News

Computer viruses are celebrating their 40th birthday (well, 54th, really) https://isc.sans.edu/diary/Computer%20viruses%20are%20celebrating%20their%2040th%20birthday%20%28well%2C%2054th%2C%20really%29/30624 Three million malware-infected smart toothbrushes used in Swiss DDoS attacks https://www.tomshardware.com/networking/three-million-malware-infected-smart-toothbrushes-used-in-swiss-ddos-attacks-botnet-causes-millions-of-euros-in-damages Critical Security Issue Affecting TeamCity On-Premises CVE-2024-23917 https://blog.jetbrains.com/teamcity/2024/02/critical-security-issue-affecting-teamcity-on-premises-cve-2024-23917/ Resume Looters https://www.group-ib.com/blog/resumelooters/ Facebook Advertising Spreads Novel Malware Variant https://www.trustwave.com/hubfs/Web/Library/Documents_pdf/FaceBook_Ad_Spreads_Novel_Malware.pdf

Grace Sharkey and Blythe Brumleve are back with another episode of Freight Friends! This time the duo discusses the ongoing legal cage match between Project44 and FourKites that could set new precedents around corporate libel laws. They also focus on relationship-building over product-pushing to stand out among the 33% rise Read More

Public Information and Email Spam https://isc.sans.edu/diary/Public+Information+and+Email+Spam/30620/ Anydesk Update https://www.bleepingcomputer.com/news/security/anydesk-says-hackers-breached-its-production-servers-reset-passwords/ https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2024/2024-213655-1032.pdf Ivanti POC For CVE-2024-21893 https://attackerkb.com/topics/FGlK1TVnB2/cve-2024-21893/rapid7-analysis Deepfake Exploits https://www.scmp.com/news/hong-kong/law-and-crime/article/3250851/everyone-looked-real-multinational-firms-hong-kong-office-loses-hk200-million-after-scammers-stage https://www.404media.co/inside-the-underground-site-where-ai-neural-networks-churns-out-fake-ids-onlyfake/

the gang is back squashing friendly  beefs and out of control! Bobby gets 'unbanned' from Mothership, finally landed back on the Mic, White Cam won his Roast Battle. Black Kams adhd runs rampant this episode. Thanks for listening! New episode will be out Thursday! @bobbybrowncomedian @_cameronillig @kamsoofunny Support the Pod: https://www.buzzsprout.com/1960394/supportCashApp $bobbycomedian Read More

Send a textDiscover the future of cholesterol management with Dr. Michael Koren, fresh from his breakthrough publication in The Lancet. On our latest MedEvidence Monday Minute, Dr. Koren unveils an innovative oral medication that's set to change the game for patients resistant to traditional statins. Learn how reaching optimal cholesterol Read More

DShield Sensor Log Collection with Elasticsearch https://isc.sans.edu/forums/diary/DShield%20Sensor%20Log%20Collection%20with%20Elasticsearch/30616/ Anydesk Breach https://anydesk.com/en/public-statement Leaky Vessels https://snyk.io/blog/leaky-vessels-docker-runc-container-breakout-vulnerabilities/

What is a Top Level Domain https://isc.sans.edu/forums/diary/What%20is%20a%20%22Top%20Level%20Domain%22%3F/30612/ Updated CISA Ivanti Policy https://www.cisa.gov/news-events/directives/supplemental-direction-v1-ed-24-01-mitigate-ivanti-connect-secure-and-ivanti-policy-secure Cloudflare Publishes Breach Details https://blog.cloudflare.com/thanksgiving-2023-security-incident Vision Pro Update https://support.apple.com/en-us/HT214070

In Episode 369, Ben and Scott explore the new Backup and Archive options for Microsoft 365 and Office 365 workloads – Microsoft 365 Archive and Microsoft 365 Backup. These two features may sound similar, but they have different functionalities. Microsoft 365 Archive provides coverage for SharePoint, while Microsoft 365 Backup Read More

In this episode of Everything is Logistics, host Blythe Brumleve and Walter "Mitch" Mitchell, CEO of Tai Software, discuss logistics innovations that will revolutionize operations and accounting workflows for freight brokers in 2024 and beyond. Mitch highlights automation and AI breakthroughs that slash manual tasks by up to 90% while Read More

In this episode, we delve into the powerful stories behind "Photos From the Front Lines" with photographer, paramedic and disabled veteran combat medic, Derek O. Hanley. Discover the stories that honor but also reveal the brokenness of EMS, and learn about the urgent need for improving responder recruitment, retention and Read More

