DATA AT REST |
| 2015-09-01 | Daniel Wesemann | Encryption of "data at rest" in servers |
| 2009-09-07 | Lorna Hutcheson | Encrypting Data |
DATA |
| 2025-04-02/a> | Guy Bruneau | Exploring Statistical Measures to Predict URLs as Legitimate or Intrusive [Guest Diary] |
| 2025-03-20/a> | Johannes Ullrich | Some new Data Feeds, and a little "incident". |
| 2025-02-17/a> | Russ McRee | ModelScan - Protection Against Model Serialization Attacks |
| 2024-08-23/a> | Jesse La Grew | Pandas Errors: What encoding are my logs in? |
| 2024-08-16/a> | Jesse La Grew | [Guest Diary] 7 minutes and 4 steps to a quick win: A write-up on custom tools |
| 2023-08-25/a> | Xavier Mertens | Python Malware Using Postgresql for C2 Communications |
| 2023-07-23/a> | Guy Bruneau | Install & Configure Filebeat on Raspberry Pi ARM64 to Parse DShield Sensor Logs |
| 2023-05-24/a> | Jesse La Grew | More Data Enrichment for Cowrie Logs |
| 2023-05-09/a> | Russ McRee | Exploratory Data Analysis with CISSM Cyber Attacks Database - Part 2 |
| 2022-06-10/a> | Russ McRee | EPSScall: An Exploit Prediction Scoring System App |
| 2021-12-28/a> | Russ McRee | LotL Classifier tests for shells, exfil, and miners |
| 2021-10-20/a> | Xavier Mertens | Thanks to COVID-19, New Types of Documents are Lost in The Wild |
| 2021-08-29/a> | Guy Bruneau | Filter JSON Data by Value with Linux jq |
| 2021-07-04/a> | Didier Stevens | DIY CD/DVD Destruction - Follow Up |
| 2021-06-27/a> | Didier Stevens | DIY CD/DVD Destruction |
| 2021-02-01/a> | Rob VandenBrink | Taking a Shot at Reverse Shell Attacks, CNC Phone Home and Data Exfil from Servers |
| 2021-01-29/a> | Xavier Mertens | Sensitive Data Shared with Cloud Services |
| 2020-07-04/a> | Russ McRee | Happy FouRth of July from the Internet Storm Center |
| 2020-03-14/a> | Didier Stevens | Phishing PDF With Incremental Updates. |
| 2020-02-28/a> | Xavier Mertens | Show me Your Clipboard Data! |
| 2019-05-19/a> | Guy Bruneau | Is Metadata Only Approach, Good Enough for Network Traffic Analysis? |
| 2018-07-04/a> | Didier Stevens | XPS Metadata |
| 2018-06-16/a> | Russ McRee | Anomaly Detection & Threat Hunting with Anomalize |
| 2017-12-16/a> | Xavier Mertens | Microsoft Office VBA Macro Obfuscation via Metadata |
| 2017-08-07/a> | Xavier Mertens | Increase of phpMyAdmin scans |
| 2017-05-28/a> | Guy Bruneau | CyberChef a Must Have Tool in your Tool bag! |
| 2017-02-01/a> | Xavier Mertens | Quick Analysis of Data Left Available by Attackers |
| 2017-01-06/a> | John Bambenek | Great Misadventures of Security Vendors: Absurd Sandboxing Edition |
| 2016-09-22/a> | Rick Wanner | YAHDD! (Yet another HUGE data Breach!) |
| 2016-08-31/a> | Deborah Hale | Dropbox Breach |
| 2016-08-19/a> | Xavier Mertens | Data Classification For the Masses |
| 2016-07-03/a> | Guy Bruneau | Is Data Privacy part of your Company's Culture? |
| 2016-06-20/a> | Xavier Mertens | Using Your Password Manager to Monitor Data Leaks |
| 2016-02-22/a> | Xavier Mertens | Reducing False Positives with Open Data Sources |
| 2016-01-30/a> | Xavier Mertens | All CVE Details at Your Fingertips |
| 2015-09-01/a> | Daniel Wesemann | Encryption of "data at rest" in servers |
| 2015-07-31/a> | Russ McRee | Tech tip: Invoke a system command in R |
| 2015-07-31/a> | Russ McRee | Tech tip follow-up: Using the data Invoked with R's system command |
| 2015-05-23/a> | Guy Bruneau | Business Value in "Big Data" |
| 2015-03-21/a> | Russell Eubanks | Have you seen my personal information? It has been lost. Again. |
| 2014-12-01/a> | Guy Bruneau | Do you have a Data Breach Response Plan? |
| 2014-02-04/a> | Johannes Ullrich | Odd ICMP Echo Request Payload |
| 2013-10-16/a> | Adrien de Beaupre | Access denied and blockliss |
| 2013-07-06/a> | Guy Bruneau | Is Metadata the Magic in Modern Network Security? |
| 2012-12-03/a> | John Bambenek | John McAfee Exposes His Location in Photo About His Being on Run |
| 2012-11-30/a> | Daniel Wesemann | Snipping Leaks |
| 2012-11-22/a> | Kevin Liston | Greek National Arrested on Suspicion of Theft of 9M Records on Fellow Greeks |
| 2012-01-16/a> | Kevin Shortt | Zappos Breached |
| 2011-04-20/a> | Daniel Wesemann | Data Breach Investigations Report published by Verizon |
| 2011-01-12/a> | Richard Porter | How Many Loyalty Cards do you Carry? |
| 2011-01-12/a> | Richard Porter | Yet Another Data Broker? AOL Lifestream. |
| 2010-09-26/a> | Daniel Wesemann | Egosurfing, the corporate way |
| 2010-07-29/a> | Rob VandenBrink | The 2010 Verizon Data Breach Report is Out |
| 2010-04-27/a> | Rob VandenBrink | Layer 2 Security - L2TPv3 for Disaster Recovery Sites |
| 2010-04-22/a> | John Bambenek | Data Redaction: You're Doing it Wrong |
| 2010-02-10/a> | Marcus Sachs | Datacenters and Directory Traversals |
| 2009-10-19/a> | Daniel Wesemann | Backed up, lately ? |
| 2009-09-07/a> | Lorna Hutcheson | Encrypting Data |
| 2009-07-28/a> | Adrien de Beaupre | YYAMCCBA |
| 2009-04-24/a> | John Bambenek | Data Leak Prevention: Proactive Security Requirements of Breach Notification Laws |
| 2009-04-15/a> | Marcus Sachs | 2009 Data Breach Investigation Report |
| 2009-03-02/a> | Swa Frantzen | Obama's leaked chopper blueprints: anything we can learn? |
| 2009-01-30/a> | Mark Hofman | We all "Love" USB drives |
| 2008-12-17/a> | donald smith | Team CYMRU's Malware Hash Registry |
| 2008-08-25/a> | John Bambenek | Thoughts on the Best Western Compromise |
AT |
| 2025-04-25/a> | Xavier Mertens | Example of a Payload Delivered Through Steganography |
| 2025-04-23/a> | Jesse La Grew | Honeypot Iptables Maintenance and DShield-SIEM Logging |
| 2025-04-16/a> | Guy Bruneau | RedTail, Remnux and Malware Management [Guest Diary] |
| 2025-04-09/a> | Xavier Mertens | Obfuscated Malicious Python Scripts with PyArmor |
| 2025-04-02/a> | Guy Bruneau | Exploring Statistical Measures to Predict URLs as Legitimate or Intrusive [Guest Diary] |
| 2025-03-20/a> | Johannes Ullrich | Some new Data Feeds, and a little "incident". |
| 2025-03-12/a> | Guy Bruneau | File Hashes Analysis with Power BI from Data Stored in DShield SIEM |
| 2025-03-11/a> | Johannes Ullrich | Microsoft Patch Tuesday: March 2025 |
| 2025-03-10/a> | Xavier Mertens | Shellcode Encoded in UUIDs |
| 2025-03-06/a> | Guy Bruneau | DShield Traffic Analysis using ELK |
| 2025-02-27/a> | Xavier Mertens | Njrat Campaign Using Microsoft Dev Tunnels |
| 2025-02-20/a> | Guy Bruneau | Using ES|QL in Kibana to Queries DShield Honeypot Logs |
| 2025-02-19/a> | Xavier Mertens | XWorm Cocktail: A Mix of PE data with PowerShell Code |
| 2025-02-18/a> | Russ McRee | https://SecTemplates.com - simplified, free open-source templates to enable engineering and smaller security teams to bootstrap security capabilities for their organizations |
| 2025-02-17/a> | Russ McRee | ModelScan - Protection Against Model Serialization Attacks |
| 2025-02-15/a> | Xavier Mertens | The Danger of IP Volatility |
| 2025-02-13/a> | Guy Bruneau | DShield SIEM Docker Updates |
| 2025-01-29/a> | Xavier Mertens | From PowerShell to a Python Obfuscation Race! |
| 2025-01-21/a> | Johannes Ullrich | Geolocation and Starlink |
| 2025-01-03/a> | Xavier Mertens | SwaetRAT Delivery Through Python |
| 2024-12-23/a> | Xavier Mertens | Modiloader From Obfuscated Batch File |
| 2024-12-17/a> | Xavier Mertens | Python Delivering AnyDesk Client as RAT |
| 2024-12-11/a> | Johannes Ullrich | Apple Updates Everything (iOS, iPadOS, macOS, watchOS, tvOS, visionOS) |
| 2024-12-10/a> | Johannes Ullrich | Microsoft Patch Tuesday: December 2024 |
| 2024-11-30/a> | Xavier Mertens | From a Regular Infostealer to its Obfuscated Version |
| 2024-11-18/a> | Johannes Ullrich | Exploit attempts for unpatched Citrix vulnerability |
| 2024-11-05/a> | Xavier Mertens | Python RAT with a Nice Screensharing Feature |
| 2024-10-28/a> | Johannes Ullrich | Apple Updates Everything |
| 2024-10-03/a> | Guy Bruneau | Kickstart Your DShield Honeypot [Guest Diary] |
| 2024-09-26/a> | Johannes Ullrich | Patch for Critical CUPS vulnerability: Don't Panic |
| 2024-09-25/a> | Johannes Ullrich | DNS Reflection Update and Odd Corrupted DNS Requests |
| 2024-09-25/a> | Guy Bruneau | OSINT - Image Analysis or More Where, When, and Metadata [Guest Diary] |
| 2024-09-11/a> | Guy Bruneau | Hygiene, Hygiene, Hygiene! [Guest Diary] |
| 2024-09-04/a> | Guy Bruneau | Attack Surface [Guest Diary] |
| 2024-08-30/a> | Jesse La Grew | Simulating Traffic With Scapy |
| 2024-08-29/a> | Xavier Mertens | Live Patching DLLs with Python |
| 2024-08-27/a> | Guy Bruneau | Vega-Lite with Kibana to Parse and Display IP Activity over Time |
| 2024-08-26/a> | Xavier Mertens | From Highly Obfuscated Batch File to XWorm and Redline |
| 2024-08-23/a> | Jesse La Grew | Pandas Errors: What encoding are my logs in? |
| 2024-08-20/a> | Guy Bruneau | Mapping Threats with DNSTwist and the Internet Storm Center [Guest Diary] |
| 2024-08-16/a> | Jesse La Grew | [Guest Diary] 7 minutes and 4 steps to a quick win: A write-up on custom tools |
| 2024-08-14/a> | Xavier Mertens | Multiple Malware Dropped Through MSI Package |
| 2024-08-07/a> | Guy Bruneau | Same Scripts, Different Day: What My DShield Honeypot Taught Me About the Importance of Security Fundamentals [Guest Diary] |
| 2024-07-16/a> | Guy Bruneau | Who You Gonna Call? AndroxGh0st Busters! [Guest Diary] |
| 2024-07-09/a> | Johannes Ullrich | Microsoft Patch Tuesday July 2024 |
| 2024-06-26/a> | Guy Bruneau | What Setting Live Traps for Cybercriminals Taught Me About Security [Guest Diary] |
| 2024-06-20/a> | Guy Bruneau | No Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary] |
| 2024-06-17/a> | Xavier Mertens | New NetSupport Campaign Delivered Through MSIX Packages |
| 2024-06-13/a> | Guy Bruneau | The Art of JQ and Command-line Fu [Guest Diary] |
| 2024-06-11/a> | Johannes Ullrich | Microsoft Patch Tuesday June 2024 |
| 2024-06-06/a> | Xavier Mertens | Malicious Python Script with a "Best Before" Date |
| 2024-05-31/a> | Xavier Mertens | "K1w1" InfoStealer Uses gofile.io for Exfiltration |
| 2024-05-30/a> | Xavier Mertens | Feeding MISP with OSSEC |
| 2024-05-28/a> | Guy Bruneau | Is that It? Finding the Unknown: Correlations Between Honeypot Logs & PCAPs [Guest Diary] |
| 2024-05-22/a> | Guy Bruneau | Analysis of ?redtail? File Uploads to ICS Honeypot, a Multi-Architecture Coin Miner [Guest Diary] |
| 2024-05-08/a> | Xavier Mertens | Analyzing Synology Disks on Linux |
| 2024-04-29/a> | Guy Bruneau | Linux Trojan - Xorddos with Filename eyshcjdmzg |
| 2024-04-17/a> | Xavier Mertens | Malicious PDF File Used As Delivery Mechanism |
| 2024-04-11/a> | Yee Ching Tok | Evolution of Artificial Intelligence Systems and Ensuring Trustworthiness |
| 2024-04-07/a> | Guy Bruneau | A Use Case for Adding Threat Hunting to Your Security Operations Team. Detecting Adversaries Abusing Legitimate Tools in A Customer Environment. [Guest Diary] |
| 2024-03-28/a> | Xavier Mertens | From JavaScript to AsyncRAT |
| 2024-03-19/a> | Johannes Ullrich | Attacker Hunting Firewalls |
| 2024-03-13/a> | Xavier Mertens | Using ChatGPT to Deobfuscate Malicious Scripts |
| 2024-03-12/a> | Johannes Ullrich | Microsoft Patch Tuesday - March 2024 |
| 2024-03-05/a> | Johannes Ullrich | Apple Releases iOS/iPadOS Updates with Zero Day Fixes. |
| 2024-02-29/a> | Jesse La Grew | [Guest Diary] Dissecting DarkGate: Modular Malware Delivery and Persistence as a Service. |
| 2024-02-28/a> | Johannes Ullrich | Exploit Attempts for Unknown Password Reset Vulnerability |
| 2024-02-22/a> | Johannes Ullrich | Large AT&T Wireless Network Outage #att #outage |
| 2024-02-20/a> | Xavier Mertens | Python InfoStealer With Dynamic Sandbox Detection |
| 2024-02-09/a> | Xavier Mertens | MSIX With Heavily Obfuscated PowerShell Script |
| 2024-02-03/a> | Guy Bruneau | DShield Sensor Log Collection with Elasticsearch |
| 2024-01-29/a> | Johannes Ullrich | Exploit Flare Up Against Older Altassian Confluence Vulnerability |
| 2024-01-26/a> | Xavier Mertens | A Batch File With Multiple Payloads |
| 2024-01-22/a> | Johannes Ullrich | Apple Updates Everything - New 0 Day in WebKit |
| 2024-01-17/a> | Jesse La Grew | Number Usage in Passwords |
| 2024-01-12/a> | Xavier Mertens | One File, Two Payloads |
| 2024-01-08/a> | Jesse La Grew | What is that User Agent? |
| 2024-01-05/a> | Rob VandenBrink | Netstat, but Better and in PowerShell |
| 2024-01-02/a> | Johannes Ullrich | Fingerprinting SSH Identification Strings |
| 2023-12-23/a> | Xavier Mertens | Python Keylogger Using Mailtrap.io |
| 2023-12-20/a> | Guy Bruneau | How to Protect your Webserver from Directory Enumeration Attack ? Apache2 [Guest Diary] |
| 2023-12-12/a> | Johannes Ullrich | Microsoft Patch Tuesday December 2023 |
| 2023-12-11/a> | Johannes Ullrich | Apple Patches Everything |
| 2023-12-06/a> | Guy Bruneau | Revealing the Hidden Risks of QR Codes [Guest Diary] |
| 2023-11-27/a> | Guy Bruneau | Decoding the Patterns: Analyzing DShield Honeypot Activity [Guest Diary] |
| 2023-11-22/a> | Guy Bruneau | CVE-2023-1389: A New Means to Expand Botnets |
| 2023-11-18/a> | Xavier Mertens | Quasar RAT Delivered Through Updated SharpLoader |
| 2023-11-06/a> | Johannes Ullrich | Exploit Activity for CVE-2023-22518, Atlassian Confluence Data Center and Server |
| 2023-10-10/a> | Johannes Ullrich | October 2023 Microsoft Patch Tuesday Summary |
| 2023-10-09/a> | Didier Stevens | ZIP's DOSTIME & DOSDATE Formats |
| 2023-09-30/a> | Xavier Mertens | Simple Netcat Backdoor in Python Script |
| 2023-09-26/a> | Johannes Ullrich | Apple Releases MacOS Sonoma Including Numerous Security Patches |
| 2023-09-11/a> | Johannes Ullrich | Apple fixes 0-Day Vulnerability in Older Operating Systems |
| 2023-09-07/a> | Johannes Ullrich | Apple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities |
| 2023-08-25/a> | Xavier Mertens | Python Malware Using Postgresql for C2 Communications |
| 2023-08-23/a> | Guy Bruneau | How I made a qwerty ?keyboard walk? password generator with ChatGPT [Guest Diary] |
| 2023-08-21/a> | Xavier Mertens | Quick Malware Triage With Inotify Tools |
| 2023-08-20/a> | Guy Bruneau | SystemBC Malware Activity |
| 2023-08-18/a> | Xavier Mertens | From a Zalando Phishing to a RAT |
| 2023-08-12/a> | Guy Bruneau | DShield Sensor Monitoring with a Docker ELK Stack [Guest Diary] |
| 2023-08-11/a> | Xavier Mertens | Show me All Your Windows! |
| 2023-08-03/a> | Jan Kopriva | From small LNK to large malicious BAT file with zero VT score |
| 2023-07-23/a> | Guy Bruneau | Install & Configure Filebeat on Raspberry Pi ARM64 to Parse DShield Sensor Logs |
| 2023-07-06/a> | Jesse La Grew | IDS Comparisons with DShield Honeypot Data |
| 2023-07-01/a> | Russ McRee | Sandfly Security |
| 2023-06-29/a> | Brad Duncan | GuLoader- or DBatLoader/ModiLoader-style infection for Remcos RAT |
| 2023-06-24/a> | Guy Bruneau | Email Spam with Attachment Modiloader |
| 2023-06-23/a> | Xavier Mertens | Word Document with an Online Attached Template |
| 2023-06-22/a> | Johannes Ullrich | Apple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari |
| 2023-06-17/a> | Brad Duncan | Formbook from Possible ModiLoader (DBatLoader) |
| 2023-06-16/a> | Xavier Mertens | Another RAT Delivered Through VBS |
| 2023-06-11/a> | Guy Bruneau | DShield Honeypot Activity for May 2023 |
| 2023-06-09/a> | Xavier Mertens | Undetected PowerShell Backdoor Disguised as a Profile File |
| 2023-05-30/a> | Brad Duncan | Malspam pushes ModiLoader (DBatLoader) infection for Remcos RAT |
| 2023-05-28/a> | Guy Bruneau | We Can no Longer Ignore the Cost of Cybersecurity |
| 2023-05-26/a> | Xavier Mertens | Using DFIR Techniques To Recover From Infrastructure Outages |
| 2023-05-24/a> | Jesse La Grew | More Data Enrichment for Cowrie Logs |
| 2023-05-20/a> | Xavier Mertens | Phishing Kit Collecting Victim's IP Address |
| 2023-05-19/a> | Xavier Mertens | When the Phisher Messes Up With Encoding |
| 2023-05-17/a> | Xavier Mertens | Increase in Malicious RAR SFX files |
| 2023-05-14/a> | Guy Bruneau | VMware Aria Operations addresses multiple Local Privilege Escalations and a Deserialization issue |
