Internet Storm Center
Sign In
Sign Up
SANS Network Security: Las Vegas Sept 4-9.
Handler on Duty:
Xavier Mertens
Threat Level:
green
Date
Author
Title
DATA AT REST
2015-09-01
Daniel Wesemann
Encryption of "data at rest" in servers
2009-09-07
Lorna Hutcheson
Encrypting Data
DATA
2024-08-23/a>
Jesse La Grew
Pandas Errors: What encoding are my logs in?
2024-08-16/a>
Jesse La Grew
[Guest Diary] 7 minutes and 4 steps to a quick win: A write-up on custom tools
2023-08-25/a>
Xavier Mertens
Python Malware Using Postgresql for C2 Communications
2023-07-23/a>
Guy Bruneau
Install & Configure Filebeat on Raspberry Pi ARM64 to Parse DShield Sensor Logs
2023-05-24/a>
Jesse La Grew
More Data Enrichment for Cowrie Logs
2023-05-09/a>
Russ McRee
Exploratory Data Analysis with CISSM Cyber Attacks Database - Part 2
2022-06-10/a>
Russ McRee
EPSScall: An Exploit Prediction Scoring System App
2021-12-28/a>
Russ McRee
LotL Classifier tests for shells, exfil, and miners
2021-10-20/a>
Xavier Mertens
Thanks to COVID-19, New Types of Documents are Lost in The Wild
2021-08-29/a>
Guy Bruneau
Filter JSON Data by Value with Linux jq
2021-07-04/a>
Didier Stevens
DIY CD/DVD Destruction - Follow Up
2021-06-27/a>
Didier Stevens
DIY CD/DVD Destruction
2021-02-01/a>
Rob VandenBrink
Taking a Shot at Reverse Shell Attacks, CNC Phone Home and Data Exfil from Servers
2021-01-29/a>
Xavier Mertens
Sensitive Data Shared with Cloud Services
2020-07-04/a>
Russ McRee
Happy FouRth of July from the Internet Storm Center
2020-03-14/a>
Didier Stevens
Phishing PDF With Incremental Updates.
2020-02-28/a>
Xavier Mertens
Show me Your Clipboard Data!
2019-05-19/a>
Guy Bruneau
Is Metadata Only Approach, Good Enough for Network Traffic Analysis?
2018-07-04/a>
Didier Stevens
XPS Metadata
2018-06-16/a>
Russ McRee
Anomaly Detection & Threat Hunting with Anomalize
2017-12-16/a>
Xavier Mertens
Microsoft Office VBA Macro Obfuscation via Metadata
2017-08-07/a>
Xavier Mertens
Increase of phpMyAdmin scans
2017-05-28/a>
Guy Bruneau
CyberChef a Must Have Tool in your Tool bag!
2017-02-01/a>
Xavier Mertens
Quick Analysis of Data Left Available by Attackers
2017-01-06/a>
John Bambenek
Great Misadventures of Security Vendors: Absurd Sandboxing Edition
2016-09-22/a>
Rick Wanner
YAHDD! (Yet another HUGE data Breach!)
2016-08-31/a>
Deborah Hale
Dropbox Breach
2016-08-19/a>
Xavier Mertens
Data Classification For the Masses
2016-07-03/a>
Guy Bruneau
Is Data Privacy part of your Company's Culture?
2016-06-20/a>
Xavier Mertens
Using Your Password Manager to Monitor Data Leaks
2016-02-22/a>
Xavier Mertens
Reducing False Positives with Open Data Sources
2016-01-30/a>
Xavier Mertens
All CVE Details at Your Fingertips
2015-09-01/a>
Daniel Wesemann
Encryption of "data at rest" in servers
2015-07-31/a>
Russ McRee
Tech tip: Invoke a system command in R
2015-07-31/a>
Russ McRee
Tech tip follow-up: Using the data Invoked with R's system command
2015-05-23/a>
Guy Bruneau
Business Value in "Big Data"
2015-03-21/a>
Russell Eubanks
Have you seen my personal information? It has been lost. Again.
2014-12-01/a>
Guy Bruneau
Do you have a Data Breach Response Plan?
2014-02-04/a>
Johannes Ullrich
Odd ICMP Echo Request Payload
2013-10-16/a>
Adrien de Beaupre
Access denied and blockliss
2013-07-06/a>
Guy Bruneau
Is Metadata the Magic in Modern Network Security?
2012-12-03/a>
John Bambenek
John McAfee Exposes His Location in Photo About His Being on Run
2012-11-30/a>
Daniel Wesemann
Snipping Leaks
2012-11-22/a>
Kevin Liston
Greek National Arrested on Suspicion of Theft of 9M Records on Fellow Greeks
2012-01-16/a>
Kevin Shortt
Zappos Breached
2011-04-20/a>
Daniel Wesemann
Data Breach Investigations Report published by Verizon
2011-01-12/a>
Richard Porter
How Many Loyalty Cards do you Carry?
2011-01-12/a>
Richard Porter
Yet Another Data Broker? AOL Lifestream.
2010-09-26/a>
Daniel Wesemann
Egosurfing, the corporate way
2010-07-29/a>
Rob VandenBrink
The 2010 Verizon Data Breach Report is Out
2010-04-27/a>
Rob VandenBrink
Layer 2 Security - L2TPv3 for Disaster Recovery Sites
2010-04-22/a>
John Bambenek
Data Redaction: You're Doing it Wrong
2010-02-10/a>
Marcus Sachs
Datacenters and Directory Traversals
2009-10-19/a>
Daniel Wesemann
Backed up, lately ?
2009-09-07/a>
Lorna Hutcheson
Encrypting Data
2009-07-28/a>
Adrien de Beaupre
YYAMCCBA
2009-04-24/a>
John Bambenek
Data Leak Prevention: Proactive Security Requirements of Breach Notification Laws
2009-04-15/a>
Marcus Sachs
2009 Data Breach Investigation Report
2009-03-02/a>
Swa Frantzen
Obama's leaked chopper blueprints: anything we can learn?
2009-01-30/a>
Mark Hofman
We all "Love" USB drives
2008-12-17/a>
donald smith
Team CYMRU's Malware Hash Registry
2008-08-25/a>
John Bambenek
Thoughts on the Best Western Compromise
AT
2024-10-03/a>
Guy Bruneau
Kickstart Your DShield Honeypot [Guest Diary]
2024-09-26/a>
Johannes Ullrich
Patch for Critical CUPS vulnerability: Don't Panic
2024-09-25/a>
Johannes Ullrich
DNS Reflection Update and Odd Corrupted DNS Requests
2024-09-25/a>
Guy Bruneau
OSINT - Image Analysis or More Where, When, and Metadata [Guest Diary]
2024-09-11/a>
Guy Bruneau
Hygiene, Hygiene, Hygiene! [Guest Diary]
2024-09-04/a>
Guy Bruneau
Attack Surface [Guest Diary]
2024-08-30/a>
Jesse La Grew
Simulating Traffic With Scapy
2024-08-29/a>
Xavier Mertens
Live Patching DLLs with Python
2024-08-27/a>
Guy Bruneau
Vega-Lite with Kibana to Parse and Display IP Activity over Time
2024-08-26/a>
Xavier Mertens
From Highly Obfuscated Batch File to XWorm and Redline
2024-08-23/a>
Jesse La Grew
Pandas Errors: What encoding are my logs in?
2024-08-20/a>
Guy Bruneau
Mapping Threats with DNSTwist and the Internet Storm Center [Guest Diary]
2024-08-16/a>
Jesse La Grew
[Guest Diary] 7 minutes and 4 steps to a quick win: A write-up on custom tools
2024-08-14/a>
Xavier Mertens
Multiple Malware Dropped Through MSI Package
2024-08-07/a>
Guy Bruneau
Same Scripts, Different Day: What My DShield Honeypot Taught Me About the Importance of Security Fundamentals [Guest Diary]
2024-07-16/a>
Guy Bruneau
Who You Gonna Call? AndroxGh0st Busters! [Guest Diary]
2024-07-09/a>
Johannes Ullrich
Microsoft Patch Tuesday July 2024
2024-06-26/a>
Guy Bruneau
What Setting Live Traps for Cybercriminals Taught Me About Security [Guest Diary]
2024-06-20/a>
Guy Bruneau
No Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary]
2024-06-17/a>
Xavier Mertens
New NetSupport Campaign Delivered Through MSIX Packages
2024-06-13/a>
Guy Bruneau
The Art of JQ and Command-line Fu [Guest Diary]
2024-06-11/a>
Johannes Ullrich
Microsoft Patch Tuesday June 2024
2024-06-06/a>
Xavier Mertens
Malicious Python Script with a "Best Before" Date
2024-05-31/a>
Xavier Mertens
"K1w1" InfoStealer Uses gofile.io for Exfiltration
2024-05-30/a>
Xavier Mertens
Feeding MISP with OSSEC
2024-05-28/a>
Guy Bruneau
Is that It? Finding the Unknown: Correlations Between Honeypot Logs & PCAPs [Guest Diary]
2024-05-22/a>
Guy Bruneau
Analysis of ?redtail? File Uploads to ICS Honeypot, a Multi-Architecture Coin Miner [Guest Diary]
2024-05-08/a>
Xavier Mertens
Analyzing Synology Disks on Linux
2024-04-29/a>
Guy Bruneau
Linux Trojan - Xorddos with Filename eyshcjdmzg
2024-04-17/a>
Xavier Mertens
Malicious PDF File Used As Delivery Mechanism
2024-04-11/a>
Yee Ching Tok
Evolution of Artificial Intelligence Systems and Ensuring Trustworthiness
2024-04-07/a>
Guy Bruneau
A Use Case for Adding Threat Hunting to Your Security Operations Team. Detecting Adversaries Abusing Legitimate Tools in A Customer Environment. [Guest Diary]
2024-03-28/a>
Xavier Mertens
From JavaScript to AsyncRAT
2024-03-19/a>
Johannes Ullrich
Attacker Hunting Firewalls
2024-03-13/a>
Xavier Mertens
Using ChatGPT to Deobfuscate Malicious Scripts
2024-03-12/a>
Johannes Ullrich
Microsoft Patch Tuesday - March 2024
2024-03-05/a>
Johannes Ullrich
Apple Releases iOS/iPadOS Updates with Zero Day Fixes.
2024-02-29/a>
Jesse La Grew
[Guest Diary] Dissecting DarkGate: Modular Malware Delivery and Persistence as a Service.
2024-02-28/a>
Johannes Ullrich
Exploit Attempts for Unknown Password Reset Vulnerability
2024-02-22/a>
Johannes Ullrich
Large AT&T Wireless Network Outage #att #outage
2024-02-20/a>
Xavier Mertens
Python InfoStealer With Dynamic Sandbox Detection
2024-02-09/a>
Xavier Mertens
MSIX With Heavily Obfuscated PowerShell Script
2024-02-03/a>
Guy Bruneau
DShield Sensor Log Collection with Elasticsearch
2024-01-29/a>
Johannes Ullrich
Exploit Flare Up Against Older Altassian Confluence Vulnerability
2024-01-26/a>
Xavier Mertens
A Batch File With Multiple Payloads
2024-01-22/a>
Johannes Ullrich
Apple Updates Everything - New 0 Day in WebKit
2024-01-17/a>
Jesse La Grew
Number Usage in Passwords
2024-01-12/a>
Xavier Mertens
One File, Two Payloads
2024-01-08/a>
Jesse La Grew
What is that User Agent?
2024-01-05/a>
Rob VandenBrink
Netstat, but Better and in PowerShell
2024-01-02/a>
Johannes Ullrich
Fingerprinting SSH Identification Strings
2023-12-23/a>
Xavier Mertens
Python Keylogger Using Mailtrap.io
2023-12-20/a>
Guy Bruneau
How to Protect your Webserver from Directory Enumeration Attack ? Apache2 [Guest Diary]
2023-12-12/a>
Johannes Ullrich
Microsoft Patch Tuesday December 2023
2023-12-11/a>
Johannes Ullrich
Apple Patches Everything
2023-12-06/a>
Guy Bruneau
Revealing the Hidden Risks of QR Codes [Guest Diary]
2023-11-27/a>
Guy Bruneau
Decoding the Patterns: Analyzing DShield Honeypot Activity [Guest Diary]
2023-11-22/a>
Guy Bruneau
CVE-2023-1389: A New Means to Expand Botnets
2023-11-18/a>
Xavier Mertens
Quasar RAT Delivered Through Updated SharpLoader
2023-11-06/a>
Johannes Ullrich
Exploit Activity for CVE-2023-22518, Atlassian Confluence Data Center and Server
2023-10-10/a>
Johannes Ullrich
October 2023 Microsoft Patch Tuesday Summary
2023-10-09/a>
Didier Stevens
ZIP's DOSTIME & DOSDATE Formats
2023-09-30/a>
Xavier Mertens
Simple Netcat Backdoor in Python Script
2023-09-26/a>
Johannes Ullrich
Apple Releases MacOS Sonoma Including Numerous Security Patches
2023-09-11/a>
Johannes Ullrich
Apple fixes 0-Day Vulnerability in Older Operating Systems
2023-09-07/a>
Johannes Ullrich
Apple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-08-25/a>
Xavier Mertens
Python Malware Using Postgresql for C2 Communications
2023-08-23/a>
Guy Bruneau
How I made a qwerty ?keyboard walk? password generator with ChatGPT [Guest Diary]
2023-08-21/a>
Xavier Mertens
Quick Malware Triage With Inotify Tools
2023-08-20/a>
Guy Bruneau
SystemBC Malware Activity
2023-08-18/a>
Xavier Mertens
From a Zalando Phishing to a RAT
2023-08-12/a>
Guy Bruneau
DShield Sensor Monitoring with a Docker ELK Stack [Guest Diary]
2023-08-11/a>
Xavier Mertens
Show me All Your Windows!
2023-08-03/a>
Jan Kopriva
From small LNK to large malicious BAT file with zero VT score
2023-07-23/a>
Guy Bruneau
Install & Configure Filebeat on Raspberry Pi ARM64 to Parse DShield Sensor Logs
2023-07-06/a>
Jesse La Grew
IDS Comparisons with DShield Honeypot Data
2023-07-01/a>
Russ McRee
Sandfly Security
2023-06-29/a>
Brad Duncan
GuLoader- or DBatLoader/ModiLoader-style infection for Remcos RAT
2023-06-24/a>
Guy Bruneau
Email Spam with Attachment Modiloader
2023-06-23/a>
Xavier Mertens
Word Document with an Online Attached Template
2023-06-22/a>
Johannes Ullrich
Apple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-06-17/a>
Brad Duncan
Formbook from Possible ModiLoader (DBatLoader)
2023-06-16/a>
Xavier Mertens
Another RAT Delivered Through VBS
2023-06-11/a>
Guy Bruneau
DShield Honeypot Activity for May 2023
2023-06-09/a>
Xavier Mertens
Undetected PowerShell Backdoor Disguised as a Profile File
2023-05-30/a>
Brad Duncan
Malspam pushes ModiLoader (DBatLoader) infection for Remcos RAT
2023-05-28/a>
Guy Bruneau
We Can no Longer Ignore the Cost of Cybersecurity
2023-05-26/a>
Xavier Mertens
Using DFIR Techniques To Recover From Infrastructure Outages
2023-05-24/a>
Jesse La Grew
More Data Enrichment for Cowrie Logs
2023-05-20/a>
Xavier Mertens
Phishing Kit Collecting Victim's IP Address
2023-05-19/a>
Xavier Mertens
When the Phisher Messes Up With Encoding
2023-05-17/a>
Xavier Mertens
Increase in Malicious RAR SFX files
2023-05-14/a>
Guy Bruneau
VMware Aria Operations addresses multiple Local Privilege Escalations and a Deserialization issue
2023-05-09/a>
Russ McRee
Exploratory Data Analysis with CISSM Cyber Attacks Database - Part 2
2023-05-07/a>
Didier Stevens
Quickly Finding Encoded Payloads in Office Documents
2023-05-03/a>
Xavier Mertens
Increased Number of Configuration File Scans
2023-04-22/a>
Didier Stevens
YARA v4.3.1 Release
2023-04-02/a>
Didier Stevens
YARA v4.3.0 Release
2023-03-30/a>
Xavier Mertens
Bypassing PowerShell Strong Obfuscation
2023-03-27/a>
Johannes Ullrich
Apple Updates Everything (including Studio Display)
2023-03-21/a>
Didier Stevens
String Obfuscation: Character Pair Reversal
2023-03-18/a>
Xavier Mertens
Old Backdoor, New Obfuscation
2023-03-12/a>
Guy Bruneau
AsynRAT Trojan - Bill Payment (Pago de la factura)
2023-03-11/a>
Xavier Mertens
Overview of a Mirai Payload Generator
2023-02-22/a>
Johannes Ullrich
Internet Wide Scan Fingerprinting Confluence Servers
2023-02-14/a>
Johannes Ullrich
Microsoft February 2023 Patch Tuesday
2023-02-10/a>
Xavier Mertens
Obfuscated Deactivation of Script Block Logging
2023-02-04/a>
Guy Bruneau
Assemblyline as a Malware Analysis Sandbox
2023-02-01/a>
Didier Stevens
Detecting (Malicious) OneNote Files
2023-01-31/a>
Jesse La Grew
DShield Honeypot Setup with pfSense
2023-01-25/a>
Xavier Mertens
A First Malicious OneNote Document
2023-01-24/a>
Johannes Ullrich
Apple Updates (almost) Everything: Patch Overview
2023-01-21/a>
Guy Bruneau
DShield Sensor JSON Log to Elasticsearch
2023-01-07/a>
Didier Stevens
YARA v4.3.0-rc1 --skip-larger
2023-01-04/a>
Rob VandenBrink
Update to RTRBK - Diff and File Dates in PowerShell
2022-12-29/a>
Jesse La Grew
Opening the Door for a Knock: Creating a Custom DShield Listener
2022-12-05/a>
Didier Stevens
VLC's Check For Updates: No Updates?
