CLOUD XEN VMWARE VIRTUALIZATION GOOGLE APPS AMAZON EC2 |
| 2010-02-17 | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
CLOUD |
| 2025-02-15/a> | Xavier Mertens | The Danger of IP Volatility |
| 2024-03-14/a> | Jan Kopriva | Increase in the number of phishing messages pointing to IPFS and to R2 buckets |
| 2023-11-27/a> | Johannes Ullrich | Scans for ownCloud Vulnerability (CVE-2023-49103) |
| 2023-01-12/a> | Russ McRee | Prowler v3: AWS & Azure security assessments |
| 2022-07-22/a> | Yee Ching Tok | An Analysis of a Discerning Phishing Website |
| 2022-04-11/a> | Johannes Ullrich | Spring: It isn't just about Spring4Shell. Spring Cloud Function Vulnerabilities are being probed too. |
| 2022-03-30/a> | Johannes Ullrich | Java Springtime Confusion: What Vulnerability are We Talking About |
| 2021-11-10/a> | Xavier Mertens | Shadow IT Makes People More Vulnerable to Phishing |
| 2021-05-07/a> | Daniel Wesemann | Exposed Azure Storage Containers |
| 2021-01-29/a> | Xavier Mertens | Sensitive Data Shared with Cloud Services |
| 2020-11-18/a> | Xavier Mertens | When Security Controls Lead to Security Issues |
| 2020-07-28/a> | Johannes Ullrich | All I want this Tuesday: More Data |
| 2020-05-05/a> | Russ McRee | Cloud Security Features Don't Replace the Need for Personnel Security Capabilities |
| 2020-03-11/a> | Xavier Mertens | Agent Tesla Delivered via Fake Canon EOS Notification on Free OwnCloud Account |
| 2020-03-05/a> | Xavier Mertens | Will You Put Your Password in a Survey? |
| 2019-06-24/a> | Johannes Ullrich | Extensive BGP Issues Affecting Cloudflare and possibly others |
| 2018-10-08/a> | Guy Bruneau | Apple Security Updates |
| 2018-03-03/a> | Xavier Mertens | Reminder: Beware of the "Cloud" |
| 2017-12-01/a> | Xavier Mertens | Phishing Kit (Ab)Using Cloud Services |
| 2017-02-24/a> | Rick Wanner | Cloudflare data leak...what does it mean to me? |
| 2015-08-19/a> | Bojan Zdrnja | Outsourcing critical infrastructure (such as DNS) |
| 2014-07-15/a> | Daniel Wesemann | AOC Cloud |
| 2014-07-09/a> | Daniel Wesemann | Who inherits your IP address? |
| 2014-05-07/a> | Johannes Ullrich | De-Clouding your Life: Things that should not go into the cloud. |
| 2014-04-21/a> | Daniel Wesemann | Allow us to leave! |
| 2013-03-28/a> | John Bambenek | Where Were You During the Great DDoS Cybergeddon of 2013? |
| 2013-03-23/a> | Guy Bruneau | Apple ID Two-step Verification Now Available in some Countries |
| 2013-01-09/a> | Rob VandenBrink | Hotmail seeing some temporary access issues |
| 2011-06-12/a> | Mark Hofman | Cloud thoughts |
| 2010-02-22/a> | Rob VandenBrink | Not Every Cloud has a Silver Lining |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
| 2009-11-29/a> | Patrick Nolan | A Cloudy Weekend |
XEN |
| 2016-07-27/a> | Xavier Mertens | Critical Xen PV guests vulnerabilities |
| 2014-10-01/a> | Russ McRee | Xen Security Advisory - XSA 108 - http://xenbits.xen.org/xsa/advisory-108.html |
| 2011-07-28/a> | Guy Bruneau | XenApp and XenDesktop could result in Arbitrary Code Execution |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
VMWARE |
| 2025-03-12/a> | Johannes Ullrich | Scans for VMWare Hybrid Cloud Extension (HCX) API (Log4j - not brute forcing) |
| 2023-10-20/a> | Yee Ching Tok | VMware Releases Security Patches for Fusion, Workstation and Aria Operations for Logs |
| 2023-05-14/a> | Guy Bruneau | VMware Aria Operations addresses multiple Local Privilege Escalations and a Deserialization issue |
| 2023-03-18/a> | Xavier Mertens | Old Backdoor, New Obfuscation |
