News

Apache NiFi Attacks https://isc.sans.edu/diary/Your%20Business%20Data%20and%20Machine%20Learning%20at%20Risk%3A%20Attacks%20Against%20Apache%20NiFi/29900 Gigabyte App Center Backdoor; https://eclypsium.com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/ Salesforce Ghost Sites https://www.varonis.com/blog/salesforce-ghost-sites CVE-2023-34152: Shell Command Injection in ImageMagick https://securityonline.info/cve-2023-34152-shell-command-injection-bug-affecting-imagemagick/

On the next episode of Responder Resilience, we’re joined by Tom Rizzo, Investigations Division Commander and author of the #1 Amazon Best-Seller "Copikaze: A Crucible to Manage Mission Impossible". Listen in as Tom shares his principles of self-discipline and how they can positively impact others. Don't miss out on this Read More

Recording live from Vancouver, SPI freight agent Steve Burroughs joins the show to discuss the challenges and perks of working with family. Steve shares how he and his wife started working together and eventually brought on their children and daughter-in-law to work for their company. He admits that working with Read More

Send a textWelcome to MedEvidence: Two Docs Talk Allergies and Asthma Part 3 The Evil Eosinophils.  In this episode, Dr. Michael Koren and Dr. Sunil Joshi explore allergy shots vs. allergy drops for managing allergic rhinitis. For people with allergic rhinitis, allergy shots and allergy drops are two options for Read More

Malspam Pushes ModiLoader Infection for Remocs Rat https://isc.sans.edu/diary/Malspam%20pushes%20ModiLoader%20%28DBatLoader%29%20infection%20for%20Remcos%20RAT/29896 MacOS SIP Bypass https://www.microsoft.com/en-us/security/blog/2023/05/30/new-macos-vulnerability-migraine-could-bypass-system-integrity-protection/ OpenSSL Update https://www.openssl.org/news/secadv/20230530.txt Barracuda Email Security Gateway Applicance Vulnerability Details https://www.barracuda.com/company/legal/esg-vulnerability#:~:text=the%20section%20below.-,Endpoint%20IOCs,-Table%204%20lists Void Rabisu RomCom Backdoor https://www.trendmicro.com/en_us/research/23/e/void-rabisu-s-use-of-romcom-backdoor-shows-a-growing-shift-in-th.html Nextcloud Vulnerability https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mr7q-xf62-fw54 Zyxel NAS Vulnerability https://sternumiot.com/iot-blog/ntp-textbox-vulnerability-in-zyxel-nas326-nas540-and-nas542-devices/ Wait Just An Infosec: Higher Ed https://www.youtube.com/watch?v=ufEuo-096yc&list=PLtgaAEEmVe6B2kqkE9KdgPJdtbqNiaiOn&index=8

Analyzing Office Documents Embedded Inside PowerPoint Files https://isc.sans.edu/diary/Analyzing%20Office%20Documents%20Embedded%20Inside%20PPT%20%28PowerPoint%29%20Files/29894 DocuSign Themed Email Leads to Script-Based Infection https://isc.sans.edu/diary/DocuSign-themed%20email%20leads%20to%20script-based%20infection/29888 File Archiver In The Browser https://mrd0x.com/file-archiver-in-the-browser/ Securing PyPI accounts via Two-Factor Authentication https://blog.pypi.org/posts/2023-05-25-securing-pypi-with-2fa/ Apache Casandra Vulnerabilities https://lists.apache.org/thread/mwd02nrw2go8shg29rnp3o4hgompvkp5 MOXA MXsecurity Vulerabilities https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities

Because we have consumed A LOT of content over the years, there are many pieces of media that we missed, or just never ended up on our radar. That is what inspired our newest series....Late To The Party! For this episode, we talk about Guillermo del Toro's Pinocchio, which won Read More

What's up, play cousins? We're back with a brand new episode! Breeze is Back!Jerry has a Top 5, Breeze has a This, or That, and Neesy has two Love Em' or Leave Em' Letters!Are you a Bad Bi***?Shout out to the #FrequentDelinquents #Podcast #ComedyThank you to everyone who listens to Read More

IR Case/Alert Management https://isc.sans.edu/diary/IR%20Case%20Alert%20Management/29880 Exploit for CVE-2023-2825 GitLab Vulnerability https://github.com/Occamsec/CVE-2023-2825 Expo Framework OAUTH Vulnerability CVE-2023-28131 https://salt.security/blog/a-new-oauth-vulnerability-that-may-impact-hundreds-of-online-services Mitel MiVoice Vulnerability CVE-2023-31457 CVE-2023-32748 https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0004 D-Link Vulnerabilities https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332

