Date Author Title
2025-09-05Xavier MertensFrom YARA Offsets to Virtual Addresses
2025-05-30Jesse La GrewUsage of "passwd" Command in DShield Honeypots
2024-06-06Xavier MertensMalicious Python Script with a "Best Before" Date
2024-03-28Xavier MertensFrom JavaScript to AsyncRAT
2024-03-19Johannes UllrichAttacker Hunting Firewalls
2024-02-28Johannes UllrichExploit Attempts for Unknown Password Reset Vulnerability
2024-02-21Jan KoprivaPhishing pages hosted on archive.org
2024-02-12Johannes UllrichExploit against Unnamed "Bytevalue" router vulnerability included in Mirai Bot
2024-01-18Johannes UllrichMore Scans for Ivanti Connect "Secure" VPN. Exploits Public
2024-01-16Johannes UllrichScans for Ivanti Connect "Secure" VPN Vulnerability (CVE-2023-46805, CVE-2024-21887)
2023-11-25Didier StevensOVA Files
2023-11-17Jan KoprivaPhishing page with trivial anti-analysis features
2023-09-09Guy Bruneau?Anyone get the ASN of the Truck that Hit Me?!?: Creating a PowerShell Function to Make 3rd Party API Calls for Extending Honeypot Information [Guest Diary]
2023-07-26Xavier MertensSuspicious IP Addresses Avoided by Malware Samples
2023-05-20Xavier MertensPhishing Kit Collecting Victim's IP Address
2023-03-22Didier StevensWindows 11 Snipping Tool Privacy Bug: Inspecting PNG Files
2022-11-10Xavier MertensDo you collect "Observables" or "IOCs"?
2022-08-31Johannes UllrichUnderscores and DNS: The Privacy Story
2022-06-16Xavier MertensHoudini is Back Delivered Through a JavaScript Dropper
2022-06-03Xavier MertensSandbox Evasion... With Just a Filename!
2022-06-01Jan KoprivaHTML phishing attachments - now with anti-analysis features
2022-05-17Xavier MertensUse Your Browser Internal Password Vault... or Not?
2022-03-31Johannes UllrichSpring Vulnerability Update - Exploitation Attempts CVE-2022-22965
2022-03-30Johannes UllrichPossible new Java Spring Framework Vulnerability (Updated: not a Spring problem)
2022-03-30Johannes UllrichJava Springtime Confusion: What Vulnerability are We Talking About
2022-03-18Johannes UllrichScans for Movable Type Vulnerability (CVE-2021-20837)
2022-01-18Jan KoprivaPhishing e-mail with...an advertisement?
2021-11-25Didier StevensYARA's Private Strings
2021-11-18Xavier MertensJavaScript Downloader Delivers Agent Tesla Trojan
2021-10-21Brad Duncan"Stolen Images Evidence" campaign pushes Sliver-based malware
2021-10-09Guy BruneauScanning for Previous Oracle WebLogic Vulnerabilities
2021-09-21Johannes UllrichA First Look at Apple's iOS 15 "Private Relay" feature.
2021-07-06Xavier MertensPython DLL Injection Check
2021-05-22Xavier Mertens"Serverless" Phishing Campaign
2021-05-18Xavier MertensFrom RunDLL32 to JavaScript then PowerShell
2021-05-10Johannes UllrichCorrectly Validating IP Addresses: Why encoding matters for input validation.
2021-04-28Xavier MertensDeeper Analyzis of my Last Malicious PowerPoint Add-On
2021-01-22Xavier MertensAnother File Extension to Block in your MTA: .jnlp
2021-01-02Guy BruneauProtecting Home Office and Enterprise in 2021
2020-12-04Guy BruneauDetecting Actors Activity with Threat Intel
2020-11-13Xavier MertensOld Worm But New Obfuscation Technique
2020-10-07Johannes UllrichToday, Nobody is Going to Attack You.
2020-07-24Xavier MertensCompromized Desktop Applications by Web Technologies
2020-07-08Xavier MertensIf You Want Something Done Right, You Have To Do It Yourself... Malware Too!
