ISC StormCast for Friday, June 17th, 2022

Houdini is Back Delivered Through a JavaScript Dropper

https://isc.sans.edu/forums/diary/Houdini+is+Back+Delivered+Through+a+JavaScript+Dropper/28746/

Drifting Cloud: Zero-Day Sophos Firewall Exploitation

https://www.volexity.com/blog/2022/06/15/driftingcloud-zero-day-sophos-firewall-exploitation-and-an-insidious-breach/

Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stack

https://www.zerodayinitiative.com/blog/2022/6/15/cve-2022-23088-exploiting-a-heap-overflow-in-the-freebsd-wi-fi-stack

Cisco Email Security Appliance and Cisco Secure Email and Web Manager

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-esa-auth-bypass-66kEcxQD

Analyzing the Fastjson "Auto Type Bypass" RCE vulnerability

https://jfrog.com/blog/cve-2022-25845-analyzing-the-fastjson-auto-type-bypass-rce-vulnerability/

business cisco computer cyber cybersecurity daily email exploit fastjson firewall freebsd hacking houdini infosec internet isc network rce security sophos wifi