Here is the YARA rule I used to detect "Orphaned VBA Projects Inside DWG Files". rule autocad_orphaned_vba_project { strings: $a = "AC10" $b = {D0 CF 11 E0 A1 B1 1A E1} $c = "[Host Extender Info]" ascii condition: $a at 0 and uint32(0x24) == 0 and $b and $c } A VirusTotal retrohunt with this rule gave me only 2 detections: 09d4607941e458f6dbb6be17825641d863c0b37c185027984e137d8a67e919d8 3310c1a9bfe6115e49d8ac372cef5f460850da05138340107e66b958a6b5bca6 Didier Stevens Senior…
Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)
About this summary. This is a short excerpt from the description that SANS Internet Storm Center published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://isc.sans.edu/diary/rss/33434
Source attribution: headline and facts are from SANS Internet Storm Center (isc.sans.edu). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)
This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too…
Canadian man extradited to the U.S. for his role in computer hacking scheme targeting universities
November 3, 2026: ROCHESTER, N.Y.-U.S. Attorney Michael DiGiacomo announced today that a federal grand jury has returned an indictment charging Ryan James Roach, 35 of…
ISC Stormcast For Thursday, November 5th, 2026 https://isc.sans.edu/podcastdetail/10166, (Thu, Nov 5th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
U.S. Charges Canadian Man in Alleged Hack of University Supercomputers
A Canadian man was extradited to the U.S. to face charges over hacking universities and hijacking their computers to mine cryptocurrency. A Canadian man, Ryan James…
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its…
🏴☠️ N0n has just published a new victim : Delta Dental of Missouri
dental insurance · United States | The customer relationship database of a dental benefits insurer: 48,528 distinct email addresses and 17,913 telephone number lines…