| 2023-05-09/a> | Russ McRee | Exploratory Data Analysis with CISSM Cyber Attacks Database - Part 2 |
| 2023-05-07/a> | Didier Stevens | Quickly Finding Encoded Payloads in Office Documents |
| 2023-05-03/a> | Xavier Mertens | Increased Number of Configuration File Scans |
| 2023-04-22/a> | Didier Stevens | YARA v4.3.1 Release |
| 2023-04-02/a> | Didier Stevens | YARA v4.3.0 Release |
| 2023-03-30/a> | Xavier Mertens | Bypassing PowerShell Strong Obfuscation |
| 2023-03-27/a> | Johannes Ullrich | Apple Updates Everything (including Studio Display) |
| 2023-03-21/a> | Didier Stevens | String Obfuscation: Character Pair Reversal |
| 2023-03-18/a> | Xavier Mertens | Old Backdoor, New Obfuscation |
| 2023-03-12/a> | Guy Bruneau | AsynRAT Trojan - Bill Payment (Pago de la factura) |
| 2023-03-11/a> | Xavier Mertens | Overview of a Mirai Payload Generator |
| 2023-02-22/a> | Johannes Ullrich | Internet Wide Scan Fingerprinting Confluence Servers |
| 2023-02-14/a> | Johannes Ullrich | Microsoft February 2023 Patch Tuesday |
| 2023-02-10/a> | Xavier Mertens | Obfuscated Deactivation of Script Block Logging |
| 2023-02-04/a> | Guy Bruneau | Assemblyline as a Malware Analysis Sandbox |
| 2023-02-01/a> | Didier Stevens | Detecting (Malicious) OneNote Files |
| 2023-01-31/a> | Jesse La Grew | DShield Honeypot Setup with pfSense |
| 2023-01-25/a> | Xavier Mertens | A First Malicious OneNote Document |
| 2023-01-24/a> | Johannes Ullrich | Apple Updates (almost) Everything: Patch Overview |
| 2023-01-21/a> | Guy Bruneau | DShield Sensor JSON Log to Elasticsearch |
| 2023-01-07/a> | Didier Stevens | YARA v4.3.0-rc1 --skip-larger |
| 2023-01-04/a> | Rob VandenBrink | Update to RTRBK - Diff and File Dates in PowerShell |
| 2022-12-29/a> | Jesse La Grew | Opening the Door for a Knock: Creating a Custom DShield Listener |
| 2022-12-05/a> | Didier Stevens | VLC's Check For Updates: No Updates? |
| 2022-11-10/a> | Xavier Mertens | Do you collect "Observables" or "IOCs"? |
| 2022-11-05/a> | Guy Bruneau | Windows Malware with VHD Extension |
| 2022-11-04/a> | Xavier Mertens | Remcos Downloader with Unicode Obfuscation |
| 2022-10-22/a> | Didier Stevens | rtfdump's Find Option |
| 2022-10-21/a> | Brad Duncan | sczriptzzbn inject pushes malware for NetSupport RAT |
| 2022-10-18/a> | Xavier Mertens | Python Obfuscation for Dummies |
| 2022-10-11/a> | Johannes Ullrich | October 2022 Microsoft Patch Tuesday |
| 2022-10-07/a> | Xavier Mertens | Critical Fortinet Vulnerability Ahead |
| 2022-09-22/a> | Xavier Mertens | RAT Delivered Through FODHelper |
| 2022-09-07/a> | Johannes Ullrich | PHP Deserialization Exploit attempt |
| 2022-08-24/a> | Brad Duncan | Monster Libra (TA551/Shathak) --> IcedID (Bokbot) --> Cobalt Strike & DarkVNC |
| 2022-08-22/a> | Xavier Mertens | 32 or 64 bits Malware? |
| 2022-08-20/a> | Didier Stevens | YARA 4.2.3 Released |
| 2022-08-10/a> | Johannes Ullrich | And Here They Come Again: DNS Reflection Attacks |
| 2022-07-28/a> | Johannes Ullrich | Exfiltrating Data With Bookmarks |
| 2022-07-20/a> | Johannes Ullrich | Apple Patches Everything Day |
| 2022-07-06/a> | Johannes Ullrich | How Many SANs are Insane? |
| 2022-07-02/a> | Didier Stevens | YARA 4.2.2 Released |
| 2022-06-24/a> | Xavier Mertens | Python (ab)using The Windows GUI |
| 2022-06-19/a> | Didier Stevens | Video: Decoding Obfuscated BASE64 Statistically |
| 2022-06-18/a> | Didier Stevens | Decoding Obfuscated BASE64 Statistically |
| 2022-06-17/a> | Brad Duncan | Malspam pushes Matanbuchus malware, leads to Cobalt Strike |
| 2022-06-16/a> | Xavier Mertens | Houdini is Back Delivered Through a JavaScript Dropper |
| 2022-06-10/a> | Russ McRee | EPSScall: An Exploit Prediction Scoring System App |
| 2022-06-04/a> | Guy Bruneau | Spam Email Contains a Very Large ISO file |
| 2022-06-02/a> | Johannes Ullrich | Quick Answers in Incident Response: RECmd.exe |
| 2022-06-01/a> | Jan Kopriva | HTML phishing attachments - now with anti-analysis features |
| 2022-05-29/a> | Didier Stevens | Extracting The Overlay Of A PE File |
| 2022-05-28/a> | Didier Stevens | Huge Signed PE File: Keeping The Signature |
| 2022-05-26/a> | Didier Stevens | Huge Signed PE File |
| 2022-05-20/a> | Xavier Mertens | A 'Zip Bomb' to Bypass Security Controls & Sandboxes |
| 2022-05-16/a> | Johannes Ullrich | Apple Patches Everything |
| 2022-05-10/a> | Renato Marinho | Microsoft May 2022 Patch Tuesday |
| 2022-05-09/a> | Xavier Mertens | Octopus Backdoor is Back with a New Embedded Obfuscated Bat File |
| 2022-05-07/a> | Guy Bruneau | Phishing PDF Received in my ISC Mailbox |
| 2022-05-05/a> | Brad Duncan | Password-protected Excel spreadsheet pushes Remcos RAT |
| 2022-05-03/a> | Rob VandenBrink | Finding the Real "Last Patched" Day (Interim Version) |
| 2022-04-30/a> | Didier Stevens | YARA 4.2.1 Released |
| 2022-04-27/a> | Jan Kopriva | MITRE ATT&CK v11 - a small update that can help (not just) with detection engineering |
| 2022-03-31/a> | Johannes Ullrich | Apple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS, |
| 2022-03-29/a> | Johannes Ullrich | More Fake/Typosquatting Twitter Accounts Asking for Ukraine Crytocurrency Donations |
| 2022-03-26/a> | Guy Bruneau | Is buying Cyber Insurance a Must Now? |
| 2022-03-23/a> | Brad Duncan | Arkei Variants: From Vidar to Mars Stealer |
| 2022-03-14/a> | Johannes Ullrich | Apple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more |
| 2022-03-11/a> | Xavier Mertens | Keep an Eye on WebSockets |
| 2022-03-09/a> | Xavier Mertens | Infostealer in a Batch File |
| 2022-03-04/a> | Johannes Ullrich | Scam E-Mail Impersonating Red Cross |
| 2022-02-22/a> | Xavier Mertens | A Good Old Equation Editor Vulnerability Delivering Malware |
| 2022-02-18/a> | Xavier Mertens | Remcos RAT Delivered Through Double Compressed Archive |
| 2022-02-11/a> | Xavier Mertens | CinaRAT Delivered Through HTML ID Attributes |
| 2022-02-10/a> | Johannes Ullrich | iOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched |
| 2022-02-03/a> | Johannes Ullrich | Keeping Track of Your Attack Surface for Cheap |
| 2022-02-01/a> | Xavier Mertens | Automation is Nice But Don't Replace Your Knowledge |
| 2022-01-29/a> | Guy Bruneau | SIEM In this Decade, Are They Better than the Last? |
| 2022-01-27/a> | Johannes Ullrich | Apple Patches Everything |
| 2022-01-11/a> | Johannes Ullrich | Microsoft Patch Tuesday - January 2022 |
| 2022-01-07/a> | Xavier Mertens | Custom Python RAT Builder |
| 2022-01-04/a> | Xavier Mertens | A Simple Batch File That Blocks People |
| 2021-12-28/a> | Russ McRee | LotL Classifier tests for shells, exfil, and miners |
| 2021-12-02/a> | Brad Duncan | TA551 (Shathak) pushes IcedID (Bokbot) |
| 2021-12-01/a> | Xavier Mertens | Info-Stealer Using webhook.site to Exfiltrate Data |
| 2021-11-29/a> | Didier Stevens | Wireshark 3.6.0 Released |
| 2021-11-25/a> | Didier Stevens | YARA's Private Strings |
| 2021-11-18/a> | Xavier Mertens | JavaScript Downloader Delivers Agent Tesla Trojan |
| 2021-11-14/a> | Didier Stevens | Video: Obfuscated Maldoc: Reversed BASE64 |
| 2021-11-08/a> | Xavier Mertens | (Ab)Using Security Tools & Controls for the Bad |
| 2021-11-04/a> | Brad Duncan | October 2021 Forensic Contest: Answers and Analysis |
| 2021-10-31/a> | Didier Stevens | Sysinternals: Autoruns and Sysmon updates |
| 2021-10-28/a> | Yee Ching Tok | Multiple Apple Patches for October 2021 |
| 2021-10-20/a> | Xavier Mertens | Thanks to COVID-19, New Types of Documents are Lost in The Wild |
| 2021-10-18/a> | Xavier Mertens | Malicious PowerShell Using Client Certificate Authentication |
| 2021-10-10/a> | Didier Stevens | Wireshark 3.4.9 Released |
| 2021-09-22/a> | Didier Stevens | An XML-Obfuscated Office Document (CVE-2021-40444) |
| 2021-09-21/a> | Johannes Ullrich | A First Look at Apple's iOS 15 "Private Relay" feature. |
| 2021-09-14/a> | Renato Marinho | Microsoft September 2021 Patch Tuesday |
| 2021-09-11/a> | Guy Bruneau | Shipping to Elasticsearch Microsoft DNS Logs |
| 2021-09-09/a> | Johannes Ullrich | Updates to Our Datafeeds/API |
| 2021-09-07/a> | Johannes Ullrich | Why I Gave Up on IPv6. And no, it is not because of security issues. |
| 2021-09-01/a> | Brad Duncan | STRRAT: a Java-based RAT that doesn't care if you have Java |
| 2021-08-29/a> | Guy Bruneau | Filter JSON Data by Value with Linux jq |
| 2021-08-21/a> | Didier Stevens | New Versions Of Sysinternals Tools |
| 2021-08-20/a> | Xavier Mertens | Waiting for the C2 to Show Up |
| 2021-08-11/a> | Brad Duncan | TA551 (Shathak) continues pushing BazarLoader, infections lead to Cobalt Strike |
| 2021-08-02/a> | Didier Stevens | Changing BAT Files On The Fly |
| 2021-07-31/a> | Guy Bruneau | Unsolicited DNS Queries |
| 2021-07-25/a> | Didier Stevens | Wireshark 3.4.7 Released |
| 2021-07-04/a> | Didier Stevens | DIY CD/DVD Destruction - Follow Up |
| 2021-06-27/a> | Didier Stevens | DIY CD/DVD Destruction |
| 2021-06-24/a> | Xavier Mertens | Do you Like Cookies? Some are for sale! |
| 2021-06-21/a> | Rick Wanner | Mitre CWE - Common Weakness Enumeration |
| 2021-06-20/a> | Didier Stevens | Video: oledump Cheat Sheet |
| 2021-06-04/a> | Xavier Mertens | Russian Dolls VBS Obfuscation |
| 2021-05-10/a> | Johannes Ullrich | Correctly Validating IP Addresses: Why encoding matters for input validation. |
| 2021-05-08/a> | Guy Bruneau | Who is Probing the Internet for Research Purposes? |
| 2021-04-25/a> | Didier Stevens | Wireshark 3.4.5 Released |
| 2021-04-13/a> | Richard Porter | Microsoft April 2021 Patch Tuesday |
| 2021-04-10/a> | Guy Bruneau | Building an IDS Sensor with Suricata & Zeek with Logs to ELK |
| 2021-04-09/a> | Xavier Mertens | No Python Interpreter? This Simple RAT Installs Its Own Copy |
| 2021-03-31/a> | Xavier Mertens | Quick Analysis of a Modular InfoStealer |
| 2021-03-14/a> | Didier Stevens | Wireshark 3.4.4 Released |
| 2021-03-12/a> | Guy Bruneau | Microsoft DHCP Logs Shipped to ELK |
| 2021-03-10/a> | Rob VandenBrink | SharpRDP - PSExec without PSExec, PSRemoting without PowerShell |
| 2021-03-04/a> | Xavier Mertens | From VBS, PowerShell, C Sharp, Process Hollowing to RAT |
| 2021-03-02/a> | Russ McRee | Adversary Simulation with Sim |
| 2021-02-26/a> | Guy Bruneau | Pretending to be an Outlook Version Update |
| 2021-02-25/a> | Jim Clausing | So where did those Satori attacks come from? |
| 2021-02-24/a> | Brad Duncan | Malspam pushes GuLoader for Remcos RAT |
| 2021-02-16/a> | Jim Clausing | More weirdness on TCP port 26 |
| 2021-02-15/a> | Johannes Ullrich | Securing and Optimizing Networks: Using pfSense Traffic Shaper Limiters to Combat Bufferbloat |
| 2021-02-06/a> | Didier Stevens | YARA v4.0.5 |
| 2021-02-04/a> | Bojan Zdrnja | Abusing Google Chrome extension syncing for data exfiltration and C&C |
| 2021-02-01/a> | Rob VandenBrink | Taking a Shot at Reverse Shell Attacks, CNC Phone Home and Data Exfil from Servers |
| 2021-01-31/a> | Didier Stevens | YARA v4.0.4 |
| 2021-01-30/a> | Guy Bruneau | PacketSifter as Network Parsing and Telemetry Tool |
| 2021-01-29/a> | Xavier Mertens | Sensitive Data Shared with Cloud Services |
| 2021-01-26/a> | Brad Duncan | TA551 (Shathak) Word docs push Qakbot (Qbot) |
| 2021-01-18/a> | Didier Stevens | Doc & RTF Malicious Document |
| 2021-01-04/a> | Jan Kopriva | From a small BAT file to Mass Logger infostealer |
| 2021-01-02/a> | Guy Bruneau | Protecting Home Office and Enterprise in 2021 |
| 2020-12-29/a> | Jan Kopriva | Want to know what's in a folder you don't have a permission to access? Try asking your AV solution... |
| 2020-12-22/a> | Xavier Mertens | Malware Victim Selection Through WiFi Identification |
| 2020-12-20/a> | Didier Stevens | Wireshark 3.4.2 Released |
| 2020-12-19/a> | Guy Bruneau | Secure Communication using TLS in Elasticsearch |
| 2020-12-14/a> | Johannes Ullrich | SolarWinds Breach Used to Infiltrate Customer Networks (Solarigate) |
| 2020-12-13/a> | Didier Stevens | Wireshark 3.4.1 Released |
| 2020-12-08/a> | Johannes Ullrich | December 2020 Microsoft Patch Tuesday: Exchange, Sharepoint, Dynamics and DNS Spoofing |
| 2020-12-06/a> | Didier Stevens | oledump's Indicators (video) |
| 2020-12-05/a> | Guy Bruneau | Is IP 91.199.118.137 testing Access to aahwwx.52host.xyz? |
| 2020-12-04/a> | Guy Bruneau | Detecting Actors Activity with Threat Intel |
| 2020-11-25/a> | Xavier Mertens | Live Patching Windows API Calls Using PowerShell |
| 2020-11-21/a> | Guy Bruneau | VMware privilege escalation vulnerabilities (CVE-2020-4004, CVE-2020-4005) - https://www.vmware.com/security/advisories/VMSA-2020-0026.html |
| 2020-11-19/a> | Xavier Mertens | PowerShell Dropper Delivering Formbook |
| 2020-11-13/a> | Xavier Mertens | Old Worm But New Obfuscation Technique |
| 2020-11-06/a> | Johannes Ullrich | Rediscovering Limitations of Stateful Firewalls: "NAT Slipstreaming" ? Implications, Detections and Mitigations |
| 2020-11-05/a> | Xavier Mertens | Did You Spot "Invoke-Expression"? |
| 2020-10-30/a> | Xavier Mertens | Quick Status of the CAA DNS Record Adoption |
| 2020-10-24/a> | Guy Bruneau | An Alternative to Shodan, Censys with User-Agent CensysInspect/1.1 |
| 2020-10-14/a> | Xavier Mertens | Nicely Obfuscated Python RAT |
| 2020-10-14/a> | Brad Duncan | More TA551 (Shathak) Word docs push IcedID (Bokbot) |
| 2020-09-30/a> | Johannes Ullrich | Scans for FPURL.xml: Reconnaissance or Not? |
| 2020-09-28/a> | Xavier Mertens | Some Tyler Technologies Customers Targeted with The Installation of a Bomgar Client |
| 2020-09-27/a> | Didier Stevens | Wireshark 3.2.7 Released |
| 2020-09-20/a> | Guy Bruneau | Analysis of a Salesforce Phishing Emails |
| 2020-09-04/a> | Jan Kopriva | A blast from the past - XXEncoded VB6.0 Trojan |
| 2020-08-25/a> | Xavier Mertens | Keep An Eye on LOLBins |
| 2020-08-22/a> | Guy Bruneau | Remote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common? |
| 2020-08-19/a> | Xavier Mertens | Example of Word Document Delivering Qakbot |
| 2020-08-18/a> | Xavier Mertens | Using API's to Track Attackers |
| 2020-08-16/a> | Didier Stevens | Small Challenge: A Simple Word Maldoc - Part 3 |
| 2020-08-15/a> | Didier Stevens | Wireshark 3.2.6 Released |
| 2020-08-12/a> | Russ McRee | To the Brim at the Gates of Mordor Pt. 1 |
| 2020-08-10/a> | Bojan Zdrnja | Scoping web application and web service penetration tests |
| 2020-08-08/a> | Guy Bruneau | Scanning Activity Include Netcat Listener |
| 2020-08-07/a> | Brad Duncan | TA551 (Shathak) Word docs push IcedID (Bokbot) |
| 2020-08-04/a> | Johannes Ullrich | Internet Choke Points: Concentration of Authoritative Name Servers |
| 2020-08-01/a> | Jan Kopriva | What pages do bad bots look for? |
| 2020-07-24/a> | Xavier Mertens | Compromized Desktop Applications by Web Technologies |
| 2020-07-19/a> | Guy Bruneau | Scanning Activity for ZeroShell Unauthenticated Access |
| 2020-07-11/a> | Guy Bruneau | VMware XPC Client validation privilege escalation vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0017.html |
| 2020-07-08/a> | Xavier Mertens | If You Want Something Done Right, You Have To Do It Yourself... Malware Too! |
| 2020-07-04/a> | Russ McRee | Happy FouRth of July from the Internet Storm Center |
| 2020-06-19/a> | Remco Verhoef | Sigma rules! The generic signature format for SIEM systems. |
| 2020-06-16/a> | Johannes Ullrich | Odd "Protest" Spam (Scam?) Targeting Atlanta Police Foundation |
| 2020-06-08/a> | Didier Stevens | Translating BASE64 Obfuscated Scripts |
| 2020-05-24/a> | Didier Stevens | Wireshark 3.2.4 Released |
| 2020-05-14/a> | Rob VandenBrink | Patch Tuesday Revisited - CVE-2020-1048 isn't as "Medium" as MS Would Have You Believe |
| 2020-05-06/a> | Xavier Mertens | Keeping an Eye on Malicious Files Life Time |
| 2020-04-27/a> | Xavier Mertens | Powershell Payload Stored in a PSCredential Object |
| 2020-04-24/a> | Xavier Mertens | Malicious Excel With a Strong Obfuscation and Sandbox Evasion |
| 2020-04-17/a> | Xavier Mertens | Weaponized RTF Document Generator & Mailer in PowerShell |
| 2020-04-11/a> | Didier Stevens | Wireshark 3.2.3 Released: Mac Users Pay Attention Please |
| 2020-04-10/a> | Xavier Mertens | PowerShell Sample Extracting Payload From SSL |
