Date Author Title

CHIP AND PIN

2014-02-10Rob VandenBrinkIsn't it About Time to Get Moving on Chip and PIN?

CHIP

2014-02-10/a>Rob VandenBrinkIsn't it About Time to Get Moving on Chip and PIN?
2013-12-19/a>Rob VandenBrinkTarget US - Credit Card Data Breach

AND

2024-08-23/a>Jesse La GrewPandas Errors: What encoding are my logs in?
2024-07-16/a>Guy BruneauWho You Gonna Call? AndroxGh0st Busters! [Guest Diary]
2024-07-10/a>Jesse La GrewFinding Honeypot Data Clusters Using DBSCAN: Part 1
2024-04-29/a>Johannes UllrichD-Link NAS Device Backdoor Abused
2024-02-20/a>Xavier MertensPython InfoStealer With Dynamic Sandbox Detection
2023-10-31/a>Xavier MertensMultiple Layers of Anti-Sandboxing Techniques
2023-07-01/a>Russ McReeSandfly Security
2023-06-11/a>Guy BruneauDShield Honeypot Activity for May 2023
2023-05-24/a>Tom WebbIR Case/Alert Management
2023-03-12/a>Guy BruneauAsynRAT Trojan - Bill Payment (Pago de la factura)
2022-09-26/a>Xavier MertensEasy Python Sandbox Detection
2022-08-22/a>Xavier Mertens32 or 64 bits Malware?
2022-06-03/a>Xavier MertensSandbox Evasion... With Just a Filename!
2021-12-06/a>Xavier MertensThe Importance of Out-of-Band Networks
2021-04-02/a>Xavier MertensC2 Activity: Sandboxes or Real Victims?
2021-02-13/a>Guy BruneauvSphere Replication updates address a command injection vulnerability (CVE-2021-21976) - https://www.vmware.com/security/advisories/VMSA-2021-0001.html
2021-02-05/a>Xavier MertensVBA Macro Trying to Alter the Application Menus
2020-09-16/a>Johannes UllrichDo Vulnerabilities Ever Get Old? Recent "Mirai" Variant Scanning for 20 Year Old Amanda Version?
2020-09-03/a>Xavier MertensSandbox Evasion Using NTP
2020-04-16/a>Johannes UllrichUsing AppLocker to Prevent Living off the Land Attacks
2020-02-14/a>Xavier MertensKeep an Eye on Command-Line Browsers
2020-02-07/a>Xavier MertensSandbox Detection Tricks & Nice Obfuscation in a Single VBScript
2019-07-16/a>Russ McReeCommando VM: The Complete Mandiant Offensive VM
2019-01-10/a>Brad DuncanHeartbreaking Emails: "Love You" Malspam
2018-08-01/a>Johannes UllrichWhen Cameras and Routers attack Phones. Spike in CVE-2014-8361 Exploits Against Port 52869
2018-07-30/a>Xavier MertensExploiting the Power of Curl
2018-07-24/a>Brad DuncanRecent Emotet activity
2018-05-02/a>Russ McReeWindows Commands Reference - An InfoSec Must Have
2017-01-06/a>John BambenekGreat Misadventures of Security Vendors: Absurd Sandboxing Edition
2017-01-05/a>John BambenekNew Year's Resolution: Build Your Own Malware Lab?
2016-12-10/a>Didier StevensSleeping VBS Really Wants To Sleep
2016-07-26/a>Johannes UllrichCommand and Control Channels Using "AAAA" DNS Records
2016-06-22/a>Bojan ZdrnjaSecurity through obscurity never works
2016-05-02/a>Rick WannerFake Chrome update for Android
2016-04-15/a>Xavier MertensWindows Command Line Persistence?
2015-12-16/a>Xavier MertensPlaying With Sandboxes Like a Boss
2015-12-05/a>Guy BruneauAre you looking to setup your own Malware Sandbox?
2015-12-04/a>Tom WebbAutomating Phishing Analysis using BRO
2015-10-12/a>Guy BruneauCritical Vulnerability in Multiple Cisco Products - Apache Struts 2 Command Execution http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2
2015-07-28/a>Rick WannerAndroid Stagefright multimedia viewer prone to remote exploitation
2015-04-27/a>Richard PorterWhen Prevention Fails, Incident Response Begins
2014-09-12/a>Chris MohanAre credential dumps worth reviewing?
2014-08-12/a>Adrien de BeaupreHost discovery with nmap
2014-08-04/a>Russ McReeThreats & Indicators: A Security Intelligence Lifecycle
2014-05-01/a>Johannes UllrichMicrosoft Announces Special Patch for IE 0-day (Win XP included!)
2014-04-26/a>Guy BruneauAndroid Users - Beware of Bitcoin Mining Malware
2014-04-05/a>Jim ClausingThose strange e-mails with URLs in them can lead to Android malware
2014-04-01/a>Basil Alawi S.TaherUpgrading Your Android, Elevating My Malware
