Network Security News Summary for Monday December 18th, 2023

From SANS Internet Storm Center's Daily Network Security News Podcast Johannes B. Ullrich

Rocket MQ Exploit; C# Payload; 3CX Vuln; QNAP NVR Exploit; PFSense Vulnerabilith; #holidayhack An Example of a RocketMQ Exploit Scanner https://isc.sans.edu/diary/An%20Example%20of%20RocketMQ%20Exploit%20Scanner/30492 C# Payload Phoning to a Cobalt Strike Server https://isc.sans.edu/diary/CSharp%20Payload%20Phoning%20to%20a%20CobaltStrike%20Server/30490 3CX SQL Injection Vulnerability https://www.3cx.com/blog/news/sql-database-integration/ QNAP Viostor 0-Day Vulnerablity https://www.akamai.com/blog/security-research/qnap-viostor-zero-day-vulnerability-spreading-mirai-patched PFSense Vulnerability https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/ SANS Holiday Hack Challenge https://sans.org/holidayhack keywords: sans; holiday; hack; challenge; qnap; viostor; 3cx; sql; injection; rocketmq