Security Advisories

ISC StormCast for Wednesday, October 26th, 2022

ISC StormCast for Wednesday, October 26th, 2022

Massing Cryptomining Operation via Github Actions https://sysdig.com/blog/massive-cryptomining-operation-github-actions/ Daixin Team Ransomware Targeting Healthcare Providers https://www.ic3.gov/Media...

AliveCor KardiaMobile
ISC StormCast for Tuesday, October 25th, 2022

ISC StormCast for Tuesday, October 25th, 2022

C2 Communications Through Outlook.com https://isc.sans.edu/forums/diary/C2+Communications+Through+outlookcom/29180 Apple Patches Everything October 2022 Edition https://isc.sans.edu/forums/diary/Apple...

ISC StormCast for Monday, October 24th, 2022

ISC StormCast for Monday, October 24th, 2022

Sczriptzzbn Inject Pushes Malware for NetSupport RAT https://isc.sans.edu/forums/diary/sczriptzzbn%20inject%20pushes%20malware%20for%20NetSupport%20RAT/29170/ rtfdump find options https://isc.sans.edu...

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (Update A)

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus (Update A)

This advisory contains mitigations for Cross-site Scripting, Open Redirect, XPath Injection, Session Fixation, Use of a One-way Hash without a Salt, Relative Path Traversal, Improper Verification of C...

ISC StormCast for Friday, October 21st, 2022

ISC StormCast for Friday, October 21st, 2022

Forensic Value of Prefetch https://isc.sans.edu/forums/diary/Forensic%20Value%20of%20Prefetch/29168/ Microsoft TLS Fix https://support.microsoft.com/en-us/topic/october-17-2022-kb5020435-os-builds-190...

ISC StormCast for Thursday, October 20th, 2022

ISC StormCast for Thursday, October 20th, 2022

Are Internet Scanning Services Good or Bad for You? https://isc.sans.edu/forums/diary/Are+Internet+Scanning+Services+Good+or+Bad+for+You/29164 FBI Warns of Student Loan Foregiveness Scams https://www....

ISC StormCast for Wednesday, October 19th, 2022

ISC StormCast for Wednesday, October 19th, 2022

Python Obfuscation for Dummies https://isc.sans.edu/forums/diary/Python%20Obfuscation%20for%20Dummies/29160/ Oracle October 2022 Critical Patch Update https://www.oracle.com/security-alerts/cpuoct2022...

ISC StormCast for Tuesday, October 18th, 2022

ISC StormCast for Tuesday, October 18th, 2022

Fileless Powershell Dropper https://isc.sans.edu/forums/diary/Fileless%20Powershell%20Dropper/29156/ Apache Commons Text Vulnerablity https://www.openwall.com/lists/oss-security/2022/10/13/4 How a Mic...