1c:I[5025,["2266","static/chunks/870fdd6f-6bc796c30d2d789b.js","6874","static/chunks/6874-1092c3b716d98184.js","3063","static/chunks/3063-d60ec0b08e19cd33.js","7698","static/chunks/7698-29ba5779557874ff.js","5801","static/chunks/app/podcast/%5BpodcastSlug%5D/%5BpodcastShortId%5D/%5BepisodeSlug%5D/%5BepisodeShortId%5D/page-b8b82ab127fe442b.js"],"default"] 1d:I[5163,["2266","static/chunks/870fdd6f-6bc796c30d2d789b.js","6874","static/chunks/6874-1092c3b716d98184.js","3063","static/chunks/3063-d60ec0b08e19cd33.js","7698","static/chunks/7698-29ba5779557874ff.js","5801","static/chunks/app/podcast/%5BpodcastSlug%5D/%5BpodcastShortId%5D/%5BepisodeSlug%5D/%5BepisodeShortId%5D/page-b8b82ab127fe442b.js"],"default"] 1e:T559,
Shellcode Encoded in UUIDs
Attackers are using UUIDs to encode Shellcode. The 128 Bit (or 16 Bytes) encoded in each UUID are converted to shell code to implement a cobalt strike beacon
https://isc.sans.edu/diary/Shellcode%20Encoded%20in%20UUIDs/31752
Moxa CVE-2024-12297 Expanded to PT Switches
Moxa in January first releast an update to address a fronted authorizaation logic disclosure vulnerability. It now updated the advisory and included the PT series switches as vulenrable.
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241408-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-identified-in-pt-switches
Opentext Insufficently Protected Credentials
https://portal.microfocus.com/s/article/KM000037455?language=en_US
Livewire Volt API vulnerability
https://github.com/livewire/volt/securi

‌

Episode description

SANS Stormcast Tuesday Mar 11th: Shellcode as UUIDs; Moxe Switch Vuln Updates; Opentext Vuln; Livewire Volt Vuln;

Episode description