rss.mobi

SANS Internet Storm Center

isc.sans.edu · EN

SANS Internet Storm Center - Cooperative Cyber Security Monitor

Latest posts

  1. ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170, (Mon, Nov 9th)

    · isc.sans.edu

  2. Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th)

    · isc.sans.edu

    Our honeypots use "Cowrie" to collect SSH data. With the emergence of the "sshole" vulnerability last week, we are now seeing an increase in attempts to exploit the vulnerability. Our data is a bit limited in this respect. Our honeypots collect only the first 255 characters of SSH passwords. Longer…

  3. ISC Stormcast For Friday, November 6th, 2026 https://isc.sans.edu/podcastdetail/10168, (Fri, Nov 6th)

    · isc.sans.edu

  4. Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)

    · isc.sans.edu

    This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too boring to write up. This Cisco IOS exploit attempt was a bit more interesting. Still nothing new. I suspect this is for…

  5. ISC Stormcast For Thursday, November 5th, 2026 https://isc.sans.edu/podcastdetail/10166, (Thu, Nov 5th)

    · isc.sans.edu

  6. The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)

    · isc.sans.edu

    One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables. Other vulnerabilities…

  7. ISC Stormcast For Wednesday, November 4th, 2026 https://isc.sans.edu/podcastdetail/10164, (Wed, Nov 4th)

    · isc.sans.edu

  8. ISC Stormcast For Tuesday, November 3rd, 2026 https://isc.sans.edu/podcastdetail/10162, (Tue, Nov 3rd)

    · isc.sans.edu

  9. Mutipath TCP: Use and Detection, (Mon, Nov 2nd)

    · isc.sans.edu

    Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implementation (RFC 8684,  CVE-2026-98432)

  10. ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)

    · isc.sans.edu

  11. OneNote File Extraction, (Sun, Nov 1st)

    · isc.sans.edu

    Recently, I had to extract embedded files from a set of OneNote files (extension .one).

  12. Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)

    · isc.sans.edu

    Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark.

  13. YARA-X 1.22.1 Release, (Sat, Oct 31st)

    · isc.sans.edu

    YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes.

  14. ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th)

    · isc.sans.edu

  15. Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)

    · isc.sans.edu

    Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it's convenient to play with snapshots in your lab. Start a new investigation from a clean snapshot and take some more when you reached a critical step. But, if you…

  16. ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)

    · isc.sans.edu

  17. Yet Another ClickFix Campaign, (Wed, Oct 28th)

    · isc.sans.edu

    Introduction

  18. ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)

    · isc.sans.edu

  19. ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th)

    · isc.sans.edu

  20. Apple Patches for October 2026, (Mon, Oct 26th)

    · isc.sans.edu

    Apple today released patches for 304 vulnerabilties. This number is still in line with prior Apple updates, and comes just about a month after the last apple update.

In the directory since 25 Sept 2026 · last checked 9 Nov 2026 · RSS

Report a problem with this feed