Listen "ISC StormCast for Monday, August 12th, 2024"
Episode Synopsis
CORS/SameOrigin Videohttps://isc.sans.edu/forums/diary/Video%3A%20Same%20Origin%2C%20CORS%2C%20DNS%20Rebinding%20and%20Localhost/31158/ Splitting the email atom: exploiting parsers to bypass access controlshttps://portswigger.net/research/splitting-the-email-atom#parser-discrepancies Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!https://blog.orange.tw/2024/08/confusion-attacks-en.html GL-Inet Patcheshttps://www.gl-inet.com/security-updates/security-advisories-vulnerabilities-and-cves-aug-1-2024/ Microsoft Office Spoofing Vulnerabilityhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38200
ZARZA We are Zarza, the prestigious firm behind major projects in information technology.