ADOBE PDF EXPLOIT 0DAY 0DAY ACROBAT JS JAVASCRIPT |
| 2009-02-25 | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
ADOBE |
| 2021-12-28/a> | Russ McRee | LotL Classifier tests for shells, exfil, and miners |
| 2018-11-21/a> | Johannes Ullrich | Critical Vulnerability in Flash Player |
| 2016-10-26/a> | Johannes Ullrich | Critical Flash Player Update APSB16-36 |
| 2016-09-13/a> | Rob VandenBrink | Apple iOS 10 and 10.0.1 Released |
| 2016-06-17/a> | Johannes Ullrich | Critical Adobe Flash Update. Patch Now |
| 2016-05-12/a> | Xavier Mertens | Adobe Released Updates to Fix Critical Vulnerability |
| 2016-03-08/a> | Rick Wanner | Critical Adobe Updates - March 2016 |
| 2016-02-09/a> | Johannes Ullrich | Adobe Patch Tuesday - February 2016 |
| 2015-12-28/a> | Rick Wanner | Adobe Flash and Adobe AIR Updates - https://helpx.adobe.com/security/products/flash-player/apsb16-01.html |
| 2015-10-16/a> | Alex Stanford | Adobe Flash Update |
| 2015-10-13/a> | Alex Stanford | Adobe Updates Acrobat and Adobe Reader |
| 2015-10-09/a> | Guy Bruneau | Adobe Acrobat and Reader Pre-Announcement |
| 2015-09-19/a> | Didier Stevens | Don't launch that file Adobe Reader! |
| 2015-07-27/a> | Daniel Wesemann | Angler's best friends |
| 2015-07-14/a> | Johannes Ullrich | Adobe Updates Flash Player, Shockwave and PDF Reader |
| 2015-07-12/a> | Rick Wanner | Another Adobe Flash Zero Day http://www.kb.cert.org/vuls/id/338736 |
| 2015-06-23/a> | Kevin Shortt | Adobe Flash Player Update - https://helpx.adobe.com/security/products/flash-player/apsb15-14.html |
| 2015-02-05/a> | Johannes Ullrich | Adobe Flash Player Update Released, Fixing CVE 2015-0313 |
| 2015-02-02/a> | Stephen Hall | New Adobe Flash Vulnerability - CVE-2015-0313 |
| 2015-01-26/a> | Russ McRee | Adobe updates Security Advisory for Adobe Flash Player, Infocon returns to green |
| 2015-01-23/a> | Adrien de Beaupre | Infocon change to yellow for Adobe Flash issues |
| 2014-11-11/a> | Johannes Ullrich | Adobe Flash Update |
| 2014-10-14/a> | Johannes Ullrich | Adobe October 2014 Bulletins for Flash Player and Coldfusion |
| 2014-08-12/a> | Adrien de Beaupre | Adobe updates for 2014/08 |
| 2014-04-28/a> | Russ McRee | Adobe Security Bulletin: Security updates available for Adobe Flash Player http://adobe.ly/QVjO72 |
| 2014-04-08/a> | Rick Wanner | Security Updates available for Adobe Flash Player - http://helpx.adobe.com/security/products/flash-player/apsb14-09.html |
| 2014-03-13/a> | Daniel Wesemann | Adobe Shockwave Player critical update: http://helpx.adobe.com/security/products/shockwave/apsb14-10.html |
| 2014-03-11/a> | Johannes Ullrich | Adobe Updates: Flash Player |
| 2014-02-20/a> | Stephen Hall | Abobe out of band patch announcement (APSB14-07) |
| 2014-02-11/a> | Johannes Ullrich | Adobe February 2014 Patch Tuesday |
| 2014-02-04/a> | Johannes Ullrich | Adobe Flash Player Emergency Patch |
| 2014-01-14/a> | Johannes Ullrich | Adobe Patch Tuesday January 2014 |
| 2013-12-21/a> | Daniel Wesemann | Adobe phishing underway |
| 2013-12-10/a> | Rob VandenBrink | Adobe Updates today as well. |
| 2013-11-22/a> | Rick Wanner | Tales of Password Reuse |
| 2013-10-09/a> | Johannes Ullrich | Other Patch Tuesday Updates (Adobe, Apple) |
| 2013-10-05/a> | Richard Porter | Adobe Breach Notification, Notifications? |
| 2013-10-04/a> | Johannes Ullrich | The Adobe Breach FAQ |
| 2013-10-03/a> | Johannes Ullrich | October Patch Tuesday Preview (CVE-2013-3893 patch coming!) |
| 2013-09-10/a> | Swa Frantzen | Adobe September 2013 Black Tuesday Overview |
| 2013-07-09/a> | Swa Frantzen | Adobe July 2013 Black Tuesday Overview |
| 2013-06-11/a> | Swa Frantzen | Adobe June 2013 Black Tuesday Overview |
| 2013-05-14/a> | Swa Frantzen | Adobe May 2013 Black Tuesday Overview |
| 2013-05-10/a> | Johannes Ullrich | Microsoft and Adobe Patch Tuesday Pre-Release |
| 2013-05-09/a> | John Bambenek | Adobe Releases 0-day Security Advisory for Coldfusion, Exploit Code Available. Advisory here: http://www.adobe.com/support/security/advisories/apsa13-03.html |
| 2013-05-08/a> | Johannes Ullrich | "De Flashing" the ISC Web Site and Flash XSS issues |
| 2013-04-09/a> | Swa Frantzen | Adobe April 2013 Black Tuesday Overview |
| 2013-03-12/a> | Swa Frantzen | Adobe March 2013 Black Tueday |
| 2013-02-27/a> | Adam Swanger | Adobe Flash Player Security Update - http://www.adobe.com/support/security/bulletins/apsb13-08.html |
| 2013-02-20/a> | Johannes Ullrich | Update Palooza |
| 2013-02-17/a> | Guy Bruneau | Adobe Acrobat and Reader Security Update Planned this Week |
| 2013-02-13/a> | Swa Frantzen | More adobe reader and acrobat (PDF) trouble |
| 2013-02-07/a> | John Bambenek | Adobe Releases Patches for 0-day Vulnerability in Flash Player for Windows and Mac, Upgrade now: http://www.adobe.com/support/security/bulletins/apsb13-04.html |
| 2013-01-09/a> | Rob VandenBrink | Security Updates for Adobe Reader / Acrobat - http://www.adobe.com/support/security/bulletins/apsb13-02.html |
| 2013-01-09/a> | Rob VandenBrink | Security Updates for Adobe Flash - http://www.adobe.com/support/security/bulletins/apsb13-01.html |
| 2013-01-08/a> | Richard Porter | Adobe Security Bulletins http://blogs.adobe.com/psirt/2013/01/adobe-security-bulletins-posted-4.html |
| 2013-01-04/a> | Daniel Wesemann | Patch pre-notification from Adobe and Microsoft |
| 2012-11-08/a> | Daniel Wesemann | Adobe Patches |
| 2012-10-09/a> | Johannes Ullrich | Adobe Flash Player update http://www.adobe.com/support/security/bulletins/apsb12-22.html |
| 2012-08-21/a> | Adrien de Beaupre | YYABCAFU - Yes Yet Another Bleeping Critical Adobe Flash Update |
| 2012-08-14/a> | Rick Wanner | Adobe Security Bulletins - http://blogs.adobe.com/psirt/2012/08/adobe-security-bulletins-posted-2.html |
| 2012-06-12/a> | Swa Frantzen | Adobe June 2012 Black Tuesday patches |
| 2012-05-25/a> | Guy Bruneau | Technical Analysis of Flash Player CVE-2012-0779 |
| 2012-05-12/a> | Tony Carothers | Adobe Update to Vulnerabilities |
| 2012-05-04/a> | Guy Bruneau | Adobe Security Flash Update |
| 2012-04-10/a> | Swa Frantzen | Adobe April 2012 Black Tuesday Update |
| 2012-04-06/a> | Johannes Ullrich | Adobe Patch Tuesday Prerelease (Reader/Acrobat) http://www.adobe.com/support/security/bulletins/apsb12-08.html |