2020-06-11Xavier MertensAnti-Debugging JavaScript Techniques
2020-04-29Johannes UllrichPrivacy Preserving Protocols to Trace Covid19 Exposure
2020-04-24Xavier MertensMalicious Excel With a Strong Obfuscation and Sandbox Evasion
2020-03-27Xavier MertensMalicious JavaScript Dropping Payload in the Registry
2020-03-13Rob VandenBrinkNot all Ethernet NICs are Created Equal - Trying to Capture Invalid Ethernet Frames
2020-01-03Kevin ShorttCCPA - Quick Overview
2019-08-09Xavier Mertens100% JavaScript Phishing Page
2019-08-05Rick WannerScanning for Bluekeep vulnerable RDP instances
2019-07-09John BambenekSolving the WHOIS and Privacy Problem: A Draft of Implementing WHOIS in DNS
2019-06-10Xavier MertensInteresting JavaScript Obfuscation Example
2019-05-16Xavier MertensThe Risk of Authenticated Vulnerability Scans
2019-02-07Xavier Mertens Phishing Kit with JavaScript Keylogger
2018-11-20Xavier MertensVMware Affected by Dell EMC Avamar Vulnerability
2018-07-13Xavier MertensCryptominer Delivered Though Compromized JavaScript File
2018-06-18Xavier MertensMalicious JavaScript Targeting Mobile Browsers
2018-05-25Xavier MertensAntivirus Evasion? Easy as 1,2,3
2018-05-24Xavier Mertens"Blocked" Does Not Mean "Forget It"
2018-03-06Mark HofmanThe joys of changing Privacy Laws
2017-12-14Russ McReeSecurity Planner: Improve your online safety
2017-11-03Xavier MertensSimple Analysis of an Obfuscated JAR File
2017-08-23Xavier MertensMalicious script dropping an executable signed by Avast?
2017-06-22Xavier MertensObfuscating without XOR
2017-06-01Xavier MertensSharing Private Data with Webcast Invitations
2017-03-24Xavier MertensNicely Obfuscated JavaScript Sample
2017-03-04Xavier MertensHow your pictures may affect your website reputation
2017-02-12Xavier MertensAnalysis of a Suspicious Piece of JavaScript
2017-01-18Rob VandenBrinkMaking Windows 10 a bit less "Creepy" - Common Privacy Settings
2016-12-10Didier StevensSleeping VBS Really Wants To Sleep
2016-11-16Xavier MertensExample of Getting Analysts & Researchers Away
2016-09-28Xavier MertensSNMP Pwn3ge
2016-08-28Guy BruneauSpam with Obfuscated Javascript
2016-06-18Rob VandenBrinkControlling JavaScript Malware Before it Runs
2016-02-20Didier StevensLocky: JavaScript Deobfuscation
2016-02-07Xavier MertensMore Malicious JavaScript Obfuscation
2016-02-03Xavier MertensAutomating Vulnerability Scans
2016-01-15Xavier MertensJavaScript Deobfuscation Tool
2015-11-09John BambenekICYMI: Widespread Unserialize Vulnerability in Java
2015-08-07Tony CarothersCritical Firefox Update Today
2014-12-06Rick WannerGoogle App Engine Java Security Sandbox bypasses
2014-08-29Johannes UllrichFalse Positive or Not? Difficult to Analyze Javascript
2014-07-15Daniel WesemannAOC Cloud
2014-07-15Daniel WesemannOracle Java: 20 new vulnerabilities patched
2014-07-13Tony CarothersOracle July 2014 Update Pre-Notification
2014-07-05Guy BruneauJava Support ends for Windows XP
2014-07-02Johannes UllrichSimple Javascript Extortion Scheme Advertised via Bing
2014-06-12Daniel WesemannMade any new friends lately?
2014-05-27Kevin ShorttAvast forums hacked
2014-04-21Daniel WesemannAllow us to leave!
2014-01-01Russ McReeSix degrees of celebration: Juniper, ANT, Shodan, Maltego, Cisco, and Tails
2013-12-23Rob VandenBrinkHow-To's for the Holidays - Java Whitelisting using AD Group Policy
2013-10-28Daniel WesemannExploit cocktail (Struts, Java, Windows) going after 3-month old vulnerabilities
2013-10-22Richard PorterGreenbone and OpenVAS Scanner
2013-10-15Rob VandenBrinkJava Quarterly Updates
2013-09-10Swa FrantzenMore Black Tuesday workload
2013-08-07Johannes UllrichFirefox 23 and Mixed Active Content
2013-04-23Russ McReeMicrosoft's Security Intelligence Report (SIRv14) released
2013-04-19Russ McReeJava 8 release schedule delayed for renewed focus on security
2013-04-16Rob VandenBrinkJava 7 Update 21 is available - Watch for Behaviour Changes !
