OFFICE ONLINE SEARCH FAKE AV WEBSENSE |
| 2010-01-08 | Rob VandenBrink | Microsoft OfficeOnline, Searching for Trust and Malware |
OFFICE |
| 2022-10-27/a> | Tom Webb | Supersizing your DUO and 365 Integration |
| 2022-05-30/a> | Xavier Mertens | New Microsoft Office Attack Vector via "ms-msdt" Protocol Scheme (CVE-2022-30190) |
| 2022-04-17/a> | Didier Stevens | Video: Office Protects You From Malicious ISO Files |
| 2022-04-16/a> | Didier Stevens | Office Protects You From Malicious ISO Files |
| 2021-12-19/a> | Didier Stevens | Office 2021: VBA Project Version |
| 2021-11-28/a> | Didier Stevens | Video: YARA Rules for Office Maldocs |
| 2021-11-23/a> | Didier Stevens | YARA Rule for OOXML Maldocs: Less False Positives |
| 2021-09-08/a> | Johannes Ullrich | Microsoft Offers Workaround for 0-Day Office Vulnerability (CVE-2021-40444) |
| 2020-12-12/a> | Didier Stevens | Office 95 Excel 4 Macros |
| 2020-11-08/a> | Didier Stevens | Quick Tip: Extracting all VBA Code from a Maldoc |
| 2020-09-23/a> | Xavier Mertens | Malicious Word Document with Dynamic Content |
| 2020-08-20/a> | Rob VandenBrink | Office 365 Mail Forwarding Rules (and other Mail Rules too) |
| 2020-02-21/a> | Xavier Mertens | Quick Analysis of an Encrypted Compound Document Format |
| 2019-12-28/a> | Didier Stevens | Corrupt Office Documents |
| 2019-12-09/a> | Didier Stevens | (Lazy) Sunday Maldoc Analysis |
| 2019-04-07/a> | Guy Bruneau | Fake Office 365 Payment Information Update |
| 2019-04-01/a> | Didier Stevens | Analysis of PDFs Created with OpenOffice/LibreOffice |
| 2018-12-13/a> | Xavier Mertens | Phishing Attack Through Non-Delivery Notification |
| 2018-10-10/a> | Xavier Mertens | New Campaign Using Old Equation Editor Vulnerability |
| 2018-09-04/a> | Rob VandenBrink | Let's Trade: You Read My Email, I'll Read Your Password! |
| 2018-05-25/a> | Xavier Mertens | Antivirus Evasion? Easy as 1,2,3 |
| 2018-05-01/a> | Xavier Mertens | Diving into a Simple Maldoc Generator |
| 2017-12-16/a> | Xavier Mertens | Microsoft Office VBA Macro Obfuscation via Metadata |
| 2017-11-15/a> | Xavier Mertens | If you want something done right, do it yourself! |
| 2017-04-28/a> | Xavier Mertens | Another Day, Another Obfuscation Technique |
| 2017-01-31/a> | Johannes Ullrich | Malicious Office files using fileless UAC bypass to drop KEYBASE malware |
| 2016-09-30/a> | Xavier Mertens | Another Day, Another Malicious Behaviour |
| 2016-07-19/a> | Didier Stevens | Office Maldoc: Let's Focus on the VBA Macros Later... |
| 2016-01-24/a> | Didier Stevens | Obfuscated MIME Files |
| 2015-02-20/a> | Tom Webb | Fast analysis of a Tax Scam |
| 2015-02-19/a> | Daniel Wesemann | Macros? Really?! |
| 2014-07-10/a> | Rob VandenBrink | Certificate Errors in Office 365 Today |
| 2014-06-22/a> | Russ McRee | OfficeMalScanner helps identify the source of a compromise |
| 2013-11-05/a> | Daniel Wesemann | TIFF images in MS-Office documents used in targeted attacks |
| 2012-09-14/a> | Lenny Zeltser | Analyzing Malicious RTF Files Using OfficeMalScanner's RTFScan |
| 2012-06-04/a> | Lenny Zeltser | Decoding Common XOR Obfuscation in Malicious Code |
| 2011-01-28/a> | Guy Bruneau | OpenOffice Security Fixes |
| 2010-10-26/a> | Pedro Bueno | Cyber Security Awareness Month - Day 26 - Sharing Office Files |
