security Archives Page 3086 of 27457 | Cyberthreat Blog from Fortify24x7

New tool: convert-ts-bash-history.py, (Fri, Sep 26th)

by Cyberthreat Blog | Sep 26, 2025 | SANS ISC Bulletins | 0 |

In SANS FOR577[1], we talk about timelines on day 5, both filesystem and super-timelines. but...

Webshells Hiding in .well-known Places, (Thu, Sep 25th)

by Cyberthreat Blog | Sep 25, 2025 | SANS ISC Bulletins | 0 |

Ever so often, I see requests for files in .well-known recorded by our honeypots. As an example:...

Exploit Attempts Against Older Hikvision Camera Vulnerability, (Wed, Sep 24th)

by Cyberthreat Blog | Sep 24, 2025 | SANS ISC Bulletins | 0 |

I notice a new URL showing up in our web honeypot logs, which looked a bit interesting:...

[Guest Diary] Distracting the Analyst for Fun and Profit, (Tue, Sep 23rd)

by Cyberthreat Blog | Sep 23, 2025 | SANS ISC Bulletins | 0 |

[This is a Guest Diary by Taylor House, an ISC intern as part of the SANS.edu Bachelor’s...

NCCoE Cybersecurity Connections – Strengthening the Cybersecurity Workforce

by Cyberthreat Blog | Sep 23, 2025 | NIST | 0 |

The NIST National Cybersecurity Center of Excellence (NCCoE) is proud to host a quarterly Cybersecurity Connections event and networking lunch in partnership with the Maryland Department of Commerce and Montgomery County, MD....

VU#780141: Cross-site scripting vulnerability in Lectora course navigation

by Cyberthreat Blog | Sep 22, 2025 | CERT-Vulnerabilities | 0 |

Overview Lectora Desktop versions 21.0–21.3 and Lectora Online versions 7.1.6 and older contained a cross-site scripting (XSS) vulnerability in courses published with Seamless Play Publish (SPP) enabled and Web Accessibility...

NIST Small Business Community of Interest Quarterly Calls

by Cyberthreat Blog | Sep 22, 2025 | NIST | 0 |

NIST’s Small Business Cybersecurity Community of Interest (COI) has been established to convene the public and private sectors to share business insights, expertise, challenges, and perspectives to guide our work and...

Help Wanted: What are these odd reuqests about?, (Sun, Sep 21st)

by Cyberthreat Blog | Sep 21, 2025 | SANS ISC Bulletins | 0 |

Looking at our web honeypot data, I came across an odd new request header I hadn’t seen before: “X-Forwarded-App”. My first guess was that this is yet another issue with a proxy-server bucket brigade spilling...

NIST Small Business Community of Interest Quarterly Calls

by Cyberthreat Blog | Sep 21, 2025 | NIST | 0 |

NIST’s Small Business Cybersecurity Community of Interest (COI) has been established to convene the public and private sectors to share business insights, expertise, challenges, and perspectives to guide our work and...

NIST Small Business Community of Interest Quarterly Calls

by Cyberthreat Blog | Sep 20, 2025 | NIST | 0 |

NIST’s Small Business Cybersecurity Community of Interest (COI) has been established to convene the public and private sectors to share business insights, expertise, challenges, and perspectives to guide our work and...

2087 Lab Metrology Info Hour – Advanced Mass Metrology LAP Problems Training

by Cyberthreat Blog | Sep 18, 2025 | NIST | 0 |

Are you ready to start practicing Advanced Mass weighing designs in your laboratory for customers? Whether you’re currently working through your Advanced Mass Laboratory Auditing Program (LAP) problems or planning to attend the...