2013-04-04Johannes UllrichMicrosoft April Patch Tuesday Advance Notification
2013-03-07Guy BruneauApple Blocking Java Web plug-in
2013-03-05Richard PorterJava j6u43 update #YAJU http://www.oracle.com/technetwork/java/javase/6u43-relnotes-1915290.html
2013-03-04Richard PorterJava 7u17 update #YAJU http://www.oracle.com/technetwork/java/javase/7u17-relnotes-1915289.html
2013-03-01Jim ClausingAnd the Java 0-days just keep on coming
2013-02-26Rob VandenBrinkAll I need Java for is ....
2013-02-20Johannes UllrichUpdate Palooza
2013-02-19Johannes UllrichOracle Updates Java (Java 7 Update 15, Java 6 update 41)
2013-02-08Kevin ShorttIs it Spam or Is it Malware?
2013-02-04Adam SwangerSAN Securing The Human Monthly Awareness Video - Advanced Persistent Threat (APT) http://www.securingthehuman.org/resources/ncsam
2013-02-01Jim ClausingOracle quitely releases Java 7u13 early
2013-01-19Guy BruneauJava 7 Update 11 Still has a Flaw
2013-01-18Russ McReeInteresting reads for Friday 18 JAN 2013
2013-01-15Rob VandenBrinkWhen Disabling IE6 (or Java, or whatever) is not an Option...
2013-01-13Stephen HallJava 0-Day patched as Java 7 U 11 released
2013-01-12Stephen HallJava 0-day impact to Java 6 (and beyond?)
2013-01-10Johannes UllrichJava is still exploitable and is likely going to remain so.
2012-11-01Daniel WesemannPatched your Java yet?
2012-10-18Rob VandenBrinkAnother Java update! Java SE 1.6.0_37 Available ==> http://www.oracle.com/technetwork/java/javase/releasenotes-136954.html
2012-10-17Rob VandenBrinkTime to update - Java version 7 update 9 (JRE 7u9, JDK 7u9) is out! Release notes here - http://www.oracle.com/technetwork/java/javase/7u9-relnotes-1863279.html
2012-09-08Guy BruneauWebmin Input Validation Vulnerabilities
2012-09-01Russ McReeBlackhole targeting Java vulnerability via fake Microsoft Services Agreement email phish
2012-08-31Russ McReeNot so fast: Java 7 Update 7 critical vulnerability discovered in less than 24 hours
2012-08-27Kevin ListonQuick Bits about Today's Java 0-Day
2012-08-05Daniel WesemannPhishing for Payroll with unpatched Java
2012-07-23Johannes UllrichMost Anti-Privacy Web Browsing Tool Ever?
2012-07-05Adrien de BeaupreMicrosoft advanced notification for July 2012 patch Tuesday
2012-06-25Guy BruneauUsing JSDetox to Analyze and Deobfuscate Javascript
2012-06-12Swa FrantzenJava 7u5 and 6u33 released
2012-05-25Guy BruneauGoogle Publish Transparency Report
2012-05-22Johannes Ullrichnmap 6 released
2012-05-22Johannes UllrichThe "Do Not Track" header
2012-05-05Tony CarothersVulnerability Assessment Program - Discussions
2012-04-25Daniel WesemannBlacole's obfuscated JavaScript
2012-04-12Guy BruneauApple Java Updates for Mac OS X
2012-04-06Johannes UllrichSocial Share Privacy
2012-04-06Johannes UllrichAnother OS X Java Patch
2012-03-25Daniel Wesemannevilcode.class
2012-03-20Johannes UllrichA Reminder: Private Key Security
2012-02-16Tony CarothersJava Update for February
2012-01-22Johannes UllrichJavascript DDoS Tool Analysis
2012-01-03Bojan ZdrnjaThe tale of obfuscated JavaScript continues
2011-12-12Daniel WesemannJava 6u30 released
2011-12-10Daniel WesemannUnwanted Presents
2011-12-08Adrien de BeaupreMicrosoft Security Bulletin Advance Notification for December 2011
2011-12-07Lenny ZeltserV8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation
2011-10-22Guy BruneauOracle Java SE Critical Patch Update
2011-10-19Johannes UllrichHouse for rent! Observing an Overpayment Scam
2011-09-19Guy BruneauMS Security Advisory Update - Fraudulent DigiNotar Certificates
2011-09-15Johannes UllrichSSH Vandals?
