SANS ISC Bulletins Archives Page 2 of 445 | Cyberthreat Blog from Fortify24x7

Google Paid Ads for Fake Tesla Websites, (Sun, Aug 10th)

by Cyberthreat Blog | Aug 10, 2025 | SANS ISC Bulletins | 0 |

In recent media events, Tesla has demoed progressively more sophisticated versions of its Optimus...

Legacy May Kill, (Sun, Aug 3rd)

by Cyberthreat Blog | Aug 9, 2025 | SANS ISC Bulletins | 0 |

Just saw something that I thought was long gone. The username “pop3user” is showing up in our telnet/ssh logs. I don’t know how long ago it was that I used POP3 to retrieve e-mail from one of my mail servers....

New Feature: Daily Trends Report, (Mon, Aug 4th)

by Cyberthreat Blog | Aug 9, 2025 | SANS ISC Bulletins | 0 |

I implemented a new report today, the “Daily Trends” report. It summarizes noteworthy...

Stealing Machine Keys for fun and profit (or riding the SharePoint wave), (Tue, Aug 5th)

by Cyberthreat Blog | Aug 9, 2025 | SANS ISC Bulletins | 0 |

About 10 days ago exploits for Microsoft SharePoint (CVE-2025-53770, CVE-2025-53771) started being...

Do sextortion scams still work in 2025?, (Wed, Aug 6th)

by Cyberthreat Blog | Aug 9, 2025 | SANS ISC Bulletins | 0 |

Sextortion e-mails have been with us for quite a while, and these days, most security...

Mass Internet Scanning from ASN 43350 [Guest Diary], (Thu, Aug 7th)

by Cyberthreat Blog | Aug 9, 2025 | SANS ISC Bulletins | 0 |

[This is a Guest Diary by Duncan Woosley, an ISC intern as part of the SANS.edu BACS program]...

Zero Trust and Entra ID Conditional Access, (Sun, Jan 19th)

by Cyberthreat Blog | Jan 19, 2025 | SANS ISC Bulletins | 0 |

Microsoft Entra ID (Formerly Azure AD) Conditional Access (CA) policies are the key components to a Zero Trust strategy, as it provides the ability to function as the front door for users and devices. CA policies use attributes,...

More SSH Fun!, (Tue, Dec 24th)

by Cyberthreat Blog | Jan 2, 2025 | SANS ISC Bulletins | 0 |

A few days ago, I wrote a diary[1] about a link file that abused the ssh.exe tool present in modern versions of Microsoft Windows. At the end, I mentioned that I will hunt for more SSH-related files/scripts. Guess what? I...

Compiling Decompyle++ For Windows, (Wed, Dec 25th)

by Cyberthreat Blog | Jan 2, 2025 | SANS ISC Bulletins | 0 |

Occasionaly I decompile Python code, with decompilers written in Python. Recently I discovered...

Capturing Honeypot Data Beyond the Logs, (Thu, Dec 26th)

by Cyberthreat Blog | Jan 2, 2025 | SANS ISC Bulletins | 0 |

By default, DShield Honeypots [1] collect firewall, web and cowrie (telnet/ssh) [2] data and log...

Phishing for Banking Information, (Fri, Dec 27th)

by Cyberthreat Blog | Jan 2, 2025 | SANS ISC Bulletins | 0 |

It is again the time of the year when scammers are asking to verify banking information, whether...

Changes in SSL and TLS support in 2024, (Mon, Dec 30th)

by Cyberthreat Blog | Jan 2, 2025 | SANS ISC Bulletins | 0 |

With the end of the year quickly approaching, it is undoubtedly a good time to take a look at what...

Category: SANS ISC Bulletins