News

Binary IPv6 Address Conversion https://isc.sans.edu/diary/Binary%20IPv6%20Addresses/30290 Wireshark Updates https://www.wireshark.org/ Improved GitHub Secret Scanning https://github.blog/2023-10-04-introducing-secret-scanning-validity-checks-for-major-cloud-services/ Prerooted Android Devices https://arstechnica.com/security/2023/10/thousands-of-android-devices-come-with-unkillable-backdoor-preinstalled/ curl update https://github.com/curl/curl/discussions/12026

New tool: le-hex-to-ip.py https://isc.sans.edu/diary/New%20tool%3A%20le-hex-to-ip.py/30284 Cisco Emergency Responder Static Credentials Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cer-priv-esc-B9t3hqk9 Loony Tunables PoC CVE-2023-4911 https://haxx.in/files/gnu-acme.py Malicious Python Packages https://checkmarx.com/blog/the-evolutionary-tale-of-a-persistent-python-threat/ Supermicro BMC Vulnerability https://binarly.io/posts/Binarly_REsearch_Uncovers_Major_Vulnerabilities_in_Supermicro_BMCs/index.html

Danika and Shay-La discuss Danika's trip to London!  

In Episode 354, Ben and Scott catch up on news and the latest announcements starting with Cisco and Splunk merging. Then they discuss the Surface and AI event where we saw the latest Surface hardware and learned about the straight to GA release of Microsoft 365 and Windows Copilot. Like Read More

This episode features a conversation with Blythe Brumleve,  Bill Priestley, and Kevin Hill about marketing and sales strategies for freight companies to survive 2023 and thrive in 2024. They discuss approaches like focusing on customer needs, picking the right marketing platforms, embracing challenges, and monitoring sales activity and attitude. Listen Read More

We welcome Jawad Mills into this conversation about the “Misinformation Age“ we are currently living in.  As we seek the truth, mis- and dis-information is in several ways enabled by freedom of speech. It’s important understand how certain groups, like news organizations and politicians, use it. Cover ups are really difficult to swipe Read More

Normal Connections https://isc.sans.edu/diary/Whats+Normal+Connection+Sizes/30278/ Apple Patches https://isc.sans.edu/diary/Apple%20fixes%20vulnerabilities%20in%20iOS%20and%20iPadOS./30280 Looney Tunables Linux Privilege Escalation https://blog.qualys.com/vulnerabilities-threat-research/2023/10/03/cve-2023-4911-looney-tunables-local-privilege-escalation-in-the-glibcs-ld-so Atlasian Confluence Server Vulnerability https://jira.atlassian.com/browse/CONFSERVER-92475

What up! This week Jerry is back, and he's getting some things off of his chest! Support the showFollow The Hosts on Social Media:Jerry Tha Great - http://bit.ly/Jerrythagreat2Breeze - https://bit.ly/BigBurrNeesy - https://bit.ly/NeesyTDD

Send a textWhat is Lyme disease, how to we treat it and what are the strides being made toward its prevention?  Dr. Michael Koren, a renowned cardiologist and medical researcher, explores the mystery of Lyme disease—a tick-borne illness first discovered in the 70s and 80s. He sheds light on its Read More

Discover the groundbreaking methods that are transforming the mental health landscape for America’s men and women who put a uniform on for their mission. This episode welcomes Dr. Pamela Arnell and Nick Davis from 22Zero, whose innovative approach to trauma therapy is changing lives without forcing veterans and first responders Read More

This week, we're breaking down the enchanting novelty of our favorite childhood characters adding a dash of nostalgia to the game, exploring the pros and cons of this whimsical approach. We also speculate on potential Disney-themed future broadcasts. It's a playful discussion that will make you see football in a Read More

Send a textThis week, we're breaking down the enchanting novelty of our favorite childhood characters adding a dash of nostalgia to the game, exploring the pros and cons of this whimsical approach. We also speculate on potential Disney-themed future broadcasts. It's a playful discussion that will make you see football Read More

Are Local LLMs Useful in Incident Response? https://isc.sans.edu/diary/Are%20Local%20LLMs%20Useful%20in%20Incident%20Response%3F/30274 Pytorch Vulnerability https://github.com/advisories/GHSA-4mqg-h5jf-j9m7 BING Reads Captchas https://twitter.com/literallydenis/status/1708283962399846459 Evilproxy vs. Microsoft 365 https://www.menlosecurity.com/blog/evilproxy-phishing-attack-strikes-indeed/

This episode discusses the global rice supply chain and India's ban on non-basmati rice exports. Pawan Joshi of e2open provides insights into how this ban affects over 40% of the global rice trade and how the market is reacting. He explains the complexities of the rice supply chain and emphasizes Read More

Friendly Reminder: ZIP Metadata is Not Encrypted https://isc.sans.edu/diary/Friendly%20Reminder%3A%20ZIP%20Metadata%20is%20Not%20Encrypted/30268 EXIM New Version Released https://www.exim.org/static/doc/security/CVE-2023-zdi.txt Mail GPU Kernel Driver Allows Improper GPU Memory Processing Operations https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities Bing AI Serves Malicous Ads https://www.malwarebytes.com/blog/threat-intelligence/2023/09/malicious-ad-served-inside-bing-ai-chatbot Google Announces Robots.txt Ad-Restrictions https://developers.google.com/search/docs/crawling-indexing/overview-google-crawlers#adsbot-mobile-web-android

Send a textEver wondered about the secrets to a long, healthy life? Join us on this enlightening episode of the MedEvidence Monday Minute Radio Show, where we unpack the mysteries of longevity. Dr. Koren breaks down the four crucial elements to living a fulfilling life, revealing the importance of a Read More

Analyzing MIME Files: a Quick Tip https://isc.sans.edu/diary/Analyzing%20MIME%20Files%3A%20a%20Quick%20Tip/30266 Infostealers Looking for Password Files https://isc.sans.edu/diary/Are+You+Still+Storing+Passwords+In+Plain+Text+Files/30262/ Simple Netcat Backdoor https://isc.sans.edu/diary/Simple+Netcat+Backdoor+in+Python+Script/30264/ EXIM Response to the ZDI Release https://exim.org/static/doc/security/CVE-2023-zdi.txt Exploit for WS_FTP Vulnerability https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044

What's going on, Delinquents?This week the entire crew is back and we're talking about body counts!Shout out to the Play Cousins #Florida #Podcast #ComedyThank you to everyone who listens to us weekly, old cousins and new delinquents!Submit a Love Em' or Leave Em' Letter: https://bit.ly/LOLTDD2Join the Play Cousins Only Chat: Read More

IPv4 Addresses in Little Endian Decimal Format https://isc.sans.edu/diary/IPv4%20Addresses%20in%20Little%20Endian%20Decimal%20Format/30256 Chrome Update fixes 0-day Vulnerability https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html Unpatched EXIM Vulnerabilities https://www.zerodayinitiative.com/advisories/ZDI-23-1469/ WS_FTP Vulnerabilities https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023

In Episode 353, Scott talks to Ben about how he’s using Portainer for container management on his home network and some tips and tricks for managing apps on your Mac (sorry Windows users). Then they pivot to Microsoft’s largest conference of the year – Microsoft Ignite – coming Nov 14-17, Read More