| 2012-03-28/a> | Kevin Shortt | Adobe Flash Player APSB12-07 - 28 March 2012 |
| 2012-03-05/a> | Johannes Ullrich | Adobe Flash Player Security Update |
| 2012-02-16/a> | Johannes Ullrich | Adobe Flash Player Update |
| 2012-02-14/a> | Johannes Ullrich | Adobe Shockwave Player and RoboHelp for Word Patches |
| 2012-01-10/a> | Adrien de Beaupre | Adobe January 2012 Black Tuesday overview |
| 2011-12-13/a> | Johannes Ullrich | December 2011 Adobe Black Tuesday |
| 2011-12-08/a> | Adrien de Beaupre | Newest Adobe Flash 11.1.102.55 and Previous 0 Day Exploit |
| 2011-12-07/a> | Lenny Zeltser | Adobe Acrobat Latest Zero-Day Vulnerability Fix Coming to All Platforms by January 10 |
| 2011-11-11/a> | Rick Wanner | Adobe Air updated to 3.1.0.4880 |
| 2011-11-08/a> | Swa Frantzen | Abobe November 2011 Black Tuesday Overview |
| 2011-10-05/a> | Johannes Ullrich | Adobe SSL Certificate Problem (fixed) |
| 2011-10-01/a> | Mark Hofman | Adobe Photoshop for Windows Vulnerability (CVE-2011-2443) |
| 2011-09-21/a> | Swa Frantzen | Emergency patch expected for Flash Player |
| 2011-09-21/a> | Guy Bruneau | Adobe Release Flash Player 10.3.183.10 available at http://get.adobe.com/flashplayer/ |
| 2011-09-09/a> | Guy Bruneau | Adobe plan to release critical security updates next Tuesday for Acrobat and Reader http://www.adobe.com/support/security/bulletins/apsb11-24.html |
| 2011-09-09/a> | Guy Bruneau | Adobe Publish its List of Trusted Root Certificate - http://www.adobe.com/security/approved-trust-list.html |
| 2011-08-26/a> | Daniel Wesemann | Adobe Flash stability update to 10.3.183.7. See http://forums.adobe.com/message/3883150 |
| 2011-08-09/a> | Swa Frantzen | Adobe August 2011 Black Tuesday Overview |
| 2011-06-30/a> | Guy Bruneau | Adobe Release Flash Player 10.3.181.34 available at http://get.adobe.com/flashplayer/ |
| 2011-06-14/a> | Swa Frantzen | Adobe releases patches |
| 2011-06-06/a> | Johannes Ullrich | Adobe releases Flash Player patch on a Sunday to combat latest 0day http://www.adobe.com/support/security/bulletins/apsb11-13.html |
| 2011-05-12/a> | Chris Mohan | Security updates available for Flash Player, RoboHelp, Audition, and Flash Media Server |
| 2011-04-21/a> | Guy Bruneau | Adobe Reader and Acrobat Security Updates |
| 2011-04-14/a> | Johannes Ullrich | Update to Adobe Flash 0-day: Patch will be out soon |
| 2011-04-11/a> | Johannes Ullrich | Yet another Adobe Flash/Reader/Acrobat 0 day |
| 2011-03-22/a> | Kevin Shortt | Adobe Reader/Acrobat Security Update - http://www.adobe.com/support/security/bulletins/apsb11-06.html |
| 2011-03-14/a> | Bojan Zdrnja | Adobe Flash 0-day being used in targeted attacks |
| 2011-03-02/a> | Chris Mohan | Updates: Firefox 3.6.14/3.5.17, Thunderbird 3.1.8, Adobe Flash v10.2.152.32 & WireShark 1.4.4 |
| 2011-02-09/a> | Mark Hofman | Adobe Patches (shockwave, Flash, Reader & Coldfusion) |
| 2011-01-06/a> | Johannes Ullrich | Flash Local-with-filesystem Sandbox Bypass |
| 2010-11-22/a> | Lenny Zeltser | Adobe Acrobat Spam Going Strong - More to Come? |
| 2010-11-19/a> | Jason Lam | Adobe Reader X - Sandbox |
| 2010-11-04/a> | Johannes Ullrich | Today's Adobe Patches and Vulnerablities |
| 2010-10-28/a> | Manuel Humberto Santander Pelaez | CVE-2010-3654 - New dangerous 0-day authplay library adobe products vulnerability |
| 2010-10-06/a> | Robert Danford | Adobe updates: http://www.adobe.com/support/security/bulletins/apsb10-21.html |
| 2010-09-14/a> | Adrien de Beaupre | Adobe Flash v10.1.82.76 and earlier vulnerability in-the-wild |
| 2010-09-13/a> | Manuel Humberto Santander Pelaez | Enhanced Mitigation Experience Toolkit can block Adobe 0-day exploit |
| 2010-09-13/a> | Manuel Humberto Santander Pelaez | Adobe SING table parsing exploit (CVE-2010-2883) in the wild |
| 2010-09-12/a> | Manuel Humberto Santander Pelaez | Adobe Acrobat pushstring Memory Corruption paper |
| 2010-09-08/a> | John Bambenek | Adobe Acrobat/Reader 0-day in Wild, Adobe Issues Advisory |
| 2010-08-25/a> | Pedro Bueno | Adobe released security update for Shockwave player that fix several CVEs: APSB1020 |
| 2010-08-19/a> | Rob VandenBrink | Don points us to multiple Adobe updates (Reader and Acrobat 9.3.4 among them) ==> http://www.adobe.com/support/downloads/new.jsp |
| 2010-08-18/a> | Guy Bruneau | Adobe out-of-cycle Updates |
| 2010-08-10/a> | Jason Lam | Adobe critical security updates |
| 2010-08-05/a> | Manuel Humberto Santander Pelaez | Adobe Acrobat Font Parsing Integer Overflow Vulnerability |
| 2010-07-21/a> | Adrien de Beaupre | Adobe Reader Protected Mode |
| 2010-06-29/a> | donald smith | Adobe Reader 9.3.3/8.2.3 addressing CVE-2010-1297 |
| 2010-06-16/a> | Kevin Shortt | Adobe Flash Player 10.1 - Security Update Available |
| 2010-06-09/a> | Deborah Hale | Adobe POC in the Wild |
| 2010-06-09/a> | Deborah Hale | Best Practice to Prevent PDF Attacks |
| 2010-06-05/a> | Guy Bruneau | Security Advisory for Flash Player, Adobe Reader and Acrobat |
| 2010-05-12/a> | Rob VandenBrink | Adobe Shockwave Update |
| 2010-04-13/a> | Adrien de Beaupre | Security update available for Adobe Reader and Acrobat |
| 2010-04-09/a> | Mark Hofman | Adobe launch issue response/work around. |
| 2010-03-31/a> | Johannes Ullrich | PDF Arbitrary Code Execution - vulnerable by design. |
| 2010-02-16/a> | Robert Danford | Adobe Updates: http://www.adobe.com/support/security/bulletins/apsb10-07.html http://www.adobe.com/support/security/bulletins/apsb10-06.html |
| 2010-02-12/a> | G. N. White | Adobe Flash Player 10.0.45.2 and AIR 1.5.3.9130 released to correct vulnerability CVE-2010-0186 Details: http://www.adobe.com/support/security/bulletins/apsb10-06.html |
| 2010-02-02/a> | Guy Bruneau | Adobe ColdFusion Information Disclosure |
| 2010-01-21/a> | Chris Carboni | Security Update Available for Shockwave Player |
| 2010-01-14/a> | Bojan Zdrnja | PDF Babushka |
| 2010-01-12/a> | Johannes Ullrich | Microsoft Advices XP Users to Uninstall Flash Player 6 |
| 2010-01-12/a> | Johannes Ullrich | Pre-Announced Adobe Reader and Acrobat Patch Found! |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicious PDFs |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicous PDFs (Part #2) |
