Date Author Title

CIS CONTROLS

2022-05-03Rob VandenBrinkFinding the Real "Last Patched" Day (Interim Version)

CIS

2023-01-11/a>Jan KoprivaPassive detection of internet-connected systems affected by vulnerabilities from the CISA KEV catalog
2022-05-03/a>Rob VandenBrinkFinding the Real "Last Patched" Day (Interim Version)
2021-06-15/a>Johannes UllrichMulti Perimeter Device Exploit Mirai Version Hunting For Sonicwall, DLink, Cisco and more
2021-01-18/a>Rob VandenBrinkThe CIS Benchmark for Cisco Nexus (NX-OS) 1.0 went live last week, find it here: https://www.cisecurity.org/cis-benchmarks/
2021-01-07/a>Rob VandenBrinkDirectly related to today's main story on CPE/CVEs - Code Exec in Cisco Jabber, all platforms https://nvd.nist.gov/vuln/detail/CVE-2020-26085
2020-10-21/a>Daniel Wesemann20 new Cisco security advisories for ASA and Firepower with CVSS>7: https://tools.cisco.com/security/center/publicationListing.x
2020-09-15/a>Brad DuncanTraffic Analysis Quiz: Oh No... Another Infection!
2020-08-18/a>Rick WannerISC Blocked
2020-08-05/a>Brad DuncanTraffic Analysis Quiz: What's the Malware From This Infection?
2020-05-19/a>Rick WannerCisco Advisories for FTD, ASA, Firepower 1000
2019-07-18/a>Rob VandenBrinkThe Other Side of Critical Control 1: 802.1x Wired Network Access Controls
2018-10-18/a>Russ McReeCisco Security Advisories 17 OCT 2018
2018-10-10/a>Xavier Mertens"OG" Tools Remain Valuable
2018-01-30/a>Kevin ListonCisco ASA WebVPN Vulnerability
2017-10-20/a>Rick WannerCisco fixes for KRACKs not complete
2017-03-18/a>Rick WannerCisco IOS Remote Code Execution Vulnerability -> https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp
2017-02-03/a>Lorna HutchesonCisco - Issue with Clock Signal Component
2017-01-24/a>Johannes UllrichCritical Vulnerability in Cisco WebEx Chrome Plugin
2016-10-22/a>Guy BruneauRequest for Packets TCP 4786 - CVE-2016-6385
2016-08-31/a>Deborah HaleCisco Security Advisories Issued
2016-08-21/a>Rick WannerCisco ASA SNMP Remote Code Execution Vulnerability
2015-11-01/a>Guy BruneauCisco Products Affected by Multiple Vulnerabilities in ntpd - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp
2015-07-31/a>Russ McReeCisco Security Advisory: Cisco ASR 1000 (Aggregation Services Routers) Fragmented Packet DOS Vuln: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150730-asr1k
2015-06-26/a>Daniel WesemannCisco default credentials - again!
2015-04-03/a>Didier StevensSSH Fingerprints Are Important
2015-02-13/a>Johannes UllrichMicrosoft February Patch Failures Continue: KB3023607 vs. Cisco AnyConnect Client
2014-08-05/a>Johannes UllrichCenter for Internet Security Releases Benchmark for VMWare ESXi 5.5 https://benchmarks.cisecurity.org/downloads/form/index.cfm?download=esxi55.100
2014-07-17/a>Russ McReeCisco Wireless Residential Gateway Remote Code Execution Vulnerability - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
2014-07-02/a>Johannes UllrichCisco Unified Communications Domain Manager Update
2014-05-23/a>Richard PorterHighlights from Cisco Live 2014 - The Internet of Everything
2014-04-11/a>Guy BruneauHeartbleed Fix Available for Download for Cisco Products
2014-03-26/a>Johannes UllrichCisco Semiannual IOS Security Advisory http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar14.html
2014-03-21/a>Johannes UllrichCisco AsyncOS Patch
2014-02-27/a>Richard PorterCisco Prime Infrastructure Command Execution Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140226-pi
2014-02-22/a>Tony CarothersCisco UCS Director Vulnerability and Update
2014-02-19/a>Russ McReeSeven Cisco Security Advisories now available: http://tools.cisco.com/security/center/publicationListing.x
2014-01-25/a>Guy BruneauFinding in Cisco's Annual Security Report
2014-01-10/a>Basil Alawi S.TaherCisco Small Business Devices backdoor fix
2014-01-01/a>Russ McReeSix degrees of celebration: Juniper, ANT, Shodan, Maltego, Cisco, and Tails
2013-09-18/a>Rob VandenBrinkCisco DCNM Update Released
2013-08-02/a>Chris MohanCisco Security Advisory: OSPF LSA Manipulation Vulnerability in Multiple Cisco Products http://tools.cisco.com/security/center/viewAlert.x?alertId=30210
2013-06-26/a>Adrien de BeaupreMultiple Cisco security advisories
2013-03-27/a>Rob VandenBrinkSeveral Cisco IOS DOS Issues Resolved
2013-03-18/a>Kevin ShorttCisco IOS Type 4 Password Issue: http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20130318-type4
2013-01-15/a>Russ McReeCisco introducing Cisco Security Notices 16 JAN 2013
2013-01-09/a>Rob VandenBrinkSecurity Update - Cisco Prime LMS (cisco-sa-20130109-lms - remote execution as root vulnerability) - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms
