Phishing e-mail that hides malicious link from Outlook users isc.sans.edu/diary/32010

Be Careful With Fake Zoom Client Downloads isc.sans.edu/diary/32014

Upcoming DShield Honeypot Changes and Customizations isc.sans.edu/diary/32016

Extracting With pngdump.py isc.sans.edu/diary/32022

Quasar RAT Delivered Through Bat Files isc.sans.edu/diary/32036

Following the @bsidesath live stream from Singapore… First time is missed it as far as a can remember! 🥺 Enjoy!

What's My (File)Name? isc.sans.edu/diary/32084

More Free File Sharing Services Abuse isc.sans.edu/diary/32112

At #SANSFIRE, SANS Social Reporter Rich Greene caught up with SANS.edu Internet Storm Center Handlers Jesse and Guy, who broke down how you can start contributing to threat intelligence—right from home. From spinning up honey pots on a Raspberry Pi to writing analysis diaries that might get

Hiding Payloads in Linux Extended File Attributes isc.sans.edu/diary/32116

Veeam Phishing via Wav File isc.sans.edu/diary/32120

Critical Sharepoint 0-Day Vulnerablity Exploited CVE-2025-53770 (ToolShell) isc.sans.edu/diary/32122

WinRAR MoTW Propagation Privacy isc.sans.edu/diary/32130

New Tool: ficheck.py isc.sans.edu/diary/32136

Sinkholing Suspicious Scripts or Executables on Linux isc.sans.edu/diary/32144

Triage is Key! Python to the Rescue! isc.sans.edu/diary/32152

Microsoft August 2025 Patch Tuesday isc.sans.edu/diary/32192

CVE-2017-11882 Will Never Die isc.sans.edu/diary/32196

Keeping an Eye on MFA-Bombing Attacks isc.sans.edu/diary/32208

Don't Forget The “-n” Command Line Switch isc.sans.edu/diary/32220