| 2010-06-05/a> | Guy Bruneau | OpenOffice.org 3.2.1 Fixes Bugs and Vulnerabilities |
| 2010-02-22/a> | Rob VandenBrink | Multiple Security Updates for OpenOffice ==> http://www.openoffice.org/security/bulletin.html |
| 2010-01-08/a> | Rob VandenBrink | Microsoft OfficeOnline, Searching for Trust and Malware |
| 2009-07-16/a> | Bojan Zdrnja | OWC exploits used in SQL injection attacks |
| 2009-07-13/a> | Adrien de Beaupre | Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution |
ONLINE |
| 2025-04-15/a> | Xavier Mertens | Online Services Again Abused to Exfiltrate Data |
| 2021-11-10/a> | Xavier Mertens | Shadow IT Makes People More Vulnerable to Phishing |
| 2017-12-14/a> | Russ McRee | Security Planner: Improve your online safety |
| 2012-11-26/a> | John Bambenek | Online Shopping for the Holidays? Tips, News and a Fair Warning |
| 2010-10-04/a> | Mark Hofman | Online Voting |
| 2010-01-08/a> | Rob VandenBrink | Microsoft OfficeOnline, Searching for Trust and Malware |
SEARCH |
| 2025-02-20/a> | Guy Bruneau | Using ES|QL in Kibana to Queries DShield Honeypot Logs |
| 2024-03-10/a> | Guy Bruneau | What happens when you accidentally leak your AWS API keys? [Guest Diary] |
| 2024-02-03/a> | Guy Bruneau | DShield Sensor Log Collection with Elasticsearch |
| 2023-07-23/a> | Guy Bruneau | Install & Configure Filebeat on Raspberry Pi ARM64 to Parse DShield Sensor Logs |
| 2023-04-27/a> | Johannes Ullrich | SANS.edu Research Journal: Volume 3 |
| 2023-03-16/a> | Xavier Mertens | Simple Shellcode Dissection |
| 2023-01-21/a> | Guy Bruneau | DShield Sensor JSON Log to Elasticsearch |
| 2021-09-11/a> | Guy Bruneau | Shipping to Elasticsearch Microsoft DNS Logs |
| 2021-09-09/a> | Johannes Ullrich | Updates to Our Datafeeds/API |
| 2021-05-08/a> | Guy Bruneau | Who is Probing the Internet for Research Purposes? |
| 2021-02-13/a> | Guy Bruneau | Using Logstash to Parse IPtables Firewall Logs |
| 2020-12-19/a> | Guy Bruneau | Secure Communication using TLS in Elasticsearch |
| 2020-05-29/a> | Johannes Ullrich | The Impact of Researchers on Our Data |
| 2019-11-29/a> | Russ McRee | ISC Snapshot: Search with SauronEye |
| 2018-11-30/a> | Remco Verhoef | CoinMiners searching for hosts |
| 2018-11-14/a> | Brad Duncan | Day in the life of a researcher: Finding a wave of Trickbot malspam |
| 2017-05-18/a> | Xavier Mertens | My Little CVE Bot |
| 2015-11-22/a> | Guy Bruneau | OpenDNS Research Used to Predict Threat |
| 2015-11-04/a> | Johannes Ullrich | Internet Wide Scanners Wanted |
| 2015-08-16/a> | Guy Bruneau | Are you a "Hunter"? |
| 2015-07-21/a> | Didier Stevens | Searching Through the VirusTotal Database |
| 2010-02-15/a> | Johannes Ullrich | Various Olympics Related Dangerous Google Searches |
| 2010-01-08/a> | Rob VandenBrink | Microsoft OfficeOnline, Searching for Trust and Malware |
FAKE |
| 2024-01-24/a> | Johannes Ullrich | How Bad User Interfaces Make Security Tools Harmful |
| 2022-03-02/a> | Johannes Ullrich | The More Often Something is Repeated, the More True It Becomes: Dealing with Social Media |
| 2022-01-03/a> | Xavier Mertens | McAfee Phishing Campaign with a Nice Fake Scan |
| 2021-08-04/a> | Yee Ching Tok | Pivoting and Hunting for Shenanigans from a Reported Phishing Domain |