| 2009-12-15/a> | Johannes Ullrich | Adobe 0-day in the wild - again |
| 2009-12-09/a> | Swa Frantzen | Adobe flash player and air patched |
| 2009-12-03/a> | Mark Hofman | Next week will be a big patch week - Adobe is also releasing patches "Adobe is planning to release an update for Adobe Flash Player 10.0.32.18 and earlier versions, and an update to Adobe AIR 1.5.2 and earlier versions, to resolve critical security issues |
| 2009-11-03/a> | Bojan Zdrnja | Adobe released Shockwave Player 11.5.2.602 which fixes several critical security vulnerabilities |
| 2009-10-13/a> | Daniel Wesemann | Adobe Reader and Acrobat - Black Tuesday continues |
| 2009-10-08/a> | Johannes Ullrich | New Adobe Vulnerability Exploited in Targeted Attacks |
| 2009-08-18/a> | Deborah Hale | Security Bulletin for ColdFusion and JRun |
| 2009-07-31/a> | Deborah Hale | Adobe Patch is out |
| 2009-07-22/a> | Bojan Zdrnja | YA0D (Yet Another 0-Day) in Adobe Flash player |
| 2009-06-24/a> | Kyle Haugsness | Adobe Shockwave Player Update |
| 2009-06-09/a> | Swa Frantzen | Adobe June Black Tuesday upgrades |
| 2009-05-24/a> | Raul Siles | Analyzing malicious PDF documents |
| 2009-05-22/a> | Mark Hofman | Patching and Adobe |
| 2009-05-12/a> | Swa Frantzen | Adobe Acrobat (reader) patches released |
| 2009-05-01/a> | Adrien de Beaupre | Adobe Flash Media Server privilege escalation security bulletin |
| 2009-04-29/a> | Jason Lam | Two Adobe 0-day vulnerabilities |
| 2009-04-20/a> | Jason Lam | Digital Content on TV |
| 2009-03-18/a> | Adrien de Beaupre | Adobe Security Bulletin Adobe Reader and Acrobat |
| 2009-03-10/a> | Swa Frantzen | Adobe Acrobat 9.1 released |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2009-02-25/a> | Andre Ludwig | Adobe flash player patch |
| 2009-02-25/a> | Andre Ludwig | Preview/Iphone/Linux pdf issues |
| 2008-12-05/a> | Daniel Wesemann | Been updatin' your Flash player lately? |
| 2008-11-17/a> | Jim Clausing | Critical update to Adobe AIR |
| 2008-11-11/a> | Swa Frantzen | Acrobat continued activity in the wild |
| 2008-11-06/a> | Joel Esler | More Adobe Updates |
| 2008-10-15/a> | Mari Nichols | Adobe Flash 10 Released |
| 2008-07-17/a> | Mari Nichols | Adobe Reader 9 Released |
| 2008-07-11/a> | Raul Siles | How to Determine if Adobe Acrobat or Reader 8.1.2 Security Update 1 is Installed? |
| 2008-05-27/a> | Adrien de Beaupre | Adobe flash player vuln |
| 2008-05-12/a> | Scott Fendley | Adobe Releases Security Updates |
| 2008-04-09/a> | Raul Siles | Critical vulnerabilities in Adobe Flash Player |
| 2008-03-20/a> | Joel Esler | Potential Vulnerability in Flash CS3 Professional, Flash Professional 8 and Flash Basic 8? |
| 2008-03-12/a> | Joel Esler | Adobe security updates |
| 2006-11-29/a> | Toby Kohlenberg | New Adobe vulnerability |
| 2006-11-14/a> | Jim Clausing | MS06-069: Adobe Flash Player |
| 2006-11-14/a> | Swa Frantzen | Adobe Flash update available |
| 2006-09-12/a> | Swa Frantzen | Adobe Flash player upgrade time |
PDF |
| 2024-04-17/a> | Xavier Mertens | Malicious PDF File Used As Delivery Mechanism |
| 2023-09-03/a> | Didier Stevens | Analysis of a Defective Phishing PDF |
| 2023-04-12/a> | Brad Duncan | Recent IcedID (Bokbot) activity |
| 2022-07-29/a> | Johannes Ullrich | PDF Analysis Intro and OpenActions Entries |
| 2022-07-18/a> | Didier Stevens | Adding Your Own Keywords To My PDF Tools |
| 2022-05-07/a> | Guy Bruneau | Phishing PDF Received in my ISC Mailbox |
| 2022-04-25/a> | Xavier Mertens | Simple PDF Linking to Malicious Content |
| 2020-05-02/a> | Guy Bruneau | Phishing PDF with Unusual Hostname |
| 2020-03-14/a> | Didier Stevens | Phishing PDF With Incremental Updates. |
| 2019-09-22/a> | Didier Stevens | Video: Encrypted Sextortion PDFs |
| 2019-09-16/a> | Didier Stevens | Encrypted Sextortion PDFs |
| 2019-04-01/a> | Didier Stevens | Analysis of PDFs Created with OpenOffice/LibreOffice |
| 2019-02-14/a> | Xavier Mertens | Suspicious PDF Connecting to a Remote SMB Share |
| 2018-08-12/a> | Didier Stevens | A URL shortener handy for phishers |
| 2018-01-02/a> | Didier Stevens | PDF documents & URLs: video |
| 2017-12-24/a> | Didier Stevens | PDF documents & URLs: update |
| 2017-12-23/a> | Didier Stevens | Encrypted PDFs |
| 2017-11-05/a> | Didier Stevens | Extracting the text from PDF documents |
| 2017-11-04/a> | Didier Stevens | PDF documents & URLs |
| 2017-04-23/a> | Didier Stevens | Malicious Documents: A Bit Of News |
| 2016-01-01/a> | Didier Stevens | Failure Is An Option |
| 2015-09-19/a> | Didier Stevens | Don't launch that file Adobe Reader! |
| 2015-08-28/a> | Didier Stevens | Test File: PDF With Embedded DOC Dropping EICAR |
| 2015-08-26/a> | Didier Stevens | PDF + maldoc1 = maldoc2 |
| 2015-04-19/a> | Didier Stevens | Handling Special PDF Compression Methods |
| 2013-02-17/a> | Guy Bruneau | Adobe Acrobat and Reader Security Update Planned this Week |
| 2013-02-13/a> | Swa Frantzen | More adobe reader and acrobat (PDF) trouble |
| 2011-07-10/a> | Raul Siles | Jailbreakme Takes Advantage of 0-day PDF Vuln in Apple iOS Devices |
| 2011-03-29/a> | Daniel Wesemann | Malware emails with fake cellphone invoice |
| 2011-03-09/a> | Kevin Shortt | AVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B |
| 2011-01-13/a> | Rob VandenBrink | Blackberry BES Server Updates for PDF Vulnerabilities |
| 2010-12-15/a> | Manuel Humberto Santander Pelaez | Vulnerability in the PDF distiller of the BlackBerry Attachment Service |
| 2010-09-26/a> | Daniel Wesemann | PDF analysis paper |
| 2010-09-02/a> | Daniel Wesemann | SDF, please! |
| 2010-08-22/a> | Manuel Humberto Santander Pelaez | Anatomy of a PDF exploit |
| 2010-08-06/a> | Rob VandenBrink | FOXIT PDF Reader update to resolve iPhone/iPad Jailbreak issue ==> http://www.foxitsoftware.com/announcements/2010861227.html |
| 2010-08-05/a> | Manuel Humberto Santander Pelaez | Adobe Acrobat Font Parsing Integer Overflow Vulnerability |
| 2010-07-04/a> | Manuel Humberto Santander Pelaez | Malware inside PDF Files |
| 2010-06-09/a> | Deborah Hale | Best Practice to Prevent PDF Attacks |
| 2010-04-22/a> | John Bambenek | Data Redaction: You're Doing it Wrong |
| 2010-04-08/a> | Bojan Zdrnja | JavaScript obfuscation in PDF: Sky is the limit |