2022-11-10/a>
Xavier Mertens
Do you collect "Observables" or "IOCs"?
2022-11-05/a>
Guy Bruneau
Windows Malware with VHD Extension
2022-11-04/a>
Xavier Mertens
Remcos Downloader with Unicode Obfuscation
2022-10-22/a>
Didier Stevens
rtfdump's Find Option
2022-10-21/a>
Brad Duncan
sczriptzzbn inject pushes malware for NetSupport RAT
2022-10-18/a>
Xavier Mertens
Python Obfuscation for Dummies
2022-10-11/a>
Johannes Ullrich
October 2022 Microsoft Patch Tuesday
2022-10-07/a>
Xavier Mertens
Critical Fortinet Vulnerability Ahead
2022-09-22/a>
Xavier Mertens
RAT Delivered Through FODHelper
2022-09-07/a>
Johannes Ullrich
PHP Deserialization Exploit attempt
2022-08-24/a>
Brad Duncan
Monster Libra (TA551/Shathak) --> IcedID (Bokbot) --> Cobalt Strike & DarkVNC
2022-08-22/a>
Xavier Mertens
32 or 64 bits Malware?
2022-08-20/a>
Didier Stevens
YARA 4.2.3 Released
2022-08-10/a>
Johannes Ullrich
And Here They Come Again: DNS Reflection Attacks
2022-07-28/a>
Johannes Ullrich
Exfiltrating Data With Bookmarks
2022-07-20/a>
Johannes Ullrich
Apple Patches Everything Day
2022-07-06/a>
Johannes Ullrich
How Many SANs are Insane?
2022-07-02/a>
Didier Stevens
YARA 4.2.2 Released
2022-06-24/a>
Xavier Mertens
Python (ab)using The Windows GUI
2022-06-19/a>
Didier Stevens
Video: Decoding Obfuscated BASE64 Statistically
2022-06-18/a>
Didier Stevens
Decoding Obfuscated BASE64 Statistically
2022-06-17/a>
Brad Duncan
Malspam pushes Matanbuchus malware, leads to Cobalt Strike
2022-06-16/a>
Xavier Mertens
Houdini is Back Delivered Through a JavaScript Dropper
2022-06-10/a>
Russ McRee
EPSScall: An Exploit Prediction Scoring System App
2022-06-04/a>
Guy Bruneau
Spam Email Contains a Very Large ISO file
2022-06-02/a>
Johannes Ullrich
Quick Answers in Incident Response: RECmd.exe
2022-06-01/a>
Jan Kopriva
HTML phishing attachments - now with anti-analysis features
2022-05-29/a>
Didier Stevens
Extracting The Overlay Of A PE File
2022-05-28/a>
Didier Stevens
Huge Signed PE File: Keeping The Signature
2022-05-26/a>
Didier Stevens
Huge Signed PE File
2022-05-20/a>
Xavier Mertens
A 'Zip Bomb' to Bypass Security Controls & Sandboxes
2022-05-16/a>
Johannes Ullrich
Apple Patches Everything
2022-05-10/a>
Renato Marinho
Microsoft May 2022 Patch Tuesday
2022-05-09/a>
Xavier Mertens
Octopus Backdoor is Back with a New Embedded Obfuscated Bat File
2022-05-07/a>
Guy Bruneau
Phishing PDF Received in my ISC Mailbox
2022-05-05/a>
Brad Duncan
Password-protected Excel spreadsheet pushes Remcos RAT
2022-05-03/a>
Rob VandenBrink
Finding the Real "Last Patched" Day (Interim Version)
2022-04-30/a>
Didier Stevens
YARA 4.2.1 Released
2022-04-27/a>
Jan Kopriva
MITRE ATT&CK v11 - a small update that can help (not just) with detection engineering
2022-03-31/a>
Johannes Ullrich
Apple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS,
2022-03-29/a>
Johannes Ullrich
More Fake/Typosquatting Twitter Accounts Asking for Ukraine Crytocurrency Donations
2022-03-26/a>
Guy Bruneau
Is buying Cyber Insurance a Must Now?
2022-03-23/a>
Brad Duncan
Arkei Variants: From Vidar to Mars Stealer
2022-03-14/a>
Johannes Ullrich
Apple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more
2022-03-11/a>
Xavier Mertens
Keep an Eye on WebSockets
2022-03-09/a>
Xavier Mertens
Infostealer in a Batch File
2022-03-04/a>
Johannes Ullrich
Scam E-Mail Impersonating Red Cross
2022-02-22/a>
Xavier Mertens
A Good Old Equation Editor Vulnerability Delivering Malware
2022-02-18/a>
Xavier Mertens
Remcos RAT Delivered Through Double Compressed Archive
2022-02-11/a>
Xavier Mertens
CinaRAT Delivered Through HTML ID Attributes
2022-02-10/a>
Johannes Ullrich
iOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2022-02-03/a>
Johannes Ullrich
Keeping Track of Your Attack Surface for Cheap
2022-02-01/a>
Xavier Mertens
Automation is Nice But Don't Replace Your Knowledge
2022-01-29/a>
Guy Bruneau
SIEM In this Decade, Are They Better than the Last?
2022-01-27/a>
Johannes Ullrich
Apple Patches Everything
2022-01-11/a>
Johannes Ullrich
Microsoft Patch Tuesday - January 2022
2022-01-07/a>
Xavier Mertens
Custom Python RAT Builder
2022-01-04/a>
Xavier Mertens
A Simple Batch File That Blocks People
2021-12-28/a>
Russ McRee
LotL Classifier tests for shells, exfil, and miners
2021-12-02/a>
Brad Duncan
TA551 (Shathak) pushes IcedID (Bokbot)
2021-12-01/a>
Xavier Mertens
Info-Stealer Using webhook.site to Exfiltrate Data
2021-11-29/a>
Didier Stevens
Wireshark 3.6.0 Released
2021-11-25/a>
Didier Stevens
YARA's Private Strings
2021-11-18/a>
Xavier Mertens
JavaScript Downloader Delivers Agent Tesla Trojan
2021-11-14/a>
Didier Stevens
Video: Obfuscated Maldoc: Reversed BASE64
2021-11-08/a>
Xavier Mertens
(Ab)Using Security Tools & Controls for the Bad
2021-11-04/a>
Brad Duncan
October 2021 Forensic Contest: Answers and Analysis
2021-10-31/a>
Didier Stevens
Sysinternals: Autoruns and Sysmon updates
2021-10-28/a>
Yee Ching Tok
Multiple Apple Patches for October 2021
2021-10-20/a>
Xavier Mertens
Thanks to COVID-19, New Types of Documents are Lost in The Wild
2021-10-18/a>
Xavier Mertens
Malicious PowerShell Using Client Certificate Authentication
2021-10-10/a>
Didier Stevens
Wireshark 3.4.9 Released
2021-09-22/a>
Didier Stevens
An XML-Obfuscated Office Document (CVE-2021-40444)
2021-09-21/a>
Johannes Ullrich
A First Look at Apple's iOS 15 "Private Relay" feature.
2021-09-14/a>
Renato Marinho
Microsoft September 2021 Patch Tuesday
2021-09-11/a>
Guy Bruneau
Shipping to Elasticsearch Microsoft DNS Logs
2021-09-09/a>
Johannes Ullrich
Updates to Our Datafeeds/API
2021-09-07/a>
Johannes Ullrich
Why I Gave Up on IPv6. And no, it is not because of security issues.
2021-09-01/a>
Brad Duncan
STRRAT: a Java-based RAT that doesn't care if you have Java
2021-08-29/a>
Guy Bruneau
Filter JSON Data by Value with Linux jq
2021-08-21/a>
Didier Stevens
New Versions Of Sysinternals Tools
2021-08-20/a>
Xavier Mertens
Waiting for the C2 to Show Up
2021-08-11/a>
Brad Duncan
TA551 (Shathak) continues pushing BazarLoader, infections lead to Cobalt Strike
2021-08-02/a>
Didier Stevens
Changing BAT Files On The Fly
2021-07-31/a>
Guy Bruneau
Unsolicited DNS Queries
2021-07-25/a>
Didier Stevens
Wireshark 3.4.7 Released
2021-07-04/a>
Didier Stevens
DIY CD/DVD Destruction - Follow Up
2021-06-27/a>
Didier Stevens
DIY CD/DVD Destruction
2021-06-24/a>
Xavier Mertens
Do you Like Cookies? Some are for sale!
2021-06-21/a>
Rick Wanner
Mitre CWE - Common Weakness Enumeration
2021-06-20/a>
Didier Stevens
Video: oledump Cheat Sheet
2021-06-04/a>
Xavier Mertens
Russian Dolls VBS Obfuscation
2021-05-10/a>
Johannes Ullrich
Correctly Validating IP Addresses: Why encoding matters for input validation.
2021-05-08/a>
Guy Bruneau
Who is Probing the Internet for Research Purposes?
2021-04-25/a>
Didier Stevens
Wireshark 3.4.5 Released
2021-04-13/a>
Richard Porter
Microsoft April 2021 Patch Tuesday
2021-04-10/a>
Guy Bruneau
Building an IDS Sensor with Suricata & Zeek with Logs to ELK
2021-04-09/a>
Xavier Mertens
No Python Interpreter? This Simple RAT Installs Its Own Copy
2021-03-31/a>
Xavier Mertens
Quick Analysis of a Modular InfoStealer
2021-03-14/a>
Didier Stevens
Wireshark 3.4.4 Released
2021-03-12/a>
Guy Bruneau
Microsoft DHCP Logs Shipped to ELK
2021-03-10/a>
Rob VandenBrink
SharpRDP - PSExec without PSExec, PSRemoting without PowerShell
2021-03-04/a>
Xavier Mertens
From VBS, PowerShell, C Sharp, Process Hollowing to RAT
2021-03-02/a>
Russ McRee
Adversary Simulation with Sim
2021-02-26/a>
Guy Bruneau
Pretending to be an Outlook Version Update
2021-02-25/a>
Jim Clausing
So where did those Satori attacks come from?
2021-02-24/a>
Brad Duncan
Malspam pushes GuLoader for Remcos RAT
2021-02-16/a>
Jim Clausing
More weirdness on TCP port 26
2021-02-15/a>
Johannes Ullrich
Securing and Optimizing Networks: Using pfSense Traffic Shaper Limiters to Combat Bufferbloat
2021-02-06/a>
Didier Stevens
YARA v4.0.5
2021-02-04/a>
Bojan Zdrnja
Abusing Google Chrome extension syncing for data exfiltration and C&C
2021-02-01/a>
Rob VandenBrink
Taking a Shot at Reverse Shell Attacks, CNC Phone Home and Data Exfil from Servers
2021-01-31/a>
Didier Stevens
YARA v4.0.4
2021-01-30/a>
Guy Bruneau
PacketSifter as Network Parsing and Telemetry Tool
2021-01-29/a>
Xavier Mertens
Sensitive Data Shared with Cloud Services
2021-01-26/a>
Brad Duncan
TA551 (Shathak) Word docs push Qakbot (Qbot)
2021-01-18/a>
Didier Stevens
Doc & RTF Malicious Document
2021-01-04/a>
Jan Kopriva
From a small BAT file to Mass Logger infostealer
2021-01-02/a>
Guy Bruneau
Protecting Home Office and Enterprise in 2021
2020-12-29/a>
Jan Kopriva
Want to know what's in a folder you don't have a permission to access? Try asking your AV solution...
2020-12-22/a>
Xavier Mertens
Malware Victim Selection Through WiFi Identification
2020-12-20/a>
Didier Stevens
Wireshark 3.4.2 Released
2020-12-19/a>
Guy Bruneau
Secure Communication using TLS in Elasticsearch
2020-12-14/a>
Johannes Ullrich
SolarWinds Breach Used to Infiltrate Customer Networks (Solarigate)
2020-12-13/a>
Didier Stevens
Wireshark 3.4.1 Released
2020-12-08/a>
Johannes Ullrich
December 2020 Microsoft Patch Tuesday: Exchange, Sharepoint, Dynamics and DNS Spoofing
2020-12-06/a>
Didier Stevens
oledump's Indicators (video)
2020-12-05/a>
Guy Bruneau
Is IP 91.199.118.137 testing Access to aahwwx.52host.xyz?
2020-12-04/a>
Guy Bruneau
Detecting Actors Activity with Threat Intel
2020-11-25/a>
Xavier Mertens
Live Patching Windows API Calls Using PowerShell
2020-11-21/a>
Guy Bruneau
VMware privilege escalation vulnerabilities (CVE-2020-4004, CVE-2020-4005) - https://www.vmware.com/security/advisories/VMSA-2020-0026.html
2020-11-19/a>
Xavier Mertens
PowerShell Dropper Delivering Formbook
2020-11-13/a>
Xavier Mertens
Old Worm But New Obfuscation Technique
2020-11-06/a>
Johannes Ullrich
Rediscovering Limitations of Stateful Firewalls: "NAT Slipstreaming" ? Implications, Detections and Mitigations
2020-11-05/a>
Xavier Mertens
Did You Spot "Invoke-Expression"?
2020-10-30/a>
Xavier Mertens
Quick Status of the CAA DNS Record Adoption
2020-10-24/a>
Guy Bruneau
An Alternative to Shodan, Censys with User-Agent CensysInspect/1.1
2020-10-14/a>
Brad Duncan
More TA551 (Shathak) Word docs push IcedID (Bokbot)
2020-10-14/a>
Xavier Mertens
Nicely Obfuscated Python RAT
2020-09-30/a>
Johannes Ullrich
Scans for FPURL.xml: Reconnaissance or Not?
2020-09-28/a>
Xavier Mertens
Some Tyler Technologies Customers Targeted with The Installation of a Bomgar Client
2020-09-27/a>
Didier Stevens
Wireshark 3.2.7 Released
2020-09-20/a>
Guy Bruneau
Analysis of a Salesforce Phishing Emails
2020-09-04/a>
Jan Kopriva
A blast from the past - XXEncoded VB6.0 Trojan
2020-08-25/a>
Xavier Mertens
Keep An Eye on LOLBins
2020-08-22/a>
Guy Bruneau
Remote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2020-08-19/a>
Xavier Mertens
Example of Word Document Delivering Qakbot
2020-08-18/a>
Xavier Mertens
Using API's to Track Attackers
2020-08-16/a>
Didier Stevens
Small Challenge: A Simple Word Maldoc - Part 3
2020-08-15/a>
Didier Stevens
Wireshark 3.2.6 Released
2020-08-12/a>
Russ McRee
To the Brim at the Gates of Mordor Pt. 1
2020-08-10/a>
Bojan Zdrnja
Scoping web application and web service penetration tests
2020-08-08/a>
Guy Bruneau
Scanning Activity Include Netcat Listener
2020-08-07/a>
Brad Duncan
TA551 (Shathak) Word docs push IcedID (Bokbot)
2020-08-04/a>
Johannes Ullrich
Internet Choke Points: Concentration of Authoritative Name Servers
2020-08-01/a>
Jan Kopriva
What pages do bad bots look for?
2020-07-24/a>
Xavier Mertens
Compromized Desktop Applications by Web Technologies
2020-07-19/a>
Guy Bruneau
Scanning Activity for ZeroShell Unauthenticated Access
2020-07-11/a>
Guy Bruneau
VMware XPC Client validation privilege escalation vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0017.html
2020-07-08/a>
Xavier Mertens
If You Want Something Done Right, You Have To Do It Yourself... Malware Too!
2020-07-04/a>
Russ McRee
Happy FouRth of July from the Internet Storm Center
2020-06-19/a>
Remco Verhoef
Sigma rules! The generic signature format for SIEM systems.
2020-06-16/a>
Johannes Ullrich
Odd "Protest" Spam (Scam?) Targeting Atlanta Police Foundation
2020-06-08/a>
Didier Stevens
Translating BASE64 Obfuscated Scripts
2020-05-24/a>
Didier Stevens
Wireshark 3.2.4 Released
2020-05-14/a>
Rob VandenBrink
Patch Tuesday Revisited - CVE-2020-1048 isn't as "Medium" as MS Would Have You Believe
2020-05-06/a>
Xavier Mertens
Keeping an Eye on Malicious Files Life Time
2020-04-27/a>
Xavier Mertens
Powershell Payload Stored in a PSCredential Object
2020-04-24/a>
Xavier Mertens
Malicious Excel With a Strong Obfuscation and Sandbox Evasion
2020-04-17/a>
Xavier Mertens
Weaponized RTF Document Generator & Mailer in PowerShell
2020-04-11/a>
Didier Stevens
Wireshark 3.2.3 Released: Mac Users Pay Attention Please
2020-04-10/a>
Xavier Mertens
PowerShell Sample Extracting Payload From SSL
2020-04-03/a>
Xavier Mertens
Obfuscated with a Simple 0x0A
2020-03-14/a>
Didier Stevens
Phishing PDF With Incremental Updates.