| 2023-02-03/a> | Jim Clausing | VMware workstation 17.0.1 fixes arbitrary file deletion issue - https://www.vmware.com/security/advisories/VMSA-2023-0003.html |
| 2021-11-04/a> | Tom Webb | Xmount for Disk Images |
| 2020-08-22/a> | Guy Bruneau | VMware App Volumes patches address Stored Cross-Site Scripting (XSS) vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0019.html |
| 2020-07-11/a> | Guy Bruneau | VMware XPC Client validation privilege escalation vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0017.html |
| 2020-06-15/a> | Rick Wanner | VMWare Security Advisory - VMSA-2020-0013 - https://www.vmware.com/security/advisories/VMSA-2020-0013.html |
| 2020-05-19/a> | Rick Wanner | VMWare Security Advisory - VMSA-2020-0010 - https://www.vmware.com/security/advisories/VMSA-2020-0010.html |
| 2020-05-09/a> | Rick Wanner | VMWare vRealize Critical vulnerabilities due to SaltStack - VMSA-2020-0009 |
| 2020-04-10/a> | Scott Fendley | Critical Vuln in vCenter vmdir (CVE-2020-3952) |
| 2018-11-20/a> | Xavier Mertens | VMware Affected by Dell EMC Avamar Vulnerability |
| 2018-10-17/a> | Russ McRee | VMSA-2018-0026 VMware ESXi, Workstation & Fusion updates address out-of-bounds read vulnerability https://www.vmware.com/security/advisories/VMSA-2018-0026.html |
| 2018-05-22/a> | Xavier Mertens | VMware Workstation and Fusion updates address signature bypass and multiple denial-of-service vulnerabilities https://www.vmware.com/security/advisories/VMSA-2018-0013.html |
| 2017-12-20/a> | Richard Porter | VMWare Security Advisory: VMSA-2017-0021: https://www.vmware.com/security/advisories/VMSA-2017-0021.html |
| 2017-09-16/a> | Guy Bruneau | VMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities - https://www.vmware.com/security/advisories/VMSA-2017-0015.html |
| 2017-03-29/a> | Xavier Mertens | Critical VMware vulnerabilities disclosed |
| 2017-01-31/a> | Johannes Ullrich | VMWare Security Advisory for AirWatch http://www.vmware.com/security/advisories/VMSA-2017-0001.html |
| 2016-11-23/a> | Tom Webb | Vmware Patches VMSA-2016-0005.5, VMSA-2016-0018.3 and VMSA-2016-0021 |
| 2016-10-26/a> | Johannes Ullrich | New VMWare Security Advisory: VMSA-2016-0017 Information Disclosure in VMWare Fusion and VMWare Tools https://www.vmware.com/security/advisories/VMSA-2016-0017.html |
| 2016-05-25/a> | Rick Wanner | VMWare Security Advisories |
| 2016-02-23/a> | Xavier Mertens | VMware VMSA-2016-0002 |
| 2016-02-13/a> | Guy Bruneau | VMware VMSA-2015-0007.3 has been Re-released |
| 2016-01-10/a> | Jim Clausing | VMware security update |
| 2015-12-19/a> | Russell Eubanks | VMWare Security Advisory |
| 2015-04-04/a> | Didier Stevens | VMware Product Updates Address Critical Information Disclosure Issue In JRE |
| 2014-12-05/a> | Basil Alawi S.Taher | VMware new and updated security advisories |
| 2014-10-23/a> | Russ McRee | Digest: 23 OCT 2014 |
| 2014-10-01/a> | Russ McRee | VMware security advisory: VMSA-2014-0010 http://www.vmware.com/security/advisories/VMSA-2014-0010.html |
| 2014-09-12/a> | Chris Mohan | VMware NSX and vCNS product updates address a critical information disclosure vulnerability http://www.vmware.com/security/advisories/VMSA-2014-0009.html |
| 2014-08-14/a> | Basil Alawi S.Taher | Threats to virtual environments |
| 2014-08-05/a> | Johannes Ullrich | Center for Internet Security Releases Benchmark for VMWare ESXi 5.5 https://benchmarks.cisecurity.org/downloads/form/index.cfm?download=esxi55.100 |
| 2014-04-15/a> | Richard Porter | VMWare Advisory VMSA-2014-0004 - Updates on OpenSSL HeartBleed http://www.vmware.com/security/advisories/VMSA-2014-0004.html |
