SANS Stormcast Thursday, October 9th, 2025: Polymorphic Python; Ssh ProxyCommand Vuln; SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) podcast

Artwork

Security Tech Software Development SANS ISC Handlers Johannes B. Ullrich News Tech News

Indhold leveret af SANS ISC Handlers and Johannes B. Ullrich. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af SANS ISC Handlers and Johannes B. Ullrich eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) « »
SANS Stormcast Thursday, October 9th, 2025: Polymorphic Python; ssh ProxyCommand Vuln;

2M ago 6:12

Del

MP3•Episode hjem

Indhold leveret af SANS ISC Handlers and Johannes B. Ullrich. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af SANS ISC Handlers and Johannes B. Ullrich eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

Polymorphic Python Malware
Xavier discovered self-modifying Python code on Virustotal. The remote access tool takes advantage of the inspect module to modify code on the fly.
https://isc.sans.edu/diary/Polymorphic%20Python%20Malware/32354
SSH ProxyCommand Vulnerability
A user cloning a git repository may be tricked into executing arbitrary code via the SSH proxycommand option.
https://dgl.cx/2025/10/bash-a-newline-ssh-proxycommand-cve-2025-61984
Framelink Figma MCP Server CVE-2025-53967
Framelink Figma s MCP server suffers from a remote code execution vulnerability.

… continue reading

3169 episoder

#Security #Tech #Software Development #SANS ISC Handlers #Johannes B. Ullrich #News #Tech News

Artwork

SANS Stormcast Thursday, October 9th, 2025: Polymorphic Python; ssh ProxyCommand Vuln;

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

1,192 subscribers

published 2M ago

Del

MP3•Episode hjem

Indhold leveret af SANS ISC Handlers and Johannes B. Ullrich. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af SANS ISC Handlers and Johannes B. Ullrich eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

Polymorphic Python Malware
Xavier discovered self-modifying Python code on Virustotal. The remote access tool takes advantage of the inspect module to modify code on the fly.
https://isc.sans.edu/diary/Polymorphic%20Python%20Malware/32354
SSH ProxyCommand Vulnerability
A user cloning a git repository may be tricked into executing arbitrary code via the SSH proxycommand option.
https://dgl.cx/2025/10/bash-a-newline-ssh-proxycommand-cve-2025-61984
Framelink Figma MCP Server CVE-2025-53967
Framelink Figma s MCP server suffers from a remote code execution vulnerability.

… continue reading

3169 episoder

#Security #Tech #Software Development #SANS ISC Handlers #Johannes B. Ullrich #News #Tech News

Alle episoder

×

Velkommen til Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

Lyt til 500+ emner

Lyt til dette show, mens du udforsker