#benign — Public Fediverse posts

SciTech Chronicles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .Jan 15, 2025

https://bit.ly/stc011525

#Misinfirmation #outrage #epistemic #hemp #CBD #rhizosphere #phyllosphere #genotypes #microbiome #humility #anger #benign #Kokoro #epub #python #pip #streaming #Plex #video #audio #images

#Man shares two #lessons he learned from #disrupting a #racist #joke in a group of #white #people.

"Can you #speakup? Because our #silence is not #benign?"

#Women #Transgender #LGBTQ #LGBTQIA #Hate #Bigotry #Discrimination #PunchingDown #Racism #WhiteSupremacy #BlackMastodon

https://www.upworthy.com/white-person-shares-two-lessons-from-stopping-a-racist-joke-rp

Attackers have advanced their #techniques for leveraging the "search-ms" uniform resource identifier (#URI) #protocol from #malicious #documents to direct users to websites that exploit #search-ms functionality using #JavaScript hosted on the page.

The search-ms protocol lets Windows users conduct search operations via a URI. Normally, it’s a #benign operation, but if combined with another vulnerability such as within #Windows documents, #attackers can potentially use it as a part of a broader #phishing or #malware campaign.

This attack requires #gaps at multiple layers of an organization’s defenses. First, properly leveraging email filters with URL rewriting and malicious content controls will limit the impact of a search-ms attack. Second, it relies on limited restrictions on outbound internet browsing — both at the firewall and internet proxy level. Once again, outbound controls are critical.

https://www.scmagazine.com/news/attackers-exploit-windows-based-search-ms-protocol

Full blog post with technical details available here: https://www.trellix.com/en-us/about/newsroom/stories/research/beyond-file-search-a-novel-method.html

Benign - I have just completed this room! Check it out: https://tryhackme.com/room/benign #tryhackme #security #SIEM #splunk #lolbin #C2communication #benign via @RealTryHackMe