Comedian Bryson Brown is funny as hell! He was the feature for Bruce Bruce at the Comedy Zone this may and made some time for the pod! His comedy album Lifestyle Jokes drops May 26th on Apple & Spotify make sure yall check that out! @bobbycomedian_ @_brysonbrown @comedyzonejax Support the show

In Episode 335, Ben and Scott discuss some of the trials and tribulations of Office 365 and Microsoft 365 licensing. Specifically, some intricacies around Microsoft Defender for Office 365. Like what you hear and want to support the show? Check out our membership options. (more…)

In this episode of Everything is Logistics, host Blythe Brumleve talks about venture capital and logistics to Burak Cendek, partner at Auto Tech Ventures. The conversation covers the investment strategy and cultural aspects of VCs, specifically in the freight industry. Cendek shares his journey from growing up in Turkey and Read More

More Data Enrichment for Cowrie Logs https://isc.sans.edu/diary/More%20Data%20Enrichment%20for%20Cowrie%20Logs/29878 Volt Typhoon: Living of the Land https://media.defense.gov/2023/May/24/2003229517/-1/-1/0/CSA_Living_off_the_Land.PDF Android App Breaking Bad https://www.welivesecurity.com/2023/05/23/android-app-breaking-bad-legitimate-screen-recording-file-exfiltration/ Zyxel Updates https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls Baracuda Email Security Gateway Vulnerability https://status.barracuda.com/incidents/34kx82j5n4q9 Gitlab Patch https://about.gitlab.com/releases/2023/05/23/critical-security-release-gitlab-16-0-1-released/

Join us in this episode as we talk with Resilience Expert & Author at Pathfinder Resilience, Dr. Renee Thornton, about navigating adversity in the world of public safety. A U.S. Navy Veteran, Dr. Thornton has worked with numerous law enforcement agencies, focusing on improving individual health and its implications on Read More

@PhilTheFilipino & @MrEricAlmighty have had an interest to explore foreign shows and films more than ever before. So for that reason, we will occasionally highlight international gems, and for this episode, we watched a film called All Quiet On The Western Front. We keep our thoughts spoiler-free for the full Read More

Send a textWelcome to MedEvidence: Two Docs Talk Allergies and Asthma Part 2, Prevention, Testing and Treatment.  In this episode, Dr. Michael Koren and Dr. Sunil Joshi explore the importance of prevention before treatment and the different testing and treatment options available for pollen allergies. They also cover clinical treatments, Read More

Apache Nifi Scans https://isc.sans.edu/diary/Help+us+figure+this+out+Scans+for+Apache+Nifi/29874/ Samsung Updates fix 0-Day https://security.samsungmobile.com/securityUpdate.smsb Lenovo All-In One Bricked by Windows Update https://www.reddit.com/r/Lenovo/comments/136tatm/lenovo_firmware_10055_bricking_thinkcentre_v53024/ Dell VxRail Security Update https://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450 BrutePrint: Expose Smartphone Fingerprint Authentication to Brute-force Attack https://arxiv.org/pdf/2305.10791.pdf

You can catch the podcast aired live every other Monday at 8pm EST at https://www.twitch.tv/remnantgamers/You can also view any other scheduled streams or other events going on at our website https://www.remnantgamers.com/Featured on this Episode:TheDirectEdition: https://www.twitch.tv/thedirectedition/Jonoalmighty: https://www.twitch.tv/jonoalmightyMoose: https://www.twitch.tv/dot_musao/Srv0: https://www.twitch.tv/srv0/

Probes for recent ABUS Security Camera Vulnerability https://isc.sans.edu/diary/Probes%20for%20recent%20ABUS%20Security%20Camera%20Vulnerability%3A%20Attackers%20keep%20an%20eye%20on%20everything./29870 .ZIP Domains Confuse Virustotal https://twitter.com/imohanasundaram/status/1660678184977805316 Synology DSM 6.2 Patch https://www.synology.com/en-global/security/advisory/Synology_SA_22_25 Jenkins Fixes Multiple Plugin Vulnerabilities https://www.jenkins.io/security/advisory/2023-05-16/ PyPi Suspension Lifted https://status.python.org/incidents/qy2t9mjjcc7g Nissan Sylphy Classic Key Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2023-33281

With all the talk about stadium renovations going on, we wanted to list our top five features we absolutely have to see from this project. Make sure to follow us on social media to let us know if there are any additions/changes we missed!Touchdown Jaguars LinktreeDownload the SeatGeek app & Read More