2020-03-10/a>
Johannes Ullrich
Microsoft Patch Tuesday March 2020
2020-03-07/a>
Didier Stevens
Wireshark 3.2.2 Released: Windows' Users Pay Attention Please
2020-03-02/a>
Jan Kopriva
Secure vs. cleartext protocols - couple of interesting stats
2020-02-29/a>
Guy Bruneau
Hazelcast IMDG Discover Scan
2020-02-28/a>
Xavier Mertens
Show me Your Clipboard Data!
2020-02-22/a>
Xavier Mertens
Simple but Efficient VBScript Obfuscation
2020-02-16/a>
Guy Bruneau
SOAR or not to SOAR?
2020-02-07/a>
Xavier Mertens
Sandbox Detection Tricks & Nice Obfuscation in a Single VBScript
2020-02-05/a>
Brad Duncan
Fake browser update pages are "still a thing"
2020-02-01/a>
Didier Stevens
Wireshark 3.2.1 Released
2020-01-25/a>
Guy Bruneau
Is Threat Hunting the new Fad?
2020-01-23/a>
Xavier Mertens
Complex Obfuscation VS Simple Trick
2020-01-15/a>
Johannes Ullrich
CVE-2020-0601 Followup
2020-01-10/a>
Xavier Mertens
More Data Exfiltration
2019-12-21/a>
Didier Stevens
Wireshark 3.2.0 Released
2019-12-08/a>
Didier Stevens
Wireshark 3.0.7 Released
2019-11-22/a>
Xavier Mertens
Abusing Web Filters Misconfiguration for Reconnaissance
2019-10-29/a>
Xavier Mertens
Generating PCAP Files from YAML
2019-10-27/a>
Didier Stevens
Wireshark 3.0.6 Released
2019-10-18/a>
Xavier Mertens
Quick Malicious VBS Analysis
2019-09-27/a>
Xavier Mertens
New Scans for Polycom Autoconfiguration Files
2019-09-25/a>
Brad Duncan
Malspam pushing Quasar RAT
2019-09-21/a>
Didier Stevens
Wireshark 3.0.5 Release: Potential Windows Crash when Updating
2019-09-19/a>
Xavier Mertens
Agent Tesla Trojan Abusing Corporate Email Accounts
2019-09-19/a>
Xavier Mertens
Blocklisting or Whitelisting in the Right Way
2019-09-17/a>
Rob VandenBrink
Investigating Gaps in your Windows Event Logs
2019-08-25/a>
Guy Bruneau
Are there any Advantages of Buying Cyber Security Insurance?
2019-08-22/a>
Xavier Mertens
Simple Mimikatz & RDPWrapper Dropper
2019-08-09/a>
Xavier Mertens
100% JavaScript Phishing Page
2019-07-24/a>
Xavier Mertens
May People Be Considered as IOC?
2019-07-20/a>
Guy Bruneau
Re-evaluating Network Security - It is Increasingly More Complex
2019-07-11/a>
Xavier Mertens
Russian Dolls Malicious Script Delivering Ursnif
2019-07-10/a>
Rob VandenBrink
Dumping File Contents in Hex (in PowerShell)
2019-07-09/a>
John Bambenek
MSFT July 2019 Patch Tuesday
2019-07-02/a>
Xavier Mertens
Malicious Script With Multiple Payloads
2019-06-21/a>
Rob VandenBrink
Netstat Local and Remote -new and improved, now with more PowerShell!
2019-06-20/a>
Xavier Mertens
Using a Travel Packing App for Infosec Purpose
2019-06-19/a>
Johannes Ullrich
Critical Actively Exploited WebLogic Flaw Patched CVE-2019-2729
2019-06-10/a>
Xavier Mertens
Interesting JavaScript Obfuscation Example
2019-05-31/a>
Didier Stevens
Retrieving Second Stage Payload with Ncat
2019-05-19/a>
Guy Bruneau
Is Metadata Only Approach, Good Enough for Network Traffic Analysis?
2019-04-26/a>
Rob VandenBrink
Pillaging Passwords from Service Accounts
2019-04-25/a>
Rob VandenBrink
Unpatched Vulnerability Alert - WebLogic Zero Day
2019-04-24/a>
Rob VandenBrink
Where have all the Domain Admins gone? Rooting out Unwanted Domain Administrators
2019-04-05/a>
Russ McRee
Beagle: Graph transforms for DFIR data & logs
2019-03-06/a>
Xavier Mertens
Keep an Eye on Disposable Email Addresses
2019-02-24/a>
Guy Bruneau
Packet Editor and Builder by Colasoft
2019-02-05/a>
Rob VandenBrink
Mitigations against Mimikatz Style Attacks
2019-01-29/a>
Johannes Ullrich
A Not So Well Done Phish (Why Attackers need to Implement IPv6 Now! ;-) )
2019-01-12/a>
Guy Bruneau
Snorpy a Web Base Tool to Build Snort/Suricata Rules
2019-01-09/a>
Russ McRee
gganimate: Animate YouR Security Analysis
2018-12-31/a>
Didier Stevens
Software Crashes: A New Year's Resolution
2018-12-29/a>
Didier Stevens
Video: De-DOSfuscation Example
2018-12-19/a>
Xavier Mertens
Microsoft OOB Patch for Internet Explorer: Scripting Engine Memory Corruption Vulnerability
2018-12-15/a>
Didier Stevens
De-DOSfuscation Example
2018-12-12/a>
Didier Stevens
Yet Another DOSfuscation Sample
2018-12-11/a>
Richard Porter
Microsoft December 2018 Patch Tuesday
2018-11-27/a>
Xavier Mertens
More obfuscated shell scripts: Fake MacOS Flash update
2018-11-27/a>
Rob VandenBrink
Data Exfiltration in Penetration Tests
2018-11-26/a>
Xavier Mertens
Obfuscated bash script targeting QNap boxes
2018-11-20/a>
Xavier Mertens
Querying DShield from Cortex
2018-11-18/a>
Guy Bruneau
Multipurpose PCAP Analysis Tool
2018-11-16/a>
Xavier Mertens
Basic Obfuscation With Permissive Languages
2018-11-14/a>
Brad Duncan
Day in the life of a researcher: Finding a wave of Trickbot malspam
2018-11-13/a>
Johannes Ullrich
November 2018 Microsoft Patch Tuesday
2018-11-11/a>
Pasquale Stirparo
Community contribution: joining forces or multiply solutions?
2018-11-06/a>
Xavier Mertens
Malicious Powershell Script Dissection
2018-11-05/a>
Johannes Ullrich
Struts 2.3 Vulnerable to Two Year old File Upload Flaw
2018-10-23/a>
Xavier Mertens
Diving into Malicious AutoIT Code
2018-10-17/a>
Russ McRee
RedHunt Linux - Adversary Emulation, Threat Hunting & Intelligence
2018-10-12/a>
Xavier Mertens
More Equation Editor Exploit Waves
2018-10-10/a>
Xavier Mertens
New Campaign Using Old Equation Editor Vulnerability
2018-10-09/a>
Johannes Ullrich
October 2018 Microsoft Patch Tuesday
2018-10-08/a>
Guy Bruneau
Latest Release of rockNSM 2.1
2018-10-01/a>
Didier Stevens
Decoding Custom Substitution Encodings with translate.py
2018-09-30/a>
Didier Stevens
When DOSfuscation Helps...
2018-09-19/a>
Rob VandenBrink
Certificates Revisited - SSL VPN Certificates 2 Ways
2018-09-18/a>
Rob VandenBrink
Using Certificate Transparency as an Attack / Defense Tool
2018-09-11/a>
Johannes Ullrich
Microsoft September Patch Tuesday Summary
2018-09-05/a>
Rob VandenBrink
Where have all my Certificates gone? (And when do they expire?)
2018-08-24/a>
Xavier Mertens
Microsoft Publisher Files Delivering Malware
2018-07-30/a>
Didier Stevens
Malicious Word documents using DOSfuscation
2018-07-29/a>
Guy Bruneau
Using RITA for Threat Analysis
2018-07-26/a>
Xavier Mertens
Windows Batch File Deobfuscation
2018-07-17/a>
Scott Fendley
Oracle Critical Patch Update Release
2018-07-04/a>
Didier Stevens
XPS Metadata
2018-07-03/a>
Didier Stevens
Progress indication for scripts on Windows
2018-07-02/a>
Guy Bruneau
VMware ESXi, Workstation, and Fusion address multiple out-of-bounds read vulnerabilities https://www.vmware.com/security/advisories/VMSA-2018-0016.html
2018-06-18/a>
Xavier Mertens
Malicious JavaScript Targeting Mobile Browsers
2018-06-16/a>
Russ McRee
Anomaly Detection & Threat Hunting with Anomalize
2018-06-15/a>
Lorna Hutcheson
SMTP Strangeness - Possible C2
2018-06-12/a>
Johannes Ullrich
Microsoft June 2018 Patch Tuesday
2018-06-05/a>
Xavier Mertens
Malicious Post-Exploitation Batch File
2018-05-25/a>
Xavier Mertens
Antivirus Evasion? Easy as 1,2,3
2018-05-22/a>
Guy Bruneau
VMware updates enable Hypervisor-Assisted Guest Mitigations for Speculative Store Bypass issue - https://www.vmware.com/security/advisories/VMSA-2018-0012.html
2018-05-19/a>
Xavier Mertens
Malicious Powershell Targeting UK Bank Customers
2018-05-10/a>
Bojan Zdrnja
Exfiltrating data from (very) isolated environments
2018-05-09/a>
Xavier Mertens
Nice Phishing Sample Delivering Trickbot
2018-04-30/a>
Remco Verhoef
Another approach to webapplication fingerprinting
2018-04-25/a>
Johannes Ullrich
Yet Another Drupal RCE Vulnerability
2018-03-11/a>
Guy Bruneau
rockNSM Configuration & Installation Steps http://handlers.sans.org/gbruneau/rockNSM%20as%20an%20Incident%20Response%20Package.htm
2018-03-01/a>
Johannes Ullrich
Why Does Emperor Xi Dislike Winnie the Pooh and Scrambled Eggs?
2018-02-25/a>
Guy Bruneau
Blackhole Advertising Sites with Pi-hole
2018-01-23/a>
Johannes Ullrich
Apple Updates Everything, Again
2018-01-03/a>
John Bambenek
Phishing to Rural America Leads to Six-figure Wire Fraud Losses
2017-12-20/a>
Richard Porter
VMWare Security Advisory: VMSA-2017-0021: https://www.vmware.com/security/advisories/VMSA-2017-0021.html
2017-12-16/a>
Xavier Mertens
Microsoft Office VBA Macro Obfuscation via Metadata
2017-12-13/a>
Xavier Mertens
Tracking Newly Registered Domains
2017-12-12/a>
Johannes Ullrich
December Microsoft Patch Tuesday Summary
2017-11-23/a>
Xavier Mertens
Proactive Malicious Domain Search
2017-11-11/a>
Xavier Mertens
Keep An Eye on your Root Certificates
2017-11-03/a>
Xavier Mertens
Simple Analysis of an Obfuscated JAR File
2017-10-27/a>
Renato Marinho
"Catch-All" Google Chrome Malicious Extension Steals All Posted Data
2017-10-02/a>
Xavier Mertens
Investigating Security Incidents with Passive DNS
2017-09-30/a>
Lorna Hutcheson
Who's Borrowing your Resources?
2017-09-17/a>
Guy Bruneau
rockNSM as a Incident Response Package
2017-09-16/a>
Guy Bruneau
VMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities - https://www.vmware.com/security/advisories/VMSA-2017-0015.html
2017-09-09/a>
Didier Stevens
Malware analysis output sanitization
2017-09-08/a>
Adrien de Beaupre
YASRV (Yet Another Struts RCE Vulnerability) yes a different one from yesterday
2017-09-06/a>
Adrien de Beaupre
Modern Web Application Penetration Testing , Hash Length Extension Attacks
2017-09-05/a>
Adrien de Beaupre
Struts vulnerability patch released by apache, patch now
2017-08-17/a>
Xavier Mertens
Maldoc with auto-updated link
2017-08-07/a>
Xavier Mertens
Increase of phpMyAdmin scans
2017-07-30/a>
Guy Bruneau
Re-release of MS Oulook Security Patches https://portal.msrc.microsoft.com/en-us/security-guidance/summary
2017-07-11/a>
Renato Marinho
July's Microsoft Patch Tuesday
2017-07-09/a>
Russ McRee
Adversary hunting with SOF-ELK
2017-07-08/a>
Xavier Mertens
A VBScript with Obfuscated Base64 Data
2017-06-28/a>
Brad Duncan
Catching up with Blank Slate: a malspam campaign still going strong
2017-06-22/a>
Xavier Mertens
Obfuscating without XOR
2017-06-17/a>
Guy Bruneau
Mapping Use Cases to Logs. Which Logs are the Most Important to Collect?
2017-06-08/a>
Tom Webb
Summer STEM for Kids
2017-05-31/a>
Pasquale Stirparo
Analysis of Competing Hypotheses, WCry and Lazarus (ACH part 2)
2017-05-28/a>
Pasquale Stirparo
Analysis of Competing Hypotheses (ACH part 1)
2017-05-28/a>
Guy Bruneau
CyberChef a Must Have Tool in your Tool bag!
2017-05-20/a>
Xavier Mertens
Typosquatting: Awareness and Hunting
2017-05-16/a>
Russ McRee
WannaCry? Do your own data analysis.
2017-05-10/a>
Johannes Ullrich
Read This If You Are Using a Script to Pull Data From This Site
2017-05-03/a>
Bojan Zdrnja
Powershelling with exploits
2017-04-28/a>
Xavier Mertens
Another Day, Another Obfuscation Technique
2017-04-21/a>
Xavier Mertens
Analysis of a Maldoc with Multiple Layers of Obfuscation
2017-04-20/a>
Xavier Mertens
DNS Query Length... Because Size Does Matter
2017-04-19/a>
Xavier Mertens
Hunting for Malicious Excel Sheets
2017-04-02/a>
Guy Bruneau
IPFire - A Household Multipurpose Security Gateway
2017-03-30/a>
Xavier Mertens
Diverting built-in features for the bad
2017-03-25/a>
Russell Eubanks
Distraction as a Service
2017-03-24/a>
Xavier Mertens
Nicely Obfuscated JavaScript Sample
2017-03-18/a>
Xavier Mertens
Example of Multiple Stages Dropper
2017-03-14/a>
Johannes Ullrich
February and March Microsoft Patch Tuesday
2017-03-10/a>
Xavier Mertens
The Side Effect of GeoIP Filters
2017-03-06/a>
Renato Marinho
A very convincing Typosquatting + Social Engineering campaign is targeting Santander corporate customers in Brazil
2017-03-04/a>
Xavier Mertens
How your pictures may affect your website reputation
2017-02-28/a>
Xavier Mertens
Analysis of a Simple PHP Backdoor
2017-02-14/a>
Johannes Ullrich
Microsoft Patch Tuesday Delayed
2017-02-12/a>
Xavier Mertens
Analysis of a Suspicious Piece of JavaScript
2017-02-04/a>
Xavier Mertens
Detecting Undisclosed Vulnerabilities with Security Tools & Features
2017-02-01/a>
Xavier Mertens
Quick Analysis of Data Left Available by Attackers
2017-01-26/a>
Xavier Mertens
IOC's: Risks of False Positive Alerts Flood Ahead
2017-01-10/a>
Johannes Ullrich
January 2017 Microsoft Patch Tuesday
2017-01-06/a>
John Bambenek
Great Misadventures of Security Vendors: Absurd Sandboxing Edition
2016-11-27/a>
Russ McRee
Scapy vs. CozyDuke
2016-11-02/a>
Rob VandenBrink
What Does a Pentest Look Like?
2016-10-30/a>
Pasquale Stirparo
Volatility Bot: Automated Memory Analysis
2016-10-07/a>
Rick Wanner
First Hurricane Matthew related Phish
2016-09-28/a>
Xavier Mertens
SNMP Pwn3ge
2016-09-25/a>
Pasquale Stirparo
Defining Threat Intelligence Requirements
2016-09-22/a>
Rick Wanner
YAHDD! (Yet another HUGE data Breach!)
2016-09-15/a>
Xavier Mertens
In Need of a OTP Manager Soon?
2016-09-13/a>
Rob VandenBrink
Apple iOS 10 and 10.0.1 Released
2016-09-13/a>
Rob VandenBrink
Microsoft Patch Tuesday Analysis
2016-09-04/a>
Russ McRee
Kali Linux 2016.2 Release: https://www.kali.org/news/kali-linux-20162-release/
2016-09-02/a>
Johannes Ullrich
Apple Patches "Trident" Vulnerabilities in OS X / Safari
2016-08-31/a>
Deborah Hale
Dropbox Breach
2016-08-29/a>
Russ McRee
Recommended Reading: Intrusion Detection Using Indicators of Compromise Based on Best Practices and Windows Event Logs
2016-08-28/a>
Guy Bruneau
Spam with Obfuscated Javascript
2016-08-22/a>
Russ McRee
Red Team Tools Updates: hashcat and SpiderFoot
2016-08-21/a>
Rick Wanner
Cisco ASA SNMP Remote Code Execution Vulnerability
2016-08-19/a>
Xavier Mertens
Data Classification For the Masses
2016-07-31/a>
Pasquale Stirparo
Sharing (intel) is caring... or not?