2014-03-11/a>Basil Alawi S.TaherIntroduction to Memory Analysis with Mandiant Redline
2014-02-10/a>Rob VandenBrinkIsn't it About Time to Get Moving on Chip and PIN?
2014-02-07/a>Rob VandenBrinkNew ISO Standards on Vulnerability Handling and Disclosure
2014-01-23/a>Chris MohanLearning from the breaches that happens to others Part 2
2013-12-05/a>Mark HofmanUpdated Standards Part 1 - ISO 27001
2013-09-23/a>Rob VandenBrinkHow do you spell "PSK"?
2013-02-22/a>Chris MohanPHP 5.4.12 and PHP 5.3.22 released http://www.php.net/ChangeLog-5.php
2013-02-17/a>Guy BruneauHP ArcSight Connector Appliance and Logger Vulnerabilities
2013-01-30/a>Richard PorterGetting Involved with the Local Community
2013-01-14/a>Richard PorterJanuary 2013 Microsoft Out of Cycle Patch
2013-01-08/a>Jim ClausingCuckoo 0.5 is out and the world didn't end
2012-12-13/a>Johannes UllrichWhat if Tomorrow Was the Day?
2012-10-24/a>Russ McReeCyber Security Awareness Month - Day 24 - A Standard for Information Security Incident Management - ISO 27035
2012-10-23/a>Rob VandenBrinkCyber Security Awareness Month - Day 23: Character Encoding Standards - ASCII and Successors
2012-10-17/a>Rob VandenBrinkCyber Security Awareness Month - Day 17 - A Standard for Risk Management - ISO 27005
2012-10-12/a>Mark HofmanCyber Security Awareness Month - Day 12 PCI DSS
2012-10-11/a>Rob VandenBrinkCyber Security Awareness Month - Day 11 - Vendor Agnostic Standards (Center for Internet Security)
2012-10-09/a>Johannes UllrichCyber Security Awreness Month - Day 9 - Request for Comment (RFC)
2012-05-18/a>Johannes UllrichZTE Score M Android Phone backdoor
2012-04-23/a>Russ McReeEmergency Operations Centers & Security Incident Management: A Correlation
2012-03-03/a>Jim ClausingNew automated sandbox for Android malware
2011-11-03/a>Richard PorterAn Apple, Inc. Sandbox to play in.
2011-11-01/a>Russ McReeHoneynet Project: Android Reverse Engineering (A.R.E.) Virtual Machine released
2011-10-29/a>Richard PorterThe Sub Critical Control? Evidence Collection
2011-09-15/a>Johannes UllrichSSH Vandals?
2011-09-07/a>Lenny ZeltserAnalyzing Mobile Device Malware - Honeynet Forensic Challenge 9 and Some Tools
2011-05-18/a>Bojan ZdrnjaAndroid, HTTP and authentication tokens
2011-03-22/a>Chris MohanRead only USB stick trick
2011-03-03/a>Manuel Humberto Santander PelaezRogue apps inside Android Marketplace
2011-01-08/a>Guy BruneauPandaLabs 2010 Annual Report
2010-12-31/a>Bojan ZdrnjaAndroid malware enters 2011
2010-11-19/a>Jason LamAdobe Reader X - Sandbox
2010-10-19/a>Rob VandenBrinkCyber Security Awareness Month - Day 19 - VPN and Remote Access Tools
2010-08-04/a>Tom ListonIncident Reporting - Liston's "How-To" Guide
2010-07-25/a>Rick WannerUpdated version of Mandiant's Web Historian
2010-07-21/a>Adrien de BeaupreAdobe Reader Protected Mode
2010-02-07/a>Rick WannerMandiant Mtrends Report
2010-02-06/a>Guy BruneauLANDesk Management Gateway Vulnerability
2010-01-27/a>Raul SilesCommand Line Kung Fu
2010-01-21/a>Chris Carboni* Microsoft Out Of Band Patch Release
2010-01-11/a>Johannes UllrichFake Android Application
2009-07-24/a>Rick WannerMicrosoft Out of Band Patch
2009-06-11/a>Rick WannerWHO Declares Flu A(H1N1) a Pandemic
2009-05-19/a>Rick WannerNew Version of Mandiant Highlighter
2009-05-01/a>Adrien de BeaupreIncident Management
2009-04-26/a>Johannes UllrichPandemic Preparation - Swine Flu
2009-04-16/a>Adrien de BeaupreIncident Response vs. Incident Handling
2009-04-07/a>Johannes UllrichCommon Apache Misconception
2009-02-05/a>Rick WannerMandiant Memoryze review, Hilighter, other Mandiant tools!
2008-11-25/a>Andre LudwigTmobile G1 handsets having DNS problems?
2008-10-29/a>Deborah HaleDay 29 - Should I Switch Software Vendors?
2008-10-23/a>Mark HofmanMicrosoft out-of-band patch - Severity Critical
2008-09-09/a>Swa Frantzenwordpress upgrade
2008-08-09/a>Deborah HaleCleveland Outage