| 2020-04-03/a> | Xavier Mertens | Obfuscated with a Simple 0x0A |
| 2020-03-14/a> | Didier Stevens | Phishing PDF With Incremental Updates. |
| 2020-03-10/a> | Johannes Ullrich | Microsoft Patch Tuesday March 2020 |
| 2020-03-07/a> | Didier Stevens | Wireshark 3.2.2 Released: Windows' Users Pay Attention Please |
| 2020-03-02/a> | Jan Kopriva | Secure vs. cleartext protocols - couple of interesting stats |
| 2020-02-29/a> | Guy Bruneau | Hazelcast IMDG Discover Scan |
| 2020-02-28/a> | Xavier Mertens | Show me Your Clipboard Data! |
| 2020-02-22/a> | Xavier Mertens | Simple but Efficient VBScript Obfuscation |
| 2020-02-16/a> | Guy Bruneau | SOAR or not to SOAR? |
| 2020-02-07/a> | Xavier Mertens | Sandbox Detection Tricks & Nice Obfuscation in a Single VBScript |
| 2020-02-05/a> | Brad Duncan | Fake browser update pages are "still a thing" |
| 2020-02-01/a> | Didier Stevens | Wireshark 3.2.1 Released |
| 2020-01-25/a> | Guy Bruneau | Is Threat Hunting the new Fad? |
| 2020-01-23/a> | Xavier Mertens | Complex Obfuscation VS Simple Trick |
| 2020-01-15/a> | Johannes Ullrich | CVE-2020-0601 Followup |
| 2020-01-10/a> | Xavier Mertens | More Data Exfiltration |
| 2019-12-21/a> | Didier Stevens | Wireshark 3.2.0 Released |
| 2019-12-08/a> | Didier Stevens | Wireshark 3.0.7 Released |
| 2019-11-22/a> | Xavier Mertens | Abusing Web Filters Misconfiguration for Reconnaissance |
| 2019-10-29/a> | Xavier Mertens | Generating PCAP Files from YAML |
| 2019-10-27/a> | Didier Stevens | Wireshark 3.0.6 Released |
| 2019-10-18/a> | Xavier Mertens | Quick Malicious VBS Analysis |
| 2019-09-27/a> | Xavier Mertens | New Scans for Polycom Autoconfiguration Files |
| 2019-09-25/a> | Brad Duncan | Malspam pushing Quasar RAT |
| 2019-09-21/a> | Didier Stevens | Wireshark 3.0.5 Release: Potential Windows Crash when Updating |
| 2019-09-19/a> | Xavier Mertens | Agent Tesla Trojan Abusing Corporate Email Accounts |
| 2019-09-19/a> | Xavier Mertens | Blocklisting or Whitelisting in the Right Way |
| 2019-09-17/a> | Rob VandenBrink | Investigating Gaps in your Windows Event Logs |
| 2019-08-25/a> | Guy Bruneau | Are there any Advantages of Buying Cyber Security Insurance? |
| 2019-08-22/a> | Xavier Mertens | Simple Mimikatz & RDPWrapper Dropper |
| 2019-08-09/a> | Xavier Mertens | 100% JavaScript Phishing Page |
| 2019-07-24/a> | Xavier Mertens | May People Be Considered as IOC? |
| 2019-07-20/a> | Guy Bruneau | Re-evaluating Network Security - It is Increasingly More Complex |
| 2019-07-11/a> | Xavier Mertens | Russian Dolls Malicious Script Delivering Ursnif |
| 2019-07-10/a> | Rob VandenBrink | Dumping File Contents in Hex (in PowerShell) |
| 2019-07-09/a> | John Bambenek | MSFT July 2019 Patch Tuesday |
| 2019-07-02/a> | Xavier Mertens | Malicious Script With Multiple Payloads |
| 2019-06-21/a> | Rob VandenBrink | Netstat Local and Remote -new and improved, now with more PowerShell! |
| 2019-06-20/a> | Xavier Mertens | Using a Travel Packing App for Infosec Purpose |
| 2019-06-19/a> | Johannes Ullrich | Critical Actively Exploited WebLogic Flaw Patched CVE-2019-2729 |
| 2019-06-10/a> | Xavier Mertens | Interesting JavaScript Obfuscation Example |
| 2019-05-31/a> | Didier Stevens | Retrieving Second Stage Payload with Ncat |
| 2019-05-19/a> | Guy Bruneau | Is Metadata Only Approach, Good Enough for Network Traffic Analysis? |
| 2019-04-26/a> | Rob VandenBrink | Pillaging Passwords from Service Accounts |
| 2019-04-25/a> | Rob VandenBrink | Unpatched Vulnerability Alert - WebLogic Zero Day |
| 2019-04-24/a> | Rob VandenBrink | Where have all the Domain Admins gone? Rooting out Unwanted Domain Administrators |
| 2019-04-05/a> | Russ McRee | Beagle: Graph transforms for DFIR data & logs |
| 2019-03-06/a> | Xavier Mertens | Keep an Eye on Disposable Email Addresses |
| 2019-02-24/a> | Guy Bruneau | Packet Editor and Builder by Colasoft |
| 2019-02-05/a> | Rob VandenBrink | Mitigations against Mimikatz Style Attacks |
| 2019-01-29/a> | Johannes Ullrich | A Not So Well Done Phish (Why Attackers need to Implement IPv6 Now! ;-) ) |
| 2019-01-12/a> | Guy Bruneau | Snorpy a Web Base Tool to Build Snort/Suricata Rules |
| 2019-01-09/a> | Russ McRee | gganimate: Animate YouR Security Analysis |
| 2018-12-31/a> | Didier Stevens | Software Crashes: A New Year's Resolution |
| 2018-12-29/a> | Didier Stevens | Video: De-DOSfuscation Example |
| 2018-12-19/a> | Xavier Mertens | Microsoft OOB Patch for Internet Explorer: Scripting Engine Memory Corruption Vulnerability |
| 2018-12-15/a> | Didier Stevens | De-DOSfuscation Example |
| 2018-12-12/a> | Didier Stevens | Yet Another DOSfuscation Sample |
| 2018-12-11/a> | Richard Porter | Microsoft December 2018 Patch Tuesday |
| 2018-11-27/a> | Xavier Mertens | More obfuscated shell scripts: Fake MacOS Flash update |
| 2018-11-27/a> | Rob VandenBrink | Data Exfiltration in Penetration Tests |
| 2018-11-26/a> | Xavier Mertens | Obfuscated bash script targeting QNap boxes |
| 2018-11-20/a> | Xavier Mertens | Querying DShield from Cortex |
| 2018-11-18/a> | Guy Bruneau | Multipurpose PCAP Analysis Tool |
| 2018-11-16/a> | Xavier Mertens | Basic Obfuscation With Permissive Languages |
| 2018-11-14/a> | Brad Duncan | Day in the life of a researcher: Finding a wave of Trickbot malspam |
| 2018-11-13/a> | Johannes Ullrich | November 2018 Microsoft Patch Tuesday |
| 2018-11-11/a> | Pasquale Stirparo | Community contribution: joining forces or multiply solutions? |
| 2018-11-06/a> | Xavier Mertens | Malicious Powershell Script Dissection |
| 2018-11-05/a> | Johannes Ullrich | Struts 2.3 Vulnerable to Two Year old File Upload Flaw |
| 2018-10-23/a> | Xavier Mertens | Diving into Malicious AutoIT Code |
| 2018-10-17/a> | Russ McRee | RedHunt Linux - Adversary Emulation, Threat Hunting & Intelligence |
| 2018-10-12/a> | Xavier Mertens | More Equation Editor Exploit Waves |
| 2018-10-10/a> | Xavier Mertens | New Campaign Using Old Equation Editor Vulnerability |
| 2018-10-09/a> | Johannes Ullrich | October 2018 Microsoft Patch Tuesday |
| 2018-10-08/a> | Guy Bruneau | Latest Release of rockNSM 2.1 |
| 2018-10-01/a> | Didier Stevens | Decoding Custom Substitution Encodings with translate.py |
| 2018-09-30/a> | Didier Stevens | When DOSfuscation Helps... |
| 2018-09-19/a> | Rob VandenBrink | Certificates Revisited - SSL VPN Certificates 2 Ways |
| 2018-09-18/a> | Rob VandenBrink | Using Certificate Transparency as an Attack / Defense Tool |
| 2018-09-11/a> | Johannes Ullrich | Microsoft September Patch Tuesday Summary |
| 2018-09-05/a> | Rob VandenBrink | Where have all my Certificates gone? (And when do they expire?) |
| 2018-08-24/a> | Xavier Mertens | Microsoft Publisher Files Delivering Malware |
| 2018-07-30/a> | Didier Stevens | Malicious Word documents using DOSfuscation |
| 2018-07-29/a> | Guy Bruneau | Using RITA for Threat Analysis |
| 2018-07-26/a> | Xavier Mertens | Windows Batch File Deobfuscation |
| 2018-07-17/a> | Scott Fendley | Oracle Critical Patch Update Release |
| 2018-07-04/a> | Didier Stevens | XPS Metadata |
| 2018-07-03/a> | Didier Stevens | Progress indication for scripts on Windows |
| 2018-07-02/a> | Guy Bruneau | VMware ESXi, Workstation, and Fusion address multiple out-of-bounds read vulnerabilities https://www.vmware.com/security/advisories/VMSA-2018-0016.html |
| 2018-06-18/a> | Xavier Mertens | Malicious JavaScript Targeting Mobile Browsers |
| 2018-06-16/a> | Russ McRee | Anomaly Detection & Threat Hunting with Anomalize |
| 2018-06-15/a> | Lorna Hutcheson | SMTP Strangeness - Possible C2 |
| 2018-06-12/a> | Johannes Ullrich | Microsoft June 2018 Patch Tuesday |
| 2018-06-05/a> | Xavier Mertens | Malicious Post-Exploitation Batch File |
| 2018-05-25/a> | Xavier Mertens | Antivirus Evasion? Easy as 1,2,3 |
| 2018-05-22/a> | Guy Bruneau | VMware updates enable Hypervisor-Assisted Guest Mitigations for Speculative Store Bypass issue - https://www.vmware.com/security/advisories/VMSA-2018-0012.html |
| 2018-05-19/a> | Xavier Mertens | Malicious Powershell Targeting UK Bank Customers |
| 2018-05-10/a> | Bojan Zdrnja | Exfiltrating data from (very) isolated environments |
| 2018-05-09/a> | Xavier Mertens | Nice Phishing Sample Delivering Trickbot |
| 2018-04-30/a> | Remco Verhoef | Another approach to webapplication fingerprinting |
| 2018-04-25/a> | Johannes Ullrich | Yet Another Drupal RCE Vulnerability |
| 2018-03-11/a> | Guy Bruneau | rockNSM Configuration & Installation Steps http://handlers.sans.org/gbruneau/rockNSM%20as%20an%20Incident%20Response%20Package.htm |
| 2018-03-01/a> | Johannes Ullrich | Why Does Emperor Xi Dislike Winnie the Pooh and Scrambled Eggs? |
| 2018-02-25/a> | Guy Bruneau | Blackhole Advertising Sites with Pi-hole |
| 2018-01-23/a> | Johannes Ullrich | Apple Updates Everything, Again |
| 2018-01-03/a> | John Bambenek | Phishing to Rural America Leads to Six-figure Wire Fraud Losses |
| 2017-12-20/a> | Richard Porter | VMWare Security Advisory: VMSA-2017-0021: https://www.vmware.com/security/advisories/VMSA-2017-0021.html |
| 2017-12-16/a> | Xavier Mertens | Microsoft Office VBA Macro Obfuscation via Metadata |
| 2017-12-13/a> | Xavier Mertens | Tracking Newly Registered Domains |
| 2017-12-12/a> | Johannes Ullrich | December Microsoft Patch Tuesday Summary |
| 2017-11-23/a> | Xavier Mertens | Proactive Malicious Domain Search |
| 2017-11-11/a> | Xavier Mertens | Keep An Eye on your Root Certificates |
| 2017-11-03/a> | Xavier Mertens | Simple Analysis of an Obfuscated JAR File |
| 2017-10-27/a> | Renato Marinho | "Catch-All" Google Chrome Malicious Extension Steals All Posted Data |
| 2017-10-02/a> | Xavier Mertens | Investigating Security Incidents with Passive DNS |
| 2017-09-30/a> | Lorna Hutcheson | Who's Borrowing your Resources? |
| 2017-09-17/a> | Guy Bruneau | rockNSM as a Incident Response Package |
| 2017-09-16/a> | Guy Bruneau | VMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities - https://www.vmware.com/security/advisories/VMSA-2017-0015.html |
| 2017-09-09/a> | Didier Stevens | Malware analysis output sanitization |
| 2017-09-08/a> | Adrien de Beaupre | YASRV (Yet Another Struts RCE Vulnerability) yes a different one from yesterday |
| 2017-09-06/a> | Adrien de Beaupre | Modern Web Application Penetration Testing , Hash Length Extension Attacks |
| 2017-09-05/a> | Adrien de Beaupre | Struts vulnerability patch released by apache, patch now |
| 2017-08-17/a> | Xavier Mertens | Maldoc with auto-updated link |
| 2017-08-07/a> | Xavier Mertens | Increase of phpMyAdmin scans |
| 2017-07-30/a> | Guy Bruneau | Re-release of MS Oulook Security Patches https://portal.msrc.microsoft.com/en-us/security-guidance/summary |
| 2017-07-11/a> | Renato Marinho | July's Microsoft Patch Tuesday |
| 2017-07-09/a> | Russ McRee | Adversary hunting with SOF-ELK |
| 2017-07-08/a> | Xavier Mertens | A VBScript with Obfuscated Base64 Data |
| 2017-06-28/a> | Brad Duncan | Catching up with Blank Slate: a malspam campaign still going strong |
| 2017-06-22/a> | Xavier Mertens | Obfuscating without XOR |
| 2017-06-17/a> | Guy Bruneau | Mapping Use Cases to Logs. Which Logs are the Most Important to Collect? |
| 2017-06-08/a> | Tom Webb | Summer STEM for Kids |
| 2017-05-31/a> | Pasquale Stirparo | Analysis of Competing Hypotheses, WCry and Lazarus (ACH part 2) |
| 2017-05-28/a> | Pasquale Stirparo | Analysis of Competing Hypotheses (ACH part 1) |
| 2017-05-28/a> | Guy Bruneau | CyberChef a Must Have Tool in your Tool bag! |
| 2017-05-20/a> | Xavier Mertens | Typosquatting: Awareness and Hunting |
| 2017-05-16/a> | Russ McRee | WannaCry? Do your own data analysis. |
| 2017-05-10/a> | Johannes Ullrich | Read This If You Are Using a Script to Pull Data From This Site |
| 2017-05-03/a> | Bojan Zdrnja | Powershelling with exploits |
| 2017-04-28/a> | Xavier Mertens | Another Day, Another Obfuscation Technique |
| 2017-04-21/a> | Xavier Mertens | Analysis of a Maldoc with Multiple Layers of Obfuscation |
| 2017-04-20/a> | Xavier Mertens | DNS Query Length... Because Size Does Matter |
| 2017-04-19/a> | Xavier Mertens | Hunting for Malicious Excel Sheets |
| 2017-04-02/a> | Guy Bruneau | IPFire - A Household Multipurpose Security Gateway |
| 2017-03-30/a> | Xavier Mertens | Diverting built-in features for the bad |
| 2017-03-25/a> | Russell Eubanks | Distraction as a Service |
| 2017-03-24/a> | Xavier Mertens | Nicely Obfuscated JavaScript Sample |
| 2017-03-18/a> | Xavier Mertens | Example of Multiple Stages Dropper |
| 2017-03-14/a> | Johannes Ullrich | February and March Microsoft Patch Tuesday |
| 2017-03-10/a> | Xavier Mertens | The Side Effect of GeoIP Filters |
| 2017-03-06/a> | Renato Marinho | A very convincing Typosquatting + Social Engineering campaign is targeting Santander corporate customers in Brazil |
| 2017-03-04/a> | Xavier Mertens | How your pictures may affect your website reputation |
| 2017-02-28/a> | Xavier Mertens | Analysis of a Simple PHP Backdoor |
| 2017-02-14/a> | Johannes Ullrich | Microsoft Patch Tuesday Delayed |
| 2017-02-12/a> | Xavier Mertens | Analysis of a Suspicious Piece of JavaScript |
| 2017-02-04/a> | Xavier Mertens | Detecting Undisclosed Vulnerabilities with Security Tools & Features |
| 2017-02-01/a> | Xavier Mertens | Quick Analysis of Data Left Available by Attackers |
| 2017-01-26/a> | Xavier Mertens | IOC's: Risks of False Positive Alerts Flood Ahead |
| 2017-01-10/a> | Johannes Ullrich | January 2017 Microsoft Patch Tuesday |
| 2017-01-06/a> | John Bambenek | Great Misadventures of Security Vendors: Absurd Sandboxing Edition |
| 2016-11-27/a> | Russ McRee | Scapy vs. CozyDuke |
| 2016-11-02/a> | Rob VandenBrink | What Does a Pentest Look Like? |
| 2016-10-30/a> | Pasquale Stirparo | Volatility Bot: Automated Memory Analysis |
| 2016-10-07/a> | Rick Wanner | First Hurricane Matthew related Phish |
| 2016-09-28/a> | Xavier Mertens | SNMP Pwn3ge |
| 2016-09-25/a> | Pasquale Stirparo | Defining Threat Intelligence Requirements |
| 2016-09-22/a> | Rick Wanner | YAHDD! (Yet another HUGE data Breach!) |
| 2016-09-15/a> | Xavier Mertens | In Need of a OTP Manager Soon? |
| 2016-09-13/a> | Rob VandenBrink | Apple iOS 10 and 10.0.1 Released |
| 2016-09-13/a> | Rob VandenBrink | Microsoft Patch Tuesday Analysis |
| 2016-09-04/a> | Russ McRee | Kali Linux 2016.2 Release: https://www.kali.org/news/kali-linux-20162-release/ |
| 2016-09-02/a> | Johannes Ullrich | Apple Patches "Trident" Vulnerabilities in OS X / Safari |
| 2016-08-31/a> | Deborah Hale | Dropbox Breach |
| 2016-08-29/a> | Russ McRee | Recommended Reading: Intrusion Detection Using Indicators of Compromise Based on Best Practices and Windows Event Logs |
| 2016-08-28/a> | Guy Bruneau | Spam with Obfuscated Javascript |
| 2016-08-22/a> | Russ McRee | Red Team Tools Updates: hashcat and SpiderFoot |
| 2016-08-21/a> | Rick Wanner | Cisco ASA SNMP Remote Code Execution Vulnerability |
| 2016-08-19/a> | Xavier Mertens | Data Classification For the Masses |
| 2016-07-31/a> | Pasquale Stirparo | Sharing (intel) is caring... or not? |
| 2016-07-27/a> | Xavier Mertens | Critical Xen PV guests vulnerabilities |
| 2016-07-26/a> | Johannes Ullrich | Command and Control Channels Using "AAAA" DNS Records |
| 2016-07-12/a> | Johannes Ullrich | Microsoft Patch Tuesday Summary for July 2016 |
| 2016-07-03/a> | Guy Bruneau | Is Data Privacy part of your Company's Culture? |
| 2016-06-22/a> | Bojan Zdrnja | Security through obscurity never works |
| 2016-06-20/a> | Xavier Mertens | Using Your Password Manager to Monitor Data Leaks |
| 2016-06-15/a> | Richard Porter | Warp Speed Ahead, L7 Open Source Packet Generator: Warp17 |
| 2016-06-03/a> | Tom Liston | MySQL is YourSQL |
| 2016-05-16/a> | Rick Wanner | An oldie but a goodie - 419 Death Scam |
| 2016-05-02/a> | Rick Wanner | Lean Threat Intelligence |
| 2016-04-25/a> | Guy Bruneau | Highlights from the 2016 HPE Annual Cyber Threat Report |
| 2016-04-02/a> | Russell Eubanks | Why Can't We Be Friends? |
| 2016-03-08/a> | Rick Wanner | Critical Adobe Updates - March 2016 |
