vulnerability Archives | Cyberthreat Blog from Fortify24x7

X-Request-Purpose: Identifying “research” and bug bounty related scans?, (Thu, Oct 30th)

by Cyberthreat Blog | Oct 30, 2025 | SANS ISC Bulletins | 0 |

This week, I noticed some new HTTP request headers that I had not seen before: X-Request-Purpose:...

How to collect memory-only filesystems on Linux systems, (Wed, Oct 29th)

by Cyberthreat Blog | Oct 28, 2025 | SANS ISC Bulletins | 0 |

I’ve been doing Unix/Linux IR and Forensics for a long time. I logged into a Unix system for...

VU#517845: Authenticated SMTP users may spoof other identities due to ambiguous “From” header interpretation

by Cyberthreat Blog | Oct 28, 2025 | CERT-Vulnerabilities | 0 |

Overview Email message header syntax can be exploited to bypass authentication protocols such as SPF, DKIM, and DMARC. These exploits enable attackers to deliver spoofed emails that appear to originate from trusted sources....

A phishing with invisible characters in the subject line, (Tue, Oct 28th)

by Cyberthreat Blog | Oct 28, 2025 | SANS ISC Bulletins | 0 |

While reviewing malicious messages that were delivered to our handler inbox over the past few...

Bytes over DNS, (Mon, Oct 27th)

by Cyberthreat Blog | Oct 27, 2025 | SANS ISC Bulletins | 0 |

I was intrigued when Johannes talked about malware that uses BASE64 over DNS to communicate. Take...

Kaitai Struct WebIDE, (Sun, Oct 26th)

by Cyberthreat Blog | Oct 26, 2025 | SANS ISC Bulletins | 0 |

When I have a binary file to analyze, I often use tools like 010 Editor or format-bytes.py (a tool...

Phishing Cloud Account for Information, (Thu, Oct 23rd)

by Cyberthreat Blog | Oct 23, 2025 | SANS ISC Bulletins | 0 |

Over the past two months, my outlook account has been receiving phishing email regarding cloud...

Infostealer Targeting Android Devices, (Thu, Oct 23rd)

by Cyberthreat Blog | Oct 23, 2025 | SANS ISC Bulletins | 0 |

Infostealers landscape exploded in 2024 and they remain a top threat today. If Windows remains a...

webctrl.cgi/Blue Angel Software Suite Exploit Attempts. Maybe CVE-2025-34033 Variant?, (Wed, Oct 22nd)

by Cyberthreat Blog | Oct 22, 2025 | SANS ISC Bulletins | 0 |

Starting yesterday, some of our honeypots received POST requests to “/cgi-bin/webctrl.cgi”, attempting to exploit an OS command injection vulnerability: POST /cgi-bin/webctrl.cgi Host: [honeypot ip]:80 User-Agent:...

What time is it? Accuracy of pool.ntp.org., (Tue, Oct 21st)

by Cyberthreat Blog | Oct 21, 2025 | SANS ISC Bulletins | 0 |

Yesterday, Chinese security services published a story alleging a multi-year attack against the...

Many Online Services and Websites Affected by an AWS Outage, (Mon, Oct 20th)

by Cyberthreat Blog | Oct 20, 2025 | SANS ISC Bulletins | 0 |

The info is spreading across the news websites: For approximatively two hours, many online services or websites are suffering of an Amazon Web Services outage. Some affected services: Signal Slack Zoom These may affect...

Using Syscall() for Obfuscation/Fileless Activity, (Mon, Oct 20th)

by Cyberthreat Blog | Oct 20, 2025 | SANS ISC Bulletins | 0 |

I found another piece of malware this weekend. This one looks more like a proof-of-concept because...

Tag: vulnerability