ISC StormCast for Thursday, June 16th, 2022

Terraforming Honeypots: Using IaaC & Cloud to Attract Attacks

https://isc.sans.edu/forums/diary/Terraforming+Honeypots+Installing+DShield+Sensors+in+the+Cloud/28748/

Zimbra Email - Stealing Clear=Text Credenitals via Memcache Injection

https://blog.sonarsource.com/zimbra-mail-stealing-clear-text-credentials-via-memcache-injection/

Cloud Middleware Dataset

https://github.com/wiz-sec/cloud-middleware-dataset

CVE-2022-26937 Windows Network File System NLM Portmap Stack Buffer Overflow

https://www.zerodayinitiative.com/blog/2022/6/7/cve-2022-26937-microsoft-windows-network-file-system-nlm-portmap-stack-buffer-overflow

Citrix Application Delivery Management Security Bulletin

https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-cve202227512

Hardcoded Backdoor User and Outdated Software Components in Nexans FTTO GigaSwitch

https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/

adm aws azure business citrix cloud computer cyber cybersecurity daily ftto hacking honeypot infosec internet isc middleware network nexans nfs security terraform windows zimbra