| 2014-04-11/a> | Rob VandenBrink | VMware Security Advisories / Patches released for 2 issues (NOT Heartbleed) - http://www.vmware.com/security/advisories/VMSA-2014-0003.html and http://www.vmware.com/security/advisories/VMSA-2014-0002.html |
| 2014-01-17/a> | Russ McRee | New and updated VMWare security advisories - http://www.vmware.com/security/advisories |
| 2013-12-23/a> | Scott Fendley | VMWare ESX/ESXi Security Advisory |
| 2013-12-04/a> | Adrien de Beaupre | VMware Security Advisory VMSA-2013-0014 |
| 2013-11-15/a> | Johannes Ullrich | VMWare Security Advisory: http://www.vmware.com/security/advisories/VMSA-2013-0013.html |
| 2013-08-30/a> | Kevin Liston | VMware ESXi and ESX address an NFC Protocol Unhandled Exception |
| 2013-08-02/a> | Chris Mohan | VMware Security Advisory VMSA-2013-0009 - http://www.vmware.com/security/advisories/VMSA-2013-0009.html |
| 2013-06-11/a> | Swa Frantzen | vmware security advisory VMSA-2013-0008 |
| 2013-05-31/a> | Chris Mohan | VMware releases new and updated security advisories |
| 2013-02-22/a> | Chris Mohan | VMware releases new and updated security advisories |
| 2013-02-08/a> | Johannes Ullrich | VMWare Advisories (ESX, Workstation, Fusion...) http://www.vmware.com/security/advisories/VMSA-2013-0002.html |
| 2013-02-01/a> | Jim Clausing | VMware vSphere security updates for the authentication service and third party libraries (see http://www.vmware.com/security/advisories/VMSA-2013-0001.html) |
| 2012-11-16/a> | Guy Bruneau | VMware security updates for vSphere API and ESX Service Console - http://www.vmware.com/security/advisories/VMSA-2012-0016.html |
| 2012-10-05/a> | Richard Porter | VMWare Security Advisory: VMSA-2012-0014 - http://www.vmware.com/security/advisories/VMSA-2012-0014.html |
| 2012-08-31/a> | Johannes Ullrich | VMware Updates |
| 2012-07-13/a> | Russ McRee | VMWare Security Advisory 12 JUL 2012 |
| 2012-06-14/a> | Johannes Ullrich | VMWare Security Advisories |
| 2012-06-04/a> | Rob VandenBrink | vSphere 5.0 Hardening Guide Officially Released |
| 2012-05-25/a> | Guy Bruneau | VMware vMA Security Advisory VMSA-2012-0010 - http://www.vmware.com/security/advisories/VMSA-2012-0010.html |
| 2012-05-03/a> | Guy Bruneau | VMware Critical Security Issues Advisory - http://www.vmware.com/security/advisories/VMSA-2012-0009.html |
| 2012-05-02/a> | Bojan Zdrnja | Monitoring VMWare logs |
| 2012-04-13/a> | Daniel Wesemann | VMware ESX/ESXi privilege escalation vuln. advisory: http://www.vmware.com/security/advisories/VMSA-2012-0007.html |
| 2012-03-16/a> | Guy Bruneau | VMware New and Updated Security Advisories |
| 2012-03-09/a> | Guy Bruneau | VMware New and Updated Advisories |
| 2012-01-31/a> | Russ McRee | Firefox 10 and VMWare advisories and updates |
| 2011-11-18/a> | Kevin Liston | Recent VMWare security advisories |
| 2011-10-13/a> | Kevin Shortt | VMware ESXi and ESX updates to third party libraries and ESX Service Console - http://www.vmware.com/security/advisories/VMSA-2011-0012.html |
| 2011-10-05/a> | Jim Clausing | VMware Advisory - UDF file system handling |
| 2011-08-17/a> | Rob VandenBrink | Putting all of Your Eggs in One Basket - or How NOT to do Layoffs |
| 2011-04-28/a> | Guy Bruneau | VMware ESXi 4.1 Security and Firmware Updates |
| 2011-03-08/a> | Jim Clausing | VMware ESX/ESXi security updates released, see http://www.vmware.com/security/advisories/VMSA-2011-0004.html |
| 2011-02-08/a> | Chris Mohan | VMWare Security Advisory |
| 2011-01-05/a> | Johannes Ullrich | VMWare Security Advisory VMSA-2011-0001 |
| 2010-07-13/a> | Jim Clausing | VMware Studio Security Update |
| 2010-05-30/a> | Kevin Liston | VMware ESX/ESXi Updates |
