News

Beyonce jumps on the Savage remix; Telvin Smith is arrested in Jacksonville, and the Fresh Prince of Bel-Air has their first on-camera reunion. What a time to be alive!Support the showFollow The Hosts on Social Media:Jerry Tha Great - http://bit.ly/Jerrythagreat2Breeze - https://bit.ly/BigBurrNeesy - https://bit.ly/NeesyTDD

Collecting IOCs from IMAP Folder https://isc.sans.edu/forums/diary/Collecting+IOCs+from+IMAP+Folder/26070/ Attack Traffic on TCP Port 9673 https://isc.sans.edu/forums/diary/Attack+traffic+on+TCP+port+9673/26074/ Saltstack Authorization Bypass https://labs.f-secure.com/advisories/saltstack-authorization-bypass Mac Sandbox Escape https://lapcatsoftware.com/articles/sandbox-escape.html

In Episode 175, Ben and Scott talk about using Azure Files as a remote file share in the cloud for client devices and the things you'll want to think about to get everything up and running. Transcript Email Download New Tab - Welcome to Episode 175 of the Microsoft Cloud Read More

Privacy Preserving Protocols to Trace Covid19 Exposure https://isc.sans.edu/forums/diary/Privacy+Preserving+Protocols+to+Trace+Covid19+Exposure/26066/ Google Chrome Update https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_27.html https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security Updated Version of Sysmon https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon https://techcommunity.microsoft.com/t5/sysinternals-blog/sysmon-v11-0-livekd-v5-63-process-explorer-v16-32-coreinfo-v3-5/ba-p/1345153 Shade Ransomware Keys Released https://github.com/shade-team/keys/blob/master/README.md Exploiting the Exploiters https://medium.com/@curtbraz/exploiting-the-exploiters-46fd0d620fd8

@MrEricAlmighty is back with an all new episode on his recurring series "Why you should watch ______ in 10 minutes!", and this week, we talk about Vinland Saga - which you can find streaming currently through Amazon Prime. Find out what the show's strengths are, what it's all about, and Read More

Agent Tesla Delivered by the Same Phishing Campagin for Over a Year https://isc.sans.edu/forums/diary/Agent+Tesla+delivered+by+the+same+phishing+campaign+for+over+a+year/26062/ VMWare ESXi Patch https://www.vmware.com/security/advisories/VMSA-2020-0008.html Microsoft Guidance For Ransomware Response https://www.microsoft.com/security/blog/2020/04/28/ransomware-groups-continue-to-target-healthcare-critical-services-heres-how-to-reduce-risk/ Adobe Security Patches https://helpx.adobe.com/security.html

Powershell Payload Stored in a PSCredential Object https://isc.sans.edu/forums/diary/Powershell+Payload+Stored+in+a+PSCredential+Object/26058/ Microsoft Teams Account Takeover Bug https://www.cyberark.com/threat-research-blog/beware-of-the-gif-account-takeover-vulnerability-in-microsoft-teams/ USB Drives used to Spread Crypto Coin Mining Botnet https://www.welivesecurity.com/2020/04/23/eset-discovery-monero-mining-botnet-disrupted/

Malware Bazaar https://isc.sans.edu/forums/diary/MALWARE+Bazaar/26052/ CIRA Luanches Canadian Shield https://www.cira.ca/newsroom/canadian-shield/cira-launches-canadian-shield-provide-free-privacy-and-security-canadians Covid19 Tracing Protocols https://github.com/DP-3T/documents https://www.pepp-pt.org/content https://www.apple.com/covid19/contacttracing/ Sophos XG Firewall SQL Injection Vulnerablity Exploited https://community.sophos.com/kb/en-us/135412

GCC's New Security Analyzer Finds Flaw in OpenSSL https://developers.redhat.com/blog/2020/03/26/static-analysis-in-gcc-10/ IBM Spectrum Protect Server Stack Based Buffer Overflow https://www.ibm.com/support/pages/node/6195706 Possible Issues With Cummulative Windows Updates https://www.reddit.com/search/?q=KB4549951 Using a GPU as a Radio https://duo.com/labs/research/finding-radio-sidechannels Comparing Red Team Platforms https://redcanary.com/blog/comparing-red-team-platforms/

