News

Ever wondered about the journey your favorite makeup product takes before it lands in your makeup bag?In this episode, we're pulling back the curtain on the global and complex supply chain of makeup. From overseas manufacturing to the challenges of quality assurance, customs clearance, and the race against expiration dates, Read More

Send a textIs Doug Pederson's tenure with the Jaguars already in jeopardy just a few weeks into the season? Join us on the Touchdown Jaguars podcast as we dissect the team's ongoing struggles, focusing on their latest heart-wrenching loss to the Houston Texans. We kick off with raw reactions to Read More

Tool Update: mac-robber.py, le-hex-to-ip.py https://isc.sans.edu/diary/Tool%20update%3A%20mac-robber.py%20and%20le-hex-to-ip.py/31310 Ransomware Attacks Expanding to Hybrid Cloud Environments https://www.microsoft.com/en-us/security/blog/2024/09/26/storm-0501-ransomware-attacks-expanding-to-hybrid-cloud-environments/ Update on Recall Security and Privacy Architecture https://blogs.windows.com/windowsexperience/2024/09/27/update-on-recall-security-and-privacy-architecture/ Detecting Ransomware in Windows Event Logs https://blogs.jpcert.or.jp/en/2024/09/windows.html Progress WhatsUp Gold Update https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-September-2024?popup=true&overview Singapore Class https://jbu.me/singapore

Send a textWhat if the world of politics took a cue from medical research? Join us as we sit down with Dr. Michael Koren, a respected cardiologist and research scientist from ENCORE Research Group, to explore this intriguing contrast. Dr. Koren shares firsthand experiences of the collaborative spirit that defines Read More

CUPS Vulnerability https://isc.sans.edu/diary/Patch%20for%20Critical%20CUPS%20vulnerability%3A%20Don%27t%20Panic/31302 PHP Updates https://www.php.net/ChangeLog-8.php#8.1.30 DNS And Big Chinese Firewall https://www.assetnote.io/resources/research/insecurity-through-censorship-vulnerabilities-caused-by-the-great-firewall https://isc.sans.edu/diary/Are+You+Piratebay+thepiratebayorg+Resolving+to+Various+Hosts/19175 HPE Aruba Networking Vulnerabilities https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04712en_us&docLocale=en_US

Patch for Critical CUPS vulnerability: Don't Panic https://isc.sans.edu/diary/Patch%20for%20Critical%20CUPS%20vulnerability%3A%20Don%27t%20Panic/31302

Send a textCan the Jaguars turn their losing streak around with a fresh perspective at the helm? Join James Johnson on a solo episode as he briefly dissected the recent humiliating defeat to the Buffalo Bills and spotlight the desperate need for change in the Jaguars' front office. With the Read More

In this episode of Everything is Logistics, we're discussing an innovative new startup that wants to turn space into the next big shipping lane. Grace Sharkey and Blythe explore Inversion Space, a company planning to drop packages from orbit in under an hour - yeah, you heard that right! They Read More

DNS Reflection Update and Corrupted DNS Requests https://isc.sans.edu/diary/DNS%20Reflection%20Update%20and%20Odd%20Corrupted%20DNS%20Requests/31296 CVE-2024-28987 Solarwinds Web Help Desk Hardcoded Credentials Vulnerability https://www.horizon3.ai/attack-research/cve-2024-28987-solarwinds-web-help-desk-hardcoded-credential-vulnerability-deep-dive/ cve-2024-28987 Watchguard Unauthenticated and Unencrypted SSO Protocol https://www.redteam-pentesting.de/en/advisories/rt-sa-2024-006/ https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00014 Infostealers Overcome Chrome's App Bound Encryption https://securityonline.info/infostealers-overcome-chromes-app-bound-encryption-threatening-user-data-security/

Send us a textWhat can be said about the crap show that was Jaguars vs Bills on MNF? Who is to blame for the lack of talent? The lack of preparedness? This team is BAD and not in a good way. 