2013-01-09/a>Rob VandenBrinkSecurity Update - Cisco 7900 Phones - cisco-sa-20130109-uipphone privilege escallation issue - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone
2012-10-11/a>Rob VandenBrinkCyber Security Awareness Month - Day 11 - Vendor Agnostic Standards (Center for Internet Security)
2012-09-27/a>Kevin ShorttCisco IOS Security Advisory Bundle - http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep12.html
2012-09-20/a>Russ McReeApple and Cisco Security Advisories 19 SEP 2012
2012-08-15/a>Guy BruneauCisco IOS XR Software Route Processor DoS Vulnerability - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr
2012-06-21/a>Russ McReeCisco Security Advisories 20 JUN 2012
2012-02-29/a>Russ McReeCisco Security Advisories - 29FEB2011
2012-02-24/a>Guy BruneauCisco Small Business SRP 500 Series Multiple Vulnerabilities - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500
2012-01-27/a>Mark HofmanCISCO Ironport C & M Series telnet vulnerability
2011-10-05/a>Jim ClausingCisco Advisories - FWSM, ASA, and NAC
2011-08-30/a>Scott FendleyCisco Security Advisory - Apache HTTPd DoS
2011-08-03/a>Johannes UllrichCisco shipping malicious warranty CD
2011-06-28/a>Johannes UllrichDeja-Vu: Cisco VPN Windows Client Privilege Escalation
2011-06-01/a>Adrien de BeaupreCisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series - http://www.cisco.com/warp/public/707/cisco-sa-20110601-phone.shtml
2011-06-01/a>Adrien de BeaupreCisco Security Advisory: Default Credentials Vulnerability in Cisco Network Registrar - http://www.cisco.com/warp/public/707/cisco-sa-20110601-cnr.shtml
2011-06-01/a>Adrien de BeaupreCisco Security Advisory: Default Credentials for root Account on the Cisco Media Experience Engine 5600 - http://www.cisco.com/warp/public/707/cisco-sa-20110601-mxe.shtml
2011-06-01/a>Adrien de BeaupreCisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client - http://www.cisco.com/warp/public/707/cisco-sa-20110601-ac.shtml
2011-05-25/a>Daniel WesemannFive new Cisco security advisories released. See http://www.cisco.com/go/psirt
2011-04-28/a>Chris MohanCisco Security Advisories
2011-03-30/a>Adrien de BeaupreTwo Cisco advisories: cisco-sa-20110330-nac and cisco-sa-20110330-acs
2011-03-18/a>Chris MohanDeferral Announcement for the March 2011 Cisco IOS Software Security Advisories - http://seclists.org/bugtraq/2011/Mar/170
2011-02-02/a>Chris MohanDefault Credentials for Root Account on Cisco Personal Video units
2010-11-17/a>Guy BruneauCisco Unified Videoconferencing Affected by Multiple Vulnerabilities
2010-08-13/a>Guy BruneauCisco IOS Software 15.1(2)T TCP DoS
2010-08-04/a>Adrien de BeaupreMultiple Cisco Advisories
2010-07-30/a>Guy BruneauCisco Internet Streamer: Web Server Directory Traversal Vulnerability http://www.cisco.com/warp/public/707/cisco-sa-20100721-spcdn.shtml
2010-07-23/a>Mark HofmanA bit old, however CISCO has updated the November 2009 TLS renegotiation vulnerability with additional vulnerable products and patch information. More details here http://www.cisco.com/warp/public/707/cisco-sa-20091109-tls.shtml
2010-07-10/a>Tony CarothersSoftware Update for Cisco IE 3000 Series Switches
2010-06-18/a>Adrien de BeaupreEnd of the road for Cisco CSA
2010-03-24/a>Kyle HaugsnessCisco security updates
2010-02-28/a>Mari NicholsDisasters take practice
2010-02-17/a>Rob VandenBrinkCisco ASA5500 Security Updates - cisco-sa-20100217-asa
2010-02-17/a>Rob VandenBrinkCisco Security Agent Security Updates: cisco-sa-20100217-csa
2010-02-02/a>Guy BruneauCisco Secure Desktop Remote XSS Vulnerability
2009-11-18/a>Rob VandenBrinkUsing a Cisco Router as a “Remote Collector” for tcpdump or Wireshark
2009-10-16/a>Adrien de BeaupreMultiple Vulnerabilities in Cisco Wireless LAN Controllers
2009-09-08/a>Guy BruneauCisco Security Advisory TCP DoS
2009-08-26/a>Johannes UllrichCisco over-the-air-provisioning skyjacking exploit
2009-05-18/a>Rick WannerCisco SAFE Security Reference Guide Updated
2009-03-30/a>Daniel WesemannWatch your Internet routers!
2009-03-25/a>Mari NicholsCisco Releases IOS Bundle of Vulnerabilities
2009-01-21/a>Raul SilesVulnerabilities on Cisco and Apple products
2008-12-16/a>donald smithCisco's Annual Security report has been released.
2008-09-24/a>Deborah HaleFlurry of Security Advisories from CISCO
2008-09-04/a>Chris CarboniCisco Vulnerabilities
2008-06-18/a>Chris CarboniCisco Security Advisory
2008-05-25/a>Stephen HallCisco's Response to Rootkit presentation
2008-05-23/a>Mike PoorCisco IOS Rootkit thoughts
2008-03-26/a>Swa FrantzenCisco security advisory overview

