Network Security News Summary for Tuesday October 26th, 2021

25/10/2021 4 min
Network Security News Summary for Tuesday October 26th, 2021

Listen "Network Security News Summary for Tuesday October 26th, 2021"

Episode Synopsis

Decrypt Cobalt Strike; Critical Discourse Vuln; ua-parser-js malware; BillQuick Ransomware Decrypting Cobalt Strike Traffic https://isc.sans.edu/forums/diary/Decrypting+Cobalt+Strike+Traffic+With+a+Leaked+Private+Key/27968/ Critical Discourse Vulnerability https://us-cert.cisa.gov/ncas/current-activity/2021/10/24/critical-rce-vulnerability-discourse Discourse Discussion Platform RCE https://github.com/discourse/discourse/security/advisories/GHSA-jcjx-pvpc-qgwq https://0day.click/recipe/discourse-sns-rce/ ua-parser-js malware https://github.com/advisories/GHSA-pjwm-rvh2-c87w Vulnerable Billing Software BillQuick Web Used to Deploy Ransomware https://www.huntress.com/blog/threat-advisory-hackers-are-exploiting-a-vulnerability-in-popular-billing-software-to-deploy-ransomware keywords: billquick; cobalt strike; ua-parser-js; discourse

More episodes of the podcast SANS Internet Storm Center's Daily Network Security News Podcast