In this episode, we sit down with Ryan Dedmon, the dedicated Outreach Director for the 911 Training Institute and a retired police dispatcher from Southern California. Ryan is on a mission to help 911 professionals recover from and grow beyond post-traumatic stress. We investigate the pressing staffing crisis affecting 911 Read More

Send a textWhat if we told you that your liver plays a more critical role in your health than you ever imagined? This episode of MedEvidence promises to uncover the essential functions of the liver, from detoxification to immune support, and explain why maintaining liver health is pivotal. Dr. Nikhil Read More

Exploitation of RAISECOM Gateway Devices CVE-2024-7120 https://isc.sans.edu/diary/Exploitation%20of%20RAISECOM%20Gateway%20Devices%20Vulnerability%20CVE-2024-7120/31292 Cellopoint Vulnerability CVE-2024-9043 https://www.twcert.org.tw/en/cp-139-8103-b0568-2.html Cisco Smart Licensing Vulnerability Details https://starkeblog.com/cve-wednesday/cisco/2024/09/20/cve-wednesday-cve-2024-20439.html Ivanti Virtual Traffic Manager Exploited https://www.cisa.gov/known-exploited-vulnerabilities-catalog GNU Linux Systems Possible Critical Vulnerability https://securityonline.info/severe-unauthenticated-rce-flaw-cvss-9-9-in-gnu-linux-systems-awaiting-full-disclosure/

In this episode of Everything is Logistics, discuss one of the biggest decisions a freight broker can make: becoming a freight agent. But hold on, the next crucial choice? Figuring out which company to join. We’re bringing you a special compilation of conversations with the leadership team at SPI Logistics, Read More

Phishing Links With @ Sign https://isc.sans.edu/diary/Phishing%20links%20with%20%40%20sign%20and%20the%20need%20for%20effective%20security%20awareness%20building/31288 Kaspersky Deletes Itself Installs UltraAV Antivirus Without Warning https://www.bleepingcomputer.com/news/security/kaspersky-deletes-itself-installs-ultraav-antivirus-without-warning/ Microchip ASF tinydhcp Vulnerability https://kb.cert.org/vuls/id/138043

Send a textReady to unravel the mystery behind sky-high drug prices? Join Dr. Michael Koren, a top-tier cardiologist and medical researcher, as he dissects the factors driving the pharmaceutical industry's steep costs. From the firm grip of patent protection to the complex role of pharmacy benefit managers (PBMs) in price Read More

Windows Server Update Services Deprecation https://techcommunity.microsoft.com/t5/windows-it-pro-blog/windows-server-update-services-wsus-deprecation/ba-p/4250436 Windows Server 2025 Hotpatches https://techcommunity.microsoft.com/t5/windows-server-news-and-best/now-in-preview-hotpatch-for-windows-server-2025/ba-p/4248296 Google Suggests Not Using WHOIS for Certificate Validation https://lists.cabforum.org/pipermail/servercert-wg/2024-September/004821.html Versa Director Vulnerability https://security-portal.versa-networks.com/emailbulletins/66e4a8ebda545d61ec2b1ab9 Apache Hugegraph Vulnerability Exploited https://nvd.nist.gov/vuln/detail/CVE-2024-27348

Fake GitHub Site Targeting Developers https://isc.sans.edu/diary/Fake%20GitHub%20Site%20Targeting%20Developers/31282 Ivanti CSA 4.6 Advisory https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963?language=en_US German Police Deanonymizes Tor User https://blog.torproject.org/tor-is-still-safe/ Ever wonder how crooks get the credentials to unlock stolen phones? https://arstechnica.com/security/2024/09/cops-bust-website-crooks-used-to-unlock-1-2-million-stolen-mobile-phones/

Ever wondered how that giant TV made its way to your living room? Spoiler alert: it might've hitched a ride on a barge! In this episode of "Everything is Logistics," Blythe dives into the unsung heroes of shipping: tugboats, barges, and canals. Teaming up with Grace Sharkey, they're exploring the Read More

Python Infostealer Patching Windows Exodus App https://isc.sans.edu/diary/Python%20Infostealer%20Patching%20Windows%20Exodus%20App/31276 Service Now Knoledge Bases Data Exposures https://appomni.com/ao-labs/servicenow-knowledge-bases-data-exposures-uncovered/ Gitlab Patch https://about.gitlab.com/releases/2024/09/17/patch-release-gitlab-17-3-3-released/ Aruba Patch https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US