Date Author Title
2024-10-17Guy BruneauScanning Activity from Subnet 15.184.0.0/16
2024-08-29Xavier MertensLive Patching DLLs with Python
2024-08-14Xavier MertensMultiple Malware Dropped Through MSI Package
2024-06-17Xavier MertensNew NetSupport Campaign Delivered Through MSIX Packages
2024-04-22Jan KoprivaIt appears that the number of industrial devices accessible from the internet has risen by 30 thousand over the past three years
2024-02-09Xavier MertensMSIX With Heavily Obfuscated PowerShell Script
2023-11-18Xavier MertensQuasar RAT Delivered Through Updated SharpLoader
2023-11-15Xavier MertensRedline Dropped Through MSIX Package
2023-08-16Yee Ching TokA Gentle Reminder: The Evolving Nature of Digital Scams
2023-08-10Bojan ZdrnjaSome things never change ? such as SQL Authentication ?encryption?
2023-06-19Xavier MertensMalware Delivered Through .inf File
2023-02-26Didier Stevensoledump & MSI Files
2022-09-23Xavier MertensKids Like Cookies, Malware Too!
2022-06-12Didier StevensQuickie: Follina, RTF & Explorer Preview Pane
2022-05-31Xavier MertensFirst Exploitation of Follina Seen in the Wild
2022-05-30Xavier MertensNew Microsoft Office Attack Vector via "ms-msdt" Protocol Scheme (CVE-2022-30190)
2022-05-14Didier StevensQuick Analysis Of Phishing MSG
2022-04-14Johannes UllrichAn Update on CVE-2022-26809 - MSRPC Vulnerabliity - PATCH NOW
2022-03-18Johannes UllrichScans for Movable Type Vulnerability (CVE-2021-20837)
2022-01-31Xavier MertensBe careful with RPMSG files
2022-01-09Didier StevensExtracting Cobalt Strike Beacons from MSBuild Scripts
2021-12-16Brad DuncanHow the "Contact Forms" campaign tricks people
2021-10-03Didier StevensVideo: CVE-2021-40444 Maldocs: Extracting URLs
2021-07-02Xavier MertensKaseya VSA Users Hit by Ransomware
2021-05-14Xavier Mertens"Open" Access to Industrial Systems Interface is Also Far From Zero
2021-05-12Jan KoprivaNumber of industrial control systems on the internet is lower then in 2020...but still far from zero
2021-05-08Guy BruneauWho is Probing the Internet for Research Purposes?
2021-04-28Xavier MertensDeeper Analyzis of my Last Malicious PowerPoint Add-On
2021-04-13Richard PorterMicrosoft April 2021 Patch Tuesday
2021-02-26Guy BruneauPretending to be an Outlook Version Update
2020-10-12Didier StevensNested .MSGs: Turtles All The Way Down
2020-10-11Didier StevensAnalyzing MSG Files With plugin_msg_summary
2020-09-29Xavier MertensManaging Remote Access for Partners & Contractors
2020-08-22Guy BruneauRemote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2019-11-18Johannes UllrichSMS and 2FA: Another Reason to Move away from It.
2019-10-20Guy BruneauScanning Activity for NVMS-9000 Digital Video Recorder
2019-08-28Xavier MertensMalware Samples Compiling Their Next Stage on Premise
2019-04-04Xavier MertensNew Waves of Scans Detected by an Old Rule
2018-10-21Didier StevensMSG Files: Compressed RTF
2018-08-19Didier StevensVideo: Peeking into msg files - revisited
2018-08-11Didier StevensPeeking into msg files - revisited
2018-07-23Didier StevensAnalyzing MSG files
2018-06-12Johannes UllrichMicrosoft June 2018 Patch Tuesday
2018-05-25Xavier MertensAntivirus Evasion? Easy as 1,2,3
2017-10-15Didier StevensPeeking into .msg files
2017-07-24Renato MarinhoUber drivers new threat: the "passenger"
2017-07-16Renato MarinhoSMS Phishing induces victims to photograph its own token card
2017-07-01Rick WannerUsing nmap to scan for MS17-010 (CVE-2017-0143 EternalBlue)
2017-05-13Guy BruneauMicrosoft Released Guidance for WannaCrypt
2017-04-26Johannes UllrichIf there are some unexploited MSSQL Servers With Weak Passwords Left: They got you now (again)
2017-03-31Xavier MertensPro & Con of Outsourcing your SOC
2017-01-10Johannes UllrichJanuary 2017 Microsoft Patch Tuesday
2016-02-23Xavier MertensVMware VMSA-2016-0002
2016-02-13Guy BruneauVMware VMSA-2015-0007.3 has been Re-released
2016-02-09Johannes UllrichMicrosoft February 2016 Patch Tuesday
2016-01-24Didier StevensObfuscated MIME Files
2016-01-12Alex StanfordJanuary 2016 Microsoft Patch Tuesday
2015-12-08Johannes UllrichDecember 2015 Microsoft Patch Tuesday
2015-11-10Johannes UllrichNovember 2015 Microsoft Patch Tuesday
2015-10-13Alex StanfordOctober 2015 Microsoft Patch Tuesday
2015-09-08Lenny ZeltserA Close Look at PayPal Overpayment Scams That Target Craigslist Sellers
2015-09-08Johannes UllrichSeptember 2015 Microsoft Patch Tuesday
2015-08-11Manuel Humberto Santander PelaezAugust 2015 Microsoft Patch Tuesday
2015-07-14Johannes UllrichJuly 2015 Microsoft Patch Tuesday
2015-06-09Johannes UllrichMicrosoft Patch Tuesday Summary for June 2015
2015-05-15Didier StevensAnother Maldoc? I'm Afraid So...