| 2020-04-18/a> | Guy Bruneau | Maldoc Falsely Represented as DOCX Invoice Redirecting to Fake Apple Store |
| 2020-02-05/a> | Brad Duncan | Fake browser update pages are "still a thing" |
| 2019-04-07/a> | Guy Bruneau | Fake Office 365 Payment Information Update |
| 2019-04-02/a> | Johannes Ullrich | Fake AV is Back: LaCie Network Drives Used to Spread Malware |
| 2019-03-21/a> | Xavier Mertens | New Wave of Extortion Emails: Central Intelligence Agency Case |
| 2017-07-07/a> | Renato Marinho | DDoS Extortion E-mail: Yet Another Bluff? |
| 2016-05-12/a> | Xavier Mertens | Another Day, Another Wave of Phishing Emails |
| 2015-09-28/a> | Johannes Ullrich | "Transport of London" Malicious E-Mail |
| 2014-02-21/a> | Johannes Ullrich | UPS Malware Spam Using Fake SPF Headers |
| 2013-04-29/a> | Adam Swanger | Report Fake Tech Support Calls submission form reminder |
| 2013-04-16/a> | John Bambenek | Fake Boston Marathon Scams Update |
| 2013-01-03/a> | Manuel Humberto Santander Pelaez | New year and new CA compromised |
| 2012-12-06/a> | Daniel Wesemann | Fake tech support calls - revisited |
| 2012-10-03/a> | Kevin Shortt | Fake Support Calls Reported |
| 2012-06-19/a> | Daniel Wesemann | Vulnerabilityqueerprocessbrittleness |
| 2011-07-25/a> | Bojan Zdrnja | When the FakeAV coder(s) fail |
| 2011-07-21/a> | Daniel Wesemann | Down the FakeAV rabbit hole |
| 2011-05-19/a> | Daniel Wesemann | Fake AV Bingo |
| 2011-05-04/a> | Bojan Zdrnja | More on Google image poisoning |
| 2011-01-18/a> | Daniel Wesemann | Yet another rogue anti-virus |
| 2010-11-11/a> | Daniel Wesemann | Fake AV scams via Skype Chat |
| 2010-02-27/a> | Johannes Ullrich | Search Engine Poisoning: Chile Earthquake |
| 2010-02-15/a> | Johannes Ullrich | Various Olympics Related Dangerous Google Searches |
| 2010-02-08/a> | Adrien de Beaupre | When is a 0day not a 0day? Fake OpenSSh exploit, again. |
| 2010-01-08/a> | Rob VandenBrink | Microsoft OfficeOnline, Searching for Trust and Malware |
| 2009-09-17/a> | Bojan Zdrnja | Why is Rogue/Fake AV so successful? |
| 2009-09-04/a> | Adrien de Beaupre | Fake anti-virus |
| 2009-02-06/a> | Adrien de Beaupre | Fake stimulus payments |
| 2008-09-15/a> | donald smith | Fake antivirus 2009 and search engine results |
AV |
| 2024-03-28/a> | Xavier Mertens | From JavaScript to AsyncRAT |
| 2024-02-28/a> | Johannes Ullrich | Exploit Attempts for Unknown Password Reset Vulnerability |
| 2024-02-21/a> | Jan Kopriva | Phishing pages hosted on archive.org |
| 2024-02-09/a> | Xavier Mertens | MSIX With Heavily Obfuscated PowerShell Script |
| 2023-11-17/a> | Jan Kopriva | Phishing page with trivial anti-analysis features |
| 2023-09-23/a> | Guy Bruneau | Scanning for Laravel - a PHP Framework for Web Artisants |
| 2023-09-02/a> | Jesse La Grew | What is the origin of passwords submitted to honeypots? |
| 2023-05-20/a> | Xavier Mertens | Phishing Kit Collecting Victim's IP Address |
| 2023-02-24/a> | Brad Duncan | URL files and WebDAV used for IcedID (Bokbot) infection |
| 2022-06-16/a> | Xavier Mertens | Houdini is Back Delivered Through a JavaScript Dropper |
| 2022-06-01/a> | Jan Kopriva | HTML phishing attachments - now with anti-analysis features |
| 2022-03-31/a> | Johannes Ullrich | Spring Vulnerability Update - Exploitation Attempts CVE-2022-22965 |