| 2010-03-31/a> | Johannes Ullrich | PDF Arbitrary Code Execution - vulnerable by design. |
| 2010-01-15/a> | Kevin Liston | Clearing some things up about Adobe |
| 2010-01-14/a> | Bojan Zdrnja | PDF Babushka |
| 2010-01-05/a> | Guy Bruneau | New poll on handling PDF documents |
| 2010-01-04/a> | Bojan Zdrnja | Sophisticated, targeted malicious PDF documents exploiting CVE-2009-4324 |
| 2009-12-15/a> | Johannes Ullrich | Adobe 0-day in the wild - again |
| 2009-12-01/a> | Chris Carboni | Vulnerabilities in the PDF distiller of the BlackBerry Attachment Service |
| 2009-05-29/a> | Lorna Hutcheson | Blackberry Server Vulnerability |
| 2009-05-24/a> | Raul Siles | Analyzing malicious PDF documents |
| 2009-03-18/a> | Adrien de Beaupre | Adobe Security Bulletin Adobe Reader and Acrobat |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2009-02-25/a> | Andre Ludwig | Preview/Iphone/Linux pdf issues |
| 2008-11-11/a> | Swa Frantzen | Acrobat continued activity in the wild |
| 2008-11-10/a> | Stephen Hall | Adobe Reader Vulnerability - part 2 |
| 2008-09-03/a> | Daniel Wesemann | Static analysis of Shellcode |
| 2008-07-15/a> | Maarten Van Horenbeeck | Extracting scripts and data from suspect PDF files |
| 2008-04-24/a> | Maarten Van Horenbeeck | Targeted attacks using malicious PDF files |
EXPLOIT |
| 2024-12-27/a> | Guy Bruneau | Phishing for Banking Information |
| 2024-09-24/a> | Johannes Ullrich | Exploitation of RAISECOM Gateway Devices Vulnerability CVE-2024-7120 |
| 2024-07-16/a> | Guy Bruneau | Who You Gonna Call? AndroxGh0st Busters! [Guest Diary] |
| 2023-12-20/a> | Guy Bruneau | How to Protect your Webserver from Directory Enumeration Attack ? Apache2 [Guest Diary] |
| 2023-12-16/a> | Xavier Mertens | An Example of RocketMQ Exploit Scanner |
| 2023-04-18/a> | Johannes Ullrich | UDDIs are back? Attackers rediscovering old exploits. |
| 2023-03-16/a> | Xavier Mertens | Simple Shellcode Dissection |
| 2022-12-22/a> | Guy Bruneau | Exchange OWASSRF Exploited for Remote Code Execution |
| 2022-06-10/a> | Russ McRee | EPSScall: An Exploit Prediction Scoring System App |
| 2022-05-31/a> | Xavier Mertens | First Exploitation of Follina Seen in the Wild |
| 2022-05-07/a> | Guy Bruneau | Phishing PDF Received in my ISC Mailbox |
| 2022-03-31/a> | Johannes Ullrich | Spring Vulnerability Update - Exploitation Attempts CVE-2022-22965 |
| 2022-02-22/a> | Xavier Mertens | A Good Old Equation Editor Vulnerability Delivering Malware |
| 2022-02-01/a> | Xavier Mertens | Automation is Nice But Don't Replace Your Knowledge |
| 2022-01-25/a> | Bojan Zdrnja | Local privilege escalation vulnerability in polkit's pkexec (CVE-2021-4034) |
| 2021-11-26/a> | Guy Bruneau | Searching for Exposed ASUS Routers Vulnerable to CVE-2021-20090 |
| 2021-11-20/a> | Guy Bruneau | Hikvision Security Cameras Potentially Exposed to Remote Code Execution |
| 2021-10-30/a> | Guy Bruneau | Remote Desktop Protocol (RDP) Discovery |
| 2021-10-16/a> | Guy Bruneau | Apache is Actively Scan for CVE-2021-41773 & CVE-2021-42013 |
| 2021-10-09/a> | Guy Bruneau | Scanning for Previous Oracle WebLogic Vulnerabilities |
| 2021-06-26/a> | Guy Bruneau | CVE-2019-9670: Zimbra Collaboration Suite XXE vulnerability |
| 2021-06-12/a> | Guy Bruneau | Fortinet Targeted for Unpatched SSL VPN Discovery Activity |
| 2021-06-11/a> | Xavier Mertens | Sonicwall SRA 4600 Targeted By an Old Vulnerability |
| 2021-03-10/a> | Rob VandenBrink | SharpRDP - PSExec without PSExec, PSRemoting without PowerShell |
| 2021-01-15/a> | Brad Duncan | Throwback Friday: An Example of Rig Exploit Kit |
| 2021-01-02/a> | Guy Bruneau | Protecting Home Office and Enterprise in 2021 |
| 2020-08-22/a> | Guy Bruneau | Remote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common? |
| 2020-08-08/a> | Guy Bruneau | Scanning Activity Include Netcat Listener |
| 2020-07-19/a> | Guy Bruneau | Scanning Activity for ZeroShell Unauthenticated Access |
| 2020-07-11/a> | Guy Bruneau | VMware XPC Client validation privilege escalation vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0017.html |
| 2020-07-11/a> | Guy Bruneau | Scanning Home Internet Facing Devices to Exploit |
| 2020-05-16/a> | Guy Bruneau | Scanning for Outlook Web Access (OWA) & Microsoft Exchange Control Panel (ECP) |
| 2019-10-20/a> | Guy Bruneau | Scanning Activity for NVMS-9000 Digital Video Recorder |
| 2019-09-07/a> | Guy Bruneau | Unidentified Scanning Activity |
| 2019-06-25/a> | Brad Duncan | Rig Exploit Kit sends Pitou.B Trojan |
| 2019-06-17/a> | Brad Duncan | An infection from Rig exploit kit |
| 2019-04-27/a> | Didier Stevens | Quick Tip for Dissecting CVE-2017-11882 Exploits |
| 2019-04-22/a> | Didier Stevens | .rar Files and ACE Exploit CVE-2018-20250 |
| 2018-12-23/a> | Guy Bruneau | Scanning Activity, end Goal is to add Hosts to Mirai Botnet |
| 2018-11-23/a> | Didier Stevens | Video: Dissecting a CVE-2017-11882 Exploit |
| 2018-09-24/a> | Didier Stevens | Analyzing Encoded Shellcode with scdbg |
| 2018-06-05/a> | Xavier Mertens | Malicious Post-Exploitation Batch File |
| 2018-05-20/a> | Didier Stevens | DASAN GPON home routers exploits in-the-wild |
| 2018-05-03/a> | Renato Marinho | WebLogic Exploited in the Wild (Again) |
| 2017-09-30/a> | Lorna Hutcheson | Who's Borrowing your Resources? |
| 2017-09-10/a> | Didier Stevens | Analyzing JPEG files |
| 2017-02-25/a> | Guy Bruneau | Unpatched Microsoft Edge and IE Bug |
| 2017-01-07/a> | Xavier Mertens | Using Security Tools to Compromize a Network |
| 2016-04-21/a> | Daniel Wesemann | Decoding Pseudo-Darkleech (#1) |
| 2016-03-13/a> | Guy Bruneau | A Look at the Mandiant M-Trends 2016 Report |
| 2015-07-27/a> | Daniel Wesemann | Angler's best friends |
| 2015-03-10/a> | Brad Duncan | Threatglass has pcap files with exploit kit activity |
| 2015-02-04/a> | Alex Stanford | Exploit Kit Evolution - Neutrino |
| 2014-08-16/a> | Lenny Zeltser | Web Server Attack Investigation - Installing a Bot and Reverse Shell via a PHP Vulnerability |
| 2014-07-22/a> | Daniel Wesemann | Ivan's Order of Magnitude |
| 2014-02-28/a> | Daniel Wesemann | Fiesta! |
| 2014-02-13/a> | Johannes Ullrich | Linksys Worm ("TheMoon") Captured |