2015-05-12Johannes UllrichMay 2015 Microsoft Patch Tuesday Summary
2015-05-09Didier StevensMalicious Word Document: This Time The Maldoc Is A MIME File
2015-04-28Daniel WesemannScammy Nepal earthquake donation requests
2015-04-15Johannes UllrichMS15-034: HTTP.sys (IIS) DoS And Possible Remote Code Execution. PATCH NOW
2015-04-14Alex StanfordMicrosoft Patch Tuesday - April 2015
2015-03-10Johannes UllrichMicrosoft March Patch Tuesday
2015-02-10Mark BaggettMicrosoft Update Advisory for February 2015
2015-01-13Johannes UllrichMicrosoft Patch Tuesday - January 2015 (Really? Telnet?)
2014-12-09Alex StanfordMicrosoft Patch Tuesday - December 2014
2014-11-18Jim ClausingMicrosoft November out-of-cycle patch MS14-068
2014-11-11Johannes UllrichMicrosoft November 2014 Patch Tuesday
2014-10-14Johannes UllrichMicrosoft October 2014 Patch Tuesday
2014-09-09Alex StanfordMicrosoft Patch Tuesday - September 2014
2014-08-12Alex StanfordMicrosoft Patch Tuesday - August 2014
2014-07-08Alex StanfordMicrosoft Patch Tuesday - July
2014-06-10Alex StanfordMicrosoft Patch Tuesday June 2014
2014-05-13Johannes UllrichMicrosoft May 2014 Patch Tuesday
2014-05-01Johannes UllrichMicrosoft Announces Special Patch for IE 0-day (Win XP included!)
2014-04-08Richard PorterApril 2014 Microsoft Patches
2014-03-11Johannes UllrichMicrosoft Patch Tuesday March 2014
2014-02-11Johannes UllrichFebruary 2014 Microsoft Patch Tuesday
2014-01-14Johannes UllrichMicrosoft Patch Tuesday January 2014
2013-12-10Johannes UllrichMicrosoft December Patch Tuesday
2013-11-12Johannes UllrichNovember 2013 Microsoft Patch Tuesday
2013-11-09Guy BruneauIE Zero-Day Vulnerability Exploiting msvcrt.dll
2013-11-01Russ McReeSecunia's PSI Country Report - Q3 2013
2013-10-08Johannes UllrichMicrosoft October 2013 Patch Tuesday
2013-10-04Pedro BuenoCSAM: WebHosting BruteForce logs
2013-10-03Johannes UllrichOctober Patch Tuesday Preview (CVE-2013-3893 patch coming!)
