Network Security News Summary for Thursday March 31st, 2022
SANS Internet Storm Center's Daily Network Security News Podcast · Johannes B. Ullrich
March 30, 20225m 57s
Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Spring4Shell/Java Confusion; XLSB Parsing; 3CX Phone Systems Java Springtime Confusion: What Vulnerabilty are We Talking About https://isc.sans.edu/forums/diary/Java+Springtime+Confusion+What+Vulnerability+are+We+Talking+About/28500/ Quickie: Parsing XLSB Documents https://isc.sans.edu/forums/diary/Quickie+Parsing+XLSB+Documents/28496/ Pwning 3CX Phone Management Backends from the Internet https://medium.com/@frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88 keywords: 3cx; phone management; xlsb; java; spring4shell; spring; spring cloud;