ISC StormCast for Wednesday, December 20th, 2023

What are they looking for? Scans for OpenID Connect Configuration

https://isc.sans.edu/diary/What%20are%20they%20looking%20for%3F%20Scans%20for%20OpenID%20Connect%20Configuration%20%28Update%3A%20CitrixBleed%29/30498

Terrapin Attack Against SSH

https://terrapin-attack.com/TerrapinAttack.pdf

ALPHV/Blackcat Ransomware Disrupted and Decryptor Available

https://www.justice.gov/opa/pr/justice-department-disrupts-prolific-alphvblackcat-ransomware-variant

alphv attack blackcat blackcat ransomware business citrix computer configuration connect cyber cybersecurity daily december decryptor hacking infosec internet isc network openid openid connect ransomware scans security ssh terrapin