| 2016-03-07/a> | Xavier Mertens | Another Malicious Document, Another Way to Deliver Malicious Code |
| 2016-02-28/a> | Guy Bruneau | RFC 6598 - Carrier Grade NAT |
| 2016-02-27/a> | Guy Bruneau | OpenSSL Security Update Planned for 1 March Release |
| 2016-02-23/a> | Xavier Mertens | VMware VMSA-2016-0002 |
| 2016-02-22/a> | Xavier Mertens | Reducing False Positives with Open Data Sources |
| 2016-02-20/a> | Didier Stevens | Locky: JavaScript Deobfuscation |
| 2016-02-11/a> | Tom Webb | Tomcat IR with XOR.DDoS |
| 2016-02-09/a> | Johannes Ullrich | Microsoft February 2016 Patch Tuesday |
| 2016-02-09/a> | Johannes Ullrich | Adobe Patch Tuesday - February 2016 |
| 2016-02-07/a> | Xavier Mertens | More Malicious JavaScript Obfuscation |
| 2016-02-03/a> | Xavier Mertens | Automating Vulnerability Scans |
| 2016-01-30/a> | Xavier Mertens | All CVE Details at Your Fingertips |
| 2016-01-29/a> | Xavier Mertens | Scripting Web Categorization |
| 2016-01-25/a> | Rob VandenBrink | Assessing Remote Certificates with Powershell |
| 2016-01-21/a> | Jim Clausing | Scanning for Fortinet ssh backdoor |
| 2016-01-15/a> | Xavier Mertens | JavaScript Deobfuscation Tool |
| 2016-01-12/a> | Alex Stanford | January 2016 Microsoft Patch Tuesday |
| 2015-12-24/a> | Xavier Mertens | Unity Makes Strength |
| 2015-12-14/a> | Russ McRee | AD Security's Unofficial Guide to Mimikatz & Command Reference |
| 2015-12-08/a> | Johannes Ullrich | December 2015 Microsoft Patch Tuesday |
| 2015-11-10/a> | Johannes Ullrich | November 2015 Microsoft Patch Tuesday |
| 2015-11-09/a> | John Bambenek | Protecting Users and Enterprises from the Mobile Malware Threat |
| 2015-10-13/a> | Alex Stanford | October 2015 Microsoft Patch Tuesday |
| 2015-10-12/a> | Guy Bruneau | Data Visualization,What is your Tool of Choice? |
| 2015-10-09/a> | Guy Bruneau | Adobe Acrobat and Reader Pre-Announcement |
| 2015-09-08/a> | Johannes Ullrich | September 2015 Microsoft Patch Tuesday |
| 2015-09-03/a> | Xavier Mertens | Querying the DShield API from RTIR |
| 2015-09-01/a> | Daniel Wesemann | Encryption of "data at rest" in servers |
| 2015-08-11/a> | Manuel Humberto Santander Pelaez | August 2015 Microsoft Patch Tuesday |
| 2015-07-31/a> | Russ McRee | Tech tip: Invoke a system command in R |
| 2015-07-31/a> | Russ McRee | Tech tip follow-up: Using the data Invoked with R's system command |
| 2015-07-23/a> | Mark Hofman | Some more 0-days from ZDI |
| 2015-07-15/a> | Richard Porter | Always Check Your References (Cheat Sheets to the Rescue) |
| 2015-07-14/a> | Johannes Ullrich | Adobe Updates Flash Player, Shockwave and PDF Reader |
| 2015-07-14/a> | Johannes Ullrich | July 2015 Microsoft Patch Tuesday |
| 2015-06-09/a> | Johannes Ullrich | Microsoft Patch Tuesday Summary for June 2015 |
| 2015-06-02/a> | Alex Stanford | Guest Diary: Xavier Mertens - Playing with IP Reputation with Dshield & OSSEC |
| 2015-05-23/a> | Guy Bruneau | Business Value in "Big Data" |
| 2015-05-14/a> | Daniel Wesemann | Oh Bloat! |
| 2015-05-12/a> | Johannes Ullrich | May 2015 Microsoft Patch Tuesday Summary |
| 2015-05-03/a> | Russ McRee | VolDiff, for memory image differential analysis |
| 2015-04-28/a> | Daniel Wesemann | Scammy Nepal earthquake donation requests |
| 2015-04-14/a> | Alex Stanford | Microsoft Patch Tuesday - April 2015 |
| 2015-04-08/a> | Tom Webb | Is it a breach or not? |
| 2015-04-04/a> | Didier Stevens | VMware Product Updates Address Critical Information Disclosure Issue In JRE |
| 2015-03-26/a> | Daniel Wesemann | Pin-up on your Smartphone! |
| 2015-03-21/a> | Russell Eubanks | Have you seen my personal information? It has been lost. Again. |
| 2015-03-18/a> | Daniel Wesemann | Pass the hash! |
| 2015-03-10/a> | Johannes Ullrich | Microsoft March Patch Tuesday |
| 2015-03-01/a> | Rick Wanner | Advisory: Seagate NAS Remote Code Execution |
| 2015-02-27/a> | Rick Wanner | Let's Encrypt! |
| 2015-02-26/a> | Johannes Ullrich | New Feature: Subnet Report |
| 2015-02-19/a> | Daniel Wesemann | DNS-based DDoS |
| 2015-02-17/a> | Rob VandenBrink | oclHashcat 1.33 Released |
| 2015-02-17/a> | Rob VandenBrink | A Different Kind of Equation |
| 2015-02-13/a> | Johannes Ullrich | Microsoft February Patch Failures Continue: KB3023607 vs. Cisco AnyConnect Client |
| 2015-02-12/a> | Johannes Ullrich | Did You Remove That Debug Code? Netatmo Weather Station Sending WPA Passphrase in the Clear |
| 2015-02-11/a> | Johannes Ullrich | Microsoft Hardens GPO by Fixing Two Serious Vulnerabilities. |
| 2015-02-10/a> | Mark Baggett | Detecting Mimikatz Use On Your Network |
| 2015-02-10/a> | Mark Baggett | Microsoft Update Advisory for February 2015 |
| 2015-01-23/a> | Adrien de Beaupre | Infocon change to yellow for Adobe Flash issues |
| 2015-01-13/a> | Johannes Ullrich | Microsoft Patch Tuesday - January 2015 (Really? Telnet?) |
| 2014-12-23/a> | John Bambenek | How I learned to stop worrying and love malware DGAs.... |
| 2014-12-09/a> | Alex Stanford | Microsoft Patch Tuesday - December 2014 |
| 2014-12-01/a> | Guy Bruneau | Do you have a Data Breach Response Plan? |
| 2014-11-24/a> | Richard Porter | Someone is using this? PoS: Compressor |
| 2014-11-18/a> | Jim Clausing | Microsoft November out-of-cycle patch MS14-068 |
| 2014-11-11/a> | Johannes Ullrich | Microsoft November 2014 Patch Tuesday |
| 2014-11-11/a> | Johannes Ullrich | Adobe Flash Update |
| 2014-10-17/a> | Johannes Ullrich | Apple Updates (not just Yosemite) |
| 2014-10-14/a> | Johannes Ullrich | Microsoft October 2014 Patch Tuesday |
| 2014-10-14/a> | Johannes Ullrich | Adobe October 2014 Bulletins for Flash Player and Coldfusion |
| 2014-09-29/a> | Johannes Ullrich | Apple Released Update to Fix Shellshock Vulnerability http://support.apple.com/kb/DL1769 |
| 2014-09-26/a> | Richard Porter | Why We Have Moved to InfoCon:Yellow |
| 2014-09-19/a> | Guy Bruneau | Added today in oclhashcat 131 Django [Default Auth] (PBKDF2 SHA256 Rounds Salt) Support - http://hashcat.net/hashcat/ |
| 2014-09-09/a> | Alex Stanford | Microsoft Patch Tuesday - September 2014 |
| 2014-08-25/a> | Jim Clausing | Unusual CRL traffic? |
| 2014-08-22/a> | Richard Porter | OCLHashCat 1.30 Released |
| 2014-08-22/a> | Richard Porter | PHP 5.4.32 Released http://www.php.net/ChangeLog-5.php#5.4.32 |
| 2014-08-22/a> | Richard Porter | PHP 5.5.16 is available http://www.php.net/ChangeLog-5.php#5.5.16 |
| 2014-08-12/a> | Alex Stanford | Microsoft Patch Tuesday - August 2014 |
| 2014-08-12/a> | Adrien de Beaupre | Adobe updates for 2014/08 |
| 2014-08-09/a> | Adrien de Beaupre | Complete application ownage via Multi-POST XSRF |
| 2014-08-05/a> | Johannes Ullrich | Legal Threat Spam: Sometimes it Gets Personal |
| 2014-08-04/a> | Russ McRee | Threats & Indicators: A Security Intelligence Lifecycle |
| 2014-08-01/a> | Chris Mohan | WireShark 1.10.9 and 1.12.0 has been released |
| 2014-07-30/a> | Rick Wanner | Symantec Endpoint Protection Privilege Escalation Zero Day |
| 2014-07-19/a> | Russ McRee | Keeping the RATs out: the trap is sprung - Part 3 |
| 2014-07-18/a> | Russ McRee | Keeping the RATs out: **it happens - Part 2 |
| 2014-07-16/a> | Russ McRee | Keeping the RATs out: an exercise in building IOCs - Part 1 |
| 2014-07-15/a> | Daniel Wesemann | Oracle July 2014 CPU (patch bundle) |
| 2014-07-11/a> | Rob VandenBrink | Metasploit Update Alert |
| 2014-07-09/a> | Daniel Wesemann | Who owns your typo? |
| 2014-07-08/a> | Alex Stanford | Microsoft Patch Tuesday - July |
| 2014-07-01/a> | Johannes Ullrich | Apple Releases Patches for All Products |
| 2014-06-28/a> | Mark Hofman | No more Microsoft advisory email notifications? |
| 2014-06-12/a> | Guy Bruneau | BIND Security Update for CVE-2014-3859 |
| 2014-06-10/a> | Alex Stanford | Microsoft Patch Tuesday June 2014 |
| 2014-06-06/a> | Johannes Ullrich | Microsoft June Patch Tuesday Advance Notification |
| 2014-05-13/a> | Johannes Ullrich | Microsoft May 2014 Patch Tuesday |
| 2014-05-01/a> | Johannes Ullrich | Microsoft Announces Special Patch for IE 0-day (Win XP included!) |
| 2014-04-26/a> | Guy Bruneau | New Project by Linux Foundation - Core Infrastructure Initiative |
| 2014-04-24/a> | Rob VandenBrink | Apple IOS updates to 7.1.1, OSX Security update 2014-002, Airport Updates - http://support.apple.com/kb/HT1222, http://support.apple.com/kb/HT6208, http://support.apple.com/kb/HT6207, http://support.apple.com/kb/HT6203 |
| 2014-04-22/a> | Johannes Ullrich | Apple Patches for OS X, iOS and Apple TV. |
| 2014-04-16/a> | Johannes Ullrich | Oracle Critical Patch Update for April 2014 |
| 2014-04-12/a> | Guy Bruneau | Critical Security Update for JetPack WordPress Plugin. Bug has existed since Jetpack 1.9, released in October 2012. - http://jetpack.me/2014/04/10/jetpack-security-update/ |
| 2014-04-08/a> | Richard Porter | April 2014 Microsoft Patches |
| 2014-04-02/a> | Kevin Shortt | Apple Security Update for Safari 6.1.3/7.0.3: http://support.apple.com/kb/HT6181 |
| 2014-03-21/a> | Johannes Ullrich | Cisco AsyncOS Patch |
| 2014-03-13/a> | Daniel Wesemann | Identification and authentication are hard ... finding out intention is even harder |
| 2014-03-11/a> | Johannes Ullrich | Adobe Updates: Flash Player |
| 2014-03-11/a> | Johannes Ullrich | Microsoft Patch Tuesday March 2014 |
| 2014-03-08/a> | Guy Bruneau | Microsoft March Patch Pre-Announcement |
| 2014-03-07/a> | Tom Webb | Linux Memory Dump with Rekall |
| 2014-03-06/a> | Mark Baggett | Port 5000 traffic and snort signature |
| 2014-03-04/a> | Daniel Wesemann | Triple Handshake Cookie Cutter |
| 2014-02-26/a> | Russ McRee | Ongoing NTP Amplification Attacks |
| 2014-02-25/a> | Alex Stanford | Apple releases OS X 10.9.2 patching SSL vulnerability and updates Safari |
| 2014-02-19/a> | Russ McRee | Threat modeling in the name of security |
| 2014-02-17/a> | Chris Mohan | NTP reflection attacks continue |
| 2014-02-14/a> | Chris Mohan | SYM14-004 Symantec Endpoint Protection Management Vulnerabilities - http://www.symantec.com/business/support/index?page=content&id=TECH214866 |
| 2014-02-11/a> | Johannes Ullrich | February 2014 Microsoft Patch Tuesday |
| 2014-02-11/a> | Johannes Ullrich | Adobe February 2014 Patch Tuesday |
| 2014-02-07/a> | Johannes Ullrich | Microsoft Advance Notification for February 2014 |
| 2014-02-04/a> | Johannes Ullrich | Odd ICMP Echo Request Payload |
| 2014-02-04/a> | Johannes Ullrich | Adobe Flash Player Emergency Patch |
| 2014-01-30/a> | Johannes Ullrich | Oracle Reports Vulnerability |
| 2014-01-17/a> | Russ McRee | Massive RFI scans likely a free web app vuln scanner rather than bots |
| 2014-01-14/a> | Johannes Ullrich | Microsoft Patch Tuesday January 2014 |
| 2014-01-14/a> | Johannes Ullrich | Adobe Patch Tuesday January 2014 |
| 2014-01-14/a> | Johannes Ullrich | Oracle Critical Patch Update January 2014 |
| 2014-01-10/a> | Basil Alawi S.Taher | Cisco Small Business Devices backdoor fix |
| 2014-01-09/a> | Johannes Ullrich | Microsoft Security Bulletin Advance Notification for January 2014 http://technet.microsoft.com/en-us/security/bulletin/ms14-jan |
| 2014-01-04/a> | Tom Webb | Monitoring Windows Networks Using Syslog (Part One) |
| 2013-12-28/a> | Russ McRee | Weekend Reading List 27 DEC |
| 2013-12-20/a> | Daniel Wesemann | authorized key lime pie |
| 2013-12-18/a> | Adrien de Beaupre | Wireshark 1.10.4 and 1.8.12 are available |
| 2013-12-17/a> | Adrien de Beaupre | Apple security updates Mac OS X and Safari |
| 2013-12-14/a> | Johannes Ullrich | WhatsApp Malware Spam uses Geolocation to Mass Customize Filename |
| 2013-12-10/a> | Rob VandenBrink | Those Look Just Like Hashes! |
| 2013-12-10/a> | Johannes Ullrich | Microsoft December Patch Tuesday |
| 2013-12-07/a> | Guy Bruneau | Microsoft December Patch Pre-Announcement |
| 2013-12-04/a> | Adrien de Beaupre | VMware Security Advisory VMSA-2013-0014 |
| 2013-12-02/a> | Richard Porter | Reports of higher than normal SSH Attacks |
| 2013-11-27/a> | Rob VandenBrink | ATM Traffic + TCPDump + Video = Good or Evil? |
| 2013-11-12/a> | Johannes Ullrich | November 2013 Microsoft Patch Tuesday |
| 2013-11-08/a> | Johannes Ullrich | Microsoft Patch Tuesday Preview |
| 2013-11-01/a> | Russ McRee | Secunia's PSI Country Report - Q3 2013 |
| 2013-10-21/a> | Johannes Ullrich | New tricks that may bring DNS spoofing back or: "Why you should enable DNSSEC even if it is a pain to do" |
| 2013-10-17/a> | Adrien de Beaupre | Chrome updated http://googlechromereleases.blogspot.ca/2013/10/stable-channel-update_15.html |
| 2013-10-16/a> | Adrien de Beaupre | Access denied and blockliss |
| 2013-10-15/a> | Rob VandenBrink | Java Quarterly Updates |
| 2013-10-08/a> | Johannes Ullrich | Microsoft October 2013 Patch Tuesday |
| 2013-10-05/a> | Richard Porter | Adobe Breach Notification, Notifications? |
| 2013-10-03/a> | Johannes Ullrich | October Patch Tuesday Preview (CVE-2013-3893 patch coming!) |
| 2013-09-18/a> | Rob VandenBrink | Cisco DCNM Update Released |
| 2013-09-11/a> | Johannes Ullrich | Reboot Wednesday: Yesterday's Patch Tuesday Aftermath |
| 2013-09-10/a> | Swa Frantzen | Adobe September 2013 Black Tuesday Overview |
| 2013-09-10/a> | Swa Frantzen | Microsoft September 2013 Black Tuesday Overview |
| 2013-09-10/a> | Swa Frantzen | Macs need to patch too! |
| 2013-09-07/a> | Guy Bruneau | Microsoft September Patch Pre-Announcement |
| 2013-09-05/a> | Rob VandenBrink | Building Your Own GPU Enabled Private Cloud |
| 2013-09-03/a> | Rob VandenBrink | Is "Reputation Backscatter" a Thing? |
| 2013-08-19/a> | Guy Bruneau | Business Risks and Cyber Attacks |
| 2013-08-19/a> | Johannes Ullrich | Microsoft re-releases MS13-066: https://technet.microsoft.com/security/bulletin/MS13-066 |
| 2013-08-15/a> | Johannes Ullrich | Microsoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx |
| 2013-08-13/a> | Swa Frantzen | Microsoft August 2013 Black Tuesday Overview |
| 2013-08-13/a> | Swa Frantzen | Microsoft security advisories: RDP and MD5 deprecation in Microsoft root certificates |
| 2013-08-11/a> | Bojan Zdrnja | XATattacks (attacks on xat.com) |
| 2013-07-28/a> | Guy Bruneau | Wireshark 1.8.9 and 1.10.1 Security Update |
| 2013-07-27/a> | Scott Fendley | Defending Against Web Server Denial of Service Attacks |
| 2013-07-13/a> | Lenny Zeltser | Decoy Personas for Safeguarding Online Identity Using Deception |
| 2013-07-09/a> | Swa Frantzen | Microsoft July 2013 Black Tuesday Overview |
| 2013-07-09/a> | Swa Frantzen | Adobe July 2013 Black Tuesday Overview |
| 2013-07-06/a> | Guy Bruneau | Microsoft July Patch Pre-Announcement |
| 2013-07-06/a> | Guy Bruneau | Is Metadata the Magic in Modern Network Security? |
| 2013-07-04/a> | Russ McRee | Celebrating 4th of July With a Malware PCAP Visualization |
| 2013-07-03/a> | Kevin Shortt | Apple Security Update 2013-003 |
| 2013-06-26/a> | Adrien de Beaupre | Multiple Cisco security advisories |
| 2013-06-18/a> | Russ McRee | EMET 4.0 is now available for download |
| 2013-06-18/a> | Russ McRee | Volatility rules...any questions? |
| 2013-06-11/a> | Swa Frantzen | Microsoft June 2013 Black Tuesday Overview |
| 2013-06-11/a> | Swa Frantzen | Adobe June 2013 Black Tuesday Overview |
| 2013-06-11/a> | Swa Frantzen | vmware security advisory VMSA-2013-0008 |
| 2013-06-05/a> | Richard Porter | Windows Sysinternals Updated http://technet.microsoft.com/en-us/sysinternals/default.aspx |
| 2013-06-05/a> | Richard Porter | BIND 9 Update fixing CVE-2013-3919 |
| 2013-05-23/a> | Adrien de Beaupre | MoVP II |
| 2013-05-22/a> | Adrien de Beaupre | Apple QuickTime 7.7.4 for Windows updated, MANY security vulnerabilities: http://support.apple.com/kb/HT1222 |
| 2013-05-22/a> | Adrien de Beaupre | Chrome 24.0.1312.52 has been updated for Windows, Mac, Linux, and Chrome Frame |
| 2013-05-22/a> | Adrien de Beaupre | Privilege escalation, why should I care? |
| 2013-05-17/a> | Johannes Ullrich | SSL: Another reason not to ignore IPv6 |
| 2013-05-16/a> | Daniel Wesemann | Extracting signatures from Apple .apps |
| 2013-05-14/a> | Swa Frantzen | Microsoft May 2013 Black Tuesday Overview |
| 2013-05-14/a> | Swa Frantzen | Firefox & Thunderbird released |
| 2013-05-14/a> | Swa Frantzen | Adobe May 2013 Black Tuesday Overview |
