Showing posts with label Advisory. Show all posts
Showing posts with label Advisory. Show all posts
Saturday, May 2, 2015

Phishing Target: Oregon Health and Science University

›
Over the past week we have been seeing indications on our system that Oregon Health and Science University may have been the target of a tar...
Monday, April 6, 2015

RECENT BRUTE FORCERS: You are blocking these right?!

›
121.14.5.125,ssh-brute-force,2015-04-06 218.87.111.110,ssh-brute-force,2015-04-06 43.255.191.164,ssh-brute-force,2015-04-06 37.132.67.140...

Colleges check for SQLi on your systems!

›
Honestly for the past few months we have seen nothing but a rash of colleges and universities getting smacked with SQLi exploits. Test your ...
Thursday, March 26, 2015

UPDATED WITH INDICATORS AND NOTES: Large BOTNET exposed

›
SLC Security Services LLC has discovered a previously unknown BOTNET network. We will be adding the indicators to our paid feeds. We had pre...

UPDATED 3-25-2014: Third US Health Entity Suspected of being Compromised

›
While we can't name any particular names at this time we have started seeing indicators of another related attack originating out of Chi...

Apple Credential Phishing Attempts - As reported by MalwareBytes

›
We have been seeing many reports of Apple phishing schemes to include over 100 pages hosted at ovh.net. The scheme starts by emailing users ...
Monday, March 23, 2015

BREACH: Berkeley Get's Whacked

›
Our OSINT monitoring is showing that a server at Berkeley has been compromised. Currently the site is reporting to be on IP 181.224.147.237 ...
Friday, March 13, 2015

Highmark - Related to Anthem Attack

›
More than 51,000 current Highmark health insurance customers in Pennsylvania will receive letters this week notifying them that their pers...
Sunday, February 22, 2015

Theory: Utilizing Porn Sites to Infect and Gain Access - Gov Connection or Bad Guys?

›
Over the course of the last few days we have been seeing a ton of traffic being exfiltrated to 101 Ave of the America's, 10th Floor (reg...
Monday, February 9, 2015

FBI Online Agent Screenlocker

›
We have been seeing a ton of screen lockers lately. Just today one of our customer calls and states that they believe the FBI has locked out...

Interesting Routing Anamalies on the Internet

›
We are currently researching some really interesting routing anomalies on the Internet. It seems that not only is the Great Firewall of Chin...
Friday, February 6, 2015

May just wanna disable flash until this situation becomes stable... Wait it's flash... Ugggghh

›
For the third time in two weeks, Adobe has issued an emergency security update for its Flash Player software to fix a dangerous zero-day v...

IOC's for Digestion

›
Traffic to or from: 196.203.89.134 194.105.9.85  
Tuesday, February 3, 2015

D-Link Router Vulnerability - CONFIRMED

›
D-Link’s popular DSL2740R wireless router is vulnerable to domain name system (DNS) hijacking exploits that requiring no authentication to ...
Monday, February 2, 2015

Hardware Hacking and Physical Attacks Largely Being Ignored

›
One of the recurring issues that we are seeing on audits are the lack of knowledge on physical attacks to infrastructure. Most of the compan...
Sunday, February 1, 2015

Malware: tinba is gonna be the end of Suntrust, Regions Bank and a few others... wait for it! (Dyre Banking Trojan) - Updated

›
If your monitoring infections and malware traffic it goes without saying that banking targets are high on the priority watch list. I'm m...
Tuesday, January 27, 2015

NOTICE: Patch your Linux Servers

›
As you may have read in the media recently, a new zero-day security vulnerability for a common component in the Linux operating system has ...
Friday, January 23, 2015

ALERT: Whale Phishing Alert

›
The FBI and Internet Crime Complaint Center warns of a very profitable spam campaign that has already claimed more than 2,000 victims global...
Thursday, January 22, 2015

Drones Being Used to Smuggle Drugs Over the Border

›
It goes without saying that Drones provide a unique way to take photographs, explore hard to reach areas and in this case to smuggle drugs a...
Wednesday, January 21, 2015

ALERT: RSA Public Key has a backdoor

›
We are seeing indications that the RSA public key is compromised and has a backdoor. Several security researchers have confirmed through act...