| 2014-02-12/a> | Johannes Ullrich | Suspected Mass Exploit Against Linksys E1000 / E1200 Routers |
| 2013-10-01/a> | John Bambenek | *Metaspoit Releases Module to Exploit Unpatched IE Vuln CVE-2013-3893 |
| 2013-09-20/a> | Russ McRee | Threat Level Yellow: Protection recommendations regarding Internet Explorer exploits in the wild |
| 2013-05-22/a> | Adrien de Beaupre | Privilege escalation, why should I care? |
| 2013-02-21/a> | Pedro Bueno | NBC site redirecting to Exploit kit |
| 2013-02-17/a> | Guy Bruneau | Adobe Acrobat and Reader Security Update Planned this Week |
| 2013-02-13/a> | Swa Frantzen | More adobe reader and acrobat (PDF) trouble |
| 2013-01-05/a> | Guy Bruneau | Adobe ColdFusion Security Advisory |
| 2013-01-04/a> | Guy Bruneau | "FixIt" Patch for CVE-2012-4792 Bypassed |
| 2012-12-10/a> | Johannes Ullrich | Your CPA License has not been revoked |
| 2012-12-02/a> | Guy Bruneau | Zero Day MySQL Buffer Overflow |
| 2012-08-05/a> | Daniel Wesemann | Phishing for Payroll with unpatched Java |
| 2012-07-19/a> | Mark Baggett | A Heap of Overflows? |
| 2012-06-18/a> | Guy Bruneau | CVE-2012-1875 exploit is now available |
| 2012-05-05/a> | Tony Carothers | Vulnerability Exploit for Snow Leopard |
| 2012-04-26/a> | Richard Porter | Packetstorm Security and Metasploit have Exploit code for MS12-027 |
| 2012-03-11/a> | Johannes Ullrich | An Analysis of Jester's QR Code Attack. (Guest Diary) |
| 2011-12-08/a> | Adrien de Beaupre | Newest Adobe Flash 11.1.102.55 and Previous 0 Day Exploit |
| 2011-12-06/a> | Pedro Bueno | The RedRet connection... |
| 2011-11-22/a> | Pedro Bueno | Updates on ZeroAccess and BlackHole front... |
| 2011-10-13/a> | Johannes Ullrich | Critical OS X Vulnerability Patched |
| 2011-05-06/a> | Richard Porter | Updated Exploit Index for Microsoft |
| 2011-03-29/a> | Daniel Wesemann | Malware emails with fake cellphone invoice |
| 2011-03-15/a> | Lenny Zeltser | Limiting Exploit Capabilities by Using Windows Integrity Levels |
| 2011-03-09/a> | Kevin Shortt | AVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B |
| 2011-02-16/a> | Jason Lam | Windows 0-day SMB mrxsmb.dll vulnerability |
| 2010-12-27/a> | Johannes Ullrich | Various sites "Owned and Exposed" |
| 2010-12-13/a> | Deborah Hale | The Week to Top All Weeks |
| 2010-12-02/a> | Kevin Johnson | ProFTPD distribution servers compromised |
| 2010-11-01/a> | Manuel Humberto Santander Pelaez | CVE-2010-3654 exploit in the wild |
| 2010-09-26/a> | Daniel Wesemann | PDF analysis paper |
| 2010-09-14/a> | Adrien de Beaupre | Adobe Flash v10.1.82.76 and earlier vulnerability in-the-wild |
| 2010-09-13/a> | Manuel Humberto Santander Pelaez | Enhanced Mitigation Experience Toolkit can block Adobe 0-day exploit |
| 2010-09-13/a> | Manuel Humberto Santander Pelaez | Adobe SING table parsing exploit (CVE-2010-2883) in the wild |
| 2010-09-02/a> | Daniel Wesemann | SDF, please! |
| 2010-08-22/a> | Manuel Humberto Santander Pelaez | Anatomy of a PDF exploit |
| 2010-06-15/a> | Manuel Humberto Santander Pelaez | Microsoft Windows Help and Support Center vulnerability (CVE 2010-1885) exploit in the wild |
| 2010-06-06/a> | Manuel Humberto Santander Pelaez | Nice OS X exploit tutorial |
| 2010-05-23/a> | Manuel Humberto Santander Pelaez | Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability |
| 2010-04-10/a> | Andre Ludwig | New bug/exploit for javaws |
| 2010-02-08/a> | Adrien de Beaupre | When is a 0day not a 0day? Fake OpenSSh exploit, again. |
| 2010-01-24/a> | Pedro Bueno | Outdated client applications |
| 2010-01-19/a> | Johannes Ullrich | Unpatched Microsoft Windows (all versions) Privilege Escalation Vulnerability Released |
| 2010-01-12/a> | Adrien de Beaupre | PoC for CVE-2009-0689 MacOS X 10.5/10.6 vulnerability |
| 2009-12-05/a> | Guy Bruneau | Java JRE Buffer and Integer Overflow |
| 2009-11-16/a> | G. N. White | Reports of a successful exploit of the SSL Renegotiation Vulnerability? |
| 2009-11-14/a> | Adrien de Beaupre | Microsoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released |
| 2009-11-12/a> | Rob VandenBrink | Windows 7 / Windows Server 2008 Remote SMB Exploit |
| 2009-10-21/a> | Pedro Bueno | WordPress Hardening |
| 2009-09-16/a> | Bojan Zdrnja | SMB2 remote exploit released |
| 2009-08-31/a> | Pedro Bueno | Microsoft IIS 5/6 FTP 0Day released |
| 2009-08-18/a> | Bojan Zdrnja | MS09-039 exploit in the wild? |
| 2009-07-16/a> | Bojan Zdrnja | OWC exploits used in SQL injection attacks |
| 2009-07-15/a> | Bojan Zdrnja | Make sure you update that Java |
| 2009-07-13/a> | Adrien de Beaupre | * Infocon raised to yellow for Excel Web Components ActiveX vulnerability |
| 2009-07-10/a> | Guy Bruneau | WordPress Fixes Multiple vulnerabilities |
| 2009-07-09/a> | Bojan Zdrnja | OpenSSH 0day FUD |
| 2009-06-12/a> | Adrien de Beaupre | Green Dam |
| 2009-06-08/a> | Chris Carboni | Kloxo (formerly Lxadmin) Vulnerability Exploited |
| 2009-05-06/a> | Tom Liston | Follow The Bouncing Malware: Gone With the WINS |
| 2009-04-24/a> | Pedro Bueno | Did you check your conference goodies? |
| 2009-04-14/a> | Swa Frantzen | VMware exploits - just how bad is it ? |
| 2009-03-19/a> | Mark Hofman | Browsers Tumble at CanSecWest |
| 2009-03-18/a> | Adrien de Beaupre | Adobe Security Bulletin Adobe Reader and Acrobat |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2009-02-25/a> | Andre Ludwig | Preview/Iphone/Linux pdf issues |
| 2008-08-26/a> | John Bambenek | Active attacks using stolen SSH keys (UPDATED) |
| 2008-05-07/a> | Jim Clausing | More on automated exploit generation |
| 2008-05-05/a> | John Bambenek | Defenses Against Automated Patch-Based Exploit Generation |
| 2008-04-24/a> | Maarten Van Horenbeeck | Targeted attacks using malicious PDF files |
| 2008-04-18/a> | John Bambenek | The Patch Window is Gone: Automated Patch-Based Exploit Generation |
| 2008-04-10/a> | Deborah Hale | Symantec Threatcon Level 2 |
| 2006-11-20/a> | Joel Esler | MS06-070 Remote Exploit |
0DAY |
| 2025-03-11/a> | Johannes Ullrich | Apple Fixes Exploited WebKit Vulnerability in iOS, MacOS, visionOS and Safari |
| 2024-03-05/a> | Johannes Ullrich | Apple Releases iOS/iPadOS Updates with Zero Day Fixes. |
| 2024-01-22/a> | Johannes Ullrich | Apple Updates Everything - New 0 Day in WebKit |