| 2022-03-30/a> | Johannes Ullrich | Possible new Java Spring Framework Vulnerability (Updated: not a Spring problem) |
| 2022-03-30/a> | Johannes Ullrich | Java Springtime Confusion: What Vulnerability are We Talking About |
| 2022-01-18/a> | Jan Kopriva | Phishing e-mail with...an advertisement? |
| 2022-01-03/a> | Xavier Mertens | McAfee Phishing Campaign with a Nice Fake Scan |
| 2021-11-18/a> | Xavier Mertens | JavaScript Downloader Delivers Agent Tesla Trojan |
| 2021-10-21/a> | Brad Duncan | "Stolen Images Evidence" campaign pushes Sliver-based malware |
| 2021-10-16/a> | Guy Bruneau | Apache is Actively Scan for CVE-2021-41773 & CVE-2021-42013 |
| 2021-10-09/a> | Guy Bruneau | Scanning for Previous Oracle WebLogic Vulnerabilities |
| 2021-08-17/a> | Johannes Ullrich | Laravel (<=v8.4.2) exploit attempts for CVE-2021-3129 (debug mode: Remote code execution) |
| 2021-05-22/a> | Xavier Mertens | "Serverless" Phishing Campaign |
| 2021-05-18/a> | Xavier Mertens | From RunDLL32 to JavaScript then PowerShell |
| 2021-04-28/a> | Xavier Mertens | Deeper Analyzis of my Last Malicious PowerPoint Add-On |
| 2021-04-19/a> | Jan Kopriva | Hunting phishing websites with favicon hashes |
| 2021-03-02/a> | Russ McRee | Adversary Simulation with Sim |
| 2021-01-22/a> | Xavier Mertens | Another File Extension to Block in your MTA: .jnlp |
| 2020-11-13/a> | Xavier Mertens | Old Worm But New Obfuscation Technique |
| 2020-07-24/a> | Xavier Mertens | Compromized Desktop Applications by Web Technologies |
| 2020-07-08/a> | Xavier Mertens | If You Want Something Done Right, You Have To Do It Yourself... Malware Too! |
| 2020-06-11/a> | Xavier Mertens | Anti-Debugging JavaScript Techniques |
| 2020-04-03/a> | Xavier Mertens | Obfuscated with a Simple 0x0A |
| 2020-03-27/a> | Xavier Mertens | Malicious JavaScript Dropping Payload in the Registry |
| 2020-01-27/a> | Johannes Ullrich | Network Security Perspective on Coronavirus Preparedness |
| 2019-12-31/a> | Johannes Ullrich | Some Thoughts About the Critical Citrix ADC/Gateway Vulnerability (CVE-2019-19781) |
| 2019-11-23/a> | Guy Bruneau | Local Malware Analysis with Malice |
| 2019-08-09/a> | Xavier Mertens | 100% JavaScript Phishing Page |
| 2019-07-25/a> | Rob VandenBrink | When Users Attack! Users (and Admins) Thwarting Security Controls |
| 2019-06-20/a> | Xavier Mertens | Using a Travel Packing App for Infosec Purpose |
| 2019-06-10/a> | Xavier Mertens | Interesting JavaScript Obfuscation Example |
| 2019-05-29/a> | Xavier Mertens | Behavioural Malware Analysis with Microsoft ASA |
| 2019-04-02/a> | Johannes Ullrich | Fake AV is Back: LaCie Network Drives Used to Spread Malware |
| 2019-02-07/a> | Xavier Mertens | Phishing Kit with JavaScript Keylogger |
| 2019-02-02/a> | Guy Bruneau | Scanning for WebDAV PROPFIND Exploiting CVE-2017-7269 |
| 2018-11-20/a> | Xavier Mertens | VMware Affected by Dell EMC Avamar Vulnerability |
| 2018-07-17/a> | Xavier Mertens | Searching for Geographically Improbable Login Attempts |
| 2018-07-13/a> | Xavier Mertens | Cryptominer Delivered Though Compromized JavaScript File |
| 2018-06-18/a> | Xavier Mertens | Malicious JavaScript Targeting Mobile Browsers |
| 2017-11-03/a> | Xavier Mertens | Simple Analysis of an Obfuscated JAR File |
