Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
WEAK ENCRYPTION
2012-07-18	Rob VandenBrink	Vote NO to Weak Encryption!
WEAK
2021-06-21/a>	Rick Wanner	Mitre CWE - Common Weakness Enumeration
2012-07-18/a>	Rob VandenBrink	Vote NO to Weak Encryption!
ENCRYPTION
2023-08-22/a>	Xavier Mertens	Have You Ever Heard of the Fernet Encryption Algorithm?
2021-07-14/a>	Jan Kopriva	One way to fail at malspam - give recipients the wrong password for an encrypted attachment
2020-12-19/a>	Guy Bruneau	Secure Communication using TLS in Elasticsearch
2020-11-30/a>	Didier Stevens	Decrypting PowerShell Payloads (video)
2019-09-22/a>	Didier Stevens	Video: Encrypted Sextortion PDFs
2019-09-16/a>	Didier Stevens	Encrypted Sextortion PDFs
2019-04-13/a>	Johannes Ullrich	Configuring MTA-STS and TLS Reporting For Your Domain
2019-03-25/a>	Didier Stevens	"VelvetSweatshop" Maldocs: Shellcode Analysis
2019-03-23/a>	Didier Stevens	"VelvetSweatshop" Maldocs
2018-07-24/a>	Tom Webb	Cell Phone Monitoring. Who is Watching the Watchers?
2018-06-17/a>	Didier Stevens	Encrypted Office Documents
2018-05-16/a>	Mark Hofman	EFAIL, a weakness in openPGP and S\MIME
2017-12-23/a>	Didier Stevens	Encrypted PDFs
2017-10-25/a>	Mark Hofman	DUHK attack, continuing a week of named issues
2016-03-23/a>	Bojan Zdrnja	Abusing Oracles
2015-12-29/a>	Daniel Wesemann	New Years Resolutions
2015-09-01/a>	Daniel Wesemann	Encryption of "data at rest" in servers
2015-02-11/a>	Johannes Ullrich	Did PCI Just Kill E-Commerce By Saying SSL is Not Sufficient For Payment Info ? (spoiler: TLS!=SSL)
2014-09-19/a>	Guy Bruneau	CipherShed Fork from TrueCrypt Project, Support Windows, Mac OS and Linux - https://ciphershed.org
2013-09-09/a>	Johannes Ullrich	SSL is broken. So what?
2013-08-14/a>	Johannes Ullrich	Imaging LUKS Encrypted Drives
2012-12-27/a>	John Bambenek	It's 3pm 2 days after Christmas, do you know where your unmanaged SSH keys are?
2012-12-04/a>	Johannes Ullrich	Where do your backup tapes go to die?
2012-07-18/a>	Rob VandenBrink	Vote NO to Weak Encryption!
2011-07-30/a>	Deborah Hale	Data Encryption Ban? Really?
2010-06-29/a>	Johannes Ullrich	How to be a better spy: Cyber security lessons from the recent russian spy arrests
2009-09-07/a>	Lorna Hutcheson	Encrypting Data

WEAK ENCRYPTION

WEAK

ENCRYPTION