2016-07-27/a>
Xavier Mertens
Critical Xen PV guests vulnerabilities
2016-07-26/a>
Johannes Ullrich
Command and Control Channels Using "AAAA" DNS Records
2016-07-12/a>
Johannes Ullrich
Microsoft Patch Tuesday Summary for July 2016
2016-07-03/a>
Guy Bruneau
Is Data Privacy part of your Company's Culture?
2016-06-22/a>
Bojan Zdrnja
Security through obscurity never works
2016-06-20/a>
Xavier Mertens
Using Your Password Manager to Monitor Data Leaks
2016-06-15/a>
Richard Porter
Warp Speed Ahead, L7 Open Source Packet Generator: Warp17
2016-06-03/a>
Tom Liston
MySQL is YourSQL
2016-05-16/a>
Rick Wanner
An oldie but a goodie - 419 Death Scam
2016-05-02/a>
Rick Wanner
Lean Threat Intelligence
2016-04-25/a>
Guy Bruneau
Highlights from the 2016 HPE Annual Cyber Threat Report
2016-04-02/a>
Russell Eubanks
Why Can't We Be Friends?
2016-03-08/a>
Rick Wanner
Critical Adobe Updates - March 2016
2016-03-07/a>
Xavier Mertens
Another Malicious Document, Another Way to Deliver Malicious Code
2016-02-28/a>
Guy Bruneau
RFC 6598 - Carrier Grade NAT
2016-02-27/a>
Guy Bruneau
OpenSSL Security Update Planned for 1 March Release
2016-02-23/a>
Xavier Mertens
VMware VMSA-2016-0002
2016-02-22/a>
Xavier Mertens
Reducing False Positives with Open Data Sources
2016-02-20/a>
Didier Stevens
Locky: JavaScript Deobfuscation
2016-02-11/a>
Tom Webb
Tomcat IR with XOR.DDoS
2016-02-09/a>
Johannes Ullrich
Microsoft February 2016 Patch Tuesday
2016-02-09/a>
Johannes Ullrich
Adobe Patch Tuesday - February 2016
2016-02-07/a>
Xavier Mertens
More Malicious JavaScript Obfuscation
2016-02-03/a>
Xavier Mertens
Automating Vulnerability Scans
2016-01-30/a>
Xavier Mertens
All CVE Details at Your Fingertips
2016-01-29/a>
Xavier Mertens
Scripting Web Categorization
2016-01-25/a>
Rob VandenBrink
Assessing Remote Certificates with Powershell
2016-01-21/a>
Jim Clausing
Scanning for Fortinet ssh backdoor
2016-01-15/a>
Xavier Mertens
JavaScript Deobfuscation Tool
2016-01-12/a>
Alex Stanford
January 2016 Microsoft Patch Tuesday
2015-12-24/a>
Xavier Mertens
Unity Makes Strength
2015-12-14/a>
Russ McRee
AD Security's Unofficial Guide to Mimikatz & Command Reference
2015-12-08/a>
Johannes Ullrich
December 2015 Microsoft Patch Tuesday
2015-11-10/a>
Johannes Ullrich
November 2015 Microsoft Patch Tuesday
2015-11-09/a>
John Bambenek
Protecting Users and Enterprises from the Mobile Malware Threat
2015-10-13/a>
Alex Stanford
October 2015 Microsoft Patch Tuesday
2015-10-12/a>
Guy Bruneau
Data Visualization,What is your Tool of Choice?
2015-10-09/a>
Guy Bruneau
Adobe Acrobat and Reader Pre-Announcement
2015-09-08/a>
Johannes Ullrich
September 2015 Microsoft Patch Tuesday
2015-09-03/a>
Xavier Mertens
Querying the DShield API from RTIR
2015-09-01/a>
Daniel Wesemann
Encryption of "data at rest" in servers
2015-08-11/a>
Manuel Humberto Santander Pelaez
August 2015 Microsoft Patch Tuesday
2015-07-31/a>
Russ McRee
Tech tip: Invoke a system command in R
2015-07-31/a>
Russ McRee
Tech tip follow-up: Using the data Invoked with R's system command
2015-07-23/a>
Mark Hofman
Some more 0-days from ZDI
2015-07-15/a>
Richard Porter
Always Check Your References (Cheat Sheets to the Rescue)
2015-07-14/a>
Johannes Ullrich
Adobe Updates Flash Player, Shockwave and PDF Reader
2015-07-14/a>
Johannes Ullrich
July 2015 Microsoft Patch Tuesday
2015-06-09/a>
Johannes Ullrich
Microsoft Patch Tuesday Summary for June 2015
2015-06-02/a>
Alex Stanford
Guest Diary: Xavier Mertens - Playing with IP Reputation with Dshield & OSSEC
2015-05-23/a>
Guy Bruneau
Business Value in "Big Data"
2015-05-14/a>
Daniel Wesemann
Oh Bloat!
2015-05-12/a>
Johannes Ullrich
May 2015 Microsoft Patch Tuesday Summary
2015-05-03/a>
Russ McRee
VolDiff, for memory image differential analysis
2015-04-28/a>
Daniel Wesemann
Scammy Nepal earthquake donation requests
2015-04-14/a>
Alex Stanford
Microsoft Patch Tuesday - April 2015
2015-04-08/a>
Tom Webb
Is it a breach or not?
2015-04-04/a>
Didier Stevens
VMware Product Updates Address Critical Information Disclosure Issue In JRE
2015-03-26/a>
Daniel Wesemann
Pin-up on your Smartphone!
2015-03-21/a>
Russell Eubanks
Have you seen my personal information? It has been lost. Again.
2015-03-18/a>
Daniel Wesemann
Pass the hash!
2015-03-10/a>
Johannes Ullrich
Microsoft March Patch Tuesday
2015-03-01/a>
Rick Wanner
Advisory: Seagate NAS Remote Code Execution
2015-02-27/a>
Rick Wanner
Let's Encrypt!
2015-02-26/a>
Johannes Ullrich
New Feature: Subnet Report
2015-02-19/a>
Daniel Wesemann
DNS-based DDoS
2015-02-17/a>
Rob VandenBrink
oclHashcat 1.33 Released
2015-02-17/a>
Rob VandenBrink
A Different Kind of Equation
2015-02-13/a>
Johannes Ullrich
Microsoft February Patch Failures Continue: KB3023607 vs. Cisco AnyConnect Client
2015-02-12/a>
Johannes Ullrich
Did You Remove That Debug Code? Netatmo Weather Station Sending WPA Passphrase in the Clear
2015-02-11/a>
Johannes Ullrich
Microsoft Hardens GPO by Fixing Two Serious Vulnerabilities.
2015-02-10/a>
Mark Baggett
Detecting Mimikatz Use On Your Network
2015-02-10/a>
Mark Baggett
Microsoft Update Advisory for February 2015
2015-01-23/a>
Adrien de Beaupre
Infocon change to yellow for Adobe Flash issues
2015-01-13/a>
Johannes Ullrich
Microsoft Patch Tuesday - January 2015 (Really? Telnet?)
2014-12-23/a>
John Bambenek
How I learned to stop worrying and love malware DGAs....
2014-12-09/a>
Alex Stanford
Microsoft Patch Tuesday - December 2014
2014-12-01/a>
Guy Bruneau
Do you have a Data Breach Response Plan?
2014-11-24/a>
Richard Porter
Someone is using this? PoS: Compressor
2014-11-18/a>
Jim Clausing
Microsoft November out-of-cycle patch MS14-068
2014-11-11/a>
Johannes Ullrich
Microsoft November 2014 Patch Tuesday
2014-11-11/a>
Johannes Ullrich
Adobe Flash Update
2014-10-17/a>
Johannes Ullrich
Apple Updates (not just Yosemite)
2014-10-14/a>
Johannes Ullrich
Microsoft October 2014 Patch Tuesday
2014-10-14/a>
Johannes Ullrich
Adobe October 2014 Bulletins for Flash Player and Coldfusion
2014-09-29/a>
Johannes Ullrich
Apple Released Update to Fix Shellshock Vulnerability http://support.apple.com/kb/DL1769
2014-09-26/a>
Richard Porter
Why We Have Moved to InfoCon:Yellow
2014-09-19/a>
Guy Bruneau
Added today in oclhashcat 131 Django [Default Auth] (PBKDF2 SHA256 Rounds Salt) Support - http://hashcat.net/hashcat/
2014-09-09/a>
Alex Stanford
Microsoft Patch Tuesday - September 2014
2014-08-25/a>
Jim Clausing
Unusual CRL traffic?
2014-08-22/a>
Richard Porter
OCLHashCat 1.30 Released
2014-08-22/a>
Richard Porter
PHP 5.4.32 Released http://www.php.net/ChangeLog-5.php#5.4.32
2014-08-22/a>
Richard Porter
PHP 5.5.16 is available http://www.php.net/ChangeLog-5.php#5.5.16
2014-08-12/a>
Alex Stanford
Microsoft Patch Tuesday - August 2014
2014-08-12/a>
Adrien de Beaupre
Adobe updates for 2014/08
2014-08-09/a>
Adrien de Beaupre
Complete application ownage via Multi-POST XSRF
2014-08-05/a>
Johannes Ullrich
Legal Threat Spam: Sometimes it Gets Personal
2014-08-04/a>
Russ McRee
Threats & Indicators: A Security Intelligence Lifecycle
2014-08-01/a>
Chris Mohan
WireShark 1.10.9 and 1.12.0 has been released
2014-07-30/a>
Rick Wanner
Symantec Endpoint Protection Privilege Escalation Zero Day
2014-07-19/a>
Russ McRee
Keeping the RATs out: the trap is sprung - Part 3
2014-07-18/a>
Russ McRee
Keeping the RATs out: **it happens - Part 2
2014-07-16/a>
Russ McRee
Keeping the RATs out: an exercise in building IOCs - Part 1
2014-07-15/a>
Daniel Wesemann
Oracle July 2014 CPU (patch bundle)
2014-07-11/a>
Rob VandenBrink
Metasploit Update Alert
2014-07-09/a>
Daniel Wesemann
Who owns your typo?
2014-07-08/a>
Alex Stanford
Microsoft Patch Tuesday - July
2014-07-01/a>
Johannes Ullrich
Apple Releases Patches for All Products
2014-06-28/a>
Mark Hofman
No more Microsoft advisory email notifications?
2014-06-12/a>
Guy Bruneau
BIND Security Update for CVE-2014-3859
2014-06-10/a>
Alex Stanford
Microsoft Patch Tuesday June 2014
2014-06-06/a>
Johannes Ullrich
Microsoft June Patch Tuesday Advance Notification
2014-05-13/a>
Johannes Ullrich
Microsoft May 2014 Patch Tuesday
2014-05-01/a>
Johannes Ullrich
Microsoft Announces Special Patch for IE 0-day (Win XP included!)
2014-04-26/a>
Guy Bruneau
New Project by Linux Foundation - Core Infrastructure Initiative
2014-04-24/a>
Rob VandenBrink
Apple IOS updates to 7.1.1, OSX Security update 2014-002, Airport Updates - http://support.apple.com/kb/HT1222, http://support.apple.com/kb/HT6208, http://support.apple.com/kb/HT6207, http://support.apple.com/kb/HT6203
2014-04-22/a>
Johannes Ullrich
Apple Patches for OS X, iOS and Apple TV.
2014-04-16/a>
Johannes Ullrich
Oracle Critical Patch Update for April 2014
2014-04-12/a>
Guy Bruneau
Critical Security Update for JetPack WordPress Plugin. Bug has existed since Jetpack 1.9, released in October 2012. - http://jetpack.me/2014/04/10/jetpack-security-update/
2014-04-08/a>
Richard Porter
April 2014 Microsoft Patches
2014-04-02/a>
Kevin Shortt
Apple Security Update for Safari 6.1.3/7.0.3: http://support.apple.com/kb/HT6181
2014-03-21/a>
Johannes Ullrich
Cisco AsyncOS Patch
2014-03-13/a>
Daniel Wesemann
Identification and authentication are hard ... finding out intention is even harder
2014-03-11/a>
Johannes Ullrich
Adobe Updates: Flash Player
2014-03-11/a>
Johannes Ullrich
Microsoft Patch Tuesday March 2014
2014-03-08/a>
Guy Bruneau
Microsoft March Patch Pre-Announcement
2014-03-07/a>
Tom Webb
Linux Memory Dump with Rekall
2014-03-06/a>
Mark Baggett
Port 5000 traffic and snort signature
2014-03-04/a>
Daniel Wesemann
Triple Handshake Cookie Cutter
2014-02-26/a>
Russ McRee
Ongoing NTP Amplification Attacks
2014-02-25/a>
Alex Stanford
Apple releases OS X 10.9.2 patching SSL vulnerability and updates Safari
2014-02-19/a>
Russ McRee
Threat modeling in the name of security
2014-02-17/a>
Chris Mohan
NTP reflection attacks continue
2014-02-14/a>
Chris Mohan
SYM14-004 Symantec Endpoint Protection Management Vulnerabilities - http://www.symantec.com/business/support/index?page=content&id=TECH214866
2014-02-11/a>
Johannes Ullrich
February 2014 Microsoft Patch Tuesday
2014-02-11/a>
Johannes Ullrich
Adobe February 2014 Patch Tuesday
2014-02-07/a>
Johannes Ullrich
Microsoft Advance Notification for February 2014
2014-02-04/a>
Johannes Ullrich
Adobe Flash Player Emergency Patch
2014-02-04/a>
Johannes Ullrich
Odd ICMP Echo Request Payload
2014-01-30/a>
Johannes Ullrich
Oracle Reports Vulnerability
2014-01-17/a>
Russ McRee
Massive RFI scans likely a free web app vuln scanner rather than bots
2014-01-14/a>
Johannes Ullrich
Microsoft Patch Tuesday January 2014
2014-01-14/a>
Johannes Ullrich
Adobe Patch Tuesday January 2014
2014-01-14/a>
Johannes Ullrich
Oracle Critical Patch Update January 2014
2014-01-10/a>
Basil Alawi S.Taher
Cisco Small Business Devices backdoor fix
2014-01-09/a>
Johannes Ullrich
Microsoft Security Bulletin Advance Notification for January 2014 http://technet.microsoft.com/en-us/security/bulletin/ms14-jan
2014-01-04/a>
Tom Webb
Monitoring Windows Networks Using Syslog (Part One)
2013-12-28/a>
Russ McRee
Weekend Reading List 27 DEC
2013-12-20/a>
Daniel Wesemann
authorized key lime pie
2013-12-18/a>
Adrien de Beaupre
Wireshark 1.10.4 and 1.8.12 are available
2013-12-17/a>
Adrien de Beaupre
Apple security updates Mac OS X and Safari
2013-12-14/a>
Johannes Ullrich
WhatsApp Malware Spam uses Geolocation to Mass Customize Filename
2013-12-10/a>
Rob VandenBrink
Those Look Just Like Hashes!
2013-12-10/a>
Johannes Ullrich
Microsoft December Patch Tuesday
2013-12-07/a>
Guy Bruneau
Microsoft December Patch Pre-Announcement
2013-12-04/a>
Adrien de Beaupre
VMware Security Advisory VMSA-2013-0014
2013-12-02/a>
Richard Porter
Reports of higher than normal SSH Attacks
2013-11-27/a>
Rob VandenBrink
ATM Traffic + TCPDump + Video = Good or Evil?
2013-11-12/a>
Johannes Ullrich
November 2013 Microsoft Patch Tuesday
2013-11-08/a>
Johannes Ullrich
Microsoft Patch Tuesday Preview
2013-11-01/a>
Russ McRee
Secunia's PSI Country Report - Q3 2013
2013-10-21/a>
Johannes Ullrich
New tricks that may bring DNS spoofing back or: "Why you should enable DNSSEC even if it is a pain to do"
2013-10-17/a>
Adrien de Beaupre
Chrome updated http://googlechromereleases.blogspot.ca/2013/10/stable-channel-update_15.html
2013-10-16/a>
Adrien de Beaupre
Access denied and blockliss
2013-10-15/a>
Rob VandenBrink
Java Quarterly Updates
2013-10-08/a>
Johannes Ullrich
Microsoft October 2013 Patch Tuesday
2013-10-05/a>
Richard Porter
Adobe Breach Notification, Notifications?
2013-10-03/a>
Johannes Ullrich
October Patch Tuesday Preview (CVE-2013-3893 patch coming!)
2013-09-18/a>
Rob VandenBrink
Cisco DCNM Update Released
2013-09-11/a>
Johannes Ullrich
Reboot Wednesday: Yesterday's Patch Tuesday Aftermath
2013-09-10/a>
Swa Frantzen
Adobe September 2013 Black Tuesday Overview
2013-09-10/a>
Swa Frantzen
Microsoft September 2013 Black Tuesday Overview
2013-09-10/a>
Swa Frantzen
Macs need to patch too!
2013-09-07/a>
Guy Bruneau
Microsoft September Patch Pre-Announcement
2013-09-05/a>
Rob VandenBrink
Building Your Own GPU Enabled Private Cloud
2013-09-03/a>
Rob VandenBrink
Is "Reputation Backscatter" a Thing?
