Diaries by Keyword - SANS Internet Storm Center

Participate: Learn more about our honeypot network
https://isc.sans.edu/tools/honeypot/

Handler on Duty: Jesse La Grew

Threat Level: green

Date	Author	Title
ATT IPHONE EXPOSED INFORMATION WEBPAGE
2010-06-15	Manuel Humberto Santander Pelaez	iPhone 4 Order Security Breach Exposes Private Information
ATT
2024-02-22/a>	Johannes Ullrich	Large AT&T Wireless Network Outage #att #outage
2024-01-08/a>	Jesse La Grew	What is that User Agent?
2023-12-06/a>	Guy Bruneau	Revealing the Hidden Risks of QR Codes [Guest Diary]
2023-06-23/a>	Xavier Mertens	Word Document with an Online Attached Template
2022-08-10/a>	Johannes Ullrich	And Here They Come Again: DNS Reflection Attacks
2022-04-27/a>	Jan Kopriva	MITRE ATT&CK v11 - a small update that can help (not just) with detection engineering
2022-03-26/a>	Guy Bruneau	Is buying Cyber Insurance a Must Now?
2022-02-03/a>	Johannes Ullrich	Keeping Track of Your Attack Surface for Cheap
2021-09-07/a>	Johannes Ullrich	Why I Gave Up on IPv6. And no, it is not because of security issues.
2021-02-01/a>	Rob VandenBrink	Taking a Shot at Reverse Shell Attacks, CNC Phone Home and Data Exfil from Servers
2020-08-12/a>	Russ McRee	To the Brim at the Gates of Mordor Pt. 1
2019-08-25/a>	Guy Bruneau	Are there any Advantages of Buying Cyber Security Insurance?
2019-07-20/a>	Guy Bruneau	Re-evaluating Network Security - It is Increasingly More Complex
2018-11-18/a>	Guy Bruneau	Multipurpose PCAP Analysis Tool
2018-10-17/a>	Russ McRee	RedHunt Linux - Adversary Emulation, Threat Hunting & Intelligence
2017-09-06/a>	Adrien de Beaupre	Modern Web Application Penetration Testing , Hash Length Extension Attacks
2017-05-20/a>	Xavier Mertens	Typosquatting: Awareness and Hunting
2017-03-06/a>	Renato Marinho	A very convincing Typosquatting + Social Engineering campaign is targeting Santander corporate customers in Brazil
2017-02-14/a>	Johannes Ullrich	Microsoft Patch Tuesday Delayed
2016-11-02/a>	Rob VandenBrink	What Does a Pentest Look Like?
2016-10-07/a>	Rick Wanner	First Hurricane Matthew related Phish
2016-06-03/a>	Tom Liston	MySQL is YourSQL
2015-03-18/a>	Daniel Wesemann	Pass the hash!
2015-02-19/a>	Daniel Wesemann	DNS-based DDoS
2014-11-24/a>	Richard Porter	Someone is using this? PoS: Compressor
2014-07-09/a>	Daniel Wesemann	Who owns your typo?
2014-02-26/a>	Russ McRee	Ongoing NTP Amplification Attacks
2014-02-17/a>	Chris Mohan	NTP reflection attacks continue
2013-12-02/a>	Richard Porter	Reports of higher than normal SSH Attacks
2013-09-03/a>	Rob VandenBrink	Is "Reputation Backscatter" a Thing?
2013-08-19/a>	Guy Bruneau	Business Risks and Cyber Attacks
2013-07-27/a>	Scott Fendley	Defending Against Web Server Denial of Service Attacks
2013-07-13/a>	Lenny Zeltser	Decoy Personas for Safeguarding Online Identity Using Deception
2013-05-07/a>	Jim Clausing	Is there an epidemic of typo squatting?
2012-10-05/a>	Richard Porter	Reports of a Distributed Injection Scan
2011-12-28/a>	Daniel Wesemann	Hash collisions vulnerability in web servers
2011-12-01/a>	Mark Hofman	SQL Injection Attack happening ATM
2011-09-28/a>	Richard Porter	All Along the ARP Tower!
2011-07-23/a>	Johannes Ullrich	Apple Battery Firmware Default Password
2011-01-23/a>	Richard Porter	Crime is still Crime!
2010-12-23/a>	Mark Hofman	White house greeting cards
2010-12-15/a>	Manuel Humberto Santander Pelaez	Vulnerability in the PDF distiller of the BlackBerry Attachment Service
2010-08-16/a>	Raul Siles	DDOS: State of the Art
2010-08-15/a>	Manuel Humberto Santander Pelaez	Obfuscated SQL Injection attacks
2010-08-13/a>	Tom Liston	The Strange Case of Doctor Jekyll and Mr. ED
2010-07-15/a>	Deborah Hale	Be on the Alert
2010-06-18/a>	Adrien de Beaupre	Distributed SSH Brute Force Attempts on the rise again
2010-06-15/a>	Manuel Humberto Santander Pelaez	iPhone 4 Order Security Breach Exposes Private Information
2010-03-15/a>	Adrien de Beaupre	Spamassassin Milter Plugin Remote Root Attack
2010-02-21/a>	Patrick Nolan	Looking for "more useful" malware information? Help develop the format.
2010-01-29/a>	Johannes Ullrich	Analyzing isc.sans.org weblogs, part 2, RFI attacks
2009-11-11/a>	Rob VandenBrink	Layer 2 Network Protections against Man in the Middle Attacks
