新報告：SharePointのToolShell脆弱性 (CVE-2025-53770/53771) を狙い、Webシェルではなくインメモリ実行型ペイロードが使われている。ネットワークログ＆PCAPでのハンティング必須。#SharePoint #ToolShell #SANSISC isc.sans.edu/diary/32524
2
5
686
19 May 2025
1
1
4
562
25 Apr 2025
1
6
544
9 Sep 2018
Is this that same 2FA @johullrich has been recommending for web protocols on #SansISC podcast? Any response to weakness claims? @sans_isc zdnet.com/article/worries-ar…
1
2
'Data Breach Impact Estimation'
Recent grad, @pjhersh13, featured on #SANSISC
Paper online at giac.org/paper/gsna/4691/dat…
#MSISM #SANSresearch
30 Jun 2017
2
1
13 May 2014
[Diary] Adobe May 2014 Patch Tuesday, (Tue, May 13th): We got one bulletin so far from Adobe. The bul... bit.ly/1liXRa0 #sansisc
4
1
13 May 2014
[Diary] Microsoft May 2014 Patch Tuesday, (Tue, May 13th): Overview of the bit.ly/1gAjxNr #sansisc
4
2
13 May 2014
[Diary] ISC StormCast for Tuesday, May 13th 2014 isc.sans.edu/podcastdetail.h…, (Tue... bit.ly/1l5ZKYP #sansisc
1
13 May 2014
[Diary] This is not a test/typo: Support for Windows 8.1 Ends Tomorrow!, (Thu, May 8th): It hasn't re... bit.ly/1l5PqQB #sansisc
15
1
12 May 2014
[Diary] bit.ly breach (May 9) - email addresses, encrypted passwords, API keys and OAuth tokens compr... bit.ly/1gvYMCH #sansisc
12 May 2014
[Diary] Beefing up Windows End Station Security with EMET, (Mon, May 12th): After my post last week o... bit.ly/1l0vBub #sansisc
1
10
5
12 May 2014
[Diary] ISC StormCast for Monday, May 12th 2014 isc.sans.edu/podcastdetail.h…, (Sun,... bit.ly/1iHeqPY #sansisc
1
1
10 May 2014
[Diary] Microsoft May Patch Pre-Announcement, (Sat, May 10th): Microsoft released its pre-announcemen... bit.ly/Qp50gr #sansisc
1
4
3
9 May 2014
[Diary] Heartbleed, IE Zero Days, Firefox vulnerabilities - What's a System Administrator to do?, (Fr... bit.ly/1iwQT3S #sansisc
2
2
9 May 2014
[Diary] A fun read on the VRT blog about the recent IE 0-day - Anatomy of an exploit: CVE 2014-1776 -... bit.ly/1iwQQ8i #sansisc
2
1
9 May 2014
[Diary] ISC StormCast for Friday, May 9th 2014 isc.sans.edu/podcastdetail.h…, (Fri, ... bit.ly/RuKhsL #sansisc
9 May 2014
[Diary] SNMP: The next big thing in DDoS Attacks?, (Thu, May 8th): It started with DNS: Simple short ... bit.ly/RuKhcv #sansisc
1
7
2
8 May 2014
[Diary] ISC StormCast for Thursday, May 8th 2014 isc.sans.edu/podcastdetail.h…, (Thu... bit.ly/1kNkPXV #sansisc
1
1
7 May 2014
[Diary] May OUCH Newsletter: I'm Hacked, Now What? securingthehuman.org/resourc…... bit.ly/1kMFHyq #sansisc
4
2