| 2017-10-06/a> | Johannes Ullrich | What's in a cable? The dangers of unauthorized cables |
| 2017-08-23/a> | Xavier Mertens | Malicious script dropping an executable signed by Avast? |
| 2017-06-22/a> | Xavier Mertens | Obfuscating without XOR |
| 2017-04-02/a> | Guy Bruneau | IPFire - A Household Multipurpose Security Gateway |
| 2017-03-24/a> | Xavier Mertens | Nicely Obfuscated JavaScript Sample |
| 2017-03-04/a> | Xavier Mertens | How your pictures may affect your website reputation |
| 2017-02-12/a> | Xavier Mertens | Analysis of a Suspicious Piece of JavaScript |
| 2016-08-28/a> | Guy Bruneau | Spam with Obfuscated Javascript |
| 2016-06-18/a> | Rob VandenBrink | Controlling JavaScript Malware Before it Runs |
| 2016-02-20/a> | Didier Stevens | Locky: JavaScript Deobfuscation |
| 2016-02-07/a> | Xavier Mertens | More Malicious JavaScript Obfuscation |
| 2016-01-15/a> | Xavier Mertens | JavaScript Deobfuscation Tool |
| 2015-11-09/a> | John Bambenek | ICYMI: Widespread Unserialize Vulnerability in Java |
| 2015-08-07/a> | Tony Carothers | Critical Firefox Update Today |
| 2015-06-16/a> | John Bambenek | CVE-2014-4114 and an Interesting AV Bypass Technique |
| 2014-12-06/a> | Rick Wanner | Google App Engine Java Security Sandbox bypasses |
| 2014-08-29/a> | Johannes Ullrich | False Positive or Not? Difficult to Analyze Javascript |
| 2014-07-15/a> | Daniel Wesemann | Oracle Java: 20 new vulnerabilities patched |
| 2014-07-13/a> | Tony Carothers | Oracle July 2014 Update Pre-Notification |
| 2014-07-06/a> | Richard Porter | Physical Access, Point of Sale, Vegas |
| 2014-07-05/a> | Guy Bruneau | Java Support ends for Windows XP |
| 2014-07-02/a> | Johannes Ullrich | Simple Javascript Extortion Scheme Advertised via Bing |
| 2014-05-27/a> | Kevin Shortt | Avast forums hacked |
| 2014-02-11/a> | Johannes Ullrich | Adobe February 2014 Patch Tuesday |
| 2014-02-05/a> | Johannes Ullrich | To Merrillville or Sochi: How Dangerous is it to travel? |
| 2013-12-23/a> | Rob VandenBrink | How-To's for the Holidays - Java Whitelisting using AD Group Policy |
| 2013-10-28/a> | Daniel Wesemann | Exploit cocktail (Struts, Java, Windows) going after 3-month old vulnerabilities |
| 2013-10-15/a> | Rob VandenBrink | Java Quarterly Updates |
| 2013-10-08/a> | Johannes Ullrich | Anti-Virus Company Avira Homepage Defaced |
| 2013-09-10/a> | Swa Frantzen | More Black Tuesday workload |
| 2013-08-07/a> | Johannes Ullrich | Firefox 23 and Mixed Active Content |
| 2013-04-23/a> | Russ McRee | Microsoft's Security Intelligence Report (SIRv14) released |
| 2013-04-19/a> | Russ McRee | Java 8 release schedule delayed for renewed focus on security |
| 2013-04-16/a> | Rob VandenBrink | Java 7 Update 21 is available - Watch for Behaviour Changes ! |
| 2013-03-07/a> | Guy Bruneau | Apple Blocking Java Web plug-in |
| 2013-03-05/a> | Richard Porter | Java j6u43 update #YAJU http://www.oracle.com/technetwork/java/javase/6u43-relnotes-1915290.html |
| 2013-03-04/a> | Richard Porter | Java 7u17 update #YAJU http://www.oracle.com/technetwork/java/javase/7u17-relnotes-1915289.html |
| 2013-03-01/a> | Jim Clausing | And the Java 0-days just keep on coming |
| 2013-02-26/a> | Rob VandenBrink | All I need Java for is .... |
| 2013-02-25/a> | Johannes Ullrich | Trustwave Trustkeeper Phish |