| 2023-09-07/a> | Johannes Ullrich | Apple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities |
| 2023-06-22/a> | Johannes Ullrich | Apple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari |
| 2023-04-07/a> | Johannes Ullrich | Apple Patching Two 0-Day Vulnerabilities in iOS and macOS |
| 2022-08-17/a> | Johannes Ullrich | Apple Patches Two Exploited Vulnerabilities |
| 2022-02-10/a> | Johannes Ullrich | iOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched |
| 2021-03-03/a> | Johannes Ullrich | Microsoft Releases Exchange Emergency Patch to Fix Actively Exploited Vulnerability |
| 2018-02-01/a> | Johannes Ullrich | Adobe Flash 0-Day Used Against South Korean Targets |
| 2016-08-25/a> | Xavier Mertens | Out-of-Band iOS Patch Fixes 0-Day Vulnerabilities |
| 2016-04-06/a> | Bojan Zdrnja | YAFP (Yet Another Flash Patch) |
| 2015-02-05/a> | Johannes Ullrich | Adobe Flash Player Update Released, Fixing CVE 2015-0313 |
| 2015-01-23/a> | Adrien de Beaupre | Infocon change to yellow for Adobe Flash issues |
| 2014-07-28/a> | Johannes Ullrich | Interesting HTTP User Agent "chroot-apach0day" |
| 2014-05-21/a> | John Bambenek | New, Unpatched IE 0 Day published at ZDI |
| 2013-08-28/a> | Bojan Zdrnja | MS13-056 (false positive)? alerts |
| 2013-05-09/a> | John Bambenek | Adobe Releases 0-day Security Advisory for Coldfusion, Exploit Code Available. Advisory here: http://www.adobe.com/support/security/advisories/apsa13-03.html |
| 2013-02-07/a> | John Bambenek | Adobe Releases Patches for 0-day Vulnerability in Flash Player for Windows and Mac, Upgrade now: http://www.adobe.com/support/security/bulletins/apsb13-04.html |
| 2011-12-29/a> | Richard Porter | ASP.Net Vulnerability |
| 2011-11-16/a> | Jason Lam | Potential 0-day on Bind 9 |
| 2011-05-06/a> | Richard Porter | Unpatched Exploit: Skype for MAC |
| 2010-12-22/a> | John Bambenek | IIS 7.5 0-Day DoS (processing FTP requests) |
| 2010-11-24/a> | Bojan Zdrnja | Privilege escalation 0-day in almost all Windows versions |
| 2010-11-01/a> | Manuel Humberto Santander Pelaez | CVE-2010-3654 exploit in the wild |
| 2010-10-28/a> | Manuel Humberto Santander Pelaez | CVE-2010-3654 - New dangerous 0-day authplay library adobe products vulnerability |
| 2010-10-26/a> | Pedro Bueno | Firefox news |
| 2010-03-01/a> | Mark Hofman | IE 0-day using .hlp files |
| 2010-02-09/a> | Adrien de Beaupre | When is a 0day not a 0day? Samba symlink bad default config |
| 2010-01-14/a> | Bojan Zdrnja | 0-day vulnerability in Internet Explorer 6, 7 and 8 |
| 2010-01-12/a> | Johannes Ullrich | Pre-Announced Adobe Reader and Acrobat Patch Found! |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicious PDFs |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicous PDFs (Part #2) |
| 2009-12-27/a> | Patrick Nolan | Pressure increasing for Microsoft to patch IIS 0 day |
| 2009-12-15/a> | Johannes Ullrich | Adobe 0-day in the wild - again |
| 2009-11-22/a> | Marcus Sachs | IE6 and IE7 0-Day Reported |
| 2009-09-08/a> | Adrien de Beaupre | Microsoft Security Advisory 975191 Revised |
| 2009-09-04/a> | Adrien de Beaupre | Vulnerabilities (plural) in MS IIS FTP Service 5.0, 5.1. 6.0, 7.0 |
| 2009-08-31/a> | Pedro Bueno | Microsoft IIS 5/6 FTP 0Day released |
| 2009-07-22/a> | Bojan Zdrnja | YA0D (Yet Another 0-Day) in Adobe Flash player |
| 2009-07-17/a> | Bojan Zdrnja | A new fascinating Linux kernel vulnerability |
| 2009-04-29/a> | Jason Lam | Two Adobe 0-day vulnerabilities |
| 2009-03-18/a> | Adrien de Beaupre | Adobe Security Bulletin Adobe Reader and Acrobat |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2008-12-12/a> | Johannes Ullrich | MSIE 0-day Spreading Via SQL Injection |
| 2008-12-12/a> | Kevin Liston | IE7 0day expanded to include IE6 and IE8(beta) |
| 2008-12-10/a> | Bojan Zdrnja | 0-day exploit for Internet Explorer in the wild |
| 2006-11-29/a> | Toby Kohlenberg | Week of Oracle bugs cancelled |
| 2006-09-28/a> | Swa Frantzen | Powerpoint, yet another new vulnerability |
| 2006-09-28/a> | Swa Frantzen | MSIE: One patched, one pops up again (setslice) |
| 2006-09-22/a> | Swa Frantzen | Yellow: MSIE VML exploit spreading |
| 2006-09-19/a> | Swa Frantzen | Yet another MSIE 0-day: VML |
| 2006-09-15/a> | Swa Frantzen | MSIE DirectAnimation ActiveX 0-day update |
0DAY |
| 2025-03-11/a> | Johannes Ullrich | Apple Fixes Exploited WebKit Vulnerability in iOS, MacOS, visionOS and Safari |
| 2024-03-05/a> | Johannes Ullrich | Apple Releases iOS/iPadOS Updates with Zero Day Fixes. |
| 2024-01-22/a> | Johannes Ullrich | Apple Updates Everything - New 0 Day in WebKit |
| 2023-09-07/a> | Johannes Ullrich | Apple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities |
| 2023-06-22/a> | Johannes Ullrich | Apple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari |
| 2023-04-07/a> | Johannes Ullrich | Apple Patching Two 0-Day Vulnerabilities in iOS and macOS |
| 2022-08-17/a> | Johannes Ullrich | Apple Patches Two Exploited Vulnerabilities |
| 2022-02-10/a> | Johannes Ullrich | iOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched |
| 2021-03-03/a> | Johannes Ullrich | Microsoft Releases Exchange Emergency Patch to Fix Actively Exploited Vulnerability |
| 2018-02-01/a> | Johannes Ullrich | Adobe Flash 0-Day Used Against South Korean Targets |
| 2016-08-25/a> | Xavier Mertens | Out-of-Band iOS Patch Fixes 0-Day Vulnerabilities |
| 2016-04-06/a> | Bojan Zdrnja | YAFP (Yet Another Flash Patch) |
| 2015-02-05/a> | Johannes Ullrich | Adobe Flash Player Update Released, Fixing CVE 2015-0313 |
| 2015-01-23/a> | Adrien de Beaupre | Infocon change to yellow for Adobe Flash issues |
| 2014-07-28/a> | Johannes Ullrich | Interesting HTTP User Agent "chroot-apach0day" |
| 2014-05-21/a> | John Bambenek | New, Unpatched IE 0 Day published at ZDI |
| 2013-08-28/a> | Bojan Zdrnja | MS13-056 (false positive)? alerts |
| 2013-05-09/a> | John Bambenek | Adobe Releases 0-day Security Advisory for Coldfusion, Exploit Code Available. Advisory here: http://www.adobe.com/support/security/advisories/apsa13-03.html |
| 2013-02-07/a> | John Bambenek | Adobe Releases Patches for 0-day Vulnerability in Flash Player for Windows and Mac, Upgrade now: http://www.adobe.com/support/security/bulletins/apsb13-04.html |