2011-09-05Raul SilesJava 7 Officially Released
2011-08-19Kevin ShorttJava SE 6 Update 27 released. No security updates, many bug fixes ==> http://www.oracle.com/technetwork/java/javase/6u27-relnotes-444147.html
2011-07-28Guy BruneauJava 7.0 released. Get it here - http://blogs.oracle.com/javase/entry/java_7_has_released
2011-06-28Johannes UllrichUpdate: Java update for OS X fixes security issues http://support.apple.com/kb/HT1222
2011-06-07Johannes UllrichOracle Releases Java Version 1.6.0.26 http://java.com/en/download/manual.jsp
2011-06-06Manuel Humberto Santander PelaezPhishing: Same goal, same techniques and people still falling for such scams
2011-06-03Guy BruneauOracle Java SE Critical Patch Update Pre-Release Announcement - June 2011
2011-06-01Johannes UllrichEnabling Privacy Enhanced Addresses for IPv6
2011-05-10Swa FrantzenTime to change your facebook password?
2011-05-01Deborah HaleJava 6.25 Is Now Available
2011-04-23Manuel Humberto Santander PelaezImage search can lead to malware download
2011-03-29Daniel WesemannRequesting deletion of "free" email and chat accounts
2011-03-09Jim ClausingApple updates Java
2011-02-15Jason LamOracle Java 6 Update 24
2011-02-09Mark HofmanJava Floating point issue (CVE-2010-4476)
2011-02-04Daniel WesemannOh, just click "yes"
2010-12-29Daniel WesemannBeware of strange web sites bearing gifts ...
2010-12-24Daniel WesemannA question of class
2010-12-08Rob VandenBrinkJava 6, Update 23 is out => http://java.sun.com/javase/6/webnotes/ReleaseNotes.html , http://www.oracle.com/technetwork/java/javase/6u23releasenotes-191058.html , http://www.oracle.com/technetwork/java/javase/2col/6u23bugfixes-191074.html
2010-12-02Kevin JohnsonRobert Hansen and our happiness
2010-11-11Daniel WesemannJava Exploits
2010-08-01Manuel Humberto Santander PelaezEvation because IPS fails to validate TCP checksums?
2010-07-18Manuel Humberto Santander PelaezNew metasploit GUI written in Java
2010-07-04Manuel Humberto Santander PelaezMalware inside PDF Files
2010-06-15Manuel Humberto Santander PelaezTCP evasions for IDS/IPS
2010-05-23Manuel Humberto Santander PelaezOracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability
2010-05-22Rick WannerSANS 2010 Digital Forensics Summit - APT Based Forensic Challenge
2010-05-12Rob VandenBrinkLayer 2 Security - Private VLANs (the Story Continues ...)
2010-04-10Andre LudwigNew bug/exploit for javaws
2010-04-02Guy BruneauOracle Java SE and Java for Business Critical Patch Update Advisory
2010-03-05Kyle HaugsnessJavascript obfuscators used in the wild
2010-01-13Guy BruneauSun Java JRE 6 Update 18 Released
2009-12-09Swa FrantzenFacebook announces privacy improvements
2009-12-05Guy BruneauJava JRE Buffer and Integer Overflow
2009-12-03Mark HofmanAvast false positives
2009-12-02Rob VandenBrinkSPAM and Malware taking advantage of H1N1 concerns
2009-11-02Rob VandenBrinkMicrosoft releases v1.02 of Enhanced Mitigation Evaluation Toolkit (EMET)
2009-09-08Guy BruneauBug Fixes in Sun SDK 5 and Java SE 6
2009-08-04donald smithJava Security Update
2009-07-15Bojan ZdrnjaMake sure you update that Java
2009-07-01Bojan ZdrnjaMobile phone trojans
2009-06-10Swa FrantzenJava 6 update 14 released
2009-05-22Mark HofmanPatching and Apple - Java issue
2009-05-04Tom ListonAdobe Reader/Acrobat Critical Vulnerability
2009-04-07Bojan ZdrnjaAdvanced JavaScript obfuscation (or why signature scanning is a failure)
2009-04-02Bojan ZdrnjaJavaScript insertion and log deletion attack tools
2009-03-25David GoldsmithJava Runtime Environment 6.0 Update 13 Released
2009-02-25Andre LudwigAdobe Acrobat pdf 0-day exploit, No JavaScript needed!
2009-02-10Swa FrantzenJava up to date ?
2008-07-14Daniel WesemannObfuscated JavaScript Redux
2008-07-09Johannes UllrichJava Update
2008-07-08Swa FrantzenSecurity implications in HVAC equipment
2008-06-30Marcus SachsMore SQL Injection with Fast Flux hosting
2008-05-20Raul SilesList of malicious domains inserted through SQL injection
2008-05-20Raul SilesJava 6 Update 6 has been released
2008-04-06Daniel WesemannAdvanced obfuscated JavaScript analysis
2008-04-03Bojan ZdrnjaMixed (VBScript and JavaScript) obfuscation