| 2013-05-14/a> | Swa Frantzen | Microsoft Security Advisory 2846338 |
| 2013-05-11/a> | Lenny Zeltser | Extracting Digital Signatures from Signed Malware |
| 2013-05-08/a> | Chris Mohan | Syria drops from Internet 7th May 2013 |
| 2013-05-07/a> | Jim Clausing | Is there an epidemic of typo squatting? |
| 2013-05-04/a> | Kevin Shortt | The Zero-Day Pendulum Swings |
| 2013-04-25/a> | Adam Swanger | Guest Diary: Dylan Johnson - A week in the life of some Perimeter Firewalls |
| 2013-04-19/a> | Russ McRee | Java 8 release schedule delayed for renewed focus on security |
| 2013-04-17/a> | John Bambenek | UPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun |
| 2013-04-16/a> | John Bambenek | Fake Boston Marathon Scams Update |
| 2013-04-15/a> | John Bambenek | Please send any spam (full headers), URLs or other suspicious content scamming off Boston Marathon explosions to handlers@sans.org |
| 2013-04-15/a> | Rob VandenBrink | Oops - You Mean That Deleted Server was a Certificate Authority? |
| 2013-04-09/a> | Swa Frantzen | Microsoft April 2013 Black Tuesday Overview |
| 2013-04-09/a> | Swa Frantzen | Adobe April 2013 Black Tuesday Overview |
| 2013-04-04/a> | Johannes Ullrich | Microsoft April Patch Tuesday Advance Notification |
| 2013-04-03/a> | Mark Hofman | Firefox 20 and Thunderbird 17.0.5 updates |
| 2013-03-29/a> | Chris Mohan | Does your breach email notification look like a phish? |
| 2013-03-23/a> | Guy Bruneau | Apple ID Two-step Verification Now Available in some Countries |
| 2013-03-12/a> | Swa Frantzen | Microsoft March 2013 Black Tuesday Overview |
| 2013-03-12/a> | Swa Frantzen | Adobe March 2013 Black Tueday |
| 2013-03-07/a> | Guy Bruneau | Wireshark Security Updates |
| 2013-03-06/a> | Adam Swanger | IPv6 Focus Month: Guest Diary: Stephen Groat - Geolocation Using IPv6 Addresses |
| 2013-03-03/a> | Richard Porter | Uptick in MSSQL Activity |
| 2013-02-27/a> | Adam Swanger | Adobe Flash Player Security Update - http://www.adobe.com/support/security/bulletins/apsb13-08.html |
| 2013-02-22/a> | Chris Mohan | PHP 5.4.12 and PHP 5.3.22 released http://www.php.net/ChangeLog-5.php |
| 2013-02-22/a> | Chris Mohan | Chrome 25.0.1364.87 addresses multiple vulnerabilities http://googlechromereleases.blogspot.com.au/2013/02/stable-channel-update_21.html |
| 2013-02-22/a> | Chris Mohan | VMware releases new and updated security advisories |
| 2013-02-20/a> | Manuel Humberto Santander Pelaez | SANS SCADA Summit at Orlando - Bigger problems and so far from getting them solved |
| 2013-02-17/a> | Guy Bruneau | HP ArcSight Connector Appliance and Logger Vulnerabilities |
| 2013-02-17/a> | Guy Bruneau | Adobe Acrobat and Reader Security Update Planned this Week |
| 2013-02-14/a> | Adam Swanger | ISC Monthly Threat Update - February 2013 http://isc.sans.edu/podcastdetail.html?id=3121 |
| 2013-02-13/a> | Swa Frantzen | More adobe reader and acrobat (PDF) trouble |
| 2013-02-12/a> | Adam Swanger | Microsoft February 2013 Black Tuesday Update - Overview |
| 2013-02-12/a> | Swa Frantzen | Adobe Feb 2013 Black Tuesday patches |
| 2013-02-08/a> | Kevin Shortt | Is it Spam or Is it Malware? |
| 2013-02-08/a> | Johannes Ullrich | Microsoft February Patch Tuesday Advance Notification |
| 2013-02-06/a> | Johannes Ullrich | Are you losing system logging information (and don't know it)? |
| 2013-02-04/a> | Adam Swanger | SAN Securing The Human Monthly Awareness Video - Advanced Persistent Threat (APT) http://www.securingthehuman.org/resources/ncsam |
| 2013-02-01/a> | Jim Clausing | Oracle quitely releases Java 7u13 early |
| 2013-01-25/a> | Johannes Ullrich | Vulnerability Scans via Search Engines (Request for Logs) |
| 2013-01-22/a> | Richard Porter | Using Metasploit for Patch Sanity Checks |
| 2013-01-17/a> | Russ McRee | PHP 5.4.11 and PHP 5.3.21 released |
| 2013-01-14/a> | Richard Porter | January 2013 Microsoft Out of Cycle Patch |
| 2013-01-10/a> | Rob VandenBrink | What Else runs Telnets? Or, Pentesters Love Video Conferencing Units Too! |
| 2013-01-10/a> | Adam Swanger | ISC Monthly Threat Update New Format |
| 2013-01-09/a> | Rob VandenBrink | SQL Injection Flaw in Ruby on Rails |
| 2013-01-09/a> | Rob VandenBrink | Firefox and Thunderbird Updates |
| 2013-01-09/a> | Rob VandenBrink | Security Updates for Adobe Reader / Acrobat - http://www.adobe.com/support/security/bulletins/apsb13-02.html |
| 2013-01-09/a> | Rob VandenBrink | Security Updates for Adobe Flash - http://www.adobe.com/support/security/bulletins/apsb13-01.html |
| 2013-01-09/a> | Johannes Ullrich | New Format for Monthly Threat Update |
| 2013-01-08/a> | Richard Porter | Microsoft January 2013 Black Tuesday Update - Overview |
| 2013-01-08/a> | Richard Porter | Firefox 18 Released, Security Fixes http://www.mozilla.org/security/known-vulnerabilities/firefox.html |
| 2013-01-04/a> | Daniel Wesemann | Patch pre-notification from Adobe and Microsoft |
| 2013-01-03/a> | Manuel Humberto Santander Pelaez | New year and new CA compromised |
| 2012-12-18/a> | Dan Goldberg | Mitigating the impact of organizational change: a risk assessment |
| 2012-12-14/a> | Adam Swanger | ISC Feature of the Week: Webhoneypot: Web Server Log Project |
| 2012-12-11/a> | John Bambenek | Microsoft December 2012 Black Tuesday Update - Overview |
| 2012-12-07/a> | Adam Swanger | ISC Feature of the Week: Glossary Additions |
| 2012-12-03/a> | John Bambenek | John McAfee Exposes His Location in Photo About His Being on Run |
| 2012-11-30/a> | Daniel Wesemann | Snipping Leaks |
| 2012-11-29/a> | Adam Swanger | ISC Feature of the Week: SSH Scan Reports |
| 2012-11-29/a> | Kevin Shortt | New Apple Security Update: APPLE-SA-2012-11-29-1 Apple TV 5.1.1 |
| 2012-11-28/a> | Mark Hofman | McAfee releases extraDAT for W32/Autorun.worm.aaeb-h |
| 2012-11-28/a> | Mark Hofman | New version of wireshark is available (1.8.4), some security fixes included. |
| 2012-11-27/a> | Chris Mohan | Can users' phish emails be a security admin's catch of the day? |
| 2012-11-26/a> | John Bambenek | Online Shopping for the Holidays? Tips, News and a Fair Warning |
| 2012-11-22/a> | Kevin Liston | Greek National Arrested on Suspicion of Theft of 9M Records on Fellow Greeks |
| 2012-11-20/a> | John Bambenek | Behind the Random NTP Bizarreness of Incorrect Year Being Set |
| 2012-11-20/a> | John Bambenek | Firefox v 17.0 just released, more here: http://www.mozilla.org/en-US/firefox/17.0/releasenotes/ |
| 2012-11-19/a> | John Bambenek | MoneyGram fined $100 million for aiding wire fraud - http://krebsonsecurity.com/2012/11/moneygram-fined-100-million-for-wire-fraud/ |
| 2012-11-19/a> | John Bambenek | New Poll: Top 5 Unresolved Security Problems of 2012 |
| 2012-11-17/a> | Manuel Humberto Santander Pelaez | New Sysinternal Updates: AdExplorer v1.44, Contig v1.7, Coreinfo v3.2, Procdump v5.1. See http://blogs.technet.com/b/sysinternals/archive/2012/11/16/updates-adexplorer-v1-44-contig-v1-7-coreinfo-v3-2-procdump-v5-1.aspx?Redirected=true |
| 2012-11-13/a> | Jim Clausing | Microsoft November 2012 Black Tuesday Update - Overview |
| 2012-11-12/a> | John Bambenek | Request for info: Robocall Phishing Against Local/Regional Banks |
| 2012-11-09/a> | Mark Baggett | Fresh batch of Microsoft patches next week |
| 2012-11-09/a> | Mark Baggett | Remote Diagnostics with PSR |
| 2012-11-07/a> | Mark Baggett | Help eliminate unquoted path vulnerabilities |
| 2012-11-07/a> | Mark Baggett | Multiple 0-Days Reported! |
| 2012-11-07/a> | Mark Baggett | Cisco TACACS+ Authentication Bypass |
| 2012-11-05/a> | Johannes Ullrich | Reminder: Ongoing SMTP Brute Forcing Attacks |
| 2012-11-05/a> | Johannes Ullrich | Possible Fake-AV Ads from Doubleclick Servers |
| 2012-11-04/a> | Lorna Hutcheson | What's important on your network? |
| 2012-10-31/a> | Johannes Ullrich | Cyber Security Awareness Month - Day 31 - Business Continuity and Disaster Recovery |
| 2012-10-30/a> | Mark Hofman | Cyber Security Awareness Month - Day 30 - DSD 35 mitigating controls |
| 2012-10-30/a> | Johannes Ullrich | Hurricane Sandy Update |
| 2012-10-30/a> | Richard Porter | Splunk 5.0 SP-CAAAHB4 http://www.splunk.com/view/SP-CAAAHB4 |
| 2012-10-28/a> | Tony Carothers | Firefox 16.02 Released |
| 2012-10-26/a> | Russ McRee | Cyber Security Awareness Month - Day 26 - Attackers use trusted domain to propagate Citadel Zeus variant |
| 2012-10-25/a> | Richard Porter | Cyber Security Awareness Month - Day 25 - Pro Audio & Video Packets on the Wire |
| 2012-10-24/a> | Russ McRee | Ongoing Windstream outage in the midwest - https://twitter.com/search?q=windstream |
| 2012-10-21/a> | Johannes Ullrich | Cyber Security Awareness Month - Day 22: Connectors |
| 2012-10-21/a> | Lorna Hutcheson | Potential Phish for Regular Webmail Accounts |
| 2012-10-19/a> | Johannes Ullrich | Cyber Security Awareness Month - Day 19: Standard log formats and CEE. |
| 2012-10-18/a> | Rob VandenBrink | Cyber Security Awareness Month - Day 18 - Vendor Standards: The vSphere Hardening Guide |
| 2012-10-17/a> | Mark Hofman | New Acrobat release (including reader) available. Version 11. Some security improvements more here -->http://blogs.adobe.com/adobereader/ |
| 2012-10-17/a> | Mark Hofman | Oracle Critical Patch Update October |
| 2012-10-16/a> | Richard Porter | CyberAwareness Month - Day 15, Standards Body Soup (pt2), Same Soup Different Cook. |
| 2012-10-16/a> | Johannes Ullrich | Cyber Security Awareness Month - Day 16: W3C and HTML |
| 2012-10-14/a> | Pedro Bueno | Cyber Security Awareness Month - Day 14 - Poor Man's File Analysis System - Part 1 |
| 2012-10-09/a> | Johannes Ullrich | Adobe Flash Player update http://www.adobe.com/support/security/bulletins/apsb12-22.html |
| 2012-10-09/a> | Johannes Ullrich | Microsoft October 2012 Black Tuesday Update - Overview |
| 2012-10-07/a> | Tony Carothers | Cyber Security Awareness Month - Day 7 - Rollup Review of CSAM Week 1 |
| 2012-10-05/a> | Johannes Ullrich | Cyber Security Awareness Month - Day 5: Standards Body Soup, So many Flavors in the bowl. |
| 2012-10-05/a> | Richard Porter | VMWare Security Advisory: VMSA-2012-0014 - http://www.vmware.com/security/advisories/VMSA-2012-0014.html |
| 2012-10-05/a> | Adam Swanger | ISC Feature of the Week: Report Fake Tech Support Call Statistics |
| 2012-10-05/a> | Richard Porter | Reports of a Distributed Injection Scan |
| 2012-10-04/a> | Mark Hofman | And the SHA-3 title goes to .....Keccak |
| 2012-10-04/a> | Johannes Ullrich | Microsoft October Patch Pre-Announcement |
| 2012-10-02/a> | Russ McRee | Cyber Security Awareness Month - Day 2 - PCI Security Standard: Mobile Payment Acceptance Security Guidelines |
| 2012-10-01/a> | Johannes Ullrich | Cyber Security Awareness Month |
| 2012-09-28/a> | Joel Esler | Adobe certification revocation for October 4th |
| 2012-09-27/a> | Adam Swanger | ISC Feature of the Week: Glossary |
| 2012-09-26/a> | Johannes Ullrich | Some Android phones can be reset to factory default by clicking on links |
| 2012-09-26/a> | Johannes Ullrich | More Java Woes |
| 2012-09-21/a> | Johannes Ullrich | iOS 6 Security Roundup |
| 2012-09-21/a> | Guy Bruneau | Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 (2755801) |
| 2012-09-20/a> | Russ McRee | Flash Player update but no announcement, check your version http://www.adobe.com/software/flash/about/ |
| 2012-09-20/a> | Russ McRee | Apple and Cisco Security Advisories 19 SEP 2012 |
| 2012-09-20/a> | Russ McRee | Financial sector advisory: attacks and threats against financial institutions |
| 2012-09-19/a> | Russ McRee | Script kiddie scavenging with Shellbot.S |
| 2012-09-19/a> | Kevin Liston | Volatility: 2.2 is Coming Soon |
| 2012-09-17/a> | Rob VandenBrink | What's on your iPad? |
| 2012-09-14/a> | Lenny Zeltser | Scam Report - Fake Voice Mail Email Notification Redirects to Malicious Site |
| 2012-09-14/a> | Adam Swanger | ISC Feature of the Week: Privacy Policy |
| 2012-09-13/a> | Mark Baggett | TCP Fuzzing with Scapy |
| 2012-09-13/a> | Mark Baggett | Microsoft disrupts traffic associated with the Nitol botnet |
| 2012-09-13/a> | Mark Baggett | More SSL trouble |
| 2012-09-11/a> | Adam Swanger | Microsoft September 2012 Black Tuesday Update - Overview |
| 2012-09-10/a> | Johannes Ullrich | Microsoft Patch Tuesday Pre-Release |
| 2012-09-10/a> | Johannes Ullrich | Godaddy DDoS Attack |
| 2012-09-10/a> | donald smith | Blue Toad publishing co compromise lead to UDID release. http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week?lite |
| 2012-09-08/a> | Guy Bruneau | Webmin Input Validation Vulnerabilities |
| 2012-09-06/a> | Johannes Ullrich | SSL Requests sent to port 80 (request for help/input) |
| 2012-09-04/a> | Johannes Ullrich | Another round of "Spot the Exploit E-Mail" |
| 2012-09-02/a> | Lorna Hutcheson | Demonstrating the value of your Intrusion Detection Program and Analysts |
| 2012-09-01/a> | Russ McRee | Blackhole targeting Java vulnerability via fake Microsoft Services Agreement email phish |
| 2012-08-31/a> | Russ McRee | Not so fast: Java 7 Update 7 critical vulnerability discovered in less than 24 hours |
| 2012-08-30/a> | Johannes Ullrich | Editorial: The Slumlord Approach to Network Security http://isc.sans.edu/j/editorial |
| 2012-08-29/a> | Johannes Ullrich | "Data" URLs used for in-URL phishing |
| 2012-08-27/a> | Johannes Ullrich | The Good, Bad and Ugly about Assigning IPv6 Addresses |
| 2012-08-27/a> | Johannes Ullrich | Malware Spam harvesting Facebook Information |
| 2012-08-26/a> | Lorna Hutcheson | Who ya gonna contact? |
| 2012-08-23/a> | Adam Swanger | ISC Feature of the Week: Contact Us |
| 2012-08-22/a> | Adrien de Beaupre | Apple Remote Desktop update fixes no encryption issue |
| 2012-08-22/a> | Adrien de Beaupre | Phishing/spam via SMS |
| 2012-08-21/a> | Adrien de Beaupre | YYABCAFU - Yes Yet Another Bleeping Critical Adobe Flash Update |
| 2012-08-21/a> | Adrien de Beaupre | RuggedCom fails key management 101 on Rugged Operating System (ROS) |
| 2012-08-20/a> | Manuel Humberto Santander Pelaez | Do we need test procedures in our companies before implementing Antivirus signatures? |
| 2012-08-19/a> | Manuel Humberto Santander Pelaez | Authentication Issues between entities during protocol message exchange in SCADA Systems |
| 2012-08-15/a> | Guy Bruneau | Wireshark Security Update |
| 2012-08-14/a> | Rick Wanner | Microsoft August 2012 Black Tuesday Update - Overview |
| 2012-08-14/a> | Rick Wanner | Adobe Security Bulletins - http://blogs.adobe.com/psirt/2012/08/adobe-security-bulletins-posted-2.html |
| 2012-08-12/a> | Tony Carothers | Layers of the Defense-in-Depth Onion |
| 2012-08-12/a> | Tony Carothers | Oracle Security Alert for CVE-2012-3132 |
| 2012-08-10/a> | Adam Swanger | ISC Feature of the Week: Report Fake Tech Support Calls |
| 2012-08-09/a> | Mark Hofman | Zeus/Citadel variant causing issues in the Netherlands |
| 2012-08-09/a> | Mark Hofman | SQL Injection Lilupophilupop style, Part 2 |
| 2012-08-07/a> | Adrien de Beaupre | Who protects small business? |
| 2012-08-04/a> | Kevin Liston | Vendors: More Patch-Release Options Please |
| 2012-08-04/a> | Adam Swanger | ISC Feature of the Week: Handler Select News Feed |
| 2012-08-02/a> | Guy Bruneau | Opera Security Update |
| 2012-07-27/a> | Daniel Wesemann | Cuckoo 0.4 is out - cool new features for malware analysis http://www.cuckoosandbox.org/ |
| 2012-07-26/a> | Adam Swanger | ISC Feature of the Week: The 404Project - now with IP Mask |
| 2012-07-24/a> | Richard Porter | Wireshark 1.8.1 Released http://www.wireshark.org/ |
| 2012-07-24/a> | Richard Porter | Report of spike in DNS Queries gd21.net |
| 2012-07-20/a> | Mark Baggett | Syria Internet connection cut? |
| 2012-07-19/a> | Mark Baggett | Diagnosing Malware with Resource Monitor |
| 2012-07-19/a> | Mark Baggett | A Heap of Overflows? |
| 2012-07-18/a> | Rob VandenBrink | Snort Updated today |
| 2012-07-18/a> | Rob VandenBrink | Vote NO to Weak Keys! |
| 2012-07-16/a> | Richard Porter | Sysinternals Update @ http://blogs.technet.com/b/sysinternals/archive/2012/07/16/updates-handle-v3-5-process-explorer-v15-22-process-monitor-v3-03-rammap-v1-21-zoomit-v4-3.aspx |
