News

Kyle Taylor is an on-air talent with the Freightwaves Sonar team but after wanting to try his hand in other content areas, he decided to start a separate podcast. Listen in on my chat with Kyle as we discuss show formats, distributing your content to social media, Linkedin annoyances, whether Read More

Welcome to the Valentine's Day Spectacular!!! This weeks intro was a pretty groovy dance song Make U Feel by Tenny Rudolph! Perfect for setting the love bird mood! My friend Nikki Turquia joins me for the show today talking about Valentine's Day, Galentine's Day, the Bachelor, the Super Bowl and Read More

Welcome to the Valentine's Day Spectacular!!! This weeks intro was a pretty groovy dance song Make U Feel by Tenny Rudolph! Perfect for setting the love bird mood! My friend Nikki Turquia joins me for the show today talking about Valentine's Day, Galentine's Day, the Bachelor, the Super Bowl and Read More

Phishing Message to the ISC Handlers E-Mail Distro https://isc.sans.edu/forums/diary/Phishing+message+to+the+ISC+handlers+email+distro/27082/ Google Phishing Statistics https://cloud.google.com/blog/products/workspace/how-gmail-helps-users-avoid-email-scams Adobe Security Updates https://helpx.adobe.com/security/products/acrobat/apsb21-09.html Apple Sudo Patch https://support.apple.com/en-us/HT212177 Number:Jack ISN Generation Weaknesses https://www.forescout.com/company/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/

@MrEricAlmighty is back with another episode on his recurring series "Why you should watch ______ in less than 10 minutes!" and this week, we talk about Beastars. Find out what the show's strengths are, what it's all about, and why you should find the time to watch this anime!🔻[*AFFILIATE LINK Read More

Microsoft Patch Tuesday https://isc.sans.edu/forums/diary/Microsoft+February+2021+Patch+Tuesday/27080/ https://www.theregister.com/2021/02/09/microsoft_patch_tuesday/ Dependency Confusion https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 https://azure.microsoft.com/mediahandler/files/resourcefiles/3-ways-to-mitigate-risk-using-private-package-feeds/3%20Ways%20to%20Mitigate%20Risk%20When%20Using%20Private%20Package%20Feeds%20-%20v1.0.pdf

Tshark and Malware Analysis https://isc.sans.edu/forums/diary/Quickie+tshark+Malware+Analysis/27076/ Barcode Scanner Going Bad https://blog.malwarebytes.com/android/2021/02/barcode-scanner-app-on-google-play-infects-10-million-users-with-one-update/ Morse Code Obfuscation https://www.bleepingcomputer.com/news/security/new-phishing-attack-uses-morse-code-to-hide-malicious-urls/ Firefox Update https://www.mozilla.org/en-US/security/advisories/mfsa2021-06/ Water Treatment Facility Compromised https://www.reuters.com/article/us-usa-cyber-florida/hackers-broke-into-florida-towns-water-treatment-plant-attempted-to-poison-supply-sheriff-says-idUSKBN2A82FV

@MrEricAlmighty joins forces with Kadrae (AKA @kadraeallday on TikTok and Instagram) to discuss where our individual journeys into watching anime started, how that has evolved over the years, and we give you several of our favorite anime series that you should be adding to your watch-list (and some you may Read More

VBA Macro Trying to Alter the Application Menus https://isc.sans.edu/forums/diary/VBA+Macro+Trying+to+Alter+the+Application+Menus/27068/ The Great Suspender Going Malicious https://www.zdnet.com/article/google-kills-the-great-suspender-heres-what-you-should-do-next/ https://github.com/greatsuspender/thegreatsuspender/issues/1263 Google Chrome Zero Day https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html Plex Media SSDP Amplication DDoS https://www.netscout.com/blog/asert/plex-media-ssdp-pmssdp-reflectionamplification-ddos-attack

Abusing Google Chrome Extension Syncing For Data Exfiltration and C&C https://isc.sans.edu/forums/diary/Abusing+Google+Chrome+extension+syncing+for+data+exfiltration+and+CC/27066/ Microsoft Defender ATP Google Chrome False Positive https://twitter.com/itquartz/status/1356940218138509312 Social Engineering Attacks against Security Researchers Used IE 0 day https://enki.co.kr/blog/2021/02/04/ie_0day.html# https://www.bleepingcomputer.com/news/security/hacking-group-also-used-an-ie-zero-day-against-security-researchers/

