Category: SANS Internet Storm Center, InfoCON: green

Continuing Scans for swagger.json, (Wed, Jun 3rd)

Enterprise applications often still use complex standards like SOAP for web services. The big advantage of SOAP is its tight and extensive standards, which enable interoperability across an enterprise governed by web services. The disadvantage of SOAP: First, while it…

YARA-X 1.17.0 Release, (Sun, May 31st)

YARA-X's 1.17.0 release brings 5 improvements (several performance improvements) and 1 bugfix. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: YARA-X 1.17.0 Release, (Sun, May 31st)

Microsoft Access VBA, (Mon, May 25th)

Microsoft Access files (Microsoft Office's Database) can contain VBA code. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: Microsoft Access VBA, (Mon, May 25th)

Wireshark 4.6.6 Released, (Sun, May 24th)

Wireshark release 4.6.6 fixes 1 vulnerability and 11 bugs. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: Wireshark 4.6.6 Released, (Sun, May 24th)

Cross-Platform NPM Stealer, (Fri, May 22nd)

I found a Node.js stealer that looked pretty well obfuscated. The file was not running out-of-the-box because it was uploaded on VT as “extracted-decoded.js” (and reformated). The SHA256 is 049300aa5dd774d6c984779a0570f59610399c71864b5d5c2605906db46ddeb9[1]. It did not run properly in a sandbox so only…