News

In this unique episode of our podcast, we bring you an exclusive compilation of stories, insights, and innovations from the front lines of EMS. Join us as we explore the minds and hearts of those who dedicate their lives to saving others, offering a unique glimpse into the challenges and Read More

Linux Trojan - Xorddos with Filename eyshcjdmzg https://isc.sans.edu/diary/Linux%20Trojan%20-%20Xorddos%20with%20Filename%20eyshcjdmzg/30880 AWS S3 Denial of Wallet Amplification Attack https://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1 https://blog.limbus-medtec.com/the-aws-s3-denial-of-wallet-amplification-attack-bc5a97cc041d EU iOS Safari Allows User Tracking https://www.mysk.blog/2024/04/28/safari-tracking/ BentoML Critical Deserialization Vuln CVE-2024-2912 https://nvd.nist.gov/vuln/detail/CVE-2024-2912

Send a textGet ready for an exhilarating journey into the heart of the Jacksonville Jaguars' 2024 draft class with the astute Daniel Griffis by our side. This episode peels back the curtain on the team's strategic decisions, starting with the fascinating potential of wide receiver Brian Thomas Jr. as a Read More

Another Day, Another NAS: Attacks against Zyxel NAS326 Devices CVE-2023-4473, CVE-2023-4474 https://isc.sans.edu/diary/Another%20Day%2C%20Another%20NAS%3A%20Attacks%20against%20Zyxel%20NAS326%20devices%20CVE-2023-4473%2C%20CVE-2023-4474/30884 R-Bitrary Code Execution: Vulnearbility in R's Deserialization https://hiddenlayer.com/research/r-bitrary-code-execution/ Coordinated Docker Hub Attacks using Malicious Repositories https://jfrog.com/blog/attacks-on-docker-with-millions-of-malicious-repositories-spread-malware-and-phishing-scams/ NVMe-oF/TCP Vulnerabilities https://www.cyberark.com/resources/threat-research-blog/your-nvme-had-been-syzed-fuzzing-nvme-of-tcp-driver-for-linux-with-syzkaller

Send a textWhen the search for truth leads us through a labyrinth of facts and fiction, it's the keen eyes of people like Erik Avanier, a seasoned reporter from WJXT News Channel 4, who light the way. Our latest MedEvidence conversation is anything but ordinary, as Dr. Michael Koren, flips Read More

Join Grace Sharkey and Blythe for the latest installment of Freight Friends, where they unpack the current state of the freight market and its economic drivers. Discover cutting-edge business ideas like using drones to streamline warehouse inventory, leveraging digital twin technology for optimizing manufacturing, and implementing AI-driven phone systems for Read More

DLink NAS Exploit Variation https://www.qnap.com/en/security-advisory/qsa-24-09 Muddling Meerkat DNS Abuse https://blogs.infoblox.com/threat-intelligence/a-cunning-operator-muddling-meerkat-and-chinas-great-firewall/ Android TV Data Leakage https://www.youtube.com/watch?v=QiyBXXO8QpA https://www.404media.co/android-tvs-can-expose-user-email-inboxes/ SEC522: SANSFIRE https://www.sans.org/cyber-security-courses/application-security-securing-web-apps-api-microservices/ SEC522 Demo (requires free account): https://www.sans.org/ondemand/get-demo/316

Send a textJoin the conversation where technology meets tenderness in healthcare, as Kevin Geddings hosts an illuminating discussion with Dr. Michael Koren from ENCORE Research Group. We unpack the vital balance between innovative medical tech and the timeless human touch that remains at the heart of patient care. Dr. Koren Read More

Okta warns of increase in credential stuffing https://sec.okta.com/blockanonymizers Fake payment cards used by Police in Japan https://twitter.com/vxunderground/status/1783522097425211887 Phishing Campaigns Targeting USPS https://www.akamai.com/blog/security-research/phishing-usps-malicious-domains-traffic-equal-to-legitimate-traffic Chrome 124 Breaks TLS Handshake https://www.reddit.com/r/sysadmin/comments/1carvpd/chrome_124_breaks_tls_handshake/

Send a textEver wondered how the Jaguars might shake up their game plan with fresh talent from the draft? Get ready to be enlightened, as we, James Johnson and Phil Smith, take you on a lively journey through the team's strategic maneuvers. Straight from the Everbank Stadium Draft Party, we Read More

