Tag: SANS Internet Storm Center, InfoCON: green

macOS Sequoia: System/Network Admins, Hold On!, (Mon, Oct 7th)

It's always tempting to install the latest releases of your preferred software and operating systems. After all, that's the message we pass to our beloved users: “Patch, patch, and patch again!”. Last week, I was teaching for SANS and decided…

Survey of CUPS exploit attempts, (Fri, Oct 4th)

It is about a week since the release of the four CUPS remote code execution vulnerabilities. After the vulnerabilities became known, I configured one of our honeypots that watches a larger set of IPs to specifically collect UDP packets to…

Security related Docker containers, (Wed, Oct 2nd)

Over the last 9 months or so, I've been putting together some docker containers that I find useful in my day-to-day malware analysis and forensicating. I have been putting them up on hub.docker.com and decided, I might as well let…