Botnet Hunting for Vulnerabilities in Diagnostic Tools, (Tue, Aug 4th)

A SANS Internet Storm Center alert highlights a botnet actively scanning for vulnerabilities in diagnostic tools. The issue stems from a common practice of diagnostic tools executing operating system commands directly, often without proper separation of user-provided input, leading to command injection vulnerabilities.…