| 2010-04-09/a> | Mark Hofman | VMware has released the following patch "VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues". Make sure you test before applying to production. |
| 2010-04-02/a> | Guy Bruneau | Security Advisory for ESX Service Console |
| 2010-03-30/a> | Pedro Bueno | VMWare Security Advisories Out |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
| 2010-02-17/a> | Rob VandenBrink | Multiple Security Updates for ESX 3.x and ESXi 3.x |
| 2010-02-10/a> | Marcus Sachs | Datacenters and Directory Traversals |
| 2010-01-30/a> | Stephen Hall | New and updated VMWare advisories |
| 2010-01-26/a> | Rob VandenBrink | VMware vSphere Hardening Guide Draft posted for public review |
| 2009-11-21/a> | Mark Hofman | VMware vCenter and ESX updates available http://lists.vmware.com/pipermail/security-announce/2009/000070.html |
| 2009-10-27/a> | Rob VandenBrink | New VMware Desktop Products Released (Workstation, Fusion, ACE) |
| 2009-10-16/a> | Stephen Hall | VMWare updates ESX |
| 2009-10-02/a> | Stephen Hall | VMware Fusion updates to fixes a couple of bugs |
| 2009-08-21/a> | Rick Wanner | Updates to VMWare Products |
| 2009-07-11/a> | Rick Wanner | VMWare Security Advisories |
| 2009-07-01/a> | Bojan Zdrnja | New VMWare Security Advisory |
| 2009-05-29/a> | Lorna Hutcheson | VMWare Patches Released |
| 2009-04-14/a> | Swa Frantzen | VMware exploits - just how bad is it ? |
| 2009-04-10/a> | Stephen Hall | Patches for critical VMWare vulnerability |
| 2009-04-04/a> | Tony Carothers | Recent VMware Updates Available |
| 2009-01-31/a> | Swa Frantzen | VMware updates |
| 2008-09-19/a> | Bojan Zdrnja | VMWare ESX(i) 3.5 security patches |
| 2008-08-12/a> | Johannes Ullrich | VMWare ESX 3.5u2 Errors |
| 2008-06-01/a> | Mari Nichols | Updates to VMware resolve critical security issues |
| 2008-03-19/a> | Raul Siles | VMware updates resolve critical security issues (VMSA-2008-0005) |
VIRTUALIZATION |
| 2016-07-27/a> | Xavier Mertens | Critical Xen PV guests vulnerabilities |
| 2016-02-23/a> | Xavier Mertens | VMware VMSA-2016-0002 |
| 2012-06-20/a> | Raul Siles | CVE-2012-0217 (from MS12-042) applies to other environments too |
| 2010-04-02/a> | Guy Bruneau | Security Advisory for ESX Service Console |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
GOOGLE |
| 2024-06-20/a> | Guy Bruneau | No Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary] |
| 2023-01-16/a> | Johannes Ullrich | PSA: Why you must run an ad blocker when using Google |
| 2021-09-15/a> | Brad Duncan | Hancitor campaign abusing Microsoft's OneDrive |
| 2021-06-18/a> | Daniel Wesemann | Open redirects ... and why Phishers love them |
| 2021-05-28/a> | Xavier Mertens | Malicious PowerShell Hosted on script.google.com |
| 2020-05-05/a> | Russ McRee | Cloud Security Features Don't Replace the Need for Personnel Security Capabilities |
| 2019-06-24/a> | Johannes Ullrich | Extensive BGP Issues Affecting Cloudflare and possibly others |
| 2017-08-15/a> | Renato Marinho | (Banker(GoogleChromeExtension)).targeting("Brazil") |
| 2017-06-14/a> | Xavier Mertens | Systemd Could Fallback to Google DNS? |
| 2017-05-03/a> | Bojan Zdrnja | OAUTH phishing against Google Docs ? beware! |
| 2015-09-01/a> | Daniel Wesemann | How to hack |
| 2015-02-01/a> | Rick Wanner | Improving SSL Warnings |
| 2014-12-06/a> | Rick Wanner | Google App Engine Java Security Sandbox bypasses |
| 2014-09-15/a> | Johannes Ullrich | Google DNS Server IP Address Spoofed for SNMP reflective Attacks |
| 2014-05-07/a> | Johannes Ullrich | De-Clouding your Life: Things that should not go into the cloud. |