The Fun and Dangers of Top Level Domains (TLDs) https://isc.sans.edu/diary/The%20Fun%20and%20Dangers%20of%20Top%20Level%20Domains%20%28TLDs%29/30608 Ivanti Releases Patches and New Vulnerabilities https://forums.ivanti.com/s/article/CVE-2024-21888-Privilege-Escalation-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US glibc syslog() vulnerablity https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt modsecurity WAF bypass https://owasp.org/www-project-modsecurity/tab_cves#cve-2024-1019-2024-01-30

Send a textWhen paths converge in the realm of medicine, the result can be nothing short of extraordinary. Discover the serendipitous journey of Dr. Gary Kitay, esteemed orthopedic and hand surgeon, whose early exposure to the nuts and bolts of his father's hardware store set the stage for a career Read More

What did I say to make you stop talking to me https://isc.sans.edu/diary/What%20did%20I%20say%20to%20make%20you%20stop%20talking%20to%20me%3F/30604 Identification of a top-level domain for private use https://itp.cdn.icann.org/en/files/root-system/identification-tld-private-use-24-01-2024-en.pdf Juniper Patches Patching https://supportportal.juniper.net/s/article/2024-01-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-have-been-addressed?language=en_US https://www.theregister.com/2024/01/30/juniper_networks_vulnerabilities/ Chat GPT Leaking Conversations Again https://arstechnica.com/security/2024/01/ars-reader-reports-chatgpt-is-sending-him-conversations-from-unrelated-ai-users/

In this episode of the "Everything Is Logistics" podcast, host Blythe Brumleve discusses quick website wins and improvements for 2024, building on a previous episode from 2023. She emphasizes the importance of owning your website as a key platform you control, unlike social media and using it to build trust Read More

Exploit Flare Up Against Older Atlassian Confluence Vulnerability https://isc.sans.edu/diary/Exploit%20Flare%20Up%20Against%20Older%20Altassian%20Confluence%20Vulnerability/30600 Malicious Python Packages install Infostealer https://www.fortinet.com/blog/threat-research/info-stealing-packages-hidden-in-pypi Linux ICMPv6 Router Adv. RCE https://access.redhat.com/security/cve/cve-2023-6200

Send a textAs we peel back the curtain on clinical trials, Dr. Koren shares how choosing the right candidates is as critical as the research itself. Ethical considerations and the integrity of the studies take center stage. If you've ever pondered the real-world impact of being part of a clinical Read More

A Batch File With Multiple Payloads https://isc.sans.edu/diary/A%20Batch%20File%20With%20Multiple%20Payloads/30592 fritz.box domain used to advertise NFTs https://www.heise.de/news/Verwirrend-Internet-Domain-fritz-box-zeigt-NFT-Galerie-statt-Router-Verwaltung-9610149.html Jenkins CVE-2024-23897 PoC https://github.com/gquere/pwn_jenkins/blob/master/README.md#jenkins-cli-arbitrary-read-cve-2024-23897-applies-to-versions-below-2442-and-lts-24263 Malicious Google Ads Target Chinese Users https://www.malwarebytes.com/blog/threat-intelligence/2024/01/malicious-ads-for-restricted-messaging-applications-target-chinese-users

Fecebook AdsManager Targeted by a Python Infostealer https://isc.sans.edu/diary/Facebook%20AdsManager%20Targeted%20by%20a%20Python%20Infostealer/30590 Privacy Concerns about Apple Push Notifications https://twitter.com/mysk_co/status/1750502700112916504 https://www.youtube.com/watch?v=4ZPTjGG9t7s Inside a Global Phone Spy Tool Monitoring Billions https://www.404media.co/inside-global-phone-spy-tool-patternz-nuviad-real-time-bidding/

Send a textUnlock the truths behind Big Pharma's intentions. Dr. Michael Koren sheds light on a pressing issue: the preference for managing chronic illnesses over seeking cures. Kevin Geddings of WSOS St. Augustine Radio and Dr. Koren delve into the complex world of pharmaceuticals and their innovations, examining the intricate Read More

Manifest is one of the fastest-growing supply chain conferences, more than doubling attendance within just a couple years. In this episode, host Blythe Brumleve interviews Senior Vice President of Partnerships at Manifest/Connective, Dan Reiss, about what has fueled this explosive growth. He explains how Manifest differentiated itself from other logistics Read More