Security Bulletin

GenAI has created great excitement and promise, but security teams still must grapple with the risks.

I was asked a question about the protection of an .xlsm spreadsheet. I've written before on the protection of .xls spreadsheets, for example in diary entries " Unprotecting Malicious Documents For Inspection" and " 16-bit Hash Collisions in...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Wireshark release 4.2.6 fixes 1 vulnerability ( SPRT parser crash) and 10 bugs.

A couple years ago, in diary entry " Unprotecting Malicious Documents For Inspection" I explain how .xls spreadsheets are password protected (but not encrypted). And in follow-up diary entry " Maldocs: Protection Passwords", I talk about an update to...

Many organizations lack policies and training to address the risk of shadow IT, including GenAI.

The bug (CVE-2024-6385) is similar — but not identical — to a critical flaw GitLab patched just two weeks ago.

U.S. government organizations are falling short on their cybersecurity practices.

In the scrum, countless call and text records leaked, other cell companies caught strays, the DoJ became involved, and someone has already been arrested.

Both are accused of espionage and face a maximum penalty of 15 years imprisonment each for their crimes.