Xavier Mertens: [SANS ISC] A Safe Excel Sheet Not So Safe
I published the following diary on isc.sans.edu: “A Safe Excel Sheet Not So Safe“:I discovered a nice sample yesterday. This excel sheet was found in a mail flagged as “suspicious” by a security...
View ArticleFrank Goossens: Redirecting to AMP (reader mode) for mobile
I’m not a big fan of AMP but I do have it active here on this blog using the official AMP plugin for WordPress, using it in “Reader” (aka “classic”) mode. That’s as far as I want to take it, but...
View ArticleMattias Geniar: Forcing a Content-Type header with Guzzle's form_params
I just lost an hour or 2 of my life to this, so I figure I’ll do a small write-up to save future me from having to do the same dance.
View ArticleFrank Goossens: Music from our Tube: Andy Shauf’s Living Room
“Living Room” from Andy Shauf’s new album “Neon Skyline” is such a gem, but the music and the storytelling (lyrics in the comments on YT).Watch this video on YouTube.Possibly related twitterless...
View ArticleXavier Mertens: [SANS ISC] Agent Tesla Delivered via Fake Canon EOS...
I published the following diary on isc.sans.edu: “Agent Tesla Delivered via Fake Canon EOS Notification on Free OwnCloud Account“:For a few days, there are new waves of Agent Tesla landing in our...
View ArticleMattias Geniar: Why your government isn't acting on the Corona/COVID-19 threat
By now, you’ve heard of the Corona virus, otherwise known as SARS-CoV-2 or COVID-19.
View ArticleLionel Dricot: Rien ne sera jamais plus comme avant…
Il y’aura un avant et un après CoronavirusQuel moment étrange sommes-nous en train de vivre ? Une brève page d’humanité que nous vivons individuellement, confinés, et à l’échelle de la planète,...
View ArticleXavier Mertens: Remote Access Bad Stories
With the COVID19 pandemic ongoing, more and more countries are taking strong decisions to limit the movements of people. This is one of the best behavior to prevent more and more people to be infected....
View ArticleLuc Stroobant: Tips voor thuiswerken
Tips voor thuiswerkenlucTue, 17/03/2020 - 21:19Nu de Corona maatregelen strenger en strenger worden, wordt thuiswerk stilaan de norm voor de gemiddelde kantoor werker. Voor veel mensen is dit nieuw en...
View ArticleStaf Wagemakers: CGIpaf at GNU Savannah
The CGIpaf project has a new home at GNU savannah: https://savannah.nongnu.org/projects/cgipaf/The source code was - and is still also hosted - on GitHub.There are a few reasons for the move;I was...
View ArticleXavier Mertens: [SANS ISC] COVID-19 Themed Multistage Malware
I published the following diary on isc.sans.edu: “COVID-19 Themed Multistage Malware“:More and more countries are closing their borders and ask citizens to stay at home. The COVID-19 virus is...
View ArticleXavier Mertens: InfoSec Conferences Canceled? We’ve Hours Of Recordings!
If you planned to attend some security conferences in the coming weeks, there are risks to have them canceled… Normally, I should be now in Germany to attend TROOPERS… Canceled! SAS2020 (“Security...
View ArticleDries Buytaert: Is Open Source recession-proof?
The world is experiencing a scary time right now. People feel uncertain about the state of the world: we're experiencing a global pandemic, the OPEC is imploding, the trade war between the US and China...
View ArticleStaf Wagemakers: Use unbound as an DNS-over-TLS resolver and authoritative...
In previous blog posts, I described howto setup stubby as DNS-over-TLS resolver. I used stubby on my laptop(s) and unbound on my internal network.But I’m migrating away from stubby in favour of...
View ArticlePhilip Van Hoof: EU coördinatie bij verspreiden patiënten
COVID-19 spreidt zich uit over de EU-zone met per land telkens een paar dagen of weken verschil in aantal gevallen en stijging in de piek.We zouden er dus goed aan doen om patiënten te verspreiden over...
View ArticlePhilip Van Hoof: Why social distancing
MacSlow made us a nice illustrative tool that shows the usefulness of social distancing:https://macslow.org/epidemic-spread/
View ArticleDries Buytaert: Sustaining the Drupal Association in uncertain times
Today, I'm asking for your financial support for the Drupal Association. As we all know, we are living in unprecedented times, and the Drupal Association needs our help. With DrupalCon being postponed...
View ArticleXavier Mertens: [SANS ISC] Very Large Sample as Evasion Technique?
I published the following diary on isc.sans.edu: “Very Large Sample as Evasion Technique?“:Security controls have a major requirement: they can’t (or at least they try to not) interfere with normal...
View ArticleXavier Mertens: [SANS ISC] Malicious JavaScript Dropping Payload in the Registry
I published the following diary on isc.sans.edu: “Malicious JavaScript Dropping Payload in the Registry“:When we speak about “fileless” malware, it means that the malware does not use the standard...
View ArticleFrank Goossens: Autoptimize: no more broken pages due to CSS/ JS not found!
When cached HTML links to deleted Autoptimized CSS/ JS the page is badly broken … no more with a new (experimental) option in AO27 to use fallback CSS/ JS which I just committed on the beta branch on...
View Article