2013-10-02John BambenekObamacare related domain registration spike, Government shutdown domain registration beginning
2013-09-19Bojan ZdrnjaArrays in requests, PHP and DedeCMS
2013-09-10Swa FrantzenMicrosoft September 2013 Black Tuesday Overview
2013-09-07Guy BruneauMicrosoft September Patch Pre-Announcement
2013-08-28Bojan ZdrnjaMS13-056 (false positive)? alerts
2013-08-15Johannes UllrichMicrosoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx
2013-08-13Swa FrantzenMicrosoft August 2013 Black Tuesday Overview
2013-07-21Guy BruneauUbuntu Forums Security Breach
2013-07-09Swa FrantzenMicrosoft July 2013 Black Tuesday Overview
2013-06-11Swa FrantzenMicrosoft June 2013 Black Tuesday Overview
2013-06-11Swa FrantzenOther Microsoft Black Tuesday News
2013-05-14Swa FrantzenMicrosoft May 2013 Black Tuesday Overview
2013-05-09Johannes UllrichMicrosoft released a Fix-it for the Internet Explorer 8 Vulnerability http://support.microsoft.com/kb/2847140
2013-04-17John BambenekUPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun
2013-04-09Swa FrantzenMicrosoft April 2013 Black Tuesday Overview
2013-03-12Swa FrantzenMicrosoft March 2013 Black Tuesday Overview
2013-03-03Richard PorterUptick in MSSQL Activity
2013-02-12Adam SwangerMicrosoft February 2013 Black Tuesday Update - Overview
2013-01-14Richard PorterJanuary 2013 Microsoft Out of Cycle Patch
2013-01-09Rob VandenBrinkSecurity Update - Cisco Prime LMS (cisco-sa-20130109-lms - remote execution as root vulnerability) - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms
2013-01-08Richard PorterMicrosoft January 2013 Black Tuesday Update - Overview
2012-12-11John BambenekMicrosoft December 2012 Black Tuesday Update - Overview
2012-11-13Jim ClausingMicrosoft November 2012 Black Tuesday Update - Overview
2012-10-09Johannes UllrichMicrosoft October 2012 Black Tuesday Update - Overview
2012-09-11Adam SwangerMicrosoft September 2012 Black Tuesday Update - Overview
2012-08-22Adrien de BeauprePhishing/spam via SMS
2012-08-14Rick WannerMicrosoft August 2012 Black Tuesday Update - Overview
2012-07-30Guy BruneauEnd of Days for MS-CHAPv2
2012-07-10Swa FrantzenMicrosoft July 2012 Black Tuesday Update - Overview
2012-06-12Swa FrantzenMicrosoft June 2012 Black Tuesday Update - Overview
2012-06-12Swa FrantzenMicrosoft Security Advisory 2719615 - MSXML - CVE-2012-1889
2012-05-08Adam SwangerMicrosoft May 2012 Black Tuesday Update - Overview
2012-05-05Tony CarothersVulnerability Exploit for Snow Leopard
2012-04-27Mark HofmanMicrosoft has added MSSQL 2008 R2 SP1 to the list of affected software for MS12-027 (Thanks Ryan). More info here --> http://technet.microsoft.com/security/bulletin/ms12-027
2012-04-26Richard PorterPacketstorm Security and Metasploit have Exploit code for MS12-027
2012-04-10Swa FrantzenWindows Vista RIP
2012-04-10Swa FrantzenMicrosoft April 2012 Black Tuesday Update - Overview
2012-03-13Lenny ZeltserMarch 2012 Microsoft Black Tuesday
2012-02-14Johannes UllrichFebruary 2012 Microsoft Black Tuesday
2012-01-10Adrien de BeaupreJanuary 2012 Microsoft Black Tuesday Summary
2012-01-06Guy BruneauJanuary 2012 Patch Tuesday Pre-release
2011-12-13Johannes UllrichDecember 2011 Microsoft Black Tuesday Summary
2011-11-08Swa FrantzenMicrosoft November 2011 Black Tuesday Overview
2011-11-03Guy BruneauNovember 2011 Patch Tuesday Pre-release
2011-10-11Swa FrantzenMicrosoft Black Tuesday Overview October 2011
2011-10-11Swa FrantzenMicrosoft Security Intelligence Report (SIR) - Volume 11
2011-09-30Tony CarothersMicrosoft Security Essentials Mis-identifes Chrome
2011-09-13Swa FrantzenMicrosoft September 2011 Black Tuesday
2011-09-13Swa FrantzenMore DigiNotar intermediate certificates blocklisted at Microsoft
2011-09-09Johannes UllrichEarly Patch Tuesday Today: Microsoft September 2011 Patches
2011-08-11Johannes UllrichAs part of this weeks patch tuesday, microsoft also re-release MS11-043 to address stability issues.
