bypassing-windows-lock.html Citrix Hypervisor Update https://support.citrix.com/article/CTX325319 GitHub Identifies Vulnerable node.js Packages https://github.blog/2021-09-08-github-security-update-vulnerabilities-tar-npmcli-arborist/

ISC/DShield API Updates https://isc.sans.edu/forums/diary/Updates+to+Our+DatafeedsAPI/27824/ Update on Windows MSHTML Vulnerability https://www.bleepingcomputer.com/news/microsoft/windows-mshtml-zero-day-defenses-bypassed-as-new-info-emerges/ GitHub Actions check-spelling community workflow GITHUB_TOKEN leakage https://github.com/justinsteven/advisories/blob/master/2021_github_actions_checkspelling_token_leak_via_advice_symlink.md

In Episode 246, Scott laments about the squirrel living in Scott's roof. Then they talk about how you can now access VS Code from your browser on GitHub.com by just pressing your period key and then discuss all of the updates you should be thinking about as AADConnect and Azure Read More

Protonmail Correction https://protonmail.com/blog/climate-activist-arrest/ https://protonmail.com/privacy-policy "Stolen Images Evidence" Campaign Continues Pushing BazarLoader Malware https://isc.sans.edu/forums/diary/Stolen+Images+Evidence+Campaign+Continues+Pushing+BazarLoader+Malware/27816/ Thyotic Secret Server Critical Update https://docs.thycotic.com/ss/11.0.0/release-notes/ss-rn-11-0-000007.md Zoho Vulnerablity Exploited https://www.manageengine.com/products/self-service-password/kb/how-to-fix-authentication-bypass-vulnerability-in-REST-API.html

In this episode, we’re talking with the founder of REAL Women in Trucking, Desiree Wood. She’s been a driver for years and is shining a light on where the industry needs to improve--and it’s not necessarily in recruiting--but in the retention and training portion of onboarding. She highlights A LOT Read More

@PhilTheFilipino is back with his extraterrestrial series, X-Philes!  For this episode, Phil dives into the U.S. government's report about unidentified flying objects that has been encountered by U.S. military from 2004-2021!Sources:Preliminary Assessment: Unidentified Aerial PhenomenaSpace.com NYMag.com🔻[*AFFILIATE LINKS BELOW*] - Depending on your streaming app, links may be distorted in text. Read More

Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444 ProntonMail/VPN Releasing User's IP Address https://protonmail.com/blog/climate-activist-arrest/ What's App End To End Encryption Questioned (but upheld) https://twitter.com/evacide/status/1435288900587589632?s=20 PRIVATELOG and STASHLOG Malware Store Payload in Common Log File System (CLFS) https://www.fireeye.com/blog/threat-research/2021/09/unknown-actor-using-clfs-log-files-for-stealth.html

In this episode, we’re chatting with former driver and now owner of Innovative Logistics Group Adam Wingfield on the challenges of the perceived “driver shortage”. Adam breaks down how trucking has an image problem and the coolest aspects of the job aren’t being talked about enough. He drops a lot Read More

Confluence Update https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html https://www.jenkins.io/blog/2021/09/04/wiki-attacked/ ProxyShell Update https://news.sophos.com/en-us/2021/09/03/conti-affiliates-use-proxyshell-exchange-exploit-in-ransomware-attacks/ RCE-0-Day for GhostScript 9.50 https://github.com/duc-nt/RCE-0-day-for-GhostScript-9.50 Netgear Switch Auth Bypass https://kb.netgear.com/000063978/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Smart-Switches-PSV-2021-0140-PSV-2021-0144-PSV-2021-0145