In Episode 174, Ben and Scott dive into Azure App Service for Linux and Azure Web App for Containers as a hosting option for microservices and more. Transcript Email Download New Tab - [Ben] Welcome to episode 174 of the Microsoft cloud IT Pro podcast recorded live on April, 16, Read More

iOS Mail 0Day https://blog.zecops.com/vulnerabilities/unassisted-ios-attacks-via-mobilemail-maild-in-the-wild/ Zoom 5 To Be Released Shortly Addressing Encryption Issues https://blog.zoom.us/wordpress/2020/04/22/zoom-hits-milestone-on-90-day-security-plan-releases-zoom-5-0/ OpenSSL Fixes DOS Flaw https://www.openssl.org/news/secadv/20200421.txt

@PhilTheFilipino is back for a brand new episode here on Wait For It Wednesday! This week, he is joined by our friend Vanessa to discuss Season 4 of the NBC hit drama, This Is Us. They get into their favorite storylines from the season, who they think is Kevin's fiancé, Read More

SpectX: Log Parser for DFIR https://isc.sans.edu/forums/diary/SpectX+Log+Parser+for+DFIR/26040/ Microsoft Patches Autodesk Library in Office https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200004 Stripe Data Collection https://mtlynch.io/stripe-recording-its-customers/ IBM Data Risk Manager Vulnerabilities https://github.com/pedrib/PoC/blob/master/advisories/IBM/ibm_drm/ibm_drm_rce.md

KPOT AutoIt Script: Analysis https://isc.sans.edu/forums/diary/KPOT+AutoIt+Script+Analysis/26012/ FPGA Vulnerablity https://www.usenix.org/conference/usenixsecurity20/presentation/ender Nagios XI Vulnerability https://exchange.xforce.ibmcloud.com/vulnerabilities/179406

Weaponized RTF Document Generator Mailer in PowerShell https://isc.sans.edu/forums/diary/Weaponized+RTF+Document+Generator+Mailer+in+PowerShell/26030/ Microsoft Fixes Bad Anti-Malware Signatures https://www.microsoft.com/en-us/wdsi/definitions/antimalware-definition-release-notes Sophos Pulls Bad Firmware Update https://community.sophos.com/kb/en-us/135383 Credentials Stolen from Pulse Secure VPN Abused https://www.us-cert.gov/ncas/alerts/aa20-107a Chrome Update https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_15.html

The Wait For It Podcast has reached an exciting milestone - our official 100th episode! We literally could not have gotten here with the support of each & every one of you, so from the bottom of our hearts, thank you. In order to celebrate, we put together a very Read More

Applocker vs. Living off the Land Attacks https://isc.sans.edu/forums/diary/Using+AppLocker+to+Prevent+Living+off+the+Land+Attacks/26032/ Netlink GPON 0-Day https://blog.netlab.360.com/multiple-fiber-routers-are-being-compromised-by-botnets-using-0-day-en/ Windows Security Crashing After Definition Update https://www.askwoody.com/2020/reports-of-windows-security-nee-microsoft-security-essentials-crashing-after-installing-this-mornings-definition-updates/ 700 Malicious Ruby Gems Found https://thehackernews.com/2020/04/rubygem-typosquatting-malware.html vCenter Exploit for CVE-2020-3952 https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/

In Episode 173, Ben and Scott talk about their experiences with online meeting platforms such as Zoom, Microsoft Teams, and Slack as all of us continue to cope with remote work. Transcript Email Download New Tab - Welcome to Episode 173 of the Microsoft Cloud IT Pro podcast recorded live Read More

Hunting Without IOCs https://isc.sans.edu/forums/diary/No+IOCs+No+Problem+Getting+a+Start+Hunting+for+Malicious+Office+Files/26026/ Cloudflare/Online Banking Outages https://twitter.com/eastdakota/status/1250520852354854912 Crypto Currency Stealing Browser Extensions https://medium.com/mycrypto/discovering-fake-browser-extensions-that-target-users-of-ledger-trezor-mew-metamask-and-more-e281a2b80ff9

@MrEricAlmighty and @PhiltheFilipino come together this Wait For It Wednesday to discuss an Oscar Winning film that has recently been made available on Hulu. Despite winning Best Director, Best Original Screenplay, Best Foreign Language Film, AND Best Picture in 2019.....it feels like a lot of people have still not seen Read More