2013-08-19/a>
Guy Bruneau
Business Risks and Cyber Attacks
2013-08-19/a>
Johannes Ullrich
Microsoft re-releases MS13-066: https://technet.microsoft.com/security/bulletin/MS13-066
2013-08-15/a>
Johannes Ullrich
Microsoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx
2013-08-13/a>
Swa Frantzen
Microsoft August 2013 Black Tuesday Overview
2013-08-13/a>
Swa Frantzen
Microsoft security advisories: RDP and MD5 deprecation in Microsoft root certificates
2013-08-11/a>
Bojan Zdrnja
XATattacks (attacks on xat.com)
2013-07-28/a>
Guy Bruneau
Wireshark 1.8.9 and 1.10.1 Security Update
2013-07-27/a>
Scott Fendley
Defending Against Web Server Denial of Service Attacks
2013-07-13/a>
Lenny Zeltser
Decoy Personas for Safeguarding Online Identity Using Deception
2013-07-09/a>
Swa Frantzen
Microsoft July 2013 Black Tuesday Overview
2013-07-09/a>
Swa Frantzen
Adobe July 2013 Black Tuesday Overview
2013-07-06/a>
Guy Bruneau
Microsoft July Patch Pre-Announcement
2013-07-06/a>
Guy Bruneau
Is Metadata the Magic in Modern Network Security?
2013-07-04/a>
Russ McRee
Celebrating 4th of July With a Malware PCAP Visualization
2013-07-03/a>
Kevin Shortt
Apple Security Update 2013-003
2013-06-26/a>
Adrien de Beaupre
Multiple Cisco security advisories
2013-06-18/a>
Russ McRee
EMET 4.0 is now available for download
2013-06-18/a>
Russ McRee
Volatility rules...any questions?
2013-06-11/a>
Swa Frantzen
Microsoft June 2013 Black Tuesday Overview
2013-06-11/a>
Swa Frantzen
Adobe June 2013 Black Tuesday Overview
2013-06-11/a>
Swa Frantzen
vmware security advisory VMSA-2013-0008
2013-06-05/a>
Richard Porter
Windows Sysinternals Updated http://technet.microsoft.com/en-us/sysinternals/default.aspx
2013-06-05/a>
Richard Porter
BIND 9 Update fixing CVE-2013-3919
2013-05-23/a>
Adrien de Beaupre
MoVP II
2013-05-22/a>
Adrien de Beaupre
Privilege escalation, why should I care?
2013-05-22/a>
Adrien de Beaupre
Apple QuickTime 7.7.4 for Windows updated, MANY security vulnerabilities: http://support.apple.com/kb/HT1222
2013-05-22/a>
Adrien de Beaupre
Chrome 24.0.1312.52 has been updated for Windows, Mac, Linux, and Chrome Frame
2013-05-17/a>
Johannes Ullrich
SSL: Another reason not to ignore IPv6
2013-05-16/a>
Daniel Wesemann
Extracting signatures from Apple .apps
2013-05-14/a>
Swa Frantzen
Microsoft May 2013 Black Tuesday Overview
2013-05-14/a>
Swa Frantzen
Firefox & Thunderbird released
2013-05-14/a>
Swa Frantzen
Adobe May 2013 Black Tuesday Overview
2013-05-14/a>
Swa Frantzen
Microsoft Security Advisory 2846338
2013-05-11/a>
Lenny Zeltser
Extracting Digital Signatures from Signed Malware
2013-05-08/a>
Chris Mohan
Syria drops from Internet 7th May 2013
2013-05-07/a>
Jim Clausing
Is there an epidemic of typo squatting?
2013-05-04/a>
Kevin Shortt
The Zero-Day Pendulum Swings
2013-04-25/a>
Adam Swanger
Guest Diary: Dylan Johnson - A week in the life of some Perimeter Firewalls
2013-04-19/a>
Russ McRee
Java 8 release schedule delayed for renewed focus on security
2013-04-17/a>
John Bambenek
UPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun
2013-04-16/a>
John Bambenek
Fake Boston Marathon Scams Update
2013-04-15/a>
Rob VandenBrink
Oops - You Mean That Deleted Server was a Certificate Authority?
2013-04-15/a>
John Bambenek
Please send any spam (full headers), URLs or other suspicious content scamming off Boston Marathon explosions to handlers@sans.org
2013-04-09/a>
Swa Frantzen
Microsoft April 2013 Black Tuesday Overview
2013-04-09/a>
Swa Frantzen
Adobe April 2013 Black Tuesday Overview
2013-04-04/a>
Johannes Ullrich
Microsoft April Patch Tuesday Advance Notification
2013-04-03/a>
Mark Hofman
Firefox 20 and Thunderbird 17.0.5 updates
2013-03-29/a>
Chris Mohan
Does your breach email notification look like a phish?
2013-03-23/a>
Guy Bruneau
Apple ID Two-step Verification Now Available in some Countries
2013-03-12/a>
Swa Frantzen
Adobe March 2013 Black Tueday
2013-03-12/a>
Swa Frantzen
Microsoft March 2013 Black Tuesday Overview
2013-03-07/a>
Guy Bruneau
Wireshark Security Updates
2013-03-06/a>
Adam Swanger
IPv6 Focus Month: Guest Diary: Stephen Groat - Geolocation Using IPv6 Addresses
2013-03-03/a>
Richard Porter
Uptick in MSSQL Activity
2013-02-27/a>
Adam Swanger
Adobe Flash Player Security Update - http://www.adobe.com/support/security/bulletins/apsb13-08.html
2013-02-22/a>
Chris Mohan
PHP 5.4.12 and PHP 5.3.22 released http://www.php.net/ChangeLog-5.php
2013-02-22/a>
Chris Mohan
Chrome 25.0.1364.87 addresses multiple vulnerabilities http://googlechromereleases.blogspot.com.au/2013/02/stable-channel-update_21.html
2013-02-22/a>
Chris Mohan
VMware releases new and updated security advisories
2013-02-20/a>
Manuel Humberto Santander Pelaez
SANS SCADA Summit at Orlando - Bigger problems and so far from getting them solved
2013-02-17/a>
Guy Bruneau
HP ArcSight Connector Appliance and Logger Vulnerabilities
2013-02-17/a>
Guy Bruneau
Adobe Acrobat and Reader Security Update Planned this Week
2013-02-14/a>
Adam Swanger
ISC Monthly Threat Update - February 2013 http://isc.sans.edu/podcastdetail.html?id=3121
2013-02-13/a>
Swa Frantzen
More adobe reader and acrobat (PDF) trouble
2013-02-12/a>
Adam Swanger
Microsoft February 2013 Black Tuesday Update - Overview
2013-02-12/a>
Swa Frantzen
Adobe Feb 2013 Black Tuesday patches
2013-02-08/a>
Johannes Ullrich
Microsoft February Patch Tuesday Advance Notification
2013-02-08/a>
Kevin Shortt
Is it Spam or Is it Malware?
2013-02-06/a>
Johannes Ullrich
Are you losing system logging information (and don't know it)?
2013-02-04/a>
Adam Swanger
SAN Securing The Human Monthly Awareness Video - Advanced Persistent Threat (APT) http://www.securingthehuman.org/resources/ncsam
2013-02-01/a>
Jim Clausing
Oracle quitely releases Java 7u13 early
2013-01-25/a>
Johannes Ullrich
Vulnerability Scans via Search Engines (Request for Logs)
2013-01-22/a>
Richard Porter
Using Metasploit for Patch Sanity Checks
2013-01-17/a>
Russ McRee
PHP 5.4.11 and PHP 5.3.21 released
2013-01-14/a>
Richard Porter
January 2013 Microsoft Out of Cycle Patch
2013-01-10/a>
Rob VandenBrink
What Else runs Telnets? Or, Pentesters Love Video Conferencing Units Too!
2013-01-10/a>
Adam Swanger
ISC Monthly Threat Update New Format
2013-01-09/a>
Rob VandenBrink
SQL Injection Flaw in Ruby on Rails
2013-01-09/a>
Rob VandenBrink
Firefox and Thunderbird Updates
2013-01-09/a>
Rob VandenBrink
Security Updates for Adobe Reader / Acrobat - http://www.adobe.com/support/security/bulletins/apsb13-02.html
2013-01-09/a>
Rob VandenBrink
Security Updates for Adobe Flash - http://www.adobe.com/support/security/bulletins/apsb13-01.html
2013-01-09/a>
Johannes Ullrich
New Format for Monthly Threat Update
2013-01-08/a>
Richard Porter
Firefox 18 Released, Security Fixes http://www.mozilla.org/security/known-vulnerabilities/firefox.html
2013-01-08/a>
Richard Porter
Microsoft January 2013 Black Tuesday Update - Overview
2013-01-04/a>
Daniel Wesemann
Patch pre-notification from Adobe and Microsoft
2013-01-03/a>
Manuel Humberto Santander Pelaez
New year and new CA compromised
2012-12-18/a>
Dan Goldberg
Mitigating the impact of organizational change: a risk assessment
2012-12-14/a>
Adam Swanger
ISC Feature of the Week: Webhoneypot: Web Server Log Project
2012-12-11/a>
John Bambenek
Microsoft December 2012 Black Tuesday Update - Overview
2012-12-07/a>
Adam Swanger
ISC Feature of the Week: Glossary Additions
2012-12-03/a>
John Bambenek
John McAfee Exposes His Location in Photo About His Being on Run
2012-11-30/a>
Daniel Wesemann
Snipping Leaks
2012-11-29/a>
Adam Swanger
ISC Feature of the Week: SSH Scan Reports
2012-11-29/a>
Kevin Shortt
New Apple Security Update: APPLE-SA-2012-11-29-1 Apple TV 5.1.1
2012-11-28/a>
Mark Hofman
McAfee releases extraDAT for W32/Autorun.worm.aaeb-h
2012-11-28/a>
Mark Hofman
New version of wireshark is available (1.8.4), some security fixes included.
2012-11-27/a>
Chris Mohan
Can users' phish emails be a security admin's catch of the day?
2012-11-26/a>
John Bambenek
Online Shopping for the Holidays? Tips, News and a Fair Warning
2012-11-22/a>
Kevin Liston
Greek National Arrested on Suspicion of Theft of 9M Records on Fellow Greeks
2012-11-20/a>
John Bambenek
Behind the Random NTP Bizarreness of Incorrect Year Being Set
2012-11-20/a>
John Bambenek
Firefox v 17.0 just released, more here: http://www.mozilla.org/en-US/firefox/17.0/releasenotes/
2012-11-19/a>
John Bambenek
MoneyGram fined $100 million for aiding wire fraud - http://krebsonsecurity.com/2012/11/moneygram-fined-100-million-for-wire-fraud/
2012-11-19/a>
John Bambenek
New Poll: Top 5 Unresolved Security Problems of 2012
2012-11-17/a>
Manuel Humberto Santander Pelaez
New Sysinternal Updates: AdExplorer v1.44, Contig v1.7, Coreinfo v3.2, Procdump v5.1. See http://blogs.technet.com/b/sysinternals/archive/2012/11/16/updates-adexplorer-v1-44-contig-v1-7-coreinfo-v3-2-procdump-v5-1.aspx?Redirected=true
2012-11-13/a>
Jim Clausing
Microsoft November 2012 Black Tuesday Update - Overview
2012-11-12/a>
John Bambenek
Request for info: Robocall Phishing Against Local/Regional Banks
2012-11-09/a>
Mark Baggett
Remote Diagnostics with PSR
2012-11-09/a>
Mark Baggett
Fresh batch of Microsoft patches next week
2012-11-07/a>
Mark Baggett
Help eliminate unquoted path vulnerabilities
2012-11-07/a>
Mark Baggett
Multiple 0-Days Reported!
2012-11-07/a>
Mark Baggett
Cisco TACACS+ Authentication Bypass
2012-11-05/a>
Johannes Ullrich
Reminder: Ongoing SMTP Brute Forcing Attacks
2012-11-05/a>
Johannes Ullrich
Possible Fake-AV Ads from Doubleclick Servers
2012-11-04/a>
Lorna Hutcheson
What's important on your network?
2012-10-31/a>
Johannes Ullrich
Cyber Security Awareness Month - Day 31 - Business Continuity and Disaster Recovery
2012-10-30/a>
Johannes Ullrich
Hurricane Sandy Update
2012-10-30/a>
Richard Porter
Splunk 5.0 SP-CAAAHB4 http://www.splunk.com/view/SP-CAAAHB4
2012-10-30/a>
Mark Hofman
Cyber Security Awareness Month - Day 30 - DSD 35 mitigating controls
2012-10-28/a>
Tony Carothers
Firefox 16.02 Released
2012-10-26/a>
Russ McRee
Cyber Security Awareness Month - Day 26 - Attackers use trusted domain to propagate Citadel Zeus variant
2012-10-25/a>
Richard Porter
Cyber Security Awareness Month - Day 25 - Pro Audio & Video Packets on the Wire
2012-10-24/a>
Russ McRee
Ongoing Windstream outage in the midwest - https://twitter.com/search?q=windstream
2012-10-21/a>
Johannes Ullrich
Cyber Security Awareness Month - Day 22: Connectors
2012-10-21/a>
Lorna Hutcheson
Potential Phish for Regular Webmail Accounts
2012-10-19/a>
Johannes Ullrich
Cyber Security Awareness Month - Day 19: Standard log formats and CEE.
2012-10-18/a>
Rob VandenBrink
Cyber Security Awareness Month - Day 18 - Vendor Standards: The vSphere Hardening Guide
2012-10-17/a>
Mark Hofman
Oracle Critical Patch Update October
2012-10-17/a>
Mark Hofman
New Acrobat release (including reader) available. Version 11. Some security improvements more here -->http://blogs.adobe.com/adobereader/
2012-10-16/a>
Richard Porter
CyberAwareness Month - Day 15, Standards Body Soup (pt2), Same Soup Different Cook.
2012-10-16/a>
Johannes Ullrich
Cyber Security Awareness Month - Day 16: W3C and HTML
2012-10-14/a>
Pedro Bueno
Cyber Security Awareness Month - Day 14 - Poor Man's File Analysis System - Part 1
2012-10-09/a>
Johannes Ullrich
Adobe Flash Player update http://www.adobe.com/support/security/bulletins/apsb12-22.html
2012-10-09/a>
Johannes Ullrich
Microsoft October 2012 Black Tuesday Update - Overview
2012-10-07/a>
Tony Carothers
Cyber Security Awareness Month - Day 7 - Rollup Review of CSAM Week 1
2012-10-05/a>
Johannes Ullrich
Cyber Security Awareness Month - Day 5: Standards Body Soup, So many Flavors in the bowl.
2012-10-05/a>
Richard Porter
VMWare Security Advisory: VMSA-2012-0014 - http://www.vmware.com/security/advisories/VMSA-2012-0014.html
2012-10-05/a>
Adam Swanger
ISC Feature of the Week: Report Fake Tech Support Call Statistics
2012-10-05/a>
Richard Porter
Reports of a Distributed Injection Scan
2012-10-04/a>
Mark Hofman
And the SHA-3 title goes to .....Keccak
2012-10-04/a>
Johannes Ullrich
Microsoft October Patch Pre-Announcement
2012-10-02/a>
Russ McRee
Cyber Security Awareness Month - Day 2 - PCI Security Standard: Mobile Payment Acceptance Security Guidelines
2012-10-01/a>
Johannes Ullrich
Cyber Security Awareness Month
2012-09-28/a>
Joel Esler
Adobe certification revocation for October 4th
2012-09-27/a>
Adam Swanger
ISC Feature of the Week: Glossary
2012-09-26/a>
Johannes Ullrich
Some Android phones can be reset to factory default by clicking on links
2012-09-26/a>
Johannes Ullrich
More Java Woes
2012-09-21/a>
Johannes Ullrich
iOS 6 Security Roundup
2012-09-21/a>
Guy Bruneau
Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 (2755801)
2012-09-20/a>
Russ McRee
Flash Player update but no announcement, check your version http://www.adobe.com/software/flash/about/
2012-09-20/a>
Russ McRee
Apple and Cisco Security Advisories 19 SEP 2012
2012-09-20/a>
Russ McRee
Financial sector advisory: attacks and threats against financial institutions
2012-09-19/a>
Russ McRee
Script kiddie scavenging with Shellbot.S
2012-09-19/a>
Kevin Liston
Volatility: 2.2 is Coming Soon
2012-09-17/a>
Rob VandenBrink
What's on your iPad?
