News

Microsoft Patch Tuesday https://isc.sans.edu/forums/diary/Microsoft+May+2021+Patch+Tuesday/27408 WiFi Fragmentation Attacks https://www.fragattacks.com

Validating IP Addresses: Why Encoding Matters https://isc.sans.edu/forums/diary/Correctly+Validating+IP+Addresses+Why+encoding+matters+for+input+validation/27404/ Jail Breaking AirTags https://twitter.com/ghidraninja/status/1391148503196438529 Malicious Tor Exit Relay Activities https://nusenu.medium.com/tracking-one-year-of-malicious-tor-exit-relay-activities-part-ii-85c80875c5df

@MrEricAlmighty is back with a remastered episode from his recurring series "Why you should watch ______ in less than 10 minutes!" and this week, we talk about Season 1 of The Promised Neverland. Find out what the show's strengths are, what it's all about, and why you should find the Read More

Who is Probing the Internet for Research Purposes https://isc.sans.edu/forums/diary/Who+is+Probing+the+Internet+for+Research+Purposes/27400/ Cycle Hunter and tsuNAME DDoS Attack https://github.com/SIDN/CycleHunter https://tsuname.io/tech_report.pdf Foxit Reader / Phantom PDF Vulnerabilities https://www.foxitsoftware.com/support/security-bulletins.html?Security+updates+available+in+Foxit+Reader+10.1.4+and+Foxit+PhantomPDF+10.1.42021-05-06 Hypocrit Patches Reviewed By Linux Foundation https://lore.kernel.org/lkml/202104221451.292A6ED4@keescook/

In this best-of clip from Cyberly, we're chatting with Rick Larkin who’s emptied an office to convert it into studio space. Rick owns BCB Transport with more than 300 trucks and what started out as a way to communicate safety updates to their drivers, that new studio space is now Read More

Scans for Exposed Azure Storage Containers https://isc.sans.edu/forums/diary/Exposed+Azure+Storage+Containers/27396/ Qualcomm MSM Vulnerability https://research.checkpoint.com/2021/security-probe-of-qualcomm-msm/ Google to Automatically enroll users in 2SF https://blog.google/technology/safety-security/a-simpler-and-safer-future-without-passwords/ New Cellebrite Vulnerabilities Announced https://www.ehackingnews.com/2021/05/new-vulnerabilities-in-cellebrites.html

In Episode 228, Scott listens in as Ben talks through the process of doing an Exchange 2010 cutover migration after an acquisition and the pitfalls of not taking the time to perform discovery of the current environment. Sponsors Sperry Software – Powerful Outlook Add-ins developed to make your email life easy Read More

This is my favorite episode yet!! Shouts out to all of yall with fine mama's! Your strength as a child wont go unnoticed this episode! Mother's Day is this weekend so in the spirit, Bobbys mom calls in to the show and talks about the time she caught him smoking Read More

This is my favorite episode yet!! Shouts out to all of yall with fine mama's! Your strength as a child wont go unnoticed this episode! Mother's Day is this weekend so in the spirit, Bobbys mom calls in to the show and talks about the time she caught him smoking Read More

May 2021 Forensic Contest https://isc.sans.edu/forums/diary/May+2021+Forensic+Contest/27386/ Windows Defender Bug Fills Windows 10 Boot Drive with thousands of files https://www.bleepingcomputer.com/news/microsoft/windows-defender-bug-fills-windows-10-boot-drive-with-thousands-of-files/ VMWare vRealize Business for Cloud Patch https://kb.vmware.com/s/article/83475 Cisco Updates SD-WAN vManager / HyperFlex HX https://tools.cisco.com/security/center/publicationListing.x?product=Cisco&sort=-day_sir&limit=100#~Vulnerabilities Security and Privacy Risks of Number Recycling at Mobile Carriers in the US https://recyclednumbers.cs.princeton.edu

@PhilTheFilipino is back with his series titled, "Netflix & Phil"! For these episodes, Phil recommends different shows that you'll find on streaming sites like Netflix, Hulu, or in this case, Amazon Prime! For this month's episode, he discusses the highly talked about animated series, Invincible! This show has garnered a Read More

Android Update https://source.android.com/security/bulletin/2021-05-01?hl=en Dell Privilege Escalation Vulnerability https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability https://labs.sentinelone.com/cve-2021-21551-hundreds-of-millions-of-dell-computers-at-risk-due-to-multiple-bios-driver-privilege-escalation-flaws/ Exim Mail Server Vulnerabilities https://www.qualys.com/2021/05/04/21nails/21nails.txt Quick and Dirty Python: masscan https://isc.sans.edu/forums/diary/Quick+and+dirty+Python+masscan/27384/ ICMP Tunnel Backdoor https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/backdoor-at-the-end-of-the-icmp-tunnel/

Apple Patches 2 0-Day Flaws in WebKit affecting iOS/MacOS/WatchOS https://support.apple.com/en-us/HT201222 PoC Exploit for CVE-2021-28482 (Microsoft Exchange) https://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f Yet Another Processor Side-Channel: Micro-Ops Caches http://www.cs.virginia.edu/venkat/papers/isca2021a.pdf Pulse Secure Update https://blog.pulsesecure.net/pulse-connect-secure-patch-availability-sa44784/

@MrEricAlmighty saw Demon Slayer The Movie: Mugen Train in theaters recently with his brother, and our special guest for this episode, Stefan! After breaking anime box office records worldwide, we get together to discuss if it worthy of all the hype by giving our overall thoughts in the form of Read More

Qiling: A true instrumentable binary emulation framework https://isc.sans.edu/forums/diary/Qiling+A+true+instrumentable+binary+emulation+framework/27372/ Python "ipaddress" improper input validation https://sick.codes/sick-2021-014/ EXIF Tool Vulnerabilities https://twitter.com/wcbowling/status/1385803927321415687 ABUS Secvest Internet Connected Alarm Systems https://eye.security/nl/blog/breaking-abus-secvest-internet-connected-alarm-systems-cve-2020-28973 FiveHands Ransomware Installed via SonicWall Flaw https://thehackernews.com/2021/04/hackers-exploit-sonicwall-zero-day-bug.html

The Jacksonville Podcasters Unite is a group that (pre-COVID) used to hold quarterly meetups in the North Florida area to talk about podcasting strategies for everyone from newbies to veterans. Since we haven’t been able to meet up in a while, my co-founder and I, Badr Milligan of The Short Box Read More

From Python to .Net https://isc.sans.edu/forums/diary/From+Python+to+Net/27366/ PHP Composer Vulnerability https://blog.sonarsource.com/php-supply-chain-attack-on-composer Microsoft Identifies Several Integer Overflow Vulnerablities https://us-cert.cisa.gov/ics/advisories/icsa-21-119-04

In Episode 227, Ben listens as Scott vents about his Q-NAP NAS was attacked with ransomware and some things you can think about doing to have a better posture for configuring and securing your NAS. Then they get into the Azure Retail Prices API, a publicly accessible API for accessing Read More

We've been on a guest run for some months, this episode we podded with just the team!! Bobby Josh Mark and Vik sit down and talk about where TWB Productions is heading. Last week we spoke about Bobby's creative struggles and this week I explained how we ended up working Read More

We've been on a guest run for some months, this episode we podded with just the team!! Bobby Josh Mark and Vik sit down and talk about where TWB Productions is heading. Last week we spoke about Bobby's creative struggles and this week I explained how we ended up working Read More