In Episode 215, Ben and Scott discuss preview features coming to Azure Storage for configuring resource-specific instance access through the service level firewall. After that, it is on to Logic Apps Preview and the new runtime based on Azure Functions. Sponsors Sperry Software – Powerful Outlook Add-ins developed to make your Read More

Young Poddy Brown Jr. Returns! This week my close friends Prince and Vik join me in The Writer's Block! This weeks Takes Two's 8:55 We pay homage to the buss it and silhouette challenge, talk about why i couldnt pod last week and wonder why Drake steals money from poor Read More

Excel Spreadsheets Push SystemBC Malware https://isc.sans.edu/forums/diary/Excel+spreadsheets+push+SystemBC+malware/27060/ SolarWinds Vulnerability https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28389 SolarWinds SANS Lightning Summit https://www.sans.org/webcasts/solarwinds-lightning-summit-118550 SonicWall Patch https://www.sonicwall.com/support/product-notification/urgent-patch-available-for-sma-100-series-10-x-firmware-zero-day-vulnerability-updated-feb-3-2-p-m-cst/210122173415410/ Cisco Advisories https://tools.cisco.com/security/center/publicationListing.x Realtek RTL8195A Wi-Fi Module Vulnerability https://www.vdoo.com/blog/realtek-rtl8195a-vulnerabilities-discovered

New Example of XSL Script Processing aka "Mitre T1220" https://isc.sans.edu/forums/diary/New+Example+of+XSL+Script+Processing+aka+Mitre+T1220/27056/ Camerfirma Certificate Authority Revocation https://groups.google.com/g/mozilla.dev.security.policy/c/jif4zWNgGPw Kobalos HPC Linux Malware https://www.welivesecurity.com/2021/02/02/kobalos-complex-linux-threat-high-performance-computing-infrastructure/ Agent Tesla Overwries Windows AMSI https://threatpost.com/agent-tesla-microsoft-asmi/163581/

@PhilTheFilipino is back with his series titled, "Netflix & Phil"! For these episode, Phil recommends different shows that you'll find on streaming sites like Netflix, Hulu, Amazon Prime, or Disney+, or in this case, Apple TV!  For today's episode, Phil brought back friend of the show Kiré VZ to discuss Read More

MacOS 11.2 Update https://support.apple.com/en-us/HT212147 Objective-See Tools Now Open Sources https://twitter.com/patrickwardle/status/1356149073045143553 iMessage Blastdoor https://googleprojectzero.blogspot.com/2021/01/a-look-at-imessage-in-ios-14.html SonicWall Update https://www.sonicwall.com/support/product-notification/urgent-security-notice-sonicwall-confirms-sma-100-series-10-x-zero-day-vulnerability-feb-1-2-p-m-cst/210122173415410/

The Freightwaves Sales and Marketing Summit was held last week and for the folks that couldn't watch the entire day of content, I'm coming in with some of my biggest takeaways from the day and where you can watch some of my favorite interviews and fireside chats (including the one Read More

After a very divided reaction to the previous season of My Hero Academia, @PhilTheFilipino (anime only) has a lot of questions about what to expect out of Season 5, and @MrEricAlmighty (manga reader) has all the spoiler-free answers.🔻[*AFFILIATE LINK BELOW*] - Depending on your streaming app, links may be distorted Read More

Perl.com Domain Hijacked https://www.ehackingnews.com/2021/01/perlcom-official-site-for-perl.html Spamcop Domain Expired https://www.bleepingcomputer.com/news/security/spamcop-anti-spam-service-suffers-an-outage-after-its-domain-expired/ libgcrypt vulnerability https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html Fingerprinting QUIC https://arxiv.org/pdf/2101.11871.pdf

New Cryptojacking Malware https://unit42.paloaltonetworks.com/pro-ocean-rocke-groups-new-cryptojacking-malware/ SlipStreaming https://www.armis.com/resources/iot-security-blog/nat-slipstreaming-v2-0-new-attack-variant-can-expose-all-internal-network-devices-to-the-internet/ Shadowsocks https://shadowsocks.org/en/index.html