2012-09-14/a>
Lenny Zeltser
Scam Report - Fake Voice Mail Email Notification Redirects to Malicious Site
2012-09-14/a>
Adam Swanger
ISC Feature of the Week: Privacy Policy
2012-09-13/a>
Mark Baggett
TCP Fuzzing with Scapy
2012-09-13/a>
Mark Baggett
Microsoft disrupts traffic associated with the Nitol botnet
2012-09-13/a>
Mark Baggett
More SSL trouble
2012-09-11/a>
Adam Swanger
Microsoft September 2012 Black Tuesday Update - Overview
2012-09-10/a>
Johannes Ullrich
Godaddy DDoS Attack
2012-09-10/a>
donald smith
Blue Toad publishing co compromise lead to UDID release. http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week?lite
2012-09-10/a>
Johannes Ullrich
Microsoft Patch Tuesday Pre-Release
2012-09-08/a>
Guy Bruneau
Webmin Input Validation Vulnerabilities
2012-09-06/a>
Johannes Ullrich
SSL Requests sent to port 80 (request for help/input)
2012-09-04/a>
Johannes Ullrich
Another round of "Spot the Exploit E-Mail"
2012-09-02/a>
Lorna Hutcheson
Demonstrating the value of your Intrusion Detection Program and Analysts
2012-09-01/a>
Russ McRee
Blackhole targeting Java vulnerability via fake Microsoft Services Agreement email phish
2012-08-31/a>
Russ McRee
Not so fast: Java 7 Update 7 critical vulnerability discovered in less than 24 hours
2012-08-30/a>
Johannes Ullrich
Editorial: The Slumlord Approach to Network Security http://isc.sans.edu/j/editorial
2012-08-29/a>
Johannes Ullrich
"Data" URLs used for in-URL phishing
2012-08-27/a>
Johannes Ullrich
The Good, Bad and Ugly about Assigning IPv6 Addresses
2012-08-27/a>
Johannes Ullrich
Malware Spam harvesting Facebook Information
2012-08-26/a>
Lorna Hutcheson
Who ya gonna contact?
2012-08-23/a>
Adam Swanger
ISC Feature of the Week: Contact Us
2012-08-22/a>
Adrien de Beaupre
Apple Remote Desktop update fixes no encryption issue
2012-08-22/a>
Adrien de Beaupre
Phishing/spam via SMS
2012-08-21/a>
Adrien de Beaupre
RuggedCom fails key management 101 on Rugged Operating System (ROS)
2012-08-21/a>
Adrien de Beaupre
YYABCAFU - Yes Yet Another Bleeping Critical Adobe Flash Update
2012-08-20/a>
Manuel Humberto Santander Pelaez
Do we need test procedures in our companies before implementing Antivirus signatures?
2012-08-19/a>
Manuel Humberto Santander Pelaez
Authentication Issues between entities during protocol message exchange in SCADA Systems
2012-08-15/a>
Guy Bruneau
Wireshark Security Update
2012-08-14/a>
Rick Wanner
Microsoft August 2012 Black Tuesday Update - Overview
2012-08-14/a>
Rick Wanner
Adobe Security Bulletins - http://blogs.adobe.com/psirt/2012/08/adobe-security-bulletins-posted-2.html
2012-08-12/a>
Tony Carothers
Layers of the Defense-in-Depth Onion
2012-08-12/a>
Tony Carothers
Oracle Security Alert for CVE-2012-3132
2012-08-10/a>
Adam Swanger
ISC Feature of the Week: Report Fake Tech Support Calls
2012-08-09/a>
Mark Hofman
Zeus/Citadel variant causing issues in the Netherlands
2012-08-09/a>
Mark Hofman
SQL Injection Lilupophilupop style, Part 2
2012-08-07/a>
Adrien de Beaupre
Who protects small business?
2012-08-04/a>
Adam Swanger
ISC Feature of the Week: Handler Select News Feed
2012-08-04/a>
Kevin Liston
Vendors: More Patch-Release Options Please
2012-08-02/a>
Guy Bruneau
Opera Security Update
2012-07-27/a>
Daniel Wesemann
Cuckoo 0.4 is out - cool new features for malware analysis http://www.cuckoosandbox.org/
2012-07-26/a>
Adam Swanger
ISC Feature of the Week: The 404Project - now with IP Mask
2012-07-24/a>
Richard Porter
Wireshark 1.8.1 Released http://www.wireshark.org/
2012-07-24/a>
Richard Porter
Report of spike in DNS Queries gd21.net
2012-07-20/a>
Mark Baggett
Syria Internet connection cut?
2012-07-19/a>
Mark Baggett
Diagnosing Malware with Resource Monitor
2012-07-19/a>
Mark Baggett
A Heap of Overflows?
2012-07-18/a>
Rob VandenBrink
Snort Updated today
2012-07-18/a>
Rob VandenBrink
Vote NO to Weak Keys!
2012-07-16/a>
Richard Porter
Sysinternals Update @ http://blogs.technet.com/b/sysinternals/archive/2012/07/16/updates-handle-v3-5-process-explorer-v15-22-process-monitor-v3-03-rammap-v1-21-zoomit-v4-3.aspx
2012-07-15/a>
Guy Bruneau
Oracle July 2012 Critical Patch Pre-Release Announcement
2012-07-14/a>
Tony Carothers
User Awareness and Education
2012-07-13/a>
Richard Porter
Yesterday (not as on the ball as Rob) at SANSFire
2012-07-13/a>
Russ McRee
2 for 1: SANSFIRE & MSRA presentations
2012-07-13/a>
Russ McRee
VMWare Security Advisory 12 JUL 2012
2012-07-13/a>
Russ McRee
Yahoo service SQL injection vuln leads to account exposure
2012-07-12/a>
Adam Swanger
ISC Feature of the Week: Internet Storm Center Events
2012-07-12/a>
Rick Wanner
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms
2012-07-12/a>
Rick Wanner
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
2012-07-12/a>
Rick Wanner
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
2012-07-12/a>
Rick Wanner
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman
2012-07-10/a>
Swa Frantzen
Microsoft July 2012 Black Tuesday Update - Overview
2012-07-10/a>
Rob VandenBrink
Today at SANSFIRE (09 July 2012) - ISC Panel Discussion on the State of the Internet
2012-07-10/a>
Swa Frantzen
Microsoft revoking trust in Microsoft certificates - SA 2728973
2012-07-10/a>
Swa Frantzen
Microsoft fix-it to disable gadgets - SA 2719662
2012-07-09/a>
Johannes Ullrich
The FBI will turn off the Internet on Monday (or not)
2012-07-09/a>
Manuel Humberto Santander Pelaez
Internet Storm Center panel tonight at SANSFIRE 2012!
2012-07-05/a>
Adrien de Beaupre
New OS X trojan backdoor MaControl variant reported
2012-07-05/a>
Adrien de Beaupre
Microsoft advanced notification for July 2012 patch Tuesday
2012-07-02/a>
Joel Esler
A rough guide to keeping your website up
2012-07-02/a>
Dan Goldberg
Storms of June 29th 2012 in Mid Atlantic region of the USA
2012-07-02/a>
Joel Esler
Linux & Java leap second bug
2012-06-29/a>
Jim Clausing
Updated SysInternals tools - Autoruns, Process Explorer, Process Monitor, PSKill -- http://blogs.technet.com/b/sysinternals/archive/2012/06/28/updates-autoruns-v11-32-process-explorer-v15-21-process-monitor-v3-02-pskill-v1-15-rammap-v1-2.aspx
2012-06-28/a>
Chris Mohan
Massive spike in BGP traffic - Possible BGP poisoning?
2012-06-28/a>
Adam Swanger
ISC Feature of the Week: About the Internet Storm Center
2012-06-25/a>
Guy Bruneau
Issues with Windows Update Agent
2012-06-25/a>
Guy Bruneau
Using JSDetox to Analyze and Deobfuscate Javascript
2012-06-22/a>
Kevin Liston
Updated Poll: Which Patch Delivery Schedule Works the Best for You?
2012-06-22/a>
Adam Swanger
ISC Feature of the Week: Tools->ISC At-A-Glance
2012-06-21/a>
Russ McRee
Analysis of drive-by attack sample set
2012-06-21/a>
Russ McRee
Wireshark 1.8.0 released 21 JUN 2012 http://www.wireshark.org/download.html
2012-06-20/a>
Raul Siles
Firefox 13.0.1 Update
2012-06-20/a>
Raul Siles
CVE-2012-0217 (from MS12-042) applies to other environments too
2012-06-19/a>
Daniel Wesemann
Vulnerabilityqueerprocessbrittleness
2012-06-13/a>
Johannes Ullrich
Microsoft Certificate Updater
2012-06-12/a>
Swa Frantzen
Adobe June 2012 Black Tuesday patches
2012-06-12/a>
Swa Frantzen
Microsoft June 2012 Black Tuesday Update - Overview
2012-06-12/a>
Swa Frantzen
Java 7u5 and 6u33 released
2012-06-11/a>
Johannes Ullrich
Microsoft Update Security
2012-06-07/a>
Johannes Ullrich
Microsoft June Security Bulletin Advance Notification
2012-06-06/a>
Jim Clausing
Firefox, Thunderbird, and Seamonkey Security Updates
2012-06-05/a>
Adam Swanger
ISC Feature of the Week: IPv6 Preparedness and Tools
2012-06-01/a>
Adam Swanger
ISC Feature of the Week: Country and Region Report
2012-05-31/a>
Johannes Ullrich
SCADA@Home: Your health is no secret no more!
2012-05-24/a>
Adam Swanger
ISC Feature of the Week: Country Report
2012-05-23/a>
Mark Baggett
Problems with MS12-035 affecting XP, SBS and Windows 2003?
2012-05-22/a>
Johannes Ullrich
nmap 6 released
2012-05-17/a>
Adam Swanger
ISC Feature of the Week: Tools->Information Gathering
2012-05-16/a>
Johannes Ullrich
Reserved IP Address Space Reminder
2012-05-11/a>
Adam Swanger
ISC Feature of the Week: Link List
2012-05-08/a>
Adam Swanger
Microsoft May 2012 Black Tuesday Update - Overview
2012-05-04/a>
Adam Swanger
ISC Feature of the Week: Data/Reports
2012-05-04/a>
Guy Bruneau
Adobe Security Flash Update
2012-04-27/a>
Adam Swanger
ISC Feature of the Week: Handler Created Tools
2012-04-21/a>
Guy Bruneau
WordPress Release Security Update
2012-04-18/a>
Adam Swanger
ISC Feature of the Week: Suspicious Domains
2012-04-15/a>
Rick Wanner
.Net update affects printing from some applications
2012-04-13/a>
Daniel Wesemann
Oracle CPU Patches announced for Apr 17
2012-04-13/a>
Adam Swanger
ISC Feature of the Week: Get to know the Handlers
2012-04-10/a>
Swa Frantzen
Microsoft April 2012 Black Tuesday Update - Overview
2012-04-10/a>
Swa Frantzen
Adobe April 2012 Black Tuesday Update
2012-04-06/a>
Johannes Ullrich
Another OS X Java Patch
2012-04-06/a>
Johannes Ullrich
Microsoft April Patch Tuesday Pre-Announcement (6 Patches): http://technet.microsoft.com/en-us/security/bulletin/ms12-apr
2012-04-06/a>
Johannes Ullrich
Adobe Patch Tuesday Prerelease (Reader/Acrobat) http://www.adobe.com/support/security/bulletins/apsb12-08.html
2012-04-04/a>
Adam Swanger
ISC Feature of the Week: Diary/Infocon/Event Notifications
2012-03-27/a>
Adam Swanger
ISC Feature of the Week: ISC Poll
2012-03-21/a>
Adam Swanger
ISC Feature of the Week: Presentations and Papers
2012-03-20/a>
Johannes Ullrich
A Reminder: Private Key Security
2012-03-15/a>
Adam Swanger
ISC Feature of the Week: Infocon
2012-03-13/a>
Lenny Zeltser
March 2012 Microsoft Black Tuesday
2012-03-12/a>
Johannes Ullrich
Apple Released Safari 5.1.4
2012-03-08/a>
Johannes Ullrich
Apple Patches
2012-03-08/a>
Johannes Ullrich
Microsoft March Patch Tuesday Pre-Anouncement out. 6 patches, 1 critical: http://technet.microsoft.com/en-us/security/bulletin/ms12-mar
2012-03-06/a>
Mark Hofman
Websense posted a small article relating to mass injection into wordpress sites (thanks Chris) More info Here --> http://community.websense.com/blogs/securitylabs/archive/2012/03/05/mass-injection-of-wordpress-sites.aspx
2012-03-06/a>
Adam Swanger
ISC Feature of the Week: Follow us on Twitter
2012-03-05/a>
Johannes Ullrich
Adobe Flash Player Security Update
2012-03-03/a>
Jim Clausing
New automated sandbox for Android malware
2012-02-29/a>
Adam Swanger
ISC Feature of the Week: 404Project Reports
2012-02-22/a>
Adam Swanger
ISC Feature of the Week: Handler Diaries
2012-02-16/a>
Tony Carothers
Java Update for February
2012-02-15/a>
Adam Swanger
ISC Feature of the Week: XML Feeds
2012-02-14/a>
Johannes Ullrich
Adobe Shockwave Player and RoboHelp for Word Patches
2012-02-14/a>
Johannes Ullrich
February 2012 Microsoft Black Tuesday
2012-02-08/a>
Jim Clausing
Chrome to stop checking Certificate Revocation List (CRL)?
2012-02-07/a>
Adam Swanger
ISC Feature of the Week: Security Dashboard
2012-02-04/a>
Scott Fendley
Apple Security Advisory 2012-001 v1.1
2012-02-01/a>
Russ McRee
Oracle Security Alert: http://www.oracle.com/technetwork/topics/security/alert-cve-2011-5035-1506603.html
2012-02-01/a>
Adam Swanger
ISC Feature of the Week: ISC Search
2012-01-31/a>
Russ McRee
Firefox 10 and VMWare advisories and updates
2012-01-25/a>
Adam Swanger
ISC Feature of the Week: ISC Link Back
2012-01-18/a>
Adam Swanger
ISC Feature of the Week: The 404Project
2012-01-18/a>
Richard Porter
Oracle Quarterly Released, http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
2012-01-16/a>
Kevin Shortt
Zappos Breached
2012-01-11/a>
Adam Swanger
ISC Feature of the Week: Internet Storm Center / DShield API
2012-01-10/a>
Adrien de Beaupre
January 2012 Microsoft Black Tuesday Summary
2012-01-10/a>
Adrien de Beaupre
Adobe January 2012 Black Tuesday overview
2012-01-06/a>
Guy Bruneau
January 2012 Patch Tuesday Pre-release
2012-01-03/a>
Rick Wanner
Analysis of the Stratfor Password List
2012-01-03/a>
Bojan Zdrnja
The tale of obfuscated JavaScript continues
2012-01-03/a>
Adam Swanger
ISC Feature of the Week: How to Submit Firewall Logs
2011-12-28/a>
Daniel Wesemann
Hash collisions vulnerability in web servers
2011-12-25/a>
Deborah Hale
Another Company Falls Victim
2011-12-13/a>
Johannes Ullrich
December 2011 Microsoft Black Tuesday Summary
2011-12-08/a>
Adrien de Beaupre
Microsoft Security Bulletin Advance Notification for December 2011
2011-12-07/a>
Lenny Zeltser
Adobe Acrobat Latest Zero-Day Vulnerability Fix Coming to All Platforms by January 10
2011-12-01/a>
Mark Hofman
SQL Injection Attack happening ATM
2011-11-19/a>
Pedro Bueno
Dragon Research Group (DRG) announced the white paper entitled "VNC: Threats and Countermeasures" : https://dragonresearchgroup.org/insight/vnc-tac.html
2011-11-08/a>
Swa Frantzen
Microsoft November 2011 Black Tuesday Overview
2011-11-08/a>
Swa Frantzen
Abobe November 2011 Black Tuesday Overview
2011-11-08/a>
Swa Frantzen
Apple Black Tuesday
2011-11-03/a>
Guy Bruneau
November 2011 Patch Tuesday Pre-release
2011-11-02/a>
Russ McRee
Wireshark updates: 1.6.3 and 1.4.10 released
2011-11-01/a>
Russ McRee
Secure languages & frameworks
2011-10-26/a>
Rick Wanner
Critical Control 17:Penetration Tests and Red Team Exercises
2011-10-26/a>
Rob VandenBrink
The Theoretical "SSL Renegotiation" Issue gets a Whole Lot More Real !
2011-10-22/a>
Guy Bruneau
Oracle Java SE Critical Patch Update
2011-10-19/a>
Mark Hofman
Oracle Critical Patch Update
2011-10-11/a>
Swa Frantzen
Microsoft Black Tuesday Overview October 2011
2011-10-11/a>
Swa Frantzen
Apple iTunes 10.5
2011-10-01/a>
Mark Hofman
Hot on the heels fo FF, Thunderbird v 7.0.1 and SeaMonkey v 2.4.1 have been updated.
2011-09-28/a>
Richard Porter
All Along the ARP Tower!
2011-09-21/a>
Swa Frantzen
Emergency patch expected for Flash Player
2011-09-19/a>
Guy Bruneau
MS Security Advisory Update - Fraudulent DigiNotar Certificates
2011-09-18/a>
Guy Bruneau
Google Chrome Security Updates
2011-09-13/a>
Swa Frantzen
Microsoft September 2011 Black Tuesday
2011-09-13/a>
Swa Frantzen
Adobe September 2011 Black Tuesday overview
2011-09-09/a>
Guy Bruneau
Adobe plan to release critical security updates next Tuesday for Acrobat and Reader http://www.adobe.com/support/security/bulletins/apsb11-24.html
2011-09-09/a>
Johannes Ullrich
Early Patch Tuesday Today: Microsoft September 2011 Patches
2011-09-09/a>
Guy Bruneau
Apple Certificate Trust Policy Update
2011-09-09/a>
Guy Bruneau
Adobe Publish its List of Trusted Root Certificate - http://www.adobe.com/security/approved-trust-list.html
2011-09-08/a>
Rob VandenBrink
Should We Still Test Patches?
