Network Security News Summary for Wednesday December 20th, 2023
SANS Internet Storm Center's Daily Network Security News Podcast · Johannes B. Ullrich
December 20, 20236m 11s
Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Citrixbleed Activity; SSH Terrapin Attack; ALPHV/Blackcat Disruption and Decryptor What are they looking for? Scans for OpenID Connect Configuration https://isc.sans.edu/diary/What%20are%20they%20looking%20for%3F%20Scans%20for%20OpenID%20Connect%20Configuration%20%28Update%3A%20CitrixBleed%29/30498 Terrapin Attack Against SSH https://terrapin-attack.com/TerrapinAttack.pdf ALPHV/Blackcat Ransomware Disrupted and Decryptor Available https://www.justice.gov/opa/pr/justice-department-disrupts-prolific-alphvblackcat-ransomware-variant keywords: alphv; blackcat; ransomware; decryuptor; terrapin; ssh; openid; citrix; citrixleak