| 2011-12-29/a> | Richard Porter | ASP.Net Vulnerability |
| 2011-11-16/a> | Jason Lam | Potential 0-day on Bind 9 |
| 2011-05-06/a> | Richard Porter | Unpatched Exploit: Skype for MAC |
| 2010-12-22/a> | John Bambenek | IIS 7.5 0-Day DoS (processing FTP requests) |
| 2010-11-24/a> | Bojan Zdrnja | Privilege escalation 0-day in almost all Windows versions |
| 2010-11-01/a> | Manuel Humberto Santander Pelaez | CVE-2010-3654 exploit in the wild |
| 2010-10-28/a> | Manuel Humberto Santander Pelaez | CVE-2010-3654 - New dangerous 0-day authplay library adobe products vulnerability |
| 2010-10-26/a> | Pedro Bueno | Firefox news |
| 2010-03-01/a> | Mark Hofman | IE 0-day using .hlp files |
| 2010-02-09/a> | Adrien de Beaupre | When is a 0day not a 0day? Samba symlink bad default config |
| 2010-01-14/a> | Bojan Zdrnja | 0-day vulnerability in Internet Explorer 6, 7 and 8 |
| 2010-01-12/a> | Johannes Ullrich | Pre-Announced Adobe Reader and Acrobat Patch Found! |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicious PDFs |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicous PDFs (Part #2) |
| 2009-12-27/a> | Patrick Nolan | Pressure increasing for Microsoft to patch IIS 0 day |
| 2009-12-15/a> | Johannes Ullrich | Adobe 0-day in the wild - again |
| 2009-11-22/a> | Marcus Sachs | IE6 and IE7 0-Day Reported |
| 2009-09-08/a> | Adrien de Beaupre | Microsoft Security Advisory 975191 Revised |
| 2009-09-04/a> | Adrien de Beaupre | Vulnerabilities (plural) in MS IIS FTP Service 5.0, 5.1. 6.0, 7.0 |
| 2009-08-31/a> | Pedro Bueno | Microsoft IIS 5/6 FTP 0Day released |
| 2009-07-22/a> | Bojan Zdrnja | YA0D (Yet Another 0-Day) in Adobe Flash player |
| 2009-07-17/a> | Bojan Zdrnja | A new fascinating Linux kernel vulnerability |
| 2009-04-29/a> | Jason Lam | Two Adobe 0-day vulnerabilities |
| 2009-03-18/a> | Adrien de Beaupre | Adobe Security Bulletin Adobe Reader and Acrobat |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2008-12-12/a> | Johannes Ullrich | MSIE 0-day Spreading Via SQL Injection |
| 2008-12-12/a> | Kevin Liston | IE7 0day expanded to include IE6 and IE8(beta) |
| 2008-12-10/a> | Bojan Zdrnja | 0-day exploit for Internet Explorer in the wild |
| 2006-11-29/a> | Toby Kohlenberg | Week of Oracle bugs cancelled |
| 2006-09-28/a> | Swa Frantzen | Powerpoint, yet another new vulnerability |
| 2006-09-28/a> | Swa Frantzen | MSIE: One patched, one pops up again (setslice) |
| 2006-09-22/a> | Swa Frantzen | Yellow: MSIE VML exploit spreading |
| 2006-09-19/a> | Swa Frantzen | Yet another MSIE 0-day: VML |
| 2006-09-15/a> | Swa Frantzen | MSIE DirectAnimation ActiveX 0-day update |
ACROBAT |
| 2016-03-08/a> | Rick Wanner | Critical Adobe Updates - March 2016 |
| 2015-10-09/a> | Guy Bruneau | Adobe Acrobat and Reader Pre-Announcement |
| 2014-08-12/a> | Adrien de Beaupre | Adobe updates for 2014/08 |
| 2013-02-17/a> | Guy Bruneau | Adobe Acrobat and Reader Security Update Planned this Week |
| 2013-02-13/a> | Swa Frantzen | More adobe reader and acrobat (PDF) trouble |
| 2013-01-09/a> | Rob VandenBrink | Security Updates for Adobe Reader / Acrobat - http://www.adobe.com/support/security/bulletins/apsb13-02.html |
| 2012-04-10/a> | Swa Frantzen | Adobe April 2012 Black Tuesday Update |
| 2011-12-07/a> | Lenny Zeltser | Adobe Acrobat Latest Zero-Day Vulnerability Fix Coming to All Platforms by January 10 |
| 2011-09-09/a> | Guy Bruneau | Adobe plan to release critical security updates next Tuesday for Acrobat and Reader http://www.adobe.com/support/security/bulletins/apsb11-24.html |
| 2011-04-21/a> | Guy Bruneau | Adobe Reader and Acrobat Security Updates |
| 2011-03-29/a> | Daniel Wesemann | Malware emails with fake cellphone invoice |
| 2011-03-22/a> | Kevin Shortt | Adobe Reader/Acrobat Security Update - http://www.adobe.com/support/security/bulletins/apsb11-06.html |
| 2010-11-16/a> | Guy Bruneau | Acrobat and Adobe Reader Security Update |
| 2010-09-12/a> | Manuel Humberto Santander Pelaez | Adobe Acrobat pushstring Memory Corruption paper |
| 2010-08-18/a> | Guy Bruneau | Adobe out-of-cycle Updates |
| 2010-06-05/a> | Guy Bruneau | Security Advisory for Flash Player, Adobe Reader and Acrobat |
| 2010-04-13/a> | Adrien de Beaupre | Security update available for Adobe Reader and Acrobat |
| 2010-02-16/a> | Robert Danford | Adobe Updates: http://www.adobe.com/support/security/bulletins/apsb10-07.html http://www.adobe.com/support/security/bulletins/apsb10-06.html |
| 2010-01-12/a> | Johannes Ullrich | Pre-Announced Adobe Reader and Acrobat Patch Found! |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicious PDFs |
| 2010-01-07/a> | Daniel Wesemann | Static analysis of malicous PDFs (Part #2) |
| 2009-10-13/a> | Daniel Wesemann | Adobe Reader and Acrobat - Black Tuesday continues |
| 2009-05-24/a> | Raul Siles | Analyzing malicious PDF documents |
| 2009-05-04/a> | Tom Liston | Adobe Reader/Acrobat Critical Vulnerability |
| 2009-04-29/a> | Jason Lam | Two Adobe 0-day vulnerabilities |
| 2009-03-10/a> | Swa Frantzen | Adobe Acrobat 9.1 released |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2008-11-11/a> | Swa Frantzen | Acrobat continued activity in the wild |
| 2008-06-24/a> | Jason Lam | Adobe Reader and Acrobat 8.1.2 Security Update |
| 2008-04-24/a> | Maarten Van Horenbeeck | Targeted attacks using malicious PDF files |
| 2006-11-29/a> | Toby Kohlenberg | New Adobe vulnerability |
JS |
| 2025-03-23/a> | Johannes Ullrich | Let's Talk About HTTP Headers. |
| 2024-06-15/a> | Didier Stevens | Overview of My Tools That Handle JSON Data |
| 2024-06-13/a> | Guy Bruneau | The Art of JQ and Command-line Fu [Guest Diary] |
| 2024-04-17/a> | Rob VandenBrink | The CVE's They are A-Changing! |
| 2024-02-15/a> | Jesse La Grew | [Guest Diary] Learning by doing: Iterative adventures in troubleshooting |
| 2023-06-22/a> | Brad Duncan | Qakbot (Qbot) activity, obama271 distribution tag |
| 2023-04-05/a> | Jesse La Grew | Exploration of DShield Cowrie Data with jq |
| 2023-03-29/a> | Didier Stevens | Extracting Multiple Streams From OLE Files |
| 2023-03-28/a> | Jesse La Grew | Network Data Collector Placement Makes a Difference |
| 2023-01-21/a> | Guy Bruneau | DShield Sensor JSON Log to Elasticsearch |
