Twitter
RSS

Archive for the ‘Research & Alerts’ Category


Privilege escalation, why should I care?, (Wed, May 22nd)

In my day job I spend about 90% of my time on the red team, performing vulnerability assessment and penetration testing. The rest is spent on threat research, incident response, and digital forensics.

Read More...

ISC StormCast for Wednesday, May 22nd 2013 http://isc.sans.edu/podcastdetail.html?id=3323, (Wed, May 22nd)

(c) SANS Internet Storm Center.

Read More...

Chrome 27 stable released http://googlechromereleases.blogspot.ca/ some security fixes, (Tue, May 21st)

(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read More...

Moore, Oklahoma tornado charitable organization scams, malware, and phishing, (Tue, May 21st)

I find it sad that in times when people are facing disaster, many have died, others missing, and the survivors facing having lost everything that there are scumbags who will try to take advantage. Be very wary of any charity that is raising funds for victims of any disaster, particularly one that has not been around for very long.

Read More...

ISC StormCast for Tuesday, May 21st 2013 http://isc.sans.edu/podcastdetail.html?id=3320, (Tue, May 21st)

(c) SANS Internet Storm Center.

Read More...

Safe – Tools, Tactics and Techniques, (Mon, May 20th)

Trend Micro published a report last week on a spear-phishing emails campaign that contain a malicious attachment exploiting a Microsoft Office vulnerability ( CVE-2012-0158 ).

Read More...

TA13-141A: Washington, DC Radio Station Web Site Compromises

Original release date: May 20, 2013 | Last revised: May 21, 2013 Systems Affected Microsoft Windows systems running Adobe Reader, Acrobat, or Oracle Java Overview On May 16, 2013, US-CERT was notified that both www.federalnewsradio[.]com and www.wtop[.]com had been compromised to redirect Internet Explorer users to an exploit kit. As of May 17, 2013, US-CERT analysis confirms that no malicious code remains on either site.

Read More...

Technical Note on Foreign Involvement in Insider Intellectual Property Theft Released

This entry in the Spotlight On series summarizes such cases and insiders and provides recommendations for mitigating these incidents.

Read More...

Ubuntu Package available to submit firewall logs to DShield, (Mon, May 20th)

I put together a simple .deb package to install our DShield iptables client on Ubuntu.

Read More...