| 2012-07-15/a> | Guy Bruneau | Oracle July 2012 Critical Patch Pre-Release Announcement |
| 2012-07-14/a> | Tony Carothers | User Awareness and Education |
| 2012-07-13/a> | Russ McRee | VMWare Security Advisory 12 JUL 2012 |
| 2012-07-13/a> | Russ McRee | Yahoo service SQL injection vuln leads to account exposure |
| 2012-07-13/a> | Richard Porter | Yesterday (not as on the ball as Rob) at SANSFire |
| 2012-07-13/a> | Russ McRee | 2 for 1: SANSFIRE & MSRA presentations |
| 2012-07-12/a> | Rick Wanner | Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms |
| 2012-07-12/a> | Rick Wanner | Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs |
| 2012-07-12/a> | Rick Wanner | Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts |
| 2012-07-12/a> | Rick Wanner | Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman |
| 2012-07-12/a> | Adam Swanger | ISC Feature of the Week: Internet Storm Center Events |
| 2012-07-10/a> | Swa Frantzen | Microsoft July 2012 Black Tuesday Update - Overview |
| 2012-07-10/a> | Rob VandenBrink | Today at SANSFIRE (09 July 2012) - ISC Panel Discussion on the State of the Internet |
| 2012-07-10/a> | Swa Frantzen | Microsoft revoking trust in Microsoft certificates - SA 2728973 |
| 2012-07-10/a> | Swa Frantzen | Microsoft fix-it to disable gadgets - SA 2719662 |
| 2012-07-09/a> | Johannes Ullrich | The FBI will turn off the Internet on Monday (or not) |
| 2012-07-09/a> | Manuel Humberto Santander Pelaez | Internet Storm Center panel tonight at SANSFIRE 2012! |
| 2012-07-05/a> | Adrien de Beaupre | New OS X trojan backdoor MaControl variant reported |
| 2012-07-05/a> | Adrien de Beaupre | Microsoft advanced notification for July 2012 patch Tuesday |
| 2012-07-02/a> | Joel Esler | Linux & Java leap second bug |
| 2012-07-02/a> | Joel Esler | A rough guide to keeping your website up |
| 2012-07-02/a> | Dan Goldberg | Storms of June 29th 2012 in Mid Atlantic region of the USA |
| 2012-06-29/a> | Jim Clausing | Updated SysInternals tools - Autoruns, Process Explorer, Process Monitor, PSKill -- http://blogs.technet.com/b/sysinternals/archive/2012/06/28/updates-autoruns-v11-32-process-explorer-v15-21-process-monitor-v3-02-pskill-v1-15-rammap-v1-2.aspx |
| 2012-06-28/a> | Chris Mohan | Massive spike in BGP traffic - Possible BGP poisoning? |
| 2012-06-28/a> | Adam Swanger | ISC Feature of the Week: About the Internet Storm Center |
| 2012-06-25/a> | Guy Bruneau | Issues with Windows Update Agent |
| 2012-06-25/a> | Guy Bruneau | Using JSDetox to Analyze and Deobfuscate Javascript |
| 2012-06-22/a> | Kevin Liston | Updated Poll: Which Patch Delivery Schedule Works the Best for You? |
| 2012-06-22/a> | Adam Swanger | ISC Feature of the Week: Tools->ISC At-A-Glance |
| 2012-06-21/a> | Russ McRee | Analysis of drive-by attack sample set |
| 2012-06-21/a> | Russ McRee | Wireshark 1.8.0 released 21 JUN 2012 http://www.wireshark.org/download.html |
| 2012-06-20/a> | Raul Siles | Firefox 13.0.1 Update |
| 2012-06-20/a> | Raul Siles | CVE-2012-0217 (from MS12-042) applies to other environments too |
| 2012-06-19/a> | Daniel Wesemann | Vulnerabilityqueerprocessbrittleness |
| 2012-06-13/a> | Johannes Ullrich | Microsoft Certificate Updater |
| 2012-06-12/a> | Swa Frantzen | Java 7u5 and 6u33 released |
| 2012-06-12/a> | Swa Frantzen | Adobe June 2012 Black Tuesday patches |
| 2012-06-12/a> | Swa Frantzen | Microsoft June 2012 Black Tuesday Update - Overview |
| 2012-06-11/a> | Johannes Ullrich | Microsoft Update Security |
| 2012-06-07/a> | Johannes Ullrich | Microsoft June Security Bulletin Advance Notification |
| 2012-06-06/a> | Jim Clausing | Firefox, Thunderbird, and Seamonkey Security Updates |
| 2012-06-05/a> | Adam Swanger | ISC Feature of the Week: IPv6 Preparedness and Tools |
| 2012-06-01/a> | Adam Swanger | ISC Feature of the Week: Country and Region Report |
| 2012-05-31/a> | Johannes Ullrich | SCADA@Home: Your health is no secret no more! |
| 2012-05-24/a> | Adam Swanger | ISC Feature of the Week: Country Report |
| 2012-05-23/a> | Mark Baggett | Problems with MS12-035 affecting XP, SBS and Windows 2003? |
| 2012-05-22/a> | Johannes Ullrich | nmap 6 released |
| 2012-05-17/a> | Adam Swanger | ISC Feature of the Week: Tools->Information Gathering |
| 2012-05-16/a> | Johannes Ullrich | Reserved IP Address Space Reminder |
| 2012-05-11/a> | Adam Swanger | ISC Feature of the Week: Link List |
| 2012-05-08/a> | Adam Swanger | Microsoft May 2012 Black Tuesday Update - Overview |
| 2012-05-04/a> | Guy Bruneau | Adobe Security Flash Update |
| 2012-05-04/a> | Adam Swanger | ISC Feature of the Week: Data/Reports |
| 2012-04-27/a> | Adam Swanger | ISC Feature of the Week: Handler Created Tools |
| 2012-04-21/a> | Guy Bruneau | WordPress Release Security Update |
| 2012-04-18/a> | Adam Swanger | ISC Feature of the Week: Suspicious Domains |
| 2012-04-15/a> | Rick Wanner | .Net update affects printing from some applications |
| 2012-04-13/a> | Daniel Wesemann | Oracle CPU Patches announced for Apr 17 |
| 2012-04-13/a> | Adam Swanger | ISC Feature of the Week: Get to know the Handlers |
| 2012-04-10/a> | Swa Frantzen | Microsoft April 2012 Black Tuesday Update - Overview |
| 2012-04-10/a> | Swa Frantzen | Adobe April 2012 Black Tuesday Update |
| 2012-04-06/a> | Johannes Ullrich | Another OS X Java Patch |
| 2012-04-06/a> | Johannes Ullrich | Microsoft April Patch Tuesday Pre-Announcement (6 Patches): http://technet.microsoft.com/en-us/security/bulletin/ms12-apr |
| 2012-04-06/a> | Johannes Ullrich | Adobe Patch Tuesday Prerelease (Reader/Acrobat) http://www.adobe.com/support/security/bulletins/apsb12-08.html |
| 2012-04-04/a> | Adam Swanger | ISC Feature of the Week: Diary/Infocon/Event Notifications |
| 2012-03-27/a> | Adam Swanger | ISC Feature of the Week: ISC Poll |
| 2012-03-21/a> | Adam Swanger | ISC Feature of the Week: Presentations and Papers |
| 2012-03-20/a> | Johannes Ullrich | A Reminder: Private Key Security |
| 2012-03-15/a> | Adam Swanger | ISC Feature of the Week: Infocon |
| 2012-03-13/a> | Lenny Zeltser | March 2012 Microsoft Black Tuesday |
| 2012-03-12/a> | Johannes Ullrich | Apple Released Safari 5.1.4 |
| 2012-03-08/a> | Johannes Ullrich | Apple Patches |
| 2012-03-08/a> | Johannes Ullrich | Microsoft March Patch Tuesday Pre-Anouncement out. 6 patches, 1 critical: http://technet.microsoft.com/en-us/security/bulletin/ms12-mar |
| 2012-03-06/a> | Mark Hofman | Websense posted a small article relating to mass injection into wordpress sites (thanks Chris) More info Here --> http://community.websense.com/blogs/securitylabs/archive/2012/03/05/mass-injection-of-wordpress-sites.aspx |
| 2012-03-06/a> | Adam Swanger | ISC Feature of the Week: Follow us on Twitter |
| 2012-03-05/a> | Johannes Ullrich | Adobe Flash Player Security Update |
| 2012-03-03/a> | Jim Clausing | New automated sandbox for Android malware |
| 2012-02-29/a> | Adam Swanger | ISC Feature of the Week: 404Project Reports |
| 2012-02-22/a> | Adam Swanger | ISC Feature of the Week: Handler Diaries |
| 2012-02-16/a> | Tony Carothers | Java Update for February |
| 2012-02-15/a> | Adam Swanger | ISC Feature of the Week: XML Feeds |
| 2012-02-14/a> | Johannes Ullrich | Adobe Shockwave Player and RoboHelp for Word Patches |
| 2012-02-14/a> | Johannes Ullrich | February 2012 Microsoft Black Tuesday |
| 2012-02-08/a> | Jim Clausing | Chrome to stop checking Certificate Revocation List (CRL)? |
| 2012-02-07/a> | Adam Swanger | ISC Feature of the Week: Security Dashboard |
| 2012-02-04/a> | Scott Fendley | Apple Security Advisory 2012-001 v1.1 |
| 2012-02-01/a> | Adam Swanger | ISC Feature of the Week: ISC Search |
| 2012-02-01/a> | Russ McRee | Oracle Security Alert: http://www.oracle.com/technetwork/topics/security/alert-cve-2011-5035-1506603.html |
| 2012-01-31/a> | Russ McRee | Firefox 10 and VMWare advisories and updates |
| 2012-01-25/a> | Adam Swanger | ISC Feature of the Week: ISC Link Back |
| 2012-01-18/a> | Adam Swanger | ISC Feature of the Week: The 404Project |
| 2012-01-18/a> | Richard Porter | Oracle Quarterly Released, http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html |
| 2012-01-16/a> | Kevin Shortt | Zappos Breached |
| 2012-01-11/a> | Adam Swanger | ISC Feature of the Week: Internet Storm Center / DShield API |
| 2012-01-10/a> | Adrien de Beaupre | January 2012 Microsoft Black Tuesday Summary |
| 2012-01-10/a> | Adrien de Beaupre | Adobe January 2012 Black Tuesday overview |
| 2012-01-06/a> | Guy Bruneau | January 2012 Patch Tuesday Pre-release |
| 2012-01-03/a> | Rick Wanner | Analysis of the Stratfor Password List |
| 2012-01-03/a> | Bojan Zdrnja | The tale of obfuscated JavaScript continues |
| 2012-01-03/a> | Adam Swanger | ISC Feature of the Week: How to Submit Firewall Logs |
| 2011-12-28/a> | Daniel Wesemann | Hash collisions vulnerability in web servers |
| 2011-12-25/a> | Deborah Hale | Another Company Falls Victim |
| 2011-12-13/a> | Johannes Ullrich | December 2011 Microsoft Black Tuesday Summary |
| 2011-12-08/a> | Adrien de Beaupre | Microsoft Security Bulletin Advance Notification for December 2011 |
| 2011-12-07/a> | Lenny Zeltser | Adobe Acrobat Latest Zero-Day Vulnerability Fix Coming to All Platforms by January 10 |
| 2011-12-01/a> | Mark Hofman | SQL Injection Attack happening ATM |
| 2011-11-19/a> | Pedro Bueno | Dragon Research Group (DRG) announced the white paper entitled "VNC: Threats and Countermeasures" : https://dragonresearchgroup.org/insight/vnc-tac.html |
| 2011-11-08/a> | Swa Frantzen | Microsoft November 2011 Black Tuesday Overview |
| 2011-11-08/a> | Swa Frantzen | Abobe November 2011 Black Tuesday Overview |
| 2011-11-08/a> | Swa Frantzen | Apple Black Tuesday |
| 2011-11-03/a> | Guy Bruneau | November 2011 Patch Tuesday Pre-release |
| 2011-11-02/a> | Russ McRee | Wireshark updates: 1.6.3 and 1.4.10 released |
| 2011-11-01/a> | Russ McRee | Secure languages & frameworks |
| 2011-10-26/a> | Rick Wanner | Critical Control 17:Penetration Tests and Red Team Exercises |
| 2011-10-26/a> | Rob VandenBrink | The Theoretical "SSL Renegotiation" Issue gets a Whole Lot More Real ! |
| 2011-10-22/a> | Guy Bruneau | Oracle Java SE Critical Patch Update |
| 2011-10-19/a> | Mark Hofman | Oracle Critical Patch Update |
| 2011-10-11/a> | Swa Frantzen | Microsoft Black Tuesday Overview October 2011 |
| 2011-10-11/a> | Swa Frantzen | Apple iTunes 10.5 |
| 2011-10-01/a> | Mark Hofman | Hot on the heels fo FF, Thunderbird v 7.0.1 and SeaMonkey v 2.4.1 have been updated. |
| 2011-09-28/a> | Richard Porter | All Along the ARP Tower! |
| 2011-09-21/a> | Swa Frantzen | Emergency patch expected for Flash Player |
| 2011-09-19/a> | Guy Bruneau | MS Security Advisory Update - Fraudulent DigiNotar Certificates |
| 2011-09-18/a> | Guy Bruneau | Google Chrome Security Updates |
| 2011-09-13/a> | Swa Frantzen | Microsoft September 2011 Black Tuesday |
| 2011-09-13/a> | Swa Frantzen | Adobe September 2011 Black Tuesday overview |
| 2011-09-09/a> | Guy Bruneau | Adobe plan to release critical security updates next Tuesday for Acrobat and Reader http://www.adobe.com/support/security/bulletins/apsb11-24.html |
| 2011-09-09/a> | Johannes Ullrich | Early Patch Tuesday Today: Microsoft September 2011 Patches |
| 2011-09-09/a> | Guy Bruneau | Apple Certificate Trust Policy Update |
| 2011-09-09/a> | Guy Bruneau | Adobe Publish its List of Trusted Root Certificate - http://www.adobe.com/security/approved-trust-list.html |
| 2011-09-08/a> | Rob VandenBrink | When Good CA's go Bad: Other Things to Check in Your Datacenter |
| 2011-09-08/a> | Mark Hofman | Microsoft has released their advanced notification for patch Tuesday. 15 Vulnerabilities to be addressed. more here --> http://blogs.technet.com/b/msrc/archive/2011/09/08/advanced-notification-for-the-september-2011-bulletin-release.aspx |
| 2011-09-08/a> | Rob VandenBrink | Should We Still Test Patches? |
| 2011-09-06/a> | Guy Bruneau | Firefox 6.0.2 released to removed trust to DigiNotar certificate authority http://www.mozilla.org/en-US/firefox/6.0.2/releasenotes/ |
| 2011-09-05/a> | Raul Siles | Java 7 Officially Released |
| 2011-08-31/a> | Johannes Ullrich | Firefox/Thunderbird 6.0.1 released to blocklist bad DigiNotar SSL certificates |
| 2011-08-30/a> | Johannes Ullrich | Apache patch out for "byte range" DoS vulnerability http://www.apache.org/dist/httpd/Announcement2.2.html |
| 2011-08-24/a> | Rob VandenBrink | Citrix Access Gateway Cross Site Scripting vulnerability and fix ==> http://support.citrix.com/article/CTX129971 |
| 2011-08-17/a> | Rob VandenBrink | Putting all of Your Eggs in One Basket - or How NOT to do Layoffs |
| 2011-08-16/a> | Johannes Ullrich | What are the most dangerous web applications and how to secure them? |
| 2011-08-14/a> | Guy Bruneau | FireCAT 2.0 Released |
| 2011-08-09/a> | Swa Frantzen | Microsoft August 2011 Black Tuesday Overview |
| 2011-08-09/a> | Swa Frantzen | Adobe August 2011 Black Tuesday Overview |
| 2011-08-05/a> | Johannes Ullrich | Microsoft Patch Tuesday Advance Notification: 13 Bulletins coming http://www.microsoft.com/technet/security/Bulletin/MS11-aug.mspx |
| 2011-07-29/a> | Richard Porter | Apple Lion talking on TCP 5223 |
| 2011-07-28/a> | Johannes Ullrich | Announcing: The "404 Project" |
| 2011-07-23/a> | Johannes Ullrich | Apple Battery Firmware Default Password |
| 2011-07-15/a> | Deborah Hale | Apple Software Updates |
| 2011-07-12/a> | Swa Frantzen | Microsoft July 2011 Black Tuesday Overview |
| 2011-07-07/a> | Rob VandenBrink | "There's a Patch for that" (or maybe not) |
| 2011-07-06/a> | Rob VandenBrink | "Too Important to Patch" - Wait? What? |
| 2011-07-05/a> | Raul Siles | Helping Developers Understand Security - Spot the Vuln |
| 2011-06-28/a> | Johannes Ullrich | Update: Google Chrome 12.0.742.112 released http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html |
| 2011-06-28/a> | Johannes Ullrich | Update: Thunderbird 5.0 released. https://www.mozilla.org/en-US/thunderbird/ |
| 2011-06-23/a> | Jim Clausing | Apple Security Updates 2011-004 |
| 2011-06-22/a> | Guy Bruneau | How Good is your Employee Termination Policy? |
| 2011-06-21/a> | Chris Mohan | StartSSL, a web authentication authority, suspend services after a security breach |
| 2011-06-14/a> | Swa Frantzen | Adobe releases patches |
| 2011-06-14/a> | Swa Frantzen | Microsoft June 2011 Black Tuesday Overview |
| 2011-06-09/a> | Richard Porter | Chrome Version 12.0.742.91 Released |
| 2011-06-06/a> | Manuel Humberto Santander Pelaez | Phishing: Same goal, same techniques and people still falling for such scams |
| 2011-06-01/a> | Adrien de Beaupre | Wireshark 1.4.7 and 1.2.17 Released - http://www.wireshark.org/news/20110531.html |
| 2011-05-20/a> | Guy Bruneau | Sysinternals Updates, Analyzing Stuxnet Infection with Sysinternals Tools Part 3 |
| 2011-05-18/a> | Bojan Zdrnja | Android, HTTP and authentication tokens |
| 2011-05-16/a> | Jason Lam | Firefox 3.5 forced upgrade coming soon |
| 2011-05-10/a> | Swa Frantzen | May 2011 Microsoft Black Tuesday Overview |
| 2011-05-06/a> | Richard Porter | Updated Exploit Index for Microsoft |
| 2011-05-04/a> | Richard Porter | Microsoft Sysinterals Update |
| 2011-05-01/a> | Deborah Hale | Java 6.25 Is Now Available |
| 2011-04-28/a> | Chris Mohan | DSL Reports advise 9,000 accounts were compromised |
| 2011-04-26/a> | John Bambenek | Is the Insider Threat Really Over? |
| 2011-04-25/a> | Rob VandenBrink | Sony PlayStation Network Outage - Day 5 |
| 2011-04-22/a> | Manuel Humberto Santander Pelaez | In-house developed applications: The constant headache for the information security officer |
| 2011-04-21/a> | Guy Bruneau | Adobe Reader and Acrobat Security Updates |
| 2011-04-20/a> | Daniel Wesemann | Data Breach Investigations Report published by Verizon |
| 2011-04-14/a> | Adrien de Beaupre | Sysinternals updates, a new blog post, and webcast |
| 2011-04-11/a> | Jim Clausing | April 2011 Microsoft Black Tuesday Summary |
| 2011-04-08/a> | Johannes Ullrich | Dark Black Tuesday Coming Up: 17 Microsoft Bulletins |
