One of our readers, Dalibor Cerar, sent us an email about an issue impacting Cisco…at this point. While its a hardware issue, the result if it occurs is a self inflicted Denial of Service. Cisco released a notice on February 2 that some of its products had an issue with the Clock Signal component manufactured …
Read more “Cisco – Issue with Clock Signal Component, (Fri, Feb 3rd)”
The tweet originally announcing this issue stated that Windows 2012 and 2016 is vulnerable. I tested it with a fully patched Windows 10, and got an immediate blue screen of death (see below for screenshot). A Proof of Concept (PoC) Exploit causing a blue screen of death on recent Windows version was released on Github …
Read more “Windows SMBv3 Denial of Service Proof of Concept (0 Day Exploit), (Thu, Feb 2nd)”
— Rick Wanner MSISE – rwanner at isc dot sans dot edu – http://namedeplume.blogspot.com/ – Twitter:namedeplume (Protected) (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Sometimes, it isnt the new and sophisticated attacks that keep your honeypots (and with that: you) busy, but things that make you go that works?. Looking over my honeypot today, I had a couple experiences like this. First of all, the old TR-064 NTP Server exploit that beca me big news when the Mirai botnet …
Read more “What Keeps My Honeypot Busy These Days, (Fri, Jan 27th)”
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
I may extend this with a second entry later this week. But as so often, I found myself on a long flight with some time on my hands, and since the IETF just released a new RFC regarding IPv6 atomic fragments, I figured I will play a bit with scapy to kill time. [1] And …
Read more “How to Have Fun With IPv6 Fragments and Scapy, (Mon, Jan 23rd)”
=============== Rob VandenBrink Metafore (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Update: Version 1.0.5 of the Google Chrome WebEx plugin, released this morning, fixes this issue. The Google 0-Day project announced a critical remote code execution vulnerability in Ciscos WebEx plugin for Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code on the victims system by delivering it to the WebEx plugin via …
Read more “Critical Vulnerability in Cisco WebEx Chrome Plugin, (Tue, Jan 24th)”
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.