| 2013-02-20/a> | Johannes Ullrich | Update Palooza |
| 2013-02-19/a> | Johannes Ullrich | Oracle Updates Java (Java 7 Update 15, Java 6 update 41) |
| 2013-02-12/a> | Swa Frantzen | Adobe Feb 2013 Black Tuesday patches |
| 2013-02-08/a> | Kevin Shortt | Is it Spam or Is it Malware? |
| 2013-02-01/a> | Jim Clausing | Oracle quitely releases Java 7u13 early |
| 2013-01-19/a> | Guy Bruneau | Java 7 Update 11 Still has a Flaw |
| 2013-01-15/a> | Rob VandenBrink | When Disabling IE6 (or Java, or whatever) is not an Option... |
| 2013-01-13/a> | Stephen Hall | Java 0-Day patched as Java 7 U 11 released |
| 2013-01-12/a> | Stephen Hall | Java 0-day impact to Java 6 (and beyond?) |
| 2013-01-10/a> | Johannes Ullrich | Java is still exploitable and is likely going to remain so. |
| 2012-11-01/a> | Daniel Wesemann | Patched your Java yet? |
| 2012-10-18/a> | Rob VandenBrink | Another Java update! Java SE 1.6.0_37 Available ==> http://www.oracle.com/technetwork/java/javase/releasenotes-136954.html |
| 2012-10-17/a> | Rob VandenBrink | Time to update - Java version 7 update 9 (JRE 7u9, JDK 7u9) is out! Release notes here - http://www.oracle.com/technetwork/java/javase/7u9-relnotes-1863279.html |
| 2012-09-01/a> | Russ McRee | Blackhole targeting Java vulnerability via fake Microsoft Services Agreement email phish |
| 2012-08-31/a> | Russ McRee | Not so fast: Java 7 Update 7 critical vulnerability discovered in less than 24 hours |
| 2012-08-27/a> | Kevin Liston | Quick Bits about Today's Java 0-Day |
| 2012-08-05/a> | Daniel Wesemann | Phishing for Payroll with unpatched Java |
| 2012-06-25/a> | Guy Bruneau | Using JSDetox to Analyze and Deobfuscate Javascript |
| 2012-06-19/a> | Daniel Wesemann | Vulnerabilityqueerprocessbrittleness |
| 2012-06-12/a> | Swa Frantzen | Java 7u5 and 6u33 released |
| 2012-05-22/a> | Johannes Ullrich | nmap 6 released |
| 2012-05-16/a> | Johannes Ullrich | Avira Antivirus false positives http://forum.avira.com/wbb/index.php?page=Thread&threadID=144875 |
| 2012-04-25/a> | Daniel Wesemann | Blacole's obfuscated JavaScript |
| 2012-04-12/a> | Guy Bruneau | Apple Java Updates for Mac OS X |
| 2012-04-06/a> | Johannes Ullrich | Another OS X Java Patch |
| 2012-03-25/a> | Daniel Wesemann | evilcode.class |
| 2012-02-16/a> | Tony Carothers | Java Update for February |
| 2012-02-14/a> | Johannes Ullrich | Adobe Shockwave Player and RoboHelp for Word Patches |
| 2012-01-22/a> | Johannes Ullrich | Javascript DDoS Tool Analysis |
| 2012-01-03/a> | Bojan Zdrnja | The tale of obfuscated JavaScript continues |
| 2011-12-12/a> | Daniel Wesemann | Java 6u30 released |
| 2011-12-10/a> | Daniel Wesemann | Unwanted Presents |
| 2011-12-07/a> | Lenny Zeltser | V8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation |
| 2011-10-22/a> | Guy Bruneau | Oracle Java SE Critical Patch Update |
| 2011-09-05/a> | Raul Siles | Java 7 Officially Released |
| 2011-08-19/a> | Kevin Shortt | Java SE 6 Update 27 released. No security updates, many bug fixes ==> http://www.oracle.com/technetwork/java/javase/6u27-relnotes-444147.html |
| 2011-07-28/a> | Guy Bruneau | Java 7.0 released. Get it here - http://blogs.oracle.com/javase/entry/java_7_has_released |
| 2011-07-25/a> | Bojan Zdrnja | When the FakeAV coder(s) fail |