| 2011-04-03/a> | Richard Porter | Extreme Disclosure? Not yet but a great trend! |
| 2011-03-29/a> | Daniel Wesemann | Malware emails with fake cellphone invoice |
| 2011-03-22/a> | Kevin Shortt | Adobe Reader/Acrobat Security Update - http://www.adobe.com/support/security/bulletins/apsb11-06.html |
| 2011-03-21/a> | Kevin Shortt | APPLE-SA-2011-03-21-1 Mac OS X v10.6.7 and Security Update 2011-001 |
| 2011-03-09/a> | Chris Mohan | Possible Issue with Forefront Update KB2508823 |
| 2011-03-08/a> | Jim Clausing | March 2011 Microsoft Black Tuesday Summary |
| 2011-03-07/a> | Bojan Zdrnja | Oracle padding attacks (Codegate crypto 400 writeup) |
| 2011-03-02/a> | Chris Mohan | Microsoft’s Autorun update v2.1 now automatically deployed from Windows Update |
| 2011-02-21/a> | Adrien de Beaupre | Kaspersky update servers unreachable |
| 2011-02-14/a> | Lorna Hutcheson | Network Visualization |
| 2011-02-09/a> | Mark Hofman | Adobe Patches (shockwave, Flash, Reader & Coldfusion) |
| 2011-02-08/a> | Joel Esler | Feburary 2011 Microsoft Black Tuesday Summary |
| 2011-02-05/a> | Guy Bruneau | OpenSSH Legacy Certificate Information Disclosure Vulnerability |
| 2011-02-04/a> | Daniel Wesemann | Oh, just click "yes" |
| 2011-02-04/a> | Daniel Wesemann | Busy patch tuesday ahead |
| 2011-01-27/a> | Chris Carboni | Opera Updates |
| 2011-01-23/a> | Richard Porter | Crime is still Crime! |
| 2011-01-18/a> | Daniel Wesemann | Oracle Patches (Jan2011 CPU) |
| 2011-01-13/a> | Rob VandenBrink | Blackberry BES Server Updates for PDF Vulnerabilities |
| 2011-01-12/a> | Richard Porter | How Many Loyalty Cards do you Carry? |
| 2011-01-12/a> | Richard Porter | Yet Another Data Broker? AOL Lifestream. |
| 2011-01-11/a> | Kevin Shortt | January 2011 Microsoft Black Tuesday Summary |
| 2011-01-08/a> | Guy Bruneau | January 2011 Patch Tuesday Pre-release |
| 2010-12-25/a> | Manuel Humberto Santander Pelaez | An interesting vulnerability playground to learn application vulnerabilities |
| 2010-12-23/a> | Mark Hofman | White house greeting cards |
| 2010-12-20/a> | Guy Bruneau | Patch Issues with Outlook 2007 |
| 2010-12-15/a> | Manuel Humberto Santander Pelaez | Vulnerability in the PDF distiller of the BlackBerry Attachment Service |
| 2010-12-14/a> | Manuel Humberto Santander Pelaez | December 2010 Microsoft Black Tuesday Summary |
| 2010-12-12/a> | Raul Siles | New trend regarding web application vulnerabilities? |
| 2010-12-10/a> | Mark Hofman | Microsoft patches |
| 2010-12-03/a> | Mark Hofman | AVG Update Bricking windows 7 64 bit |
| 2010-12-02/a> | Kevin Johnson | SQL Injection: Wordpress 3.0.2 released |
| 2010-12-02/a> | Kevin Johnson | ProFTPD distribution servers compromised |
| 2010-11-30/a> | Joel Esler | VMWare Security Advisory |
| 2010-11-29/a> | Stephen Hall | Sun security updates |
| 2010-11-24/a> | Bojan Zdrnja | Privilege escalation 0-day in almost all Windows versions |
| 2010-11-16/a> | Guy Bruneau | Mac OS X Server v10.6.5 (10H575) Security Update: http://support.apple.com/kb/HT4452 |
| 2010-11-16/a> | Guy Bruneau | Acrobat and Adobe Reader Security Update |
| 2010-11-12/a> | Guy Bruneau | Scripting with Unix Date |
| 2010-11-09/a> | Johannes Ullrich | November 2010 Microsoft Black Tuesday Summary |
| 2010-11-04/a> | Johannes Ullrich | Microsoft Patches Pre-Announcement |
| 2010-10-22/a> | Manuel Humberto Santander Pelaez | Intypedia project |
| 2010-10-12/a> | Adrien de Beaupre | October 2010 Microsoft Black Tuesday Summary |
| 2010-10-08/a> | Rick Wanner | Patch Tuesday Pre-release -- 16 updates |
| 2010-10-03/a> | Adrien de Beaupre | Canada's Cyber Security Strategy released today |
| 2010-09-30/a> | Pedro Bueno | MS OOB .NET patch is now also available via Windows Update. |
| 2010-09-28/a> | Daniel Wesemann | MS10-070 OOB Patch for ASP.NET vulnerability |
| 2010-09-27/a> | Adrien de Beaupre | MS OOB patch tomorrow for Security Advisory 2416728 |
| 2010-09-26/a> | Daniel Wesemann | Egosurfing, the corporate way |
| 2010-09-25/a> | Rick Wanner | Guest Diary: Andrew Hunt - Visualizing the Hosting Patterns of Modern Cybercriminals |
| 2010-09-21/a> | Johannes Ullrich | Implementing two Factor Authentication on the Cheap |
| 2010-09-14/a> | Adrien de Beaupre | September 2010 Microsoft Black Tuesday Summary |
| 2010-09-12/a> | Manuel Humberto Santander Pelaez | Adobe Acrobat pushstring Memory Corruption paper |
| 2010-08-29/a> | Swa Frantzen | DLL hijacking - what are you doing ? |
| 2010-08-25/a> | Pedro Bueno | Adobe released security update for Shockwave player that fix several CVEs: APSB1020 |
| 2010-08-23/a> | Manuel Humberto Santander Pelaez | Firefox plugins to perform penetration testing activities |
| 2010-08-19/a> | Rob VandenBrink | Don points us to multiple Adobe updates (Reader and Acrobat 9.3.4 among them) ==> http://www.adobe.com/support/downloads/new.jsp |
| 2010-08-18/a> | Guy Bruneau | Adobe out-of-cycle Updates |
| 2010-08-16/a> | Raul Siles | DDOS: State of the Art |
| 2010-08-16/a> | Raul Siles | Blind Elephant: A New Web Application Fingerprinting Tool |
| 2010-08-15/a> | Manuel Humberto Santander Pelaez | Obfuscated SQL Injection attacks |
| 2010-08-15/a> | Manuel Humberto Santander Pelaez | Python to test web application security |
| 2010-08-13/a> | Tom Liston | The Strange Case of Doctor Jekyll and Mr. ED |
| 2010-08-10/a> | Jason Lam | Adobe critical security updates |
| 2010-08-10/a> | Jim Clausing | August 2010 Micrsoft Black Tuesday Summary |
| 2010-08-10/a> | Daniel Wesemann | New Apple security updates for iPad/Pod/Phone. See http://support.apple.com/kb/ht1222 |
| 2010-08-07/a> | Stephen Hall | Countdown to Tuesday... |
| 2010-08-02/a> | Johannes Ullrich | Microsoft Out-of-Band bulletin addresses LNK/Shortcut vulnerability |
| 2010-07-29/a> | Rob VandenBrink | The 2010 Verizon Data Breach Report is Out |
| 2010-07-24/a> | Manuel Humberto Santander Pelaez | Transmiting logon information unsecured in the network |
| 2010-07-21/a> | Adrien de Beaupre | Update on .LNK vulnerability |
| 2010-07-18/a> | Manuel Humberto Santander Pelaez | SAGAN: An open-source event correlation system - Part 1: Installation |
| 2010-07-15/a> | Deborah Hale | Be on the Alert |
| 2010-07-13/a> | Jim Clausing | July 2010 Microsoft Black Tuesday Summary |
| 2010-07-13/a> | Jim Clausing | VMware Studio Security Update |
| 2010-07-08/a> | Kyle Haugsness | Pirate Bay account database compromised |
| 2010-07-07/a> | Kevin Shortt | Facebook, Facebook, What Do YOU See? |
| 2010-07-02/a> | Johannes Ullrich | OISF released version 1.0.0 of Suricata, the open source IDS/IPS engine http://www.openinfosecfoundation.org |
| 2010-06-29/a> | donald smith | Adobe Reader 9.3.3/8.2.3 addressing CVE-2010-1297 |
| 2010-06-26/a> | Guy Bruneau | socat to Simulate a Website |
| 2010-06-18/a> | Adrien de Beaupre | Distributed SSH Brute Force Attempts on the rise again |
| 2010-06-15/a> | Manuel Humberto Santander Pelaez | iPhone 4 Order Security Breach Exposes Private Information |
| 2010-06-15/a> | Manuel Humberto Santander Pelaez | TCP evasions for IDS/IPS |
| 2010-06-14/a> | Manuel Humberto Santander Pelaez | Another way to get protection for application-level attacks |
| 2010-06-14/a> | Manuel Humberto Santander Pelaez | Rogue facebook application acting like a worm |
| 2010-06-08/a> | Manuel Humberto Santander Pelaez | June 2010 Microsoft Black Tuesday Summary |
| 2010-06-06/a> | Manuel Humberto Santander Pelaez | Nice OS X exploit tutorial |
| 2010-06-05/a> | Guy Bruneau | Security Advisory for Flash Player, Adobe Reader and Acrobat |
| 2010-06-03/a> | Guy Bruneau | Microsoft Patch Tuesday June 2010 Pre-Release |
| 2010-06-02/a> | Rob VandenBrink | SPAM pretending to be from Habitat for Humanity |
| 2010-05-22/a> | Rick Wanner | SANS 2010 Digital Forensics Summit - APT Based Forensic Challenge |
| 2010-05-12/a> | Rob VandenBrink | Adobe Shockwave Update |
| 2010-05-12/a> | Rob VandenBrink | Layer 2 Security - Private VLANs (the Story Continues ...) |
| 2010-05-11/a> | Scott Fendley | May 2010 Microsoft Patches |
| 2010-05-08/a> | Guy Bruneau | Microsoft Patch Tuesday May 2010 Pre-Release |
| 2010-05-04/a> | Rick Wanner | SIFT review in the ISSA Toolsmith |
| 2010-04-27/a> | Rob VandenBrink | Layer 2 Security - L2TPv3 for Disaster Recovery Sites |
| 2010-04-22/a> | John Bambenek | Data Redaction: You're Doing it Wrong |
| 2010-04-22/a> | Deborah Hale | How McAfee turned a Disaster Exercise Into a REAL Learning Experience for Our Community Disaster Team |
| 2010-04-21/a> | Guy Bruneau | McAfee DAT 5958 Update Issues |
| 2010-04-21/a> | Guy Bruneau | Google Chrome Security Update v4.1.249.1059 Released: http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html |
| 2010-04-20/a> | Raul Siles | Are You Ready for a Transportation Collapse...? |
| 2010-04-14/a> | Mark Hofman | Oracle has released 47 critical patches (Includes SUN patches) |
| 2010-04-14/a> | Mark Hofman | And let the patching games continue |
| 2010-04-13/a> | Adrien de Beaupre | Web App Testing Tools |
| 2010-04-13/a> | Johannes Ullrich | Microsoft April 2010 Patch Tuesday |
| 2010-04-13/a> | Adrien de Beaupre | Security update available for Adobe Reader and Acrobat |
| 2010-04-08/a> | Bojan Zdrnja | JavaScript obfuscation in PDF: Sky is the limit |
| 2010-04-08/a> | Guy Bruneau | Microsoft Patch Tuesday April 2010 Pre-Release |
| 2010-04-06/a> | Daniel Wesemann | Application Logs |
| 2010-04-04/a> | Mari Nichols | Financial Management of Cyber Risk |
| 2010-04-02/a> | Guy Bruneau | Security Advisory for ESX Service Console |
| 2010-04-02/a> | Guy Bruneau | Foxit Reader Security Update |
| 2010-04-02/a> | Guy Bruneau | Oracle Java SE and Java for Business Critical Patch Update Advisory |
| 2010-03-29/a> | Adrien de Beaupre | APPLE-SA-2010-03-29-1 Security Update 2010-002 / Mac OS X v10.6.3 |
| 2010-03-29/a> | Pedro Bueno | Microsoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix. |
| 2010-03-29/a> | Adrien de Beaupre | OOB Update for Internet Explorer MS10-018 |
| 2010-03-27/a> | Guy Bruneau | HP-UX Running NFS/ONCplus, Inadvertently Enabled NFS |
| 2010-03-22/a> | Guy Bruneau | New Opera 10.51 available with security fixes. More information available at: http://www.opera.com/docs/changelogs/windows/1051/ |
| 2010-03-21/a> | Scott Fendley | Skipfish - Web Application Security Tool |
| 2010-03-15/a> | Adrien de Beaupre | Spamassassin Milter Plugin Remote Root Attack |
| 2010-03-12/a> | Mark Hofman | Firefox 3.6 is being pushed out to users. http://www.mozilla.com/en-US/firefox/3.6/releasenotes/ |
| 2010-03-11/a> | Mark Hofman | A new version of Safari is out. Looks like for Mac and Windows. Plenty of security fixes (mostly for Windows Safari users http://support.apple.com/kb/HT4070 ) |
| 2010-03-10/a> | Rob VandenBrink | Microsoft re-release of KB973811 - attacks on Extended Protection for Authentication |
| 2010-03-09/a> | John Bambenek | March 2010 - Microsoft Patch Tuesday Diary |
| 2010-03-08/a> | Raul Siles | Samurai WTF 0.8 |
| 2010-03-08/a> | Raul Siles | Microsoft announced two important bulletins (fixing multiple vulns. affecting Windows and Office) for tomorrow: http://www.microsoft.com/technet/security/Bulletin/MS10-mar.mspx |
| 2010-03-06/a> | Tony Carothers | Integration and the Security of New Technologies |
| 2010-03-05/a> | Kyle Haugsness | Javascript obfuscators used in the wild |
| 2010-03-03/a> | Mark Hofman | MS10-015 re-released |
| 2010-03-01/a> | Mark Hofman | Microsoft will drop support for Vista (without any Service Packs) on April 13 and support for XP SP2 ends July 13. (i.e. no more security updates). If you are still running these, it it time to update. |
| 2010-02-27/a> | Guy Bruneau | PHP 5.2.13 Security Update |
| 2010-02-22/a> | Rob VandenBrink | New Risks in Penetration Testing |
| 2010-02-21/a> | Patrick Nolan | Looking for "more useful" malware information? Help develop the format. |
| 2010-02-20/a> | Mari Nichols | Is "Green IT" Defeating Security? |
| 2010-02-17/a> | Rob VandenBrink | Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing" |
| 2010-02-17/a> | Rob VandenBrink | Multiple Security Updates for ESX 3.x and ESXi 3.x |
| 2010-02-16/a> | Robert Danford | Adobe Updates: http://www.adobe.com/support/security/bulletins/apsb10-07.html http://www.adobe.com/support/security/bulletins/apsb10-06.html |
| 2010-02-11/a> | Johannes Ullrich | MS10-015 may cause Windows XP to blue screen |
| 2010-02-11/a> | Deborah Hale | The Mysterious Blue Screen |
| 2010-02-10/a> | Marcus Sachs | Datacenters and Directory Traversals |
| 2010-02-09/a> | Mark Hofman | Oracle has an unscheduled security alert and patch for CVE-2010-0073. The issue affects WebLogic Server and is remotely exploitable. Details and patch are here http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0073.html |
| 2010-02-09/a> | Johannes Ullrich | February 2010 Black Tuesday Overview |
| 2010-02-05/a> | Jim Clausing | Memory Analysis - time to move beyond XP |
| 2010-02-04/a> | Johannes Ullrich | Microsoft Patch Tuesday Pre-Release |
| 2010-01-29/a> | Adrien de Beaupre | Neo-legacy applications |
| 2010-01-29/a> | Johannes Ullrich | Analyzing isc.sans.org weblogs, part 2, RFI attacks |
| 2010-01-24/a> | Pedro Bueno | Outdated client applications |
| 2010-01-21/a> | Chris Carboni | Security Update Available for Shockwave Player |
| 2010-01-21/a> | Chris Carboni | * Microsoft Out Of Band Patch Release |
| 2010-01-21/a> | Johannes Ullrich | Microsoft January Out of Band Patch |
| 2010-01-12/a> | Johannes Ullrich | Microsoft Security Bulletin: January 2010 |
| 2010-01-12/a> | Johannes Ullrich | Oracle Patches Relased |
| 2010-01-12/a> | Johannes Ullrich | Pre-Announced Adobe Reader and Acrobat Patch Found! |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicious PDFs |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicous PDFs (Part #2) |
| 2010-01-06/a> | Guy Bruneau | Firefox security and stability update for version 3.5.7 and 3.0.17 available for download |
| 2009-12-19/a> | Deborah Hale | Educationing Our Communities |
| 2009-12-16/a> | Rob VandenBrink | Seamonkey Update to 2.0.1, find the release notes here ==> http://www.seamonkey-project.org/releases/seamonkey2.0.1 |
| 2009-12-09/a> | Swa Frantzen | Adobe flash player and air patched |
| 2009-12-08/a> | Deborah Hale | December 2009 Black Tuesday Overview |
| 2009-12-07/a> | Rick Wanner | Cheat Sheet: Analyzing Malicious Documents |
| 2009-12-03/a> | Mark Hofman | Apple released some Java updates today APPLE-SA-2009-12-03-1 & 2 (for 10.5 and 10.6). Fixes a number of security issues so updating is a good idea. |
| 2009-12-03/a> | Mark Hofman | Next week will be a big patch week - Adobe is also releasing patches "Adobe is planning to release an update for Adobe Flash Player 10.0.32.18 and earlier versions, and an update to Adobe AIR 1.5.2 and earlier versions, to resolve critical security issues |
| 2009-12-02/a> | Rob VandenBrink | Microsoft Black Screen of Death - Fact of Fiction? |
| 2009-12-02/a> | Rob VandenBrink | SPAM and Malware taking advantage of H1N1 concerns |
| 2009-11-29/a> | Patrick Nolan | A Cloudy Weekend |
| 2009-11-25/a> | Jim Clausing | Tool updates |
| 2009-11-25/a> | Jim Clausing | Microsoft Updates requiring reboot |
| 2009-11-25/a> | Jim Clausing | Updates to my GREM Gold scripts and a new script |
| 2009-11-21/a> | Mark Hofman | VMware vCenter and ESX updates available http://lists.vmware.com/pipermail/security-announce/2009/000070.html |
| 2009-11-13/a> | Deborah Hale | It's Never Too Early To Start Teaching Them |
| 2009-11-13/a> | Adrien de Beaupre | TLS & SSLv3 renegotiation vulnerability explained |
| 2009-11-13/a> | Adrien de Beaupre | Conficker patch via email? |
| 2009-11-11/a> | Rob VandenBrink | Layer 2 Network Protections against Man in the Middle Attacks |
| 2009-11-11/a> | Rob VandenBrink | Apple Safari 4.0.4 Released |
| 2009-11-10/a> | Swa Frantzen | Microsoft November Black Tuesday Overview |
| 2009-11-09/a> | Guy Bruneau | Apple Security Update 2009-006 for Mac OS X v10.6.2 |
| 2009-11-06/a> | Mark Hofman | A new version of Firefox (3.5.5) just became available. According to the release notes they are stability improvements. |