| 2023-01-08/a> | Guy Bruneau | DShield Sensor JSON Log Analysis |
| 2022-12-28/a> | Rob VandenBrink | Playing with Powershell and JSON (and Amazon and Firewalls) |
| 2022-08-08/a> | Johannes Ullrich | JSON All the Logs! |
| 2022-04-03/a> | Didier Stevens | jo |
| 2022-04-02/a> | Didier Stevens | curl 7.82.0 Adds --json Option |
| 2021-12-10/a> | Xavier Mertens | Python Shellcode Injection From JSON Data |
| 2021-10-21/a> | Brad Duncan | "Stolen Images Evidence" campaign pushes Sliver-based malware |
| 2021-08-29/a> | Guy Bruneau | Filter JSON Data by Value with Linux jq |
| 2021-08-13/a> | Brad Duncan | Example of Danabot distributed through malspam |
| 2020-11-22/a> | Didier Stevens | Quick Tip: Extracting all VBA Code from a Maldoc - JSON Format |
| 2020-01-02/a> | Xavier Mertens | Ransomware in Node.js |
| 2019-08-30/a> | Xavier Mertens | Malware Dropping a Local Node.js Instance |
| 2019-08-28/a> | Xavier Mertens | Malware Samples Compiling Their Next Stage on Premise |
| 2018-07-15/a> | Didier Stevens | Video: Retrieving and processing JSON data (BTC example) |
| 2018-07-14/a> | Didier Stevens | Retrieving and processing JSON data (BTC example) |
| 2017-11-13/a> | Guy Bruneau | jsonrpc Scanning for root account |
| 2016-12-13/a> | Xavier Mertens | UAC Bypass in JScript Dropper |
| 2016-08-28/a> | Guy Bruneau | Spam with Obfuscated Javascript |
| 2015-11-09/a> | John Bambenek | Protecting Users and Enterprises from the Mobile Malware Threat |
| 2012-06-25/a> | Guy Bruneau | Using JSDetox to Analyze and Deobfuscate Javascript |
| 2009-05-18/a> | Rick Wanner | JSRedir-R/Gumblar badness |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
JAVASCRIPT |
| 2024-03-28/a> | Xavier Mertens | From JavaScript to AsyncRAT |
| 2024-02-21/a> | Jan Kopriva | Phishing pages hosted on archive.org |
| 2023-11-17/a> | Jan Kopriva | Phishing page with trivial anti-analysis features |
| 2023-05-20/a> | Xavier Mertens | Phishing Kit Collecting Victim's IP Address |
| 2022-06-16/a> | Xavier Mertens | Houdini is Back Delivered Through a JavaScript Dropper |
| 2022-06-01/a> | Jan Kopriva | HTML phishing attachments - now with anti-analysis features |
| 2022-01-18/a> | Jan Kopriva | Phishing e-mail with...an advertisement? |
| 2021-11-18/a> | Xavier Mertens | JavaScript Downloader Delivers Agent Tesla Trojan |
| 2021-10-21/a> | Brad Duncan | "Stolen Images Evidence" campaign pushes Sliver-based malware |
| 2021-05-22/a> | Xavier Mertens | "Serverless" Phishing Campaign |
| 2021-05-18/a> | Xavier Mertens | From RunDLL32 to JavaScript then PowerShell |
| 2021-04-28/a> | Xavier Mertens | Deeper Analyzis of my Last Malicious PowerPoint Add-On |
| 2020-11-13/a> | Xavier Mertens | Old Worm But New Obfuscation Technique |
| 2020-07-24/a> | Xavier Mertens | Compromized Desktop Applications by Web Technologies |
| 2020-06-11/a> | Xavier Mertens | Anti-Debugging JavaScript Techniques |
| 2020-03-27/a> | Xavier Mertens | Malicious JavaScript Dropping Payload in the Registry |
| 2019-08-09/a> | Xavier Mertens | 100% JavaScript Phishing Page |
| 2019-06-10/a> | Xavier Mertens | Interesting JavaScript Obfuscation Example |
| 2019-02-07/a> | Xavier Mertens | Phishing Kit with JavaScript Keylogger |
| 2018-07-13/a> | Xavier Mertens | Cryptominer Delivered Though Compromized JavaScript File |
| 2018-06-18/a> | Xavier Mertens | Malicious JavaScript Targeting Mobile Browsers |
| 2017-06-22/a> | Xavier Mertens | Obfuscating without XOR |
| 2017-03-24/a> | Xavier Mertens | Nicely Obfuscated JavaScript Sample |
| 2017-03-04/a> | Xavier Mertens | How your pictures may affect your website reputation |
| 2017-02-12/a> | Xavier Mertens | Analysis of a Suspicious Piece of JavaScript |
| 2016-08-28/a> | Guy Bruneau | Spam with Obfuscated Javascript |
| 2016-06-18/a> | Rob VandenBrink | Controlling JavaScript Malware Before it Runs |
| 2016-02-20/a> | Didier Stevens | Locky: JavaScript Deobfuscation |
| 2016-02-07/a> | Xavier Mertens | More Malicious JavaScript Obfuscation |
| 2016-01-15/a> | Xavier Mertens | JavaScript Deobfuscation Tool |
| 2015-08-07/a> | Tony Carothers | Critical Firefox Update Today |
| 2014-08-29/a> | Johannes Ullrich | False Positive or Not? Difficult to Analyze Javascript |
| 2014-07-02/a> | Johannes Ullrich | Simple Javascript Extortion Scheme Advertised via Bing |
| 2013-08-07/a> | Johannes Ullrich | Firefox 23 and Mixed Active Content |
| 2013-04-23/a> | Russ McRee | Microsoft's Security Intelligence Report (SIRv14) released |
| 2013-02-08/a> | Kevin Shortt | Is it Spam or Is it Malware? |
| 2012-06-25/a> | Guy Bruneau | Using JSDetox to Analyze and Deobfuscate Javascript |
| 2012-05-22/a> | Johannes Ullrich | nmap 6 released |
| 2012-04-25/a> | Daniel Wesemann | Blacole's obfuscated JavaScript |
| 2012-01-22/a> | Johannes Ullrich | Javascript DDoS Tool Analysis |
| 2012-01-03/a> | Bojan Zdrnja | The tale of obfuscated JavaScript continues |
| 2011-12-07/a> | Lenny Zeltser | V8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation |
| 2011-06-06/a> | Manuel Humberto Santander Pelaez | Phishing: Same goal, same techniques and people still falling for such scams |
| 2011-04-23/a> | Manuel Humberto Santander Pelaez | Image search can lead to malware download |
| 2010-12-02/a> | Kevin Johnson | Robert Hansen and our happiness |
| 2010-07-04/a> | Manuel Humberto Santander Pelaez | Malware inside PDF Files |
| 2010-03-05/a> | Kyle Haugsness | Javascript obfuscators used in the wild |
| 2009-05-04/a> | Tom Liston | Adobe Reader/Acrobat Critical Vulnerability |
| 2009-04-07/a> | Bojan Zdrnja | Advanced JavaScript obfuscation (or why signature scanning is a failure) |
| 2009-04-02/a> | Bojan Zdrnja | JavaScript insertion and log deletion attack tools |
| 2009-02-25/a> | Andre Ludwig | Adobe Acrobat pdf 0-day exploit, No JavaScript needed! |
| 2008-07-14/a> | Daniel Wesemann | Obfuscated JavaScript Redux |
| 2008-06-30/a> | Marcus Sachs | More SQL Injection with Fast Flux hosting |
| 2008-05-20/a> | Raul Siles | List of malicious domains inserted through SQL injection |
| 2008-04-06/a> | Daniel Wesemann | Advanced obfuscated JavaScript analysis |
| 2008-04-03/a> | Bojan Zdrnja | Mixed (VBScript and JavaScript) obfuscation |
