Security Bulletin

Once in a while, I get a question about my pdf-parser.py tool, not able to decode strings and streams from a PDF document.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

In diary entry " Analyzing PDF Streams" I answer a question asked by a student of Xavier: "how can you export all streams of a PDF?". I explained how to do this with my pdf-parser.py tool.

A disgruntled former Disney worker stands accused of illegally hacking the company’s systems and harassing its workers

If you’ve ever been to Cisco Live and seen the booth with a display for you to pick locks, then you know about the Cisco Advanced Security Initiatives Group (ASIG). We are chartered with security testing and ethical hacking for all Cisco products and...

The large-scale operation took advantage of open repositories, hardcoded credentials in source code, and other cloud oversights.

Easterly addressed ballot security, disinformation and voter databases in public comments this week.

Password spray attacks on compromised SOHO routers underscore the need for security pros to lock down remote workers.

The Recall AI tool will be available to Copilot+ PC subscribers in December, and can be used to record images of every interaction on the device for review later. Critics say this introduces major privacy and security concerns along with useful...

OWASP has released guidance materials addressing how to respond to deepfakes, AI security best practices, and how to secure open source and commercial generative AI applications.