News

Increase in the number of phishing messages pointing to IPFS and to R2 buckets https://isc.sans.edu/diary/Increase%20in%20the%20number%20of%20phishing%20messages%20pointing%20to%20IPFS%20and%20to%20R2%20buckets/30744 Fortinet New Vulnerabilities https://www.horizon3.ai/attack-research/attack-blogs/fortiwlm-the-almost-story-for-the-forti-forty/ Fortinet Updates https://www.helpnetsecurity.com/2024/03/14/cve-2023-48788-poc/ Arcserve UDP Vulnerability and PoC https://www.tenable.com/security/research/tra-2024-07 Michael Holcomb: Mode Matters: Monitoring PLCs for Detecting Potential ICS/OT Incidents https://www.sans.edu/cyber-research/mode-matters-monitoring-plcs-for-detecting-potential-ics-ot-incidents/

Welcome to Episode 372 of the Microsoft Cloud IT Pro Podcast, where we’ll be discussing more of Microsoft Intune, one of the most powerful tools for managing your organization’s devices, apps, and endpoint security. In this episode, we continue our discussion on the three pillars of Intune – Devices, Apps, Read More

This episode highlights a panel discussion moderated by Blythe, from Manifest: The Future of Supply Chain & Logistics, focusing on the topic of "Multimodal Shipping & International Growth: How is True Visibility Achieved?" Panelists included: Charlie Cunnion, VP, Supply Chain & Customer Service, CMPC Forest Productions NAJim McCullen, CIO, Century Supply Read More

In this special episode, Officer Pete Elste (Crisis Intervention Team Coordinator), Firefighter Pete Nichio, Bonnie Rumilly, LCSW-EMT, and Scott Alvord, LCSW (Crisis Intervention Clinician), come together for Real Talk: Stress vs Serenity. Under the theme of "This too shall pass," they explore strength in vulnerability and recovery from job-related trauma. Read More

Using ChatGPT to Deofuscate Malicious Scripts https://isc.sans.edu/diary/Using%20ChatGPT%20to%20Deobfuscate%20Malicious%20Scripts/30740 Critical Fortinet Vulnerabilities https://fortiguard.fortinet.com/psirt Adobe Security Bulletins https://helpx.adobe.com/security/security-bulletin.html Kubernetes Local Volumes Command Injection Vulnerability https://www.akamai.com/blog/security-research/kubernetes-local-volumes-command-injection-vulnerability-rce-system-privileges

Send a textUnlock the mysteries of acne and its groundbreaking treatments with us, Dr. Michael Koren, alongside distinguished dermatologist Dr. Michael Bernhardt embark on a journey through the multifaceted landscape of acne management where one-size-fits-all is a thing of the past, much like outdated practices in cardiology. We're examining everything Read More

Microsoft Patch Tuesday March 2024 https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20-%20March%202024/30736 Death Knell of NVD https://resilientcyber.substack.com/p/death-knell-of-the-nvd Unrestricted file upload vulnerability in ManageEngine Desktop Central https://www.incibe.es/en/incibe-cert/notices/aviso/unrestricted-file-upload-vulnerability-manageengine-desktop-central Siemens Fire Protection System Updates https://cert-portal.siemens.com/productcert/html/ssa-225840.html

In this episode, Blythe and Kristy Killingbeck, VP of Supply Chain Operations at Ryder, discuss evolving shipper expectations, the push for automation like AGVs, navigating the labor landscape across the U.S., and her perspective on mentorship for women in supply chain leadership roles. Kristy also describes what it's like to Read More

What happens when you accidentially leak your AWS API Keys https://isc.sans.edu/diary/What%20happens%20when%20you%20accidentally%20leak%20your%20AWS%20API%20keys%3F%20%5BGuest%20Diary%5D/30730 How Crypto Imposters are using Calendly to infect Macs with Malware https://cyberguy.com/news/how-crypto-imposters-are-using-calendly-to-infect-macs-with-malware/ https://krebsonsecurity.com/2024/02/calendar-meeting-links-used-to-spread-mac-malware/ Misconfiguration Manager: Overlooked and Overprivileged https://posts.specterops.io/misconfiguration-manager-overlooked-and-overprivileged-70983b8f350d

Attack Wrangles Thousands of Web Users into a Password Cracking Botnet https://arstechnica.com/security/2024/03/attack-wrangles-thousands-of-web-users-into-a-password-cracking-botnet Cisco VPN Client Vuln https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-client-crlf-W43V4G7 Fortinet Vulnerability Exploited https://bishopfox.com/blog/cve-2024-21762-vulnerability-scanner-for-fortigate-firewalls pgAdmin Path Traversal https://www.shielder.com/advisories/pgadmin-path-traversal_leads_to_unsafe_deserialization_and_rce/ Font Vulnerabilities https://www.canva.dev/blog/engineering/fonts-are-still-a-helvetica-of-a-problem/ QNAP Flaws https://securityonline.info/cve-2024-21899-cvss-9-8-critical-qnap-flaw-opens-door-to-hackers/