PIN

2024-05-22/a>Rob VandenBrinkNMAP Scanning without Scanning (Part 2) - The ipinfo API
2023-03-25/a>Guy BruneauMicrosoft Released an Update for Windows Snipping Tool Vulnerability
2023-03-22/a>Didier StevensWindows 11 Snipping Tool Privacy Bug: Inspecting PNG Files
2021-08-04/a>Yee Ching TokPivoting and Hunting for Shenanigans from a Reported Phishing Domain
2021-05-06/a>Xavier MertensAlternative Ways To Perform Basic Tasks
2018-11-18/a>Guy BruneauMultipurpose PCAP Analysis Tool
2018-11-17/a>Xavier MertensQuickly Investigating Websites with Lookyloo
2017-10-06/a>Johannes UllrichWhat's in a cable? The dangers of unauthorized cables
2017-01-10/a>Johannes UllrichPort 37777 "MapTable" Requests
2015-03-26/a>Daniel WesemannPin-up on your Smartphone!
2014-03-12/a>Johannes UllrichWordpress "Pingback" DDoS Attacks
2014-02-10/a>Rob VandenBrinkIsn't it About Time to Get Moving on Chip and PIN?
2014-02-04/a>Johannes UllrichOdd ICMP Echo Request Payload
2013-12-19/a>Rob VandenBrinkTarget US - Credit Card Data Breach
2013-12-01/a>Richard PorterBPF, PCAP, Binary, hex, why they matter?
2013-11-04/a>Manuel Humberto Santander PelaezWhen attackers use your DNS to check for the sites you are visiting
2013-03-27/a>Adam SwangerIPv6 Focus Month: Guest Diary: Stephen Groat - IPv6 moving target defense
2013-02-22/a>Johannes UllrichZendesk breach affects Tumblr/Pinterest/Twitter
2012-11-26/a>John BambenekOnline Shopping for the Holidays? Tips, News and a Fair Warning
2012-07-21/a>Rick WannerTippingPoint DNS Version Request increase
2011-09-29/a>Daniel WesemannThe SSD dilemma
2011-08-08/a>Rob VandenBrinkPing is Bad (Sometimes)
2011-06-09/a>Richard PorterOne Browser to Rule them All?
2011-02-08/a>Johannes UllrichTippingpoint Releases Details on Unpatched Bugs
2010-12-02/a>Kevin JohnsonRobert Hansen and our happiness