zipdump.py: Metadata Encoding, (Fri, Jul 31st) I was asked for help with a problem similar to the following.Here is a ZIP file, analyzed with zi... 2026-7-31 09:22:19 | 阅读: 45 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu python codec zipdump filenames decoded

ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st) 2026-7-31 02:0:3 | 阅读: 46 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu teaching johannes isc guy

ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th) 2026-7-30 02:0:3 | 阅读: 59 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes isc teaching diary guy

Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary], (Thu, Jul 30th) [This is a Guest Diary by Adam Cann, an ISC intern as part of the SANS.edu BACS program]Introduct... 2026-7-30 00:42:29 | 阅读: 62 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ssh client honeypot payload hardware

Apple Patches Everything (July 2026), (Wed, Jul 29th) I am a bit late with this summary, but this week Apple released updates to all its operating system... 2026-7-29 07:32:37 | 阅读: 50 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 2026 affects termination maliciously memory

ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th) 2026-7-29 02:0:2 | 阅读: 60 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes isc 2026 teaching papers

AutoIT Payload Injector , (Tue, Jul 28th) For a long time, AutoIT[1] has been pretty common in the malware ecosystem. Threat actors still use... 2026-7-28 07:42:27 | 阅读: 49 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu dllcall base64bytes powershell autoit

ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th) 2026-7-28 02:0:3 | 阅读: 48 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers 2026 johannes

Java Spring Boot "heapdump" scans, (Mon, Jul 27th) Spring Boot exposes the endpoint "/actuator/heapdump" to collect debug information. By default, the... 2026-7-27 10:4:51 | 阅读: 47 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu heapdump actuator memory exposes database

ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th) 2026-7-27 02:0:2 | 阅读: 50 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes papers isc teaching 2026

Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th) ESAFENET's CDG showed up in our data before. The company focused on secure document management and... 2026-7-26 15:26:14 | 阅读: 55 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu esafenet cdg passwords security johannes

ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th) 2026-7-24 02:0:2 | 阅读: 41 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes feeds teaching 2026 isc

When the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd) Two disclosures, five days apart, described the same intrusion from opposite ends —one from the vi... 2026-7-23 13:40:27 | 阅读: 41 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu hugging openai 2026 evaluation security

ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd) 2026-7-23 02:0:3 | 阅读: 41 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes feeds papers teaching 2026

Rondo Meets Geoserver, (Wed, Jul 22nd) This isn't a new attack, but something I saw "pop-up" in our logs this week:GET /geoserver/wfs?s... 2026-7-22 17:35:33 | 阅读: 40 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu geoserver rondo wfs zyt archsites

ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd) 2026-7-22 02:0:2 | 阅读: 40 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes feeds 2026 teaching papers

Captive Portal Detection, (Tue, Jul 21st) Not everything our honeypots detect is an attack. Sometimes it is just "odd traffic", and this is o... 2026-7-21 13:44:56 | 阅读: 54 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu captive network portals windows chromium

ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st) 2026-7-21 02:0:2 | 阅读: 47 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes 2026 papers isc feeds

WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th) Last week, Searchlight Cyber released details about a vulnerability they are calling "wp2shell". Th... 2026-7-20 18:41:24 | 阅读: 60 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 24f 5cx65 24c wp 3bif

ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th) 2026-7-20 02:0:2 | 阅读: 48 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes teaching papers isc 2026