| 2009-11-05/a> | Swa Frantzen | Insider threat: The snapnames case |
| 2009-11-02/a> | Rob VandenBrink | Microsoft releases v1.02 of Enhanced Mitigation Evaluation Toolkit (EMET) |
| 2009-10-28/a> | Johannes Ullrich | Firefox 3.5.4 released. Lots of security bug fixes. (thanks Gilbert!) |
| 2009-10-27/a> | Rob VandenBrink | New VMware Desktop Products Released (Workstation, Fusion, ACE) |
| 2009-10-22/a> | Adrien de Beaupre | Sysinternals updates: Disk2vhd v1.1, ZoomIt v4.1, Coreinfo v2.0, VMMap v2.4 |
| 2009-10-20/a> | Raul Siles | WASC 2008 Statistics |
| 2009-10-19/a> | Daniel Wesemann | Backed up, lately ? |
| 2009-10-16/a> | Adrien de Beaupre | Disable MS09-054 patch, or Firefox Plugin? |
| 2009-10-13/a> | Johannes Ullrich | Microsoft October 2009 Black Tuesday Overview |
| 2009-10-13/a> | Daniel Wesemann | Adobe Reader and Acrobat - Black Tuesday continues |
| 2009-10-09/a> | Rob VandenBrink | THAWTE to discontinue free Email Certificate Services and Web of Trust Service |
| 2009-10-04/a> | Guy Bruneau | Samba Security Information Disclosure and DoS |
| 2009-09-27/a> | Stephen Hall | Use Emerging Threats signatures? READ THIS! |
| 2009-09-24/a> | Jim Clausing | A couple more tools |
| 2009-09-20/a> | Mari Nichols | Insider Threat and Security Awareness |
| 2009-09-16/a> | Raul Siles | Review the security controls of your Web Applications... all them! |
| 2009-09-08/a> | Guy Bruneau | Microsoft September 2009 Black Tuesday Overview |
| 2009-09-07/a> | Lorna Hutcheson | Encrypting Data |
| 2009-09-04/a> | Adrien de Beaupre | SeaMonkey Security Update |
| 2009-08-28/a> | Adrien de Beaupre | WPA with TKIP done |
| 2009-08-19/a> | Daniel Wesemann | Checking your protection |
| 2009-08-11/a> | Swa Frantzen | Microsoft August 2009 Black Tuesday Overview |
| 2009-08-05/a> | donald smith | Security Update 2009-003 / Mac OS X v10.5.8 |
| 2009-08-04/a> | donald smith | Java Security Update |
| 2009-07-31/a> | Deborah Hale | Don't forget to tell your SysAdmin Thanks |
| 2009-07-31/a> | Deborah Hale | The iPhone patch is out |
| 2009-07-30/a> | Mark Hofman | Happy patching day |
| 2009-07-28/a> | Adrien de Beaupre | YYAMCCBA |
| 2009-07-28/a> | Adrien de Beaupre | MS released two OOB bulletins and an advisory |
| 2009-07-27/a> | Raul Siles | New Hacker Challenge: Prison Break - Breaking, Entering & Decoding |
| 2009-07-26/a> | Jim Clausing | New Volatility plugins |
| 2009-07-24/a> | Rick Wanner | Microsoft Out of Band Patch |
| 2009-07-23/a> | John Bambenek | Missouri Passes Breach Notification Law: Gap Still Exists for Banking Account Information |
| 2009-07-18/a> | Patrick Nolan | Chrome update contains Security fixes |
| 2009-07-17/a> | John Bambenek | Cross-Platform, Cross-Browser DoS Vulnerability |
| 2009-07-14/a> | Swa Frantzen | Microsoft July Black Tuesday Overview |
| 2009-07-14/a> | Swa Frantzen | ISC DHCP client updated |
| 2009-07-14/a> | Swa Frantzen | Oracle Black Tuesday |
| 2009-07-13/a> | Adrien de Beaupre | * Infocon raised to yellow for Excel Web Components ActiveX vulnerability |
| 2009-07-10/a> | Guy Bruneau | WordPress Fixes Multiple vulnerabilities |
| 2009-07-09/a> | John Bambenek | Latest Updates on Ongoing DDoS on Governmental/Commercial Websites in USA and S. Korea |
| 2009-07-02/a> | Daniel Wesemann | Time to update updating on PCs for 3rd party apps |
| 2009-07-02/a> | Daniel Wesemann | Unpatched Bloatware on new PCs |
| 2009-06-30/a> | Chris Carboni | Obfuscated Code |
| 2009-06-30/a> | Chris Carboni | De-Obfuscation Submissions |
| 2009-06-23/a> | Bojan Zdrnja | New Thunderbird out, patches couple of vulnerabilities |
| 2009-06-21/a> | Bojan Zdrnja | Apache HTTP DoS tool mitigation |
| 2009-06-11/a> | Rick Wanner | WHO Declares Flu A(H1N1) a Pandemic |
| 2009-06-10/a> | Swa Frantzen | Java 6 update 14 released |
| 2009-06-09/a> | Swa Frantzen | Microsoft June Black Tuesday Overview |
| 2009-06-09/a> | Swa Frantzen | Adobe June Black Tuesday upgrades |
| 2009-06-04/a> | Raul Siles | Malware targetting banks ATM's |
| 2009-06-04/a> | Raul Siles | Targeted e-mail attacks asking to verify wire transfer details |
| 2009-06-02/a> | Deborah Hale | Another Quicktime Update |
| 2009-05-29/a> | Lorna Hutcheson | Blackberry Server Vulnerability |
| 2009-05-29/a> | Lorna Hutcheson | VMWare Patches Released |
| 2009-05-28/a> | Jim Clausing | More new volatility plugins |
| 2009-05-26/a> | Jason Lam | A new Web application security blog |
| 2009-05-26/a> | Jason Lam | Vista & Win2K8 SP2 available |
| 2009-05-24/a> | Raul Siles | Analyzing malicious PDF documents |
| 2009-05-22/a> | Mark Hofman | Patching and Adobe |
| 2009-05-22/a> | Mark Hofman | Patching and Apple - Java issue |
| 2009-05-20/a> | Tom Liston | Web Toolz |
| 2009-05-15/a> | Daniel Wesemann | Warranty void if seal shredded? |
| 2009-05-12/a> | Swa Frantzen | MSFT's version of responsible disclosure |
| 2009-05-12/a> | Swa Frantzen | May Black Tuesday Overview |
| 2009-05-12/a> | Swa Frantzen | Apple patches and updates |
| 2009-05-12/a> | Swa Frantzen | Adobe Acrobat (reader) patches released |
| 2009-05-04/a> | Tom Liston | Adobe Reader/Acrobat Critical Vulnerability |
| 2009-04-29/a> | Jason Lam | Two Adobe 0-day vulnerabilities |
| 2009-04-24/a> | John Bambenek | Data Leak Prevention: Proactive Security Requirements of Breach Notification Laws |
| 2009-04-21/a> | Bojan Zdrnja | Web application vulnerabilities |
| 2009-04-20/a> | Jason Lam | Digital Content on TV |
| 2009-04-15/a> | Marcus Sachs | 2009 Data Breach Investigation Report |
| 2009-04-14/a> | Swa Frantzen | April Black Tuesday Overview |
| 2009-04-14/a> | Swa Frantzen | Oracle quarterly patches |
| 2009-04-07/a> | Bojan Zdrnja | Advanced JavaScript obfuscation (or why signature scanning is a failure) |
| 2009-04-02/a> | Bojan Zdrnja | JavaScript insertion and log deletion attack tools |
| 2009-03-26/a> | Mark Hofman | Sanitising media |
| 2009-03-20/a> | donald smith | Stealthier then a MBR rootkit, more powerful then ring 0 control, it’s the soon to be developed SMM root kit. |
| 2009-03-20/a> | Stephen Hall | Making the most of your runbooks |
| 2009-03-18/a> | Adrien de Beaupre | Adobe Security Bulletin Adobe Reader and Acrobat |
| 2009-03-10/a> | Swa Frantzen | March black Tuesday overview |
| 2009-03-10/a> | Swa Frantzen | Adobe Acrobat 9.1 released |
| 2009-03-02/a> | Swa Frantzen | Obama's leaked chopper blueprints: anything we can learn? |
| 2009-03-01/a> | Jim Clausing | Cool combination of tools |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2009-02-25/a> | Andre Ludwig | Adobe flash player patch |
| 2009-02-25/a> | Swa Frantzen | Targeted link diversion attempts |
| 2009-02-25/a> | donald smith | AutoRun disabling patch released |
| 2009-02-12/a> | Mark Hofman | Australian Bushfires |
| 2009-02-10/a> | Swa Frantzen | February Black Tuesday Overview |
| 2009-02-10/a> | Swa Frantzen | Java up to date ? |
| 2009-02-06/a> | Adrien de Beaupre | Time to patch your HP printers |
| 2009-02-06/a> | Adrien de Beaupre | Other patches and updates du jour... |
| 2009-02-04/a> | Daniel Wesemann | Firefox 3.0.6 |
| 2009-02-03/a> | Swa Frantzen | On the importance of patching fast |
| 2009-01-31/a> | Swa Frantzen | VMware updates |
| 2009-01-30/a> | Mark Hofman | We all "Love" USB drives |
| 2009-01-30/a> | Mark Hofman | Request for info - Scan and webmail |
| 2009-01-25/a> | Rick Wanner | Twam?? Twammers? |
| 2009-01-20/a> | Adrien de Beaupre | Obamamania |
| 2009-01-18/a> | Maarten Van Horenbeeck | Targeted social engineering |
| 2009-01-13/a> | Johannes Ullrich | January Black Tuesday Overview |
| 2009-01-12/a> | William Salusky | Web Application Firewalls (WAF) - Have you deployed WAF technology? |
| 2009-01-02/a> | Mark Hofman | Blocking access to MD5 signed certs |
| 2008-12-28/a> | Raul Siles | Level3 Outage? |
| 2008-12-25/a> | Maarten Van Horenbeeck | Christmas Ecard Malware |
| 2008-12-17/a> | donald smith | Team CYMRU's Malware Hash Registry |
| 2008-12-17/a> | donald smith | Opera 9.6.3 released with security fixes |
| 2008-12-17/a> | donald smith | Internet Explorer 960714 is released |
| 2008-12-16/a> | donald smith | Microsoft announces an out of band patch for IE zero day |
| 2008-12-09/a> | Swa Frantzen | December Black Tuesday Overview |
| 2008-12-03/a> | Andre Ludwig | New ISC Poll! Has your organization suffered a DDoS (Distributed Denial of Service) attack in the last year? |
| 2008-11-29/a> | Pedro Bueno | Ubuntu users: Time to update! |
| 2008-11-25/a> | Andre Ludwig | The beginnings of a collaborative approach to IDS |
| 2008-11-20/a> | Jason Lam | Large quantity SQL Injection mitigation |
| 2008-11-17/a> | Jim Clausing | Finding stealth injected DLLs |
| 2008-11-13/a> | Jim Clausing | Some recently updated tools |
| 2008-11-11/a> | Swa Frantzen | Acrobat continued activity in the wild |
| 2008-11-11/a> | Swa Frantzen | November Black Tuesday Overview |
| 2008-10-23/a> | Mark Hofman | Microsoft out-of-band patch - Severity Critical |
| 2008-10-21/a> | Johannes Ullrich | Wireshark 1.0.4 released |
| 2008-10-14/a> | Swa Frantzen | October Black Tuesday Overview |
| 2008-10-14/a> | Swa Frantzen | Oracle quarterly patches on black tuesday |
| 2008-10-10/a> | Marcus Sachs | Fake Microsoft Update Email |
| 2008-09-29/a> | Daniel Wesemann | Patchbag: WinZip / MPlayer / RealWin SCADA vuln |
| 2008-09-22/a> | Maarten Van Horenbeeck | Data exfiltration and the use of anonymity providers |
| 2008-09-20/a> | Rick Wanner | New (to me) nmap Features |
| 2008-09-11/a> | David Goldsmith | CookieMonster is coming to Pown (err, Town) |
| 2008-09-10/a> | Adrien de Beaupre | Apple updates iPod Touch + Bonjour for Windows |
| 2008-09-09/a> | Swa Frantzen | Google Chrome being polished |
| 2008-09-09/a> | Swa Frantzen | September 2008 Black Tuesday Overview |
| 2008-09-09/a> | Swa Frantzen | Apple updates iTunes+QuickTime |
| 2008-09-08/a> | Raul Siles | Quick Analysis of the 2007 Web Application Security Statistics |
| 2008-09-07/a> | Daniel Wesemann | Staying current, but not too current |
| 2008-09-03/a> | Daniel Wesemann | Static analysis of Shellcode - Part 2 |
| 2008-08-25/a> | John Bambenek | Thoughts on the Best Western Compromise |
| 2008-08-20/a> | Adrien de Beaupre | From the mailbag, Opera 9.52... |
| 2008-08-12/a> | Stephen Hall | August 2008 Black Tuesday Overview |
| 2008-08-10/a> | Stephen Hall | From lolly pops to afterglow |
| 2008-08-03/a> | Deborah Hale | Securing A Network - Lessons Learned |
| 2008-08-01/a> | Swa Frantzen | Apple's Security Update 2008-005: DNS workaround finally included |
| 2008-07-30/a> | David Goldsmith | Serious 0-Day Flaw in Oracle -- Patch Released |
| 2008-07-18/a> | Adrien de Beaupre | Exit process? |
| 2008-07-16/a> | Maarten Van Horenbeeck | Firefox 2.0.0.16 fixes two security vulnerabilities |
| 2008-07-15/a> | Maarten Van Horenbeeck | Oracle (and BEA, Hyperion and TimesTen) critical patch update July 15th, 2008 |
| 2008-07-15/a> | Maarten Van Horenbeeck | BlackBerry PDF parsing vulnerability |
| 2008-07-14/a> | Daniel Wesemann | Obfuscated JavaScript Redux |
| 2008-07-11/a> | Jim Clausing | Updates to some of our favorite tools |
| 2008-07-09/a> | Johannes Ullrich | Unpatched Word Vulnerability |
| 2008-07-08/a> | Swa Frantzen | July 2008 black tuesday overview |
| 2008-07-07/a> | Pedro Bueno | Bad url classification |
| 2008-06-24/a> | Jason Lam | SQL Injection mitigation in ASP |
| 2008-06-24/a> | Jason Lam | Adobe Reader and Acrobat 8.1.2 Security Update |
| 2008-06-13/a> | Johannes Ullrich | Floods: More of the same (2) |
| 2008-06-10/a> | Swa Frantzen | June 2008 Black Tuesday Overview |
| 2008-06-02/a> | Jim Clausing | Emergingthreats.net and ThePlanet |
| 2008-05-26/a> | Marcus Sachs | Predictable Response |
| 2008-05-17/a> | Jim Clausing | Disaster donation scams continue |
| 2008-05-13/a> | Swa Frantzen | May 2008 black tuesday overview |
| 2008-05-07/a> | Jim Clausing | More on automated exploit generation |
| 2008-05-05/a> | John Bambenek | Defenses Against Automated Patch-Based Exploit Generation |
| 2008-04-24/a> | Maarten Van Horenbeeck | Targeted attacks using malicious PDF files |
| 2008-04-20/a> | Joel Esler | Software Update -- Did Apple Do Enough? |
| 2008-04-18/a> | John Bambenek | The Patch Window is Gone: Automated Patch-Based Exploit Generation |
| 2008-04-09/a> | Joel Esler | ISC Podcast Episode Number 2 |
| 2008-04-08/a> | Swa Frantzen | April 2008 - Black Tuesday Overview |
| 2008-04-08/a> | Swa Frantzen | Notes file viewer vulnerabilities |
| 2008-04-07/a> | John Bambenek | HP USB Keys Shipped with Malware for your Proliant Server |
| 2008-04-06/a> | Daniel Wesemann | Advanced obfuscated JavaScript analysis |
| 2008-04-03/a> | Bojan Zdrnja | Mixed (VBScript and JavaScript) obfuscation |
| 2008-03-30/a> | Mark Hofman | Mail Anyone? |
| 2008-03-27/a> | Maarten Van Horenbeeck | Guarding the guardians: a story of PGP key ring theft |
| 2008-03-20/a> | Joel Esler | Potential Vulnerability in Flash CS3 Professional, Flash Professional 8 and Flash Basic 8? |
| 2008-03-20/a> | Joel Esler | APPLE-SA-2008-03-19 AirPort Extreme Base Station Firmware 7.3.1 |
| 2008-03-11/a> | Swa Frantzen | March Black Tuesday Overview |
| 2008-02-12/a> | Swa Frantzen | February Black Tuesday Overview |
| 2008-01-08/a> | Swa Frantzen | January Black Tuesday overview |
| 2007-12-11/a> | Swa Frantzen | December black tuesday overview |
| 2007-11-13/a> | Swa Frantzen | november black tuesday overview |
| 2007-10-09/a> | Swa Frantzen | October Black Tuesday overview |
| 2007-09-11/a> | Swa Frantzen | September microsoft patch overview |
| 2007-08-14/a> | Swa Frantzen | August 'Black Tuesday' overview |
| 2007-07-10/a> | Swa Frantzen | July 'Black Tuesday' overview |
| 2007-06-12/a> | Johannes Ullrich | June 2007, Microsoft Patch Tuesday Overview. |
| 2007-05-08/a> | Swa Frantzen | May 2007, Black Tuesday patch overview |
| 2007-04-10/a> | Swa Frantzen | Microsoft black Tuesday patches - April 2007 |
| 2007-04-03/a> | Swa Frantzen | * Microsoft out of cycle patch |
| 2007-02-13/a> | Swa Frantzen | Microsoft Black Tuesday patches - February 2007 |
| 2007-01-09/a> | Swa Frantzen | Microsoft Patches - January 2007 - overview |
| 2007-01-03/a> | Toby Kohlenberg | VLC Media Player udp URL handler Format String Vulnerability |
| 2006-12-12/a> | Swa Frantzen | Microsoft Black Tuesday - December 2006 overview |
| 2006-12-12/a> | Robert Danford | MS06-078: 2 Windows Media Format Vulnerabilities (CVE-2006-4702, CVE-2006-6134) |
| 2006-12-12/a> | Swa Frantzen | Offline Microsoft Patching |
| 2006-12-12/a> | Swa Frantzen | The missing Microsoft patches |
| 2006-11-29/a> | Toby Kohlenberg | New Adobe vulnerability |
| 2006-11-14/a> | Swa Frantzen | Microsoft Black Tuesday Overview |
| 2006-10-09/a> | Swa Frantzen | Microsoft black tuesday - October 2006 STATUS |
| 2006-09-26/a> | Jim Clausing | MS06-049 re-release |
| 2006-09-12/a> | Swa Frantzen | Microsoft security patches for September 2006 |
| 2006-09-09/a> | Jim Clausing | New feature at isc.sans.org |
| 2006-08-17/a> | Swa Frantzen | Microsoft August 2006 Patches: STATUS |
REST |
| 2020-04-27/a> | Xavier Mertens | Powershell Payload Stored in a PSCredential Object |
| 2018-03-03/a> | Xavier Mertens | Reminder: Beware of the "Cloud" |
| 2017-09-05/a> | Adrien de Beaupre | Struts vulnerability patch released by apache, patch now |
| 2016-07-03/a> | Guy Bruneau | Is Data Privacy part of your Company's Culture? |
| 2016-01-31/a> | Guy Bruneau | Windows 10 and System Protection for DATA Default is OFF |
| 2015-09-01/a> | Daniel Wesemann | Encryption of "data at rest" in servers |
| 2015-08-29/a> | Tom Webb | Automating Metrics using RTIR REST API |
| 2013-02-22/a> | Johannes Ullrich | Zendesk breach affects Tumblr/Pinterest/Twitter |
| 2010-07-29/a> | Rob VandenBrink | FBI, Slovenian and Spanish Police announce more arrests of Mariposa Botnet Creator, Operators |
| 2010-06-07/a> | Manuel Humberto Santander Pelaez | Software Restriction Policy to keep malware away |
| 2009-09-07/a> | Lorna Hutcheson | Encrypting Data |