2009-08-28/a>	Adrien de Beaupre	WPA with TKIP done
2009-06-04/a>	Raul Siles	Targeted e-mail attacks asking to verify wire transfer details
2009-04-20/a>	Jason Lam	Digital Content on TV
2009-04-02/a>	Bojan Zdrnja	JavaScript insertion and log deletion attack tools
2009-03-20/a>	donald smith	Stealthier then a MBR rootkit, more powerful then ring 0 control, it’s the soon to be developed SMM root kit.
2009-02-25/a>	Swa Frantzen	Targeted link diversion attempts
2009-01-30/a>	Mark Hofman	Request for info - Scan and webmail
2009-01-18/a>	Maarten Van Horenbeeck	Targeted social engineering
2008-12-03/a>	Andre Ludwig	New ISC Poll! Has your organization suffered a DDoS (Distributed Denial of Service) attack in the last year?
2008-07-15/a>	Maarten Van Horenbeeck	BlackBerry PDF parsing vulnerability
2008-07-09/a>	Johannes Ullrich	Unpatched Word Vulnerability
2008-07-07/a>	Pedro Bueno	Bad url classification
2008-05-26/a>	Marcus Sachs	Predictable Response
2008-03-27/a>	Maarten Van Horenbeeck	Guarding the guardians: a story of PGP key ring theft
IPHONE
2021-09-17/a>	Xavier Mertens	Malicious Calendar Subscriptions Are Back?
2014-07-22/a>	Daniel Wesemann	App "telemetry"
2012-05-07/a>	Guy Bruneau	iOS 5.1.1 Software Update for iPod, iPhone, iPad
2011-07-27/a>	Johannes Ullrich	Internet Storm Center iPhone App now available. Feedback/Feature Requests welcome. Search App Store for "ISC Reader"
2011-06-17/a>	Richard Porter	When do you stop owning Technology?
2011-04-22/a>	Manuel Humberto Santander Pelaez	iPhoneMap: iPhoneTracker port to Linux
2011-04-20/a>	Johannes Ullrich	iPhone GPS Data Storage
2010-11-29/a>	Stephen Hall	iPhone phishing - What you see, isn't what you get
2010-08-06/a>	Rob VandenBrink	FOXIT PDF Reader update to resolve iPhone/iPad Jailbreak issue ==> http://www.foxitsoftware.com/announcements/2010861227.html
2010-06-23/a>	Johannes Ullrich	IPv6 Support in iOS 4
2010-06-15/a>	Manuel Humberto Santander Pelaez	iPhone 4 Order Security Breach Exposes Private Information
2010-02-03/a>	Rob VandenBrink	APPLE-SA-2010-02-02-1 iPhone OS 3.1.3 and iPhone OS 3.1.3 for iPod touch
2009-12-21/a>	Marcus Sachs	iPhone Botnet Analysis
2009-11-09/a>	Chris Carboni	80's Flashback on Jailbroken iPhones
2009-11-08/a>	Bojan Zdrnja	iPhone worm in the wild
2009-09-12/a>	Jim Clausing	Apple Updates
2009-07-31/a>	Deborah Hale	The iPhone patch is out
2009-07-30/a>	Deborah Hale	iPhone Hijack
2009-02-25/a>	Andre Ludwig	Preview/Iphone/Linux pdf issues
2008-07-11/a>	Jim Clausing	Handling the load
EXPOSED
2011-02-21/a>	Adrien de Beaupre	Winamp forums compromised
2010-06-15/a>	Manuel Humberto Santander Pelaez	iPhone 4 Order Security Breach Exposes Private Information
INFORMATION
2022-03-23/a>	Brad Duncan	Arkei Variants: From Vidar to Mars Stealer
2020-12-29/a>	Jan Kopriva	Want to know what's in a folder you don't have a permission to access? Try asking your AV solution...
2013-02-17/a>	Guy Bruneau	HP ArcSight Connector Appliance and Logger Vulnerabilities
2011-02-05/a>	Guy Bruneau	OpenSSH Legacy Certificate Information Disclosure Vulnerability
2011-01-12/a>	Richard Porter	How Many Loyalty Cards do you Carry?
2010-10-22/a>	Manuel Humberto Santander Pelaez	Intypedia project
2010-07-24/a>	Manuel Humberto Santander Pelaez	Transmiting logon information unsecured in the network
2010-06-15/a>	Manuel Humberto Santander Pelaez	iPhone 4 Order Security Breach Exposes Private Information
2010-04-21/a>	Guy Bruneau	Google Chrome Security Update v4.1.249.1059 Released: http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html
2010-03-27/a>	Guy Bruneau	HP-UX Running NFS/ONCplus, Inadvertently Enabled NFS
2009-11-29/a>	Patrick Nolan	A Cloudy Weekend
2009-10-04/a>	Guy Bruneau	Samba Security Information Disclosure and DoS
2009-07-10/a>	Guy Bruneau	WordPress Fixes Multiple vulnerabilities
2009-03-02/a>	Swa Frantzen	Obama's leaked chopper blueprints: anything we can learn?
2008-09-11/a>	David Goldsmith	CookieMonster is coming to Pown (err, Town)
2008-04-07/a>	John Bambenek	HP USB Keys Shipped with Malware for your Proliant Server
WEBPAGE
2010-06-15/a>	Manuel Humberto Santander Pelaez	iPhone 4 Order Security Breach Exposes Private Information

ATT IPHONE EXPOSED INFORMATION WEBPAGE

ATT

IPHONE

EXPOSED

INFORMATION

WEBPAGE