meta_pixel
Tapesearch Logo
Log in
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

ISC StormCast for Tuesday, July 19th, 2022

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

SANS ISC Handlers

Tech News, News

4.9754 Ratings

🗓️ 19 July 2022

⏱️ 6 minutes

🧾️ Download transcript

Summary

Daily 5 min cyber security news summary. News, patches, vulnerabilities and trends in information and network security. PDF Tools Keywords; Tor Improvements; Fake ICS Password Cracker; Apache Spark Vuln; Juniper Vuln

Transcript

Click on a timestamp to play from that location

0:00.0

Hello, welcome to the Tuesday, July 19, 2012 edition of the Sands and its Storms Centers.

0:07.6

Stormcast, my name is Johannes.

0:09.7

Ulrich, and today I'm recording from Jacksonville, Florida.

0:14.4

DDA, of course, legendary for his various Python tools, including PDF tools that help you analyze malicious or sometimes

0:23.9

non-malicious documents. And what's better than free software and also create support? DDA

0:32.5

in response to a student question actually at a class that Xavier recently taught has a quick post

0:41.2

up about how to add your own keywords to DDA's PDF tools.

0:47.3

The PDF tools will summarize various keywords and, well, if you do want to add your own, nothing easier than editing a little PDFid.

0:58.2

I andI file and adding whatever keyword you are looking for.

1:03.7

More about this with plenty of screenshots in Dediere's latest diary.

1:09.9

I'm talking about great free software, Tor released Tor browser 11.5, and one of the new features here is an automatic connection button.

1:22.6

The problem has been that if the Tor network is blocked, then, well, you need to set up a bridge

1:29.4

or something like this to get around that block. If your location does not allow Tor, well,

1:35.0

this new system automates this process. So also a less technical user will be able to use Tor.

1:44.4

Configuration is also made easier via the use of QR codes

1:49.1

and HTTP is now the standard mode.

1:52.8

So if you're just entering a host name without any protocol,

1:57.7

it will default to HTTP, which is also becoming common in standard browsers.

2:05.0

And you go to old advice that you shouldn't run random software that you got from hacker

2:11.1

forums and the like also applies to password recovery software for ICS devices.

2:18.8

Tregos has an interesting blog post written by Sam Hansen

2:23.3

that documents a case where a password-cracking software was used to not actually

...

Please login to see the full transcript.

Disclaimer: The podcast and artwork embedded on this page are from SANS ISC Handlers, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of SANS ISC Handlers and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.

Copyright © Tapesearch 2026.