This informational webinar will provide general information regarding the CRDO Broad Agency Announcement (BAA) published on September 24, 2025. It will offer general guidance on preparing White Papers and if invited,...
Read More![[Guest Diary] Comparing Honeypot Passwords with HIBP, (Wed, Oct 1st)](https://b923496.smushcdn.com/923496/wp-content/uploads/2025/09/2025-10-01_figure1-627x303.png?lossy=1&strip=1&webp=1)
[This is a Guest Diary by Draden Barwick, an ISC intern as part of the SANS.edu Bachelor’s...
Read MoreOne of the common infosec jokes is that sometimes, you do not need to “break” an application, but you have to log in. This is often the case for weak default passwords, which are common in IoT devices. However, an...
Read MoreOver the past few months, NIST has been revising and updating Foundational Activities for IoT Product Manufacturers (NIST IR 8259 Revision 1 Initial Public Draft), which describes recommended pre-market and post-market...
Read MoreFISSEA is celebrating 38 years of working together and shaping the future. We have adopted the annual theme of “Collaborative Cybersecurity: Building a Community of Awareness and Action.” Quarterly Forums are designed to provide...
Read MoreIt is typical for Apple to release a “.0.1” update soon after releasing a major new operating system. These updates typically fix various functional issues, but this time, they also fix a security vulnerability. The...
Read MoreWe are all aware of the abysmal state of security appliances, no matter their price tag. Ever so often, we see an increase in attacks against some of these vulnerabilities, trying to mop up systems missed in earlier exploit...
Read MoreOverview A major npm supply chain compromise was disclosed by the software supply chain security company Socket on September 15, 2025. At the time of writing, over 500 packages have been affected, and the number continues to...
Read MoreThe NCCoE is helping to accelerate the adoption of mobile driver’s license (mDL) standards and best practices. To help realize the value of mDLs, the NCCoE is working with stakeholders from across the mDL ecosystem to build a...
Read More
In SANS FOR577[1], we talk about timelines on day 5, both filesystem and super-timelines. but...
Read More
Ever so often, I see requests for files in .well-known recorded by our honeypots. As an example:...
Read More
I notice a new URL showing up in our web honeypot logs, which looked a bit interesting:...
Read More