| 2013-10-24/a> | Johannes Ullrich | False Positive: php.net Malware Alert |
| 2013-10-10/a> | Johannes Ullrich | google.com.my DNS hijack |
| 2013-06-10/a> | Johannes Ullrich | When Google isn't Google |
| 2013-04-10/a> | Manuel Humberto Santander Pelaez | Massive Google scam sent by email to Colombian domains |
| 2013-01-25/a> | Johannes Ullrich | Vulnerability Scans via Search Engines (Request for Logs) |
| 2012-08-01/a> | Johannes Ullrich | Google Chrome 21 and getUserMedia API |
| 2012-05-25/a> | Guy Bruneau | Google Publish Transparency Report |
| 2012-05-16/a> | Johannes Ullrich | New Version of Google Chrome released (19.0.1084.46) |
| 2012-04-30/a> | Rob VandenBrink | FCC posts Enquiry Documents on Google Wardriving |
| 2011-09-18/a> | Guy Bruneau | Google Chrome Security Updates |
| 2011-08-24/a> | Rob VandenBrink | Google Chrome 13.0.782.215 Released, several security updates ==> http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html |
| 2011-06-28/a> | Johannes Ullrich | Update: Google Chrome 12.0.742.112 released http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html |
| 2011-02-11/a> | Kevin Johnson | Two-Factor Auth: Can we just Google the response? |
| 2011-01-13/a> | Rob VandenBrink | Google Chrome 8.0.552.237 and Chrome OS 8.0.552.334 released ==> http://googlechromereleases.blogspot.com/2011/01/chrome-stable-release.html and http://www.kb.cert.org/vuls/id/258423 |
| 2010-11-02/a> | Johannes Ullrich | Limited Malicious Search Engine Poisoning for Election |
| 2010-05-15/a> | Deborah Hale | Google Acknowledges Grabbing Personal Data |
| 2010-04-21/a> | Guy Bruneau | Google Chrome Security Update v4.1.249.1059 Released: http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
| 2010-02-15/a> | Johannes Ullrich | Various Olympics Related Dangerous Google Searches |
| 2009-09-25/a> | Deborah Hale | Malware delivered over Google and Yahoo Ad's? |
| 2009-07-31/a> | Deborah Hale | Google Safe Browsing |
| 2009-06-12/a> | Adrien de Beaupre | Google updates for Chrome |
| 2009-04-26/a> | Johannes Ullrich | Odd DNS Resolution for Google via OpenDNS |
| 2009-01-31/a> | John Bambenek | Google Search Engine's Malware Detection Broken |
| 2008-11-11/a> | Swa Frantzen | Phishing for Google adwords |
| 2008-10-20/a> | Raul Siles | Google Webmaster Tools warning about hackable sites |
| 2008-07-29/a> | Kyle Haugsness | Google SSL cert expired for POP/IMAP users |
| 2008-04-23/a> | Mari Nichols | What's New, Old and Morphing? |
| 2008-03-12/a> | Joel Esler | Don't use G-Archiver |
APPS |
| 2017-09-06/a> | Adrien de Beaupre | Modern Web Application Penetration Testing , Hash Length Extension Attacks |
| 2014-04-07/a> | Johannes Ullrich | Attack or Bad Link? Your Guess? |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
| 2010-01-25/a> | William Salusky | "Bots and Spiders and Crawlers, be gone!" - or - "New Open Source WebAppSec tools, Huzzah!" |
AMAZON |
| 2021-06-07/a> | Johannes Ullrich | Amazon Sidewalk: Cutting Through the Hype |
| 2020-12-17/a> | Daniel Wesemann | "Amazon" invoice that asks to call 1-866-335-0659 "to cancel" an order that you never made is (obviously) a #scam |
| 2017-02-28/a> | Johannes Ullrich | My Catch Of 4 Months In The Amazon IP Address Space |
| 2017-02-28/a> | Xavier Mertens | Amazon S3 Outage |
| 2015-04-29/a> | Daniel Wesemann | UDP/3478 to Amazon 54.84.9.242 -- got packets? (solved) |
| 2010-03-03/a> | Johannes Ullrich | Reports about large number of fake Amazon order confirmations |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
EC2 |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