AWS Deploymnet Risks - Configuration and Credential File Targeting https://isc.sans.edu/diary/%5BGuest%20Diary%5D%20AWS%20Deployment%20Risks%20-%20Configuration%20and%20Credential%20File%20Targeting/30722 Apple Updates https://isc.sans.edu/diary/MacOS%20Patches%20%28and%20Safari%2C%20TVOS%2C%20VisionOS%2C%20WatchOS%29/30726 NSA/CISA Secure Cloud Guides https://media.defense.gov/2024/Mar/07/2003407866/-1/-1/0/CSI-CloudTop10-Identity-Access-Management.PDF https://media.defense.gov/2024/Mar/07/2003407858/-1/-1/0/CSI-CloudTop10-Key-Management.PDF https://media.defense.gov/2024/Mar/07/2003407859/-1/-1/0/CSI-CloudTop10-Managed-Service-Providers.PDF https://media.defense.gov/2024/Mar/07/2003407862/-1/-1/0/CSI-CloudTop10-Secure-Data.PDF https://media.defense.gov/2024/Mar/07/2003407861/-1/-1/0/CSI-CloudTop10-Network-Segmentation.PDF

In this episode, Blythe and Ryan Schreiber, the Chief Growth Officer at Metafora, discuss AI readiness, integrating data sources, developing a strong data strategy, and identifying specific business use cases. Drawing from his diverse background spanning freight brokerage to tech startups, Ryan also offers practical advice for companies looking to Read More

In this episode, we dive into the inspiring journey of Anthony Perez, the Fire Chief of Pasco County, Florida. We explore the challenges and triumphs of transitioning into a new leadership role, the innovative cancer prevention initiatives he has implemented within his department, and the impact of recruitment and retention Read More

Scanning and Abusing the QUIC Protocol https://isc.sans.edu/diary/Scanning%20and%20abusing%20the%20QUIC%20protocol/30720 Google Chrome Update https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop.html Spinning YARN https://www.cadosecurity.com/spinning-yarn-a-new-linux-malware-campaign-targets-docker-apache-hadoop-redis-and-confluence/ Teamcity Exploited https://twitter.com/leak_ix/status/1765460190621581347

Comedian Mat Edgar joins the pod to talk about his days at The Comedy Store as a door guy & parking cars until finally getting his shots to come up in the Los Angeles scene ! Before getting passed as a regular, Mat used to cold open shows on the Read More

Send a textHeart Health Month provides the backdrop for a timely discussion on the latest breakthroughs in treating cardiovascular disease. This is a rebroadcast of Dr. Michael Koren and Dr. Victoria Helow's examination of the sobering reality of heart disease statistics, the impact of statins, and the promising PCSK9 inhibitors Read More

iOS/iPadOS Updates with Zero Day Fixes https://isc.sans.edu/diary/Apple%20Releases%20iOS%20iPadOS%20Updates%20with%20Zero%20Day%20Fixes./30716 Why Your Firewall Will Kill You https://isc.sans.edu/diary/Why+Your+Firewall+Will+Kill+You/30714/ QEMU Tunnel https://securelist.com/network-tunneling-with-qemu/111803/ VMware Vulnerabilities Patched https://www.vmware.com/security/advisories/VMSA-2024-0006.html

Grace Sharkey and Blythe Brumleve are back with another episode of Freight Friends! This time the duo discusses ISO Technologies releasing service awards for carriers, advice for freight brokerages, automating manufacturing, and the supply chain of makeup. LINKS:Grace’s LinktreeSisters of the Road: Inside a cross-country tour spotlighting 40 truckers during Read More

Capturing DShield Packets with a LAN Tap https://isc.sans.edu/diary/Capturing%20DShield%20Packets%20with%20a%20LAN%20Tap%20%5BGuest%20Diary%5D/30708 Additional Critical Security Issues Affecting Teamcity https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ GitHub Push Protection Now On By Default https://github.blog/2024-02-29-keeping-secrets-out-of-public-repositories/ Android Updates https://source.android.com/docs/security/bulletin/2024-03-01 Linksys E-2000 Vulnerablity https://warp-desk-89d.notion.site/Linksys-E-2000-efcd532d8dcf4710a4af13fca131a5b8