Does it matter if iptables isn't running on my honeypot? https://isc.sans.edu/forums/diary/Does%20it%20matter%20if%20iptables%20isn't%20running%20on%20my%20honeypot%3F/30862/ Unplugging PlugX: Singholing the PlugX USB worm botnet https://blog.sekoia.io/unplugging-plugx-sinkholing-the-plugx-usb-worm-botnet/ pfSense Updates https://docs.netgate.com/advisories/index.html GitLab Updates https://about.gitlab.com/releases/2024/04/24/patch-release-gitlab-16-11-1-released/ Matthew Alan Vorhees: Prevention Strategies for Modern Living Off the Land Usage https://www.sans.edu/cyber-research/prevention-strategies-modern-living-off-land-usage/

Welcome to Episode 375 of the Microsoft Cloud IT Pro Podcast, where we discuss Microsoft’s Global Secure Access offering. We explain how Global Secure Access brings identity, network, and endpoint access together under one service and how it combines with Defender for Cloud Apps and is built around the capacity Read More

In this episode, Justin Cramer, co-founder of ProShip, and Blythe discuss what it's like managing thousands of parcel shipments daily. He explains his transition from the Navy to logistics software, handling peak seasons across industries, and integrating carrier compliance updates. The episode also explores separating systems of record, the onboarding Read More

In this compelling episode, we reunite three distinguished law enforcement veterans: retired Chief John Monaghan, retired Chief Douglas Wyman, and retired New Hampshire State Police Sergeant James Steinmetz. These three friends, previously featured in the impactful film "Inside the Box," come together once more to delve into profound discussions on Read More

API Rug Pull - The NIST NVD Database and API https://isc.sans.edu/diary/API%20Rug%20Pull%20-%20The%20NIST%20NVD%20Database%20and%20API%20%28Part%204%20of%203%29/30868 Cisco Patches Vulnerabilities and Discovers Arcane Backdoor https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/ Vulnerabilities across keyboard apps reveal keystrokes to network eavesdroppers https://citizenlab.ca/2024/04/vulnerabilities-across-keyboard-apps-reveal-keystrokes-to-network-eavesdroppers/ MySQL2: Dangers of User-Defined Database Connections https://blog.slonser.info/posts/mysql2-attacker-configuration/ Netgear Nighthawk Vulnerabilities https://jvn.jp/en/vu/JVNVU91883072/

Send a textDiscover the untold truth about metformin, intermittent fasting and weight management in this follow-up Q&A session from last week's podcast "New Emerging Therapies for Obesity and Weight Loss".  Dr. Darlene Bartilucci breaks down the misconceptions surrounding metformin, shedding light on its role in improving insulin.  Unravel the complex Read More

Struts2 devmode Still a Problem Ten Years Later https://isc.sans.edu/forums/diary/Struts%20%22devmode%22%3A%20Still%20a%20problem%20ten%20years%20later%3F/30866/ Analyzing Forest Blizard's Custom Post-Compromise Tool for exploiting CVE-2022-38028 https://www.microsoft.com/en-us/security/blog/2024/04/22/analyzing-forest-blizzards-custom-post-compromise-tool-for-exploiting-cve-2022-38028-to-obtain-credentials/ April 2024 Exchange Server Hotfix Update https://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2024-exchange-server-hotfix-updates/ba-p/4120536 CVE-2024-2389: Command Injection Vulnerability in Progress Flowmon https://rhinosecuritylabs.com/research/cve-2024-2389-in-progress-flowmon/ GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining https://decoded.avast.io/janrubin/guptiminer-hijacking-antivirus-updates-for-distributing-backdoors-and-casual-mining/

In this episode, Blythe speaks with Pablo Palafox, CEO of Happyrobot, about using AI-powered voice assistants to automate repetitive tasks in freight operations. They discuss Pablo's background in industrial engineering and computer science, and how Happy Robot's technology can free up logistics teams to focus on higher-value work, improving efficiency Read More

Number of Industrial Devices Accessible From Internet Up 30 Thousand over three years https://isc.sans.edu/diary/It%20appears%20that%20the%20number%20of%20industrial%20devices%20accessible%20from%20the%20internet%20has%20risen%20by%2030%20thousand%20over%20the%20past%20three%20years/30860 Evil XDR: Turning an XDR into an Offensive Tool https://www.darkreading.com/application-security/evil-xdr-researcher-turns-palo-alto-software-into-perfect-malware GitLab Comment Bug https://www.bleepingcomputer.com/news/security/gitlab-affected-by-github-style-cdn-flaw-allowing-malware-hosting/ SEC522 Demo: https://www.sans.org/ondemand/get-demo/316

Send a textJoin the MedEvidence Monday Minute as Dr. Koren sheds light on the potential doping scandal rocking the Olympic swimming community; we go beyond sensationalism to understand the science of trimetazidine and its implications for oxygen metabolism in muscles. But our conversation doesn't stop at the pool's edge; we Read More