| 2011-07-21/a> | Daniel Wesemann | Down the FakeAV rabbit hole |
| 2011-06-28/a> | Johannes Ullrich | Update: Java update for OS X fixes security issues http://support.apple.com/kb/HT1222 |
| 2011-06-13/a> | Bojan Zdrnja | Harry Potter and the Rogue anti-virus: Part 1 |
| 2011-06-07/a> | Johannes Ullrich | Oracle Releases Java Version 1.6.0.26 http://java.com/en/download/manual.jsp |
| 2011-06-06/a> | Manuel Humberto Santander Pelaez | Phishing: Same goal, same techniques and people still falling for such scams |
| 2011-06-06/a> | Johannes Ullrich | The Havij SQL Injection Tool |
| 2011-06-03/a> | Guy Bruneau | Oracle Java SE Critical Patch Update Pre-Release Announcement - June 2011 |
| 2011-05-19/a> | Daniel Wesemann | Fake AV Bingo |
| 2011-05-04/a> | Bojan Zdrnja | More on Google image poisoning |
| 2011-05-01/a> | Deborah Hale | Java 6.25 Is Now Available |
| 2011-04-23/a> | Manuel Humberto Santander Pelaez | Image search can lead to malware download |
| 2011-03-27/a> | Guy Bruneau | Strange Shockwave File with Surprising Attachments |
| 2011-03-14/a> | Bojan Zdrnja | Tsunami in Japan and self modifying RogueAV code |
| 2011-03-09/a> | Jim Clausing | Apple updates Java |
| 2011-03-09/a> | Kevin Shortt | AVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B |
| 2011-02-15/a> | Jason Lam | Oracle Java 6 Update 24 |
| 2011-02-09/a> | Mark Hofman | Java Floating point issue (CVE-2010-4476) |
| 2011-02-09/a> | Mark Hofman | Adobe Patches (shockwave, Flash, Reader & Coldfusion) |
| 2011-02-07/a> | Pedro Bueno | The Good , the Bad and the Unknown Online Scanners |
| 2011-02-04/a> | Daniel Wesemann | Oh, just click "yes" |
| 2011-01-18/a> | Daniel Wesemann | Yet another rogue anti-virus |
| 2010-12-29/a> | Daniel Wesemann | Beware of strange web sites bearing gifts ... |
| 2010-12-24/a> | Daniel Wesemann | A question of class |
| 2010-12-23/a> | Mark Hofman | Older AV Scam Active again. |
| 2010-12-08/a> | Rob VandenBrink | Java 6, Update 23 is out => http://java.sun.com/javase/6/webnotes/ReleaseNotes.html , http://www.oracle.com/technetwork/java/javase/6u23releasenotes-191058.html , http://www.oracle.com/technetwork/java/javase/2col/6u23bugfixes-191074.html |
| 2010-12-03/a> | Mark Hofman | AVG Update Bricking windows 7 64 bit |
| 2010-12-02/a> | Kevin Johnson | Robert Hansen and our happiness |
| 2010-11-11/a> | Daniel Wesemann | Java Exploits |
| 2010-10-30/a> | Guy Bruneau | Security Update for Shockwave Player |
| 2010-08-25/a> | Pedro Bueno | Adobe released security update for Shockwave player that fix several CVEs: APSB1020 |
| 2010-08-17/a> | Bojan Zdrnja | Do you like Bing? So do the RogueAV guys! |
| 2010-07-21/a> | Adrien de Beaupre | Update on .LNK vulnerability |
| 2010-07-20/a> | Manuel Humberto Santander Pelaez | LNK vulnerability now with Metasploit module implementing the WebDAV method |
| 2010-07-18/a> | Manuel Humberto Santander Pelaez | New metasploit GUI written in Java |
| 2010-07-04/a> | Manuel Humberto Santander Pelaez | Malware inside PDF Files |
| 2010-07-01/a> | Bojan Zdrnja | Down the RogueAV and Blackhat SEO rabbit hole (part 2) |
| 2010-06-29/a> | donald smith | Interesting idea to help prevent RogueAV from using SEO without being noticed:) |
| 2010-06-28/a> | Bojan Zdrnja | Down the RogueAV and Blackhat SEO rabbit hole |
