Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: #CCleaner Compromise; Word #INCLUDEPICTURE; security.txt file - Internet Security | DShield #CCleaner Compromise; Word #INCLUDEPICTURE; security.txt file


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
podcast logo

ISC StormCast for Tuesday, September 19th 2017

A daily summary of cyber security news from the SANS Internet Storm Center
Author:Johannes B. Ullrich, Ph.D.
See below for a schedule of classes I teach.
Created: Tuesday, September 19th 2017
Length: 8:08 minutes
Today's Headline: #CCleaner Compromise; Word #INCLUDEPICTURE; security.txt file

If you like this podcast, then please consider telling others about it. Use this button to Tweet about this episode: click here. Errors? Corrections? Complaints? Player Problems? Please let us know here: https://isc.sans.edu/contact.html

Plain HTML5 Player
Fancy Player (with skip back/forward)

Show Notes

CCleaner Compromise
http://blog.talosintelligence.com/2017/09/avast-distributes-malware.html
http://www.piriform.com/news/release-announcements/2017/9/18/security-notification-for-ccleaner-v5336162-and-ccleaner-cloud-v1073191-for-32-bit-windows-users

Word INCLUDEPICTURE Feature Abuse
https://securelist.com/an-undocumented-word-feature-abused-by-attackers/81899/

security.txt file
https://www.ietf.org/id/draft-foudil-securitytxt-00.txt
https://www.ietf.org/rfc/rfc2142.txt

Discussion

Login here to join the discussion.

Interested in attending one of my classes? See below for my current schedule.

Intrusion Detection In-DepthBaltimoreSep 25th - Sep 30th 2017
Intrusion Detection In-DepthSingaporeOct 16th - Oct 21st 2017
Intrusion Detection In-DepthBerlinOct 23rd - Oct 28th 2017
IPv6 EssentialsWashingtonDec 12th - Dec 13th 2017
Defending Web Applications Security EssentialsWashingtonDec 14th - Dec 19th 2017