CONTROLS

2022-05-03/a>Rob VandenBrinkFinding the Real "Last Patched" Day (Interim Version)
2019-10-19/a>Russell EubanksWhat Assumptions Are You Making?
2019-07-25/a>Rob VandenBrinkWhen Users Attack! Users (and Admins) Thwarting Security Controls
2019-07-18/a>Rob VandenBrinkThe Other Side of Critical Control 1: 802.1x Wired Network Access Controls
2017-07-24/a>Russell EubanksTrends Over Time
2017-06-10/a>Russell EubanksAn Occasional Look in the Rear View Mirror
2016-11-23/a>Tom WebbMapping Attack Methodology to Controls
2015-12-21/a>Daniel WesemannCritical Security Controls: Getting to know the unknown
2015-11-04/a>Richard PorterApplication Aware and Critical Control 2
2015-05-29/a>Russell EubanksTrust But Verify
2013-03-13/a>Mark BaggettWipe the drive! Stealthy Malware Persistence Mechanism - Part 1
2011-10-28/a>Daniel WesemannCritical Control 20: Security Skills Assessment and Training to fill Gaps
2011-10-27/a>Mark BaggettCritical Control 18: Incident Response Capabilities
2011-10-26/a>Rick WannerCritical Control 17:Penetration Tests and Red Team Exercises
2010-08-22/a>Rick WannerFailure of controls...Spanair crash caused by a Trojan
2010-08-05/a>Rob VandenBrinkAccess Controls for Network Infrastructure
2010-06-07/a>Manuel Humberto Santander PelaezSoftware Restriction Policy to keep malware away