SANS

Crashing Windows Explorer Without a Clickhttps://isc.sans.edu/forums/diary/Crashing+explorerexe+without+a+click/25966/ Zoom Privacy Policyhttps://blogs.harvard.edu/doc/2020/03/27/zoom/ Zoom

Covid19 Domain Classifierhttps://isc.sans.edu/covidclassifier.htmlhttps://www.youtube.com/watch?v=yNIlyJ3gI-4 Attackers Mail Malicious USB Drives and Teddy

Very Large Sample as an Obfuscation Techniquehttps://isc.sans.edu/forums/diary/Very+Large+Sample+as+Evasion+Technique/25948/ iOS VPN Bypasshttps://protonvpn.com/blog/apple-ios-vulnerability-disclosure/

Dridex Updatehttps://isc.sans.edu/forums/diary/Recent+Dridex+activity/25944/ Covid-19 Ransomhttps://twitter.com/johullrich/status/1242983197555789824 HP Enterprise SSD Firmware Bughttps://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00097382en_us Fake

Updated Microsoft Advisory 200006 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/adv200006 Memcached Denial of Service Vulnerabilityhttps://github.com/memcached/memcached/issues/629

Windows Font Parsing 0-Dayhttps://isc.sans.edu/forums/diary/Windows+Zeroday+Actively+Exploited+Type+1+Font+Parsing+Remote+Code+Execution+Vulnerability/25936/ Covid-19 Malware Summaryhttps://github.com/parthdmaniar/coronavirus-covid-19-SARS-CoV-2-IoCs Firefox Turns TLS

More Covid19 Malwarehttps://isc.sans.edu/forums/diary/More+COVID19+Themed+Malware/25930/ Working Exploit for the Kr00k Wifi Exploithttps://hexway.io/research/r00kie-kr00kie/

COVID-19 Themed Multistage Malwarehttps://isc.sans.edu/forums/diary/COVID19+Themed+Multistage+Malware/25922/ Cisco SD-WAN Patcheshttps://tools.cisco.com/security/center/publicationListing.x oPatch Selling Patches

TrendMicro Updatehttps://success.trendmicro.com/solution/000245571 More VMWare Updateshttps://www.vmware.com/security/advisories/VMSA-2020-0005.html EnigmaSpark Malwarehttps://securityintelligence.com/posts/EnigmaSpark-Politically-Themed-Cyber-Activity-Highlights-Regional-Opposition-to-Middle-East-Peace-Plan/ Recent Ransomware Trendshttps://www.fireeye.com/blog/threat-research/2020/03/they-come-in-the-night-ransomware-deployment-trends.html

A Quick Summary of Current Reflective DNS DDoS Attackshttps://isc.sans.edu/forums/diary/A+Quick+Summary+of+Current+Reflective+DNS+DDoS+Attacks/25916/ Trickbot

Desktop.ini as a post-exploitation toolhttps://isc.sans.edu/forums/diary/Desktopini+as+a+postexploitation+tool/25912/ VMWAre Workstatation/Fusion Updatehttps://www.vmware.com/security/advisories/VMSA-2020-0004.html Blackwater Malware

Phishing PDFs With Incremental Updateshttps://isc.sans.edu/forums/diary/Phishing+PDF+With+Incremental+Updates/25904/ VPN Access and Active Monitoringhttps://isc.sans.edu/forums/diary/VPN+Access+and+Activity+Monitoring/25906/

Microsoft Releases Patch for Windows SMBv3 Compression Vulnerability CVE-2020-0796https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 Hancitor

Mystery SMB3 Flaw Updatehttps://isc.sans.edu/forums/diary/Critical+SMBv3+Vulnerability+Remote+Code+Execution/25890/ COVID19 Malwarehttps://blog.reasonsecurity.com/2020/03/09/covid-19-info-stealer-the-map-of-threats-threat-analysis-report/ Agent Tesla Spread by

Microsoft Patch Tuesdayhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200005https://isc.sans.edu/diary.html?storyid=25886