2011-08-09Swa FrantzenMicrosoft August 2011 Black Tuesday Overview
2011-07-19Richard PorterSMS Phishing at the SANSFire 2011 Handler Dinner
2011-07-12Swa FrantzenMicrosoft July 2011 Black Tuesday Overview
2011-06-14Swa FrantzenMicrosoft June 2011 Black Tuesday Overview
2011-05-10Swa FrantzenMay 2011 Microsoft Black Tuesday Overview
2011-04-15Kevin ListonMS11-020 (KB2508429) Upgrading from Critical to PATCH NOW
2011-04-11Jim ClausingApril 2011 Microsoft Black Tuesday Summary
2011-03-08Jim ClausingMarch 2011 Microsoft Black Tuesday Summary
2011-02-08Joel EslerFeburary 2011 Microsoft Black Tuesday Summary
2011-01-11Kevin ShorttJanuary 2011 Microsoft Black Tuesday Summary
2011-01-08Guy BruneauJanuary 2011 Patch Tuesday Pre-release
2011-01-05Johannes UllrichCurrently Unpatched Windows / Internet Explorer Vulnerabilities
2010-12-23Mark HofmanOlder AV Scam Active again.
2010-12-15Manuel Humberto Santander PelaezHP StorageWorks P2000 G3 MSA hardcoded user
2010-12-14Manuel Humberto Santander PelaezDecember 2010 Microsoft Black Tuesday Summary
2010-12-01Deborah HaleA Gentle Reminder - It is that time of year again
2010-11-09Johannes UllrichNovember 2010 Microsoft Black Tuesday Summary
2010-10-12Adrien de BeaupreOctober 2010 Microsoft Black Tuesday Summary
2010-10-08Rick WannerPatch Tuesday Pre-release -- 16 updates
2010-09-30Pedro BuenoMS OOB .NET patch is now also available via Windows Update.
2010-09-14Adrien de BeaupreSeptember 2010 Microsoft Black Tuesday Summary
2010-08-29Swa FrantzenDLL hijacking - what are you doing ?
2010-08-22Manuel Humberto Santander PelaezSCADA: A big challenge for information security professionals
2010-08-10Jim ClausingAugust 2010 Micrsoft Black Tuesday Summary
2010-07-26Guy BruneauSophosLabs Released Free Tool to Validate Microsoft Shortcut
2010-07-13Jim ClausingJuly 2010 Microsoft Black Tuesday Summary
2010-07-08Kyle HaugsnessNew poll on MSRC
2010-06-08Manuel Humberto Santander PelaezJune 2010 Microsoft Black Tuesday Summary
2010-05-11Scott FendleyMay 2010 Microsoft Patches
2010-04-22Guy BruneauMS10-025 Security Update has been Pulled
2010-04-16G. N. WhiteMS10-021: Encountering A Failed WinXP Update
2010-04-13Johannes UllrichMicrosoft April 2010 Patch Tuesday
2010-03-29Pedro BuenoMicrosoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix.
2010-03-09John BambenekMarch 2010 - Microsoft Patch Tuesday Diary
2010-03-03Mark HofmanMS10-015 re-released
2010-03-01Mark HofmanAS/NZ "Online Offensive - Fight fraud online" week March 1-7
2010-02-19Mark HofmanMS10-015 may cause Windows XP to blue screen (but only if you have malware on it)
2010-02-11Deborah HaleCritical Update for AD RMS
2010-02-09Johannes UllrichFebruary 2010 Black Tuesday Overview
2010-01-21Johannes UllrichMicrosoft January Out of Band Patch
2010-01-13Johannes UllrichSMS Donations Advertised via Twitter
2010-01-12Johannes UllrichMicrosoft Security Bulletin: January 2010
2009-12-08Deborah HaleDecember 2009 Black Tuesday Overview
2009-11-10Swa FrantzenMicrosoft November Black Tuesday Overview
2009-10-14Johannes UllrichOdd Apache/MSIE issue with downloads from ISC
2009-10-13Johannes UllrichMicrosoft October 2009 Black Tuesday Overview
2009-09-08Guy BruneauMicrosoft September 2009 Black Tuesday Overview
2009-08-18Bojan ZdrnjaMS09-039 exploit in the wild?
2009-08-11Swa FrantzenMicrosoft August 2009 Black Tuesday Overview
2009-07-14Swa FrantzenMicrosoft July Black Tuesday Overview
2009-07-06Stephen Hall0-day in Microsoft DirectShow (msvidctl.dll) used in drive-by attacks
2009-06-09Swa FrantzenMicrosoft June Black Tuesday Overview
2009-05-20Pedro BuenoCyber Warfare and Kylin thoughts
2009-05-12Swa FrantzenMay Black Tuesday Overview
2009-05-10Mari NicholsIs your Symantec Antivirus Alerting working correctly?