2011-09-08/a>
Rob VandenBrink
When Good CA's go Bad: Other Things to Check in Your Datacenter
2011-09-08/a>
Mark Hofman
Microsoft has released their advanced notification for patch Tuesday. 15 Vulnerabilities to be addressed. more here --> http://blogs.technet.com/b/msrc/archive/2011/09/08/advanced-notification-for-the-september-2011-bulletin-release.aspx
2011-09-06/a>
Guy Bruneau
Firefox 6.0.2 released to removed trust to DigiNotar certificate authority http://www.mozilla.org/en-US/firefox/6.0.2/releasenotes/
2011-09-05/a>
Raul Siles
Java 7 Officially Released
2011-08-31/a>
Johannes Ullrich
Firefox/Thunderbird 6.0.1 released to blocklist bad DigiNotar SSL certificates
2011-08-30/a>
Johannes Ullrich
Apache patch out for "byte range" DoS vulnerability http://www.apache.org/dist/httpd/Announcement2.2.html
2011-08-24/a>
Rob VandenBrink
Citrix Access Gateway Cross Site Scripting vulnerability and fix ==> http://support.citrix.com/article/CTX129971
2011-08-17/a>
Rob VandenBrink
Putting all of Your Eggs in One Basket - or How NOT to do Layoffs
2011-08-16/a>
Johannes Ullrich
What are the most dangerous web applications and how to secure them?
2011-08-14/a>
Guy Bruneau
FireCAT 2.0 Released
2011-08-09/a>
Swa Frantzen
Microsoft August 2011 Black Tuesday Overview
2011-08-09/a>
Swa Frantzen
Adobe August 2011 Black Tuesday Overview
2011-08-05/a>
Johannes Ullrich
Microsoft Patch Tuesday Advance Notification: 13 Bulletins coming http://www.microsoft.com/technet/security/Bulletin/MS11-aug.mspx
2011-07-29/a>
Richard Porter
Apple Lion talking on TCP 5223
2011-07-28/a>
Johannes Ullrich
Announcing: The "404 Project"
2011-07-23/a>
Johannes Ullrich
Apple Battery Firmware Default Password
2011-07-15/a>
Deborah Hale
Apple Software Updates
2011-07-12/a>
Swa Frantzen
Microsoft July 2011 Black Tuesday Overview
2011-07-07/a>
Rob VandenBrink
"There's a Patch for that" (or maybe not)
2011-07-06/a>
Rob VandenBrink
"Too Important to Patch" - Wait? What?
2011-07-05/a>
Raul Siles
Helping Developers Understand Security - Spot the Vuln
2011-06-28/a>
Johannes Ullrich
Update: Google Chrome 12.0.742.112 released http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html
2011-06-28/a>
Johannes Ullrich
Update: Thunderbird 5.0 released. https://www.mozilla.org/en-US/thunderbird/
2011-06-23/a>
Jim Clausing
Apple Security Updates 2011-004
2011-06-22/a>
Guy Bruneau
How Good is your Employee Termination Policy?
2011-06-21/a>
Chris Mohan
StartSSL, a web authentication authority, suspend services after a security breach
2011-06-14/a>
Swa Frantzen
Adobe releases patches
2011-06-14/a>
Swa Frantzen
Microsoft June 2011 Black Tuesday Overview
2011-06-09/a>
Richard Porter
Chrome Version 12.0.742.91 Released
2011-06-06/a>
Manuel Humberto Santander Pelaez
Phishing: Same goal, same techniques and people still falling for such scams
2011-06-01/a>
Adrien de Beaupre
Wireshark 1.4.7 and 1.2.17 Released - http://www.wireshark.org/news/20110531.html
2011-05-20/a>
Guy Bruneau
Sysinternals Updates, Analyzing Stuxnet Infection with Sysinternals Tools Part 3
2011-05-18/a>
Bojan Zdrnja
Android, HTTP and authentication tokens
2011-05-16/a>
Jason Lam
Firefox 3.5 forced upgrade coming soon
2011-05-10/a>
Swa Frantzen
May 2011 Microsoft Black Tuesday Overview
2011-05-06/a>
Richard Porter
Updated Exploit Index for Microsoft
2011-05-04/a>
Richard Porter
Microsoft Sysinterals Update
2011-05-01/a>
Deborah Hale
Java 6.25 Is Now Available
2011-04-28/a>
Chris Mohan
DSL Reports advise 9,000 accounts were compromised
2011-04-26/a>
John Bambenek
Is the Insider Threat Really Over?
2011-04-25/a>
Rob VandenBrink
Sony PlayStation Network Outage - Day 5
2011-04-22/a>
Manuel Humberto Santander Pelaez
In-house developed applications: The constant headache for the information security officer
2011-04-21/a>
Guy Bruneau
Adobe Reader and Acrobat Security Updates
2011-04-20/a>
Daniel Wesemann
Data Breach Investigations Report published by Verizon
2011-04-14/a>
Adrien de Beaupre
Sysinternals updates, a new blog post, and webcast
2011-04-11/a>
Jim Clausing
April 2011 Microsoft Black Tuesday Summary
2011-04-08/a>
Johannes Ullrich
Dark Black Tuesday Coming Up: 17 Microsoft Bulletins
2011-04-03/a>
Richard Porter
Extreme Disclosure? Not yet but a great trend!
2011-03-29/a>
Daniel Wesemann
Malware emails with fake cellphone invoice
2011-03-22/a>
Kevin Shortt
Adobe Reader/Acrobat Security Update - http://www.adobe.com/support/security/bulletins/apsb11-06.html
2011-03-21/a>
Kevin Shortt
APPLE-SA-2011-03-21-1 Mac OS X v10.6.7 and Security Update 2011-001
2011-03-09/a>
Chris Mohan
Possible Issue with Forefront Update KB2508823
2011-03-08/a>
Jim Clausing
March 2011 Microsoft Black Tuesday Summary
2011-03-07/a>
Bojan Zdrnja
Oracle padding attacks (Codegate crypto 400 writeup)
2011-03-02/a>
Chris Mohan
Microsoft’s Autorun update v2.1 now automatically deployed from Windows Update
2011-02-21/a>
Adrien de Beaupre
Kaspersky update servers unreachable
2011-02-14/a>
Lorna Hutcheson
Network Visualization
2011-02-09/a>
Mark Hofman
Adobe Patches (shockwave, Flash, Reader & Coldfusion)
2011-02-08/a>
Joel Esler
Feburary 2011 Microsoft Black Tuesday Summary
2011-02-05/a>
Guy Bruneau
OpenSSH Legacy Certificate Information Disclosure Vulnerability
2011-02-04/a>
Daniel Wesemann
Oh, just click "yes"
2011-02-04/a>
Daniel Wesemann
Busy patch tuesday ahead
2011-01-27/a>
Chris Carboni
Opera Updates
2011-01-23/a>
Richard Porter
Crime is still Crime!
2011-01-18/a>
Daniel Wesemann
Oracle Patches (Jan2011 CPU)
2011-01-13/a>
Rob VandenBrink
Blackberry BES Server Updates for PDF Vulnerabilities
2011-01-12/a>
Richard Porter
How Many Loyalty Cards do you Carry?
2011-01-12/a>
Richard Porter
Yet Another Data Broker? AOL Lifestream.
2011-01-11/a>
Kevin Shortt
January 2011 Microsoft Black Tuesday Summary
2011-01-08/a>
Guy Bruneau
January 2011 Patch Tuesday Pre-release
2010-12-25/a>
Manuel Humberto Santander Pelaez
An interesting vulnerability playground to learn application vulnerabilities
2010-12-23/a>
Mark Hofman
White house greeting cards
2010-12-20/a>
Guy Bruneau
Patch Issues with Outlook 2007
2010-12-15/a>
Manuel Humberto Santander Pelaez
Vulnerability in the PDF distiller of the BlackBerry Attachment Service
2010-12-14/a>
Manuel Humberto Santander Pelaez
December 2010 Microsoft Black Tuesday Summary
2010-12-12/a>
Raul Siles
New trend regarding web application vulnerabilities?
2010-12-10/a>
Mark Hofman
Microsoft patches
2010-12-03/a>
Mark Hofman
AVG Update Bricking windows 7 64 bit
2010-12-02/a>
Kevin Johnson
SQL Injection: Wordpress 3.0.2 released
2010-12-02/a>
Kevin Johnson
ProFTPD distribution servers compromised
2010-11-30/a>
Joel Esler
VMWare Security Advisory
2010-11-29/a>
Stephen Hall
Sun security updates
2010-11-24/a>
Bojan Zdrnja
Privilege escalation 0-day in almost all Windows versions
2010-11-16/a>
Guy Bruneau
Acrobat and Adobe Reader Security Update
2010-11-16/a>
Guy Bruneau
Mac OS X Server v10.6.5 (10H575) Security Update: http://support.apple.com/kb/HT4452
2010-11-12/a>
Guy Bruneau
Scripting with Unix Date
2010-11-09/a>
Johannes Ullrich
November 2010 Microsoft Black Tuesday Summary
2010-11-04/a>
Johannes Ullrich
Microsoft Patches Pre-Announcement
2010-10-22/a>
Manuel Humberto Santander Pelaez
Intypedia project
2010-10-12/a>
Adrien de Beaupre
October 2010 Microsoft Black Tuesday Summary
2010-10-08/a>
Rick Wanner
Patch Tuesday Pre-release -- 16 updates
2010-10-03/a>
Adrien de Beaupre
Canada's Cyber Security Strategy released today
2010-09-30/a>
Pedro Bueno
MS OOB .NET patch is now also available via Windows Update.
2010-09-28/a>
Daniel Wesemann
MS10-070 OOB Patch for ASP.NET vulnerability
2010-09-27/a>
Adrien de Beaupre
MS OOB patch tomorrow for Security Advisory 2416728
2010-09-26/a>
Daniel Wesemann
Egosurfing, the corporate way
2010-09-25/a>
Rick Wanner
Guest Diary: Andrew Hunt - Visualizing the Hosting Patterns of Modern Cybercriminals
2010-09-21/a>
Johannes Ullrich
Implementing two Factor Authentication on the Cheap
2010-09-14/a>
Adrien de Beaupre
September 2010 Microsoft Black Tuesday Summary
2010-09-12/a>
Manuel Humberto Santander Pelaez
Adobe Acrobat pushstring Memory Corruption paper
2010-08-29/a>
Swa Frantzen
DLL hijacking - what are you doing ?
2010-08-25/a>
Pedro Bueno
Adobe released security update for Shockwave player that fix several CVEs: APSB1020
2010-08-23/a>
Manuel Humberto Santander Pelaez
Firefox plugins to perform penetration testing activities
2010-08-19/a>
Rob VandenBrink
Don points us to multiple Adobe updates (Reader and Acrobat 9.3.4 among them) ==> http://www.adobe.com/support/downloads/new.jsp
2010-08-18/a>
Guy Bruneau
Adobe out-of-cycle Updates
2010-08-16/a>
Raul Siles
DDOS: State of the Art
2010-08-16/a>
Raul Siles
Blind Elephant: A New Web Application Fingerprinting Tool
2010-08-15/a>
Manuel Humberto Santander Pelaez
Obfuscated SQL Injection attacks
2010-08-15/a>
Manuel Humberto Santander Pelaez
Python to test web application security
2010-08-13/a>
Tom Liston
The Strange Case of Doctor Jekyll and Mr. ED
2010-08-10/a>
Jason Lam
Adobe critical security updates
2010-08-10/a>
Jim Clausing
August 2010 Micrsoft Black Tuesday Summary
2010-08-10/a>
Daniel Wesemann
New Apple security updates for iPad/Pod/Phone. See http://support.apple.com/kb/ht1222
2010-08-07/a>
Stephen Hall
Countdown to Tuesday...
2010-08-02/a>
Johannes Ullrich
Microsoft Out-of-Band bulletin addresses LNK/Shortcut vulnerability
2010-07-29/a>
Rob VandenBrink
The 2010 Verizon Data Breach Report is Out
2010-07-24/a>
Manuel Humberto Santander Pelaez
Transmiting logon information unsecured in the network
2010-07-21/a>
Adrien de Beaupre
Update on .LNK vulnerability
2010-07-18/a>
Manuel Humberto Santander Pelaez
SAGAN: An open-source event correlation system - Part 1: Installation
2010-07-15/a>
Deborah Hale
Be on the Alert
2010-07-13/a>
Jim Clausing
July 2010 Microsoft Black Tuesday Summary
2010-07-13/a>
Jim Clausing
VMware Studio Security Update
2010-07-08/a>
Kyle Haugsness
Pirate Bay account database compromised
2010-07-07/a>
Kevin Shortt
Facebook, Facebook, What Do YOU See?
2010-07-02/a>
Johannes Ullrich
OISF released version 1.0.0 of Suricata, the open source IDS/IPS engine http://www.openinfosecfoundation.org
2010-06-29/a>
donald smith
Adobe Reader 9.3.3/8.2.3 addressing CVE-2010-1297
2010-06-26/a>
Guy Bruneau
socat to Simulate a Website
2010-06-18/a>
Adrien de Beaupre
Distributed SSH Brute Force Attempts on the rise again
2010-06-15/a>
Manuel Humberto Santander Pelaez
TCP evasions for IDS/IPS
2010-06-15/a>
Manuel Humberto Santander Pelaez
iPhone 4 Order Security Breach Exposes Private Information
2010-06-14/a>
Manuel Humberto Santander Pelaez
Another way to get protection for application-level attacks
2010-06-14/a>
Manuel Humberto Santander Pelaez
Rogue facebook application acting like a worm
2010-06-08/a>
Manuel Humberto Santander Pelaez
June 2010 Microsoft Black Tuesday Summary
2010-06-06/a>
Manuel Humberto Santander Pelaez
Nice OS X exploit tutorial
2010-06-05/a>
Guy Bruneau
Security Advisory for Flash Player, Adobe Reader and Acrobat
2010-06-03/a>
Guy Bruneau
Microsoft Patch Tuesday June 2010 Pre-Release
2010-06-02/a>
Rob VandenBrink
SPAM pretending to be from Habitat for Humanity
2010-05-22/a>
Rick Wanner
SANS 2010 Digital Forensics Summit - APT Based Forensic Challenge
2010-05-12/a>
Rob VandenBrink
Adobe Shockwave Update
2010-05-12/a>
Rob VandenBrink
Layer 2 Security - Private VLANs (the Story Continues ...)
2010-05-11/a>
Scott Fendley
May 2010 Microsoft Patches
2010-05-08/a>
Guy Bruneau
Microsoft Patch Tuesday May 2010 Pre-Release
2010-05-04/a>
Rick Wanner
SIFT review in the ISSA Toolsmith
2010-04-27/a>
Rob VandenBrink
Layer 2 Security - L2TPv3 for Disaster Recovery Sites
2010-04-22/a>
Deborah Hale
How McAfee turned a Disaster Exercise Into a REAL Learning Experience for Our Community Disaster Team
2010-04-22/a>
John Bambenek
Data Redaction: You're Doing it Wrong
2010-04-21/a>
Guy Bruneau
McAfee DAT 5958 Update Issues
2010-04-21/a>
Guy Bruneau
Google Chrome Security Update v4.1.249.1059 Released: http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html
2010-04-20/a>
Raul Siles
Are You Ready for a Transportation Collapse...?
2010-04-14/a>
Mark Hofman
Oracle has released 47 critical patches (Includes SUN patches)
2010-04-14/a>
Mark Hofman
And let the patching games continue
2010-04-13/a>
Adrien de Beaupre
Web App Testing Tools
2010-04-13/a>
Johannes Ullrich
Microsoft April 2010 Patch Tuesday
2010-04-13/a>
Adrien de Beaupre
Security update available for Adobe Reader and Acrobat
2010-04-08/a>
Bojan Zdrnja
JavaScript obfuscation in PDF: Sky is the limit
2010-04-08/a>
Guy Bruneau
Microsoft Patch Tuesday April 2010 Pre-Release
2010-04-06/a>
Daniel Wesemann
Application Logs
2010-04-04/a>
Mari Nichols
Financial Management of Cyber Risk
2010-04-02/a>
Guy Bruneau
Security Advisory for ESX Service Console
2010-04-02/a>
Guy Bruneau
Foxit Reader Security Update
2010-04-02/a>
Guy Bruneau
Oracle Java SE and Java for Business Critical Patch Update Advisory
2010-03-29/a>
Adrien de Beaupre
APPLE-SA-2010-03-29-1 Security Update 2010-002 / Mac OS X v10.6.3
2010-03-29/a>
Pedro Bueno
Microsoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix.
