Network Security News Summary for Wednesday January 31 2018
Channel: Internet Storm Center Stormcast
Date: 2018-01-30

DCShadow Attack; Cisco WebVPN Vulnerability Update; Bypassing DDE Protection via OneNote

DCShadow Attack
 https://www.dropbox.com/s/baypdb6glmvp0j9/Buehat%20IL%20v2.3.pdf
 https://blog.alsid.eu/dcshadow-explained-4510f52fc19d

Cisco WebVPN Update
 https://isc.sans.edu/forums/diary/Cisco+ASA+WebVPN+Vulnerability/23289/

Reviving DDE Code Execution via OneNote
 https://posts.specterops.io/reviving-dde-using-onenote-and-excel-for-code-execution-d7226864caee