| 2010-05-23/a> | Manuel Humberto Santander Pelaez | Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability |
| 2010-05-12/a> | Rob VandenBrink | Adobe Shockwave Update |
| 2010-04-14/a> | Mark Hofman | ClamAV 0.94 EOL Reminder |
| 2010-04-10/a> | Andre Ludwig | New bug/exploit for javaws |
| 2010-04-02/a> | Guy Bruneau | Oracle Java SE and Java for Business Critical Patch Update Advisory |
| 2010-03-05/a> | Kyle Haugsness | Javascript obfuscators used in the wild |
| 2010-02-27/a> | Johannes Ullrich | Search Engine Poisoning: Chile Earthquake |
| 2010-01-14/a> | Bojan Zdrnja | Rogue AV exploiting Haiti earthquake |
| 2010-01-13/a> | Guy Bruneau | Sun Java JRE 6 Update 18 Released |
| 2010-01-08/a> | Rob VandenBrink | Microsoft OfficeOnline, Searching for Trust and Malware |
| 2009-12-05/a> | Guy Bruneau | Java JRE Buffer and Integer Overflow |
| 2009-12-03/a> | Mark Hofman | Avast false positives |
| 2009-11-13/a> | Adrien de Beaupre | Conficker patch via email? |
| 2009-11-03/a> | Bojan Zdrnja | Adobe released Shockwave Player 11.5.2.602 which fixes several critical security vulnerabilities |
| 2009-09-08/a> | Guy Bruneau | Bug Fixes in Sun SDK 5 and Java SE 6 |
| 2009-08-04/a> | donald smith | Java Security Update |
| 2009-07-15/a> | Bojan Zdrnja | Make sure you update that Java |
| 2009-07-01/a> | Bojan Zdrnja | Mobile phone trojans |
| 2009-06-10/a> | Swa Frantzen | Java 6 update 14 released |
| 2009-05-27/a> | donald smith | WebDAV write-up |
| 2009-05-24/a> | Raul Siles | IIS admins, help finding WebDAV remotely using nmap |
| 2009-05-22/a> | Mark Hofman | Patching and Apple - Java issue |
| 2009-05-21/a> | Adrien de Beaupre | IIS admins, help finding WebDAV |
| 2009-05-10/a> | Mari Nichols | Is your Symantec Antivirus Alerting working correctly? |
| 2009-05-04/a> | Tom Liston | Adobe Reader/Acrobat Critical Vulnerability |
| 2009-04-07/a> | Bojan Zdrnja | Advanced JavaScript obfuscation (or why signature scanning is a failure) |
| 2009-04-02/a> | Bojan Zdrnja | JavaScript insertion and log deletion attack tools |
| 2009-03-25/a> | David Goldsmith | Java Runtime Environment 6.0 Update 13 Released |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2009-02-10/a> | Swa Frantzen | Java up to date ? |
| 2008-11-02/a> | Adrien de Beaupre | Daylight saving time |
| 2008-09-15/a> | donald smith | Fake antivirus 2009 and search engine results |
| 2008-08-10/a> | Stephen Hall | From lolly pops to afterglow |
| 2008-07-14/a> | Daniel Wesemann | Obfuscated JavaScript Redux |
| 2008-07-09/a> | Johannes Ullrich | Java Update |
| 2008-06-30/a> | Marcus Sachs | More SQL Injection with Fast Flux hosting |
| 2008-05-20/a> | Raul Siles | List of malicious domains inserted through SQL injection |
| 2008-05-20/a> | Raul Siles | Java 6 Update 6 has been released |
| 2008-04-06/a> | Daniel Wesemann | Advanced obfuscated JavaScript analysis |
| 2008-04-03/a> | Bojan Zdrnja | Mixed (VBScript and JavaScript) obfuscation |
WEBSENSE |
| 2011-05-14/a> | Guy Bruneau | Websense Study Claims Canada Next Hotbed for Cybercrime Web Hosting Activity |
| 2011-04-01/a> | John Bambenek | LizaMoon Mass SQL-Injection Attack Infected at least 500k Websites |
| 2010-01-08/a> | Rob VandenBrink | Microsoft OfficeOnline, Searching for Trust and Malware |