2009-04-23Kyle HaugsnessPossible MS09-013 activity
2009-04-14Swa FrantzenApril Black Tuesday Overview
2009-03-10Swa FrantzenMarch black Tuesday overview
2009-02-19Bojan ZdrnjaMS09-002, XML/DOC and initial infection vector
2009-02-17Bojan ZdrnjaMS09-002 exploit in the wild
2009-02-13Andre LudwigThird party information on conficker
2009-02-10Swa FrantzenFebruary Black Tuesday Overview
2009-01-13Johannes UllrichJanuary Black Tuesday Overview
2009-01-12William SaluskyDownadup / Conficker - MS08-067 exploit and Windows domain account lockout
2008-12-15Toby KohlenbergNew MS SQL Server vulnerability
2008-12-12Johannes UllrichMSIE 0-day Spreading Via SQL Injection
2008-12-09Swa FrantzenDecember Black Tuesday Overview
2008-12-09Swa FrantzenContacting us might be hard today
2008-11-29Pedro BuenoPossible Mumbai Scams?
2008-11-11Swa FrantzenNovember Black Tuesday Overview
2008-10-14Swa FrantzenOctober Black Tuesday Overview
2008-09-09Swa FrantzenSeptember 2008 Black Tuesday Overview
2008-08-22Patrick NolanMS08-051 V2.0 Patch issued August 20, 2008
2008-08-15Jim ClausingAnother MS update that may have escaped notice
2008-08-12Stephen HallAugust 2008 Black Tuesday Overview
2008-07-08Swa FrantzenJuly 2008 black tuesday overview
2008-06-13Johannes UllrichFloods: More of the same (2)
2008-06-10Swa FrantzenJune 2008 Black Tuesday Overview
2008-05-19Maarten Van HorenbeeckText message and telephone aid scams
2008-05-17Lorna HutchesonXP SP3 Issues
2008-05-13Swa FrantzenMay 2008 black tuesday overview
2008-04-22donald smithMaximus root kit downloads via MySpace social engineering trick.
2008-04-10Deborah HaleSymantec Threatcon Level 2
2008-04-08Swa FrantzenApril 2008 - Black Tuesday Overview
2008-03-11Swa FrantzenMarch Black Tuesday Overview
2008-02-12Swa FrantzenFebruary Black Tuesday Overview
2008-01-08Swa FrantzenJanuary Black Tuesday overview
2007-12-11Swa FrantzenDecember black tuesday overview
2007-11-13Swa Frantzennovember black tuesday overview
2007-10-09Swa FrantzenOctober Black Tuesday overview
2007-09-11Swa FrantzenSeptember microsoft patch overview
2007-08-14Swa FrantzenAugust 'Black Tuesday' overview
2007-07-10Swa FrantzenJuly 'Black Tuesday' overview
2007-06-12Johannes UllrichJune 2007, Microsoft Patch Tuesday Overview.
2007-05-08Swa FrantzenMay 2007, Black Tuesday patch overview
2007-04-10Swa FrantzenMicrosoft black Tuesday patches - April 2007
2007-04-03Swa Frantzen* Microsoft out of cycle patch
2007-02-13Swa FrantzenMicrosoft Black Tuesday patches - February 2007
2007-01-09Swa FrantzenMicrosoft Patches - January 2007 - overview
2006-12-12Swa FrantzenMicrosoft Black Tuesday - December 2006 overview
2006-11-14Jim ClausingMS06-071: MSXML Core Services
2006-11-14Swa FrantzenMicrosoft Black Tuesday Overview
2006-10-10Johannes UllrichMS06-056: ASP.NET XSS Information Disclosure Vulnerability (moderate)
2006-10-10Johannes UllrichMS06-061: XSLT/MSXML Buffer Overflow Code Execution Vulnerability (moderate)
2006-10-10Kyle HaugsnessMS06-063: Mailslot DoS (Server service)
2006-10-09Swa FrantzenMicrosoft black tuesday - October 2006 STATUS
2006-10-05Swa FrantzenMS06-053 revisited ?
2006-09-30Swa FrantzenYellow: WebViewFolderIcon setslice exploit spreading
2006-09-28Swa FrantzenMSIE: One patched, one pops up again (setslice)
2006-09-22Swa FrantzenYellow: MSIE VML exploit spreading
2006-09-19Swa FrantzenYet another MSIE 0-day: VML
2006-09-15Swa FrantzenMSIE DirectAnimation ActiveX 0-day update
2006-09-12Swa FrantzenMicrosoft security patches for September 2006
2006-08-17Swa FrantzenMicrosoft August 2006 Patches: STATUS