2010-03-29/a>
Adrien de Beaupre
OOB Update for Internet Explorer MS10-018
2010-03-27/a>
Guy Bruneau
HP-UX Running NFS/ONCplus, Inadvertently Enabled NFS
2010-03-22/a>
Guy Bruneau
New Opera 10.51 available with security fixes. More information available at: http://www.opera.com/docs/changelogs/windows/1051/
2010-03-21/a>
Scott Fendley
Skipfish - Web Application Security Tool
2010-03-15/a>
Adrien de Beaupre
Spamassassin Milter Plugin Remote Root Attack
2010-03-12/a>
Mark Hofman
Firefox 3.6 is being pushed out to users. http://www.mozilla.com/en-US/firefox/3.6/releasenotes/
2010-03-11/a>
Mark Hofman
A new version of Safari is out. Looks like for Mac and Windows. Plenty of security fixes (mostly for Windows Safari users http://support.apple.com/kb/HT4070 )
2010-03-10/a>
Rob VandenBrink
Microsoft re-release of KB973811 - attacks on Extended Protection for Authentication
2010-03-09/a>
John Bambenek
March 2010 - Microsoft Patch Tuesday Diary
2010-03-08/a>
Raul Siles
Samurai WTF 0.8
2010-03-08/a>
Raul Siles
Microsoft announced two important bulletins (fixing multiple vulns. affecting Windows and Office) for tomorrow: http://www.microsoft.com/technet/security/Bulletin/MS10-mar.mspx
2010-03-06/a>
Tony Carothers
Integration and the Security of New Technologies
2010-03-05/a>
Kyle Haugsness
Javascript obfuscators used in the wild
2010-03-03/a>
Mark Hofman
MS10-015 re-released
2010-03-01/a>
Mark Hofman
Microsoft will drop support for Vista (without any Service Packs) on April 13 and support for XP SP2 ends July 13. (i.e. no more security updates). If you are still running these, it it time to update.
2010-02-27/a>
Guy Bruneau
PHP 5.2.13 Security Update
2010-02-22/a>
Rob VandenBrink
New Risks in Penetration Testing
2010-02-21/a>
Patrick Nolan
Looking for "more useful" malware information? Help develop the format.
2010-02-20/a>
Mari Nichols
Is "Green IT" Defeating Security?
2010-02-17/a>
Rob VandenBrink
Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing"
2010-02-17/a>
Rob VandenBrink
Multiple Security Updates for ESX 3.x and ESXi 3.x
2010-02-16/a>
Robert Danford
Adobe Updates: http://www.adobe.com/support/security/bulletins/apsb10-07.html http://www.adobe.com/support/security/bulletins/apsb10-06.html
2010-02-11/a>
Johannes Ullrich
MS10-015 may cause Windows XP to blue screen
2010-02-11/a>
Deborah Hale
The Mysterious Blue Screen
2010-02-10/a>
Marcus Sachs
Datacenters and Directory Traversals
2010-02-09/a>
Mark Hofman
Oracle has an unscheduled security alert and patch for CVE-2010-0073. The issue affects WebLogic Server and is remotely exploitable. Details and patch are here http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0073.html
2010-02-09/a>
Johannes Ullrich
February 2010 Black Tuesday Overview
2010-02-05/a>
Jim Clausing
Memory Analysis - time to move beyond XP
2010-02-04/a>
Johannes Ullrich
Microsoft Patch Tuesday Pre-Release
2010-01-29/a>
Johannes Ullrich
Analyzing isc.sans.org weblogs, part 2, RFI attacks
2010-01-29/a>
Adrien de Beaupre
Neo-legacy applications
2010-01-24/a>
Pedro Bueno
Outdated client applications
2010-01-21/a>
Johannes Ullrich
Microsoft January Out of Band Patch
2010-01-21/a>
Chris Carboni
Security Update Available for Shockwave Player
2010-01-21/a>
Chris Carboni
* Microsoft Out Of Band Patch Release
2010-01-12/a>
Johannes Ullrich
Microsoft Security Bulletin: January 2010
2010-01-12/a>
Johannes Ullrich
Oracle Patches Relased
2010-01-12/a>
Johannes Ullrich
Pre-Announced Adobe Reader and Acrobat Patch Found!
2010-01-07/a>
Daniel Wesemann
Static analysis of malicious PDFs
2010-01-07/a>
Daniel Wesemann
Static analysis of malicous PDFs (Part #2)
2010-01-06/a>
Guy Bruneau
Firefox security and stability update for version 3.5.7 and 3.0.17 available for download
2009-12-19/a>
Deborah Hale
Educationing Our Communities
2009-12-16/a>
Rob VandenBrink
Seamonkey Update to 2.0.1, find the release notes here ==> http://www.seamonkey-project.org/releases/seamonkey2.0.1
2009-12-09/a>
Swa Frantzen
Adobe flash player and air patched
2009-12-08/a>
Deborah Hale
December 2009 Black Tuesday Overview
2009-12-07/a>
Rick Wanner
Cheat Sheet: Analyzing Malicious Documents
2009-12-03/a>
Mark Hofman
Apple released some Java updates today APPLE-SA-2009-12-03-1 & 2 (for 10.5 and 10.6). Fixes a number of security issues so updating is a good idea.
2009-12-03/a>
Mark Hofman
Next week will be a big patch week - Adobe is also releasing patches "Adobe is planning to release an update for Adobe Flash Player 10.0.32.18 and earlier versions, and an update to Adobe AIR 1.5.2 and earlier versions, to resolve critical security issues
2009-12-02/a>
Rob VandenBrink
SPAM and Malware taking advantage of H1N1 concerns
2009-12-02/a>
Rob VandenBrink
Microsoft Black Screen of Death - Fact of Fiction?
2009-11-29/a>
Patrick Nolan
A Cloudy Weekend
2009-11-25/a>
Jim Clausing
Tool updates
2009-11-25/a>
Jim Clausing
Microsoft Updates requiring reboot
2009-11-25/a>
Jim Clausing
Updates to my GREM Gold scripts and a new script
2009-11-21/a>
Mark Hofman
VMware vCenter and ESX updates available http://lists.vmware.com/pipermail/security-announce/2009/000070.html
2009-11-13/a>
Deborah Hale
It's Never Too Early To Start Teaching Them
2009-11-13/a>
Adrien de Beaupre
TLS & SSLv3 renegotiation vulnerability explained
2009-11-13/a>
Adrien de Beaupre
Conficker patch via email?
2009-11-11/a>
Rob VandenBrink
Layer 2 Network Protections against Man in the Middle Attacks
2009-11-11/a>
Rob VandenBrink
Apple Safari 4.0.4 Released
2009-11-10/a>
Swa Frantzen
Microsoft November Black Tuesday Overview
2009-11-09/a>
Guy Bruneau
Apple Security Update 2009-006 for Mac OS X v10.6.2
2009-11-06/a>
Mark Hofman
A new version of Firefox (3.5.5) just became available. According to the release notes they are stability improvements.
2009-11-05/a>
Swa Frantzen
Insider threat: The snapnames case
2009-11-02/a>
Rob VandenBrink
Microsoft releases v1.02 of Enhanced Mitigation Evaluation Toolkit (EMET)
2009-10-28/a>
Johannes Ullrich
Firefox 3.5.4 released. Lots of security bug fixes. (thanks Gilbert!)
2009-10-27/a>
Rob VandenBrink
New VMware Desktop Products Released (Workstation, Fusion, ACE)
2009-10-22/a>
Adrien de Beaupre
Sysinternals updates: Disk2vhd v1.1, ZoomIt v4.1, Coreinfo v2.0, VMMap v2.4
2009-10-20/a>
Raul Siles
WASC 2008 Statistics
2009-10-19/a>
Daniel Wesemann
Backed up, lately ?
2009-10-16/a>
Adrien de Beaupre
Disable MS09-054 patch, or Firefox Plugin?
2009-10-13/a>
Johannes Ullrich
Microsoft October 2009 Black Tuesday Overview
2009-10-13/a>
Daniel Wesemann
Adobe Reader and Acrobat - Black Tuesday continues
2009-10-09/a>
Rob VandenBrink
THAWTE to discontinue free Email Certificate Services and Web of Trust Service
2009-10-04/a>
Guy Bruneau
Samba Security Information Disclosure and DoS
2009-09-27/a>
Stephen Hall
Use Emerging Threats signatures? READ THIS!
2009-09-24/a>
Jim Clausing
A couple more tools
2009-09-20/a>
Mari Nichols
Insider Threat and Security Awareness
2009-09-16/a>
Raul Siles
Review the security controls of your Web Applications... all them!
2009-09-08/a>
Guy Bruneau
Microsoft September 2009 Black Tuesday Overview
2009-09-07/a>
Lorna Hutcheson
Encrypting Data
2009-09-04/a>
Adrien de Beaupre
SeaMonkey Security Update
2009-08-28/a>
Adrien de Beaupre
WPA with TKIP done
2009-08-19/a>
Daniel Wesemann
Checking your protection
2009-08-11/a>
Swa Frantzen
Microsoft August 2009 Black Tuesday Overview
2009-08-05/a>
donald smith
Security Update 2009-003 / Mac OS X v10.5.8
2009-08-04/a>
donald smith
Java Security Update
2009-07-31/a>
Deborah Hale
Don't forget to tell your SysAdmin Thanks
2009-07-31/a>
Deborah Hale
The iPhone patch is out
2009-07-30/a>
Mark Hofman
Happy patching day
2009-07-28/a>
Adrien de Beaupre
YYAMCCBA
2009-07-28/a>
Adrien de Beaupre
MS released two OOB bulletins and an advisory
2009-07-27/a>
Raul Siles
New Hacker Challenge: Prison Break - Breaking, Entering & Decoding
2009-07-26/a>
Jim Clausing
New Volatility plugins
2009-07-24/a>
Rick Wanner
Microsoft Out of Band Patch
2009-07-23/a>
John Bambenek
Missouri Passes Breach Notification Law: Gap Still Exists for Banking Account Information
2009-07-18/a>
Patrick Nolan
Chrome update contains Security fixes
2009-07-17/a>
John Bambenek
Cross-Platform, Cross-Browser DoS Vulnerability
2009-07-14/a>
Swa Frantzen
Microsoft July Black Tuesday Overview
2009-07-14/a>
Swa Frantzen
ISC DHCP client updated
2009-07-14/a>
Swa Frantzen
Oracle Black Tuesday
2009-07-13/a>
Adrien de Beaupre
* Infocon raised to yellow for Excel Web Components ActiveX vulnerability
2009-07-10/a>
Guy Bruneau
WordPress Fixes Multiple vulnerabilities
2009-07-09/a>
John Bambenek
Latest Updates on Ongoing DDoS on Governmental/Commercial Websites in USA and S. Korea
2009-07-02/a>
Daniel Wesemann
Time to update updating on PCs for 3rd party apps
2009-07-02/a>
Daniel Wesemann
Unpatched Bloatware on new PCs
2009-06-30/a>
Chris Carboni
Obfuscated Code
2009-06-30/a>
Chris Carboni
De-Obfuscation Submissions
2009-06-23/a>
Bojan Zdrnja
New Thunderbird out, patches couple of vulnerabilities
2009-06-21/a>
Bojan Zdrnja
Apache HTTP DoS tool mitigation
2009-06-11/a>
Rick Wanner
WHO Declares Flu A(H1N1) a Pandemic
2009-06-10/a>
Swa Frantzen
Java 6 update 14 released
2009-06-09/a>
Swa Frantzen
Adobe June Black Tuesday upgrades
2009-06-09/a>
Swa Frantzen
Microsoft June Black Tuesday Overview
2009-06-04/a>
Raul Siles
Malware targetting banks ATM's
2009-06-04/a>
Raul Siles
Targeted e-mail attacks asking to verify wire transfer details
2009-06-02/a>
Deborah Hale
Another Quicktime Update
2009-05-29/a>
Lorna Hutcheson
Blackberry Server Vulnerability
2009-05-29/a>
Lorna Hutcheson
VMWare Patches Released
2009-05-28/a>
Jim Clausing
More new volatility plugins
2009-05-26/a>
Jason Lam
A new Web application security blog
2009-05-26/a>
Jason Lam
Vista & Win2K8 SP2 available
2009-05-24/a>
Raul Siles
Analyzing malicious PDF documents
2009-05-22/a>
Mark Hofman
Patching and Adobe
2009-05-22/a>
Mark Hofman
Patching and Apple - Java issue
2009-05-20/a>
Tom Liston
Web Toolz
2009-05-15/a>
Daniel Wesemann
Warranty void if seal shredded?
2009-05-12/a>
Swa Frantzen
MSFT's version of responsible disclosure
2009-05-12/a>
Swa Frantzen
Apple patches and updates
2009-05-12/a>
Swa Frantzen
Adobe Acrobat (reader) patches released
2009-05-12/a>
Swa Frantzen
May Black Tuesday Overview
2009-05-04/a>
Tom Liston
Adobe Reader/Acrobat Critical Vulnerability
2009-04-29/a>
Jason Lam
Two Adobe 0-day vulnerabilities
2009-04-24/a>
John Bambenek
Data Leak Prevention: Proactive Security Requirements of Breach Notification Laws
2009-04-21/a>
Bojan Zdrnja
Web application vulnerabilities
2009-04-20/a>
Jason Lam
Digital Content on TV
2009-04-15/a>
Marcus Sachs
2009 Data Breach Investigation Report
2009-04-14/a>
Swa Frantzen
April Black Tuesday Overview
2009-04-14/a>
Swa Frantzen
Oracle quarterly patches
2009-04-07/a>
Bojan Zdrnja
Advanced JavaScript obfuscation (or why signature scanning is a failure)
2009-04-02/a>
Bojan Zdrnja
JavaScript insertion and log deletion attack tools
2009-03-26/a>
Mark Hofman
Sanitising media
2009-03-20/a>
donald smith
Stealthier then a MBR rootkit, more powerful then ring 0 control, it’s the soon to be developed SMM root kit.
2009-03-20/a>
Stephen Hall
Making the most of your runbooks
2009-03-18/a>
Adrien de Beaupre
Adobe Security Bulletin Adobe Reader and Acrobat
2009-03-10/a>
Swa Frantzen
March black Tuesday overview
2009-03-10/a>
Swa Frantzen
Adobe Acrobat 9.1 released
2009-03-02/a>
Swa Frantzen
Obama's leaked chopper blueprints: anything we can learn?
2009-03-01/a>
Jim Clausing
Cool combination of tools
2009-02-25/a>
Andre Ludwig
Adobe Acrobat pdf 0-day exploit, No JavaScript needed!
2009-02-25/a>
Andre Ludwig
Adobe flash player patch
2009-02-25/a>
Swa Frantzen
Targeted link diversion attempts
2009-02-25/a>
donald smith
AutoRun disabling patch released
2009-02-12/a>
Mark Hofman
Australian Bushfires
2009-02-10/a>
Swa Frantzen
February Black Tuesday Overview
2009-02-10/a>
Swa Frantzen
Java up to date ?
2009-02-06/a>
Adrien de Beaupre
Time to patch your HP printers
2009-02-06/a>
Adrien de Beaupre
Other patches and updates du jour...
2009-02-04/a>
Daniel Wesemann
Firefox 3.0.6
2009-02-03/a>
Swa Frantzen
On the importance of patching fast
2009-01-31/a>
Swa Frantzen
VMware updates
2009-01-30/a>
Mark Hofman
We all "Love" USB drives
2009-01-30/a>
Mark Hofman
Request for info - Scan and webmail
2009-01-25/a>
Rick Wanner
Twam?? Twammers?
2009-01-20/a>
Adrien de Beaupre
Obamamania
2009-01-18/a>
Maarten Van Horenbeeck
Targeted social engineering
2009-01-13/a>
Johannes Ullrich
January Black Tuesday Overview
2009-01-12/a>
William Salusky
Web Application Firewalls (WAF) - Have you deployed WAF technology?
2009-01-02/a>
Mark Hofman
Blocking access to MD5 signed certs
2008-12-28/a>
Raul Siles
Level3 Outage?
2008-12-25/a>
Maarten Van Horenbeeck
Christmas Ecard Malware
2008-12-17/a>
donald smith
Team CYMRU's Malware Hash Registry
2008-12-17/a>
donald smith
Opera 9.6.3 released with security fixes
2008-12-17/a>
donald smith
Internet Explorer 960714 is released
2008-12-16/a>
donald smith
Microsoft announces an out of band patch for IE zero day
2008-12-09/a>
Swa Frantzen
December Black Tuesday Overview
2008-12-03/a>
Andre Ludwig
New ISC Poll! Has your organization suffered a DDoS (Distributed Denial of Service) attack in the last year?
2008-11-29/a>
Pedro Bueno
Ubuntu users: Time to update!
2008-11-25/a>
Andre Ludwig
The beginnings of a collaborative approach to IDS
2008-11-20/a>
Jason Lam
Large quantity SQL Injection mitigation
2008-11-17/a>
Jim Clausing
Finding stealth injected DLLs
2008-11-13/a>
Jim Clausing
Some recently updated tools
2008-11-11/a>
Swa Frantzen
Acrobat continued activity in the wild
2008-11-11/a>
Swa Frantzen
November Black Tuesday Overview
2008-10-23/a>
Mark Hofman
Microsoft out-of-band patch - Severity Critical
2008-10-21/a>
Johannes Ullrich
Wireshark 1.0.4 released
2008-10-14/a>
Swa Frantzen
October Black Tuesday Overview
2008-10-14/a>
Swa Frantzen
Oracle quarterly patches on black tuesday
2008-10-10/a>
Marcus Sachs
Fake Microsoft Update Email
2008-09-29/a>
Daniel Wesemann
Patchbag: WinZip / MPlayer / RealWin SCADA vuln
2008-09-22/a>
Maarten Van Horenbeeck
Data exfiltration and the use of anonymity providers
2008-09-20/a>
Rick Wanner
New (to me) nmap Features
2008-09-11/a>
David Goldsmith
CookieMonster is coming to Pown (err, Town)
2008-09-10/a>
Adrien de Beaupre
Apple updates iPod Touch + Bonjour for Windows
2008-09-09/a>
Swa Frantzen
Google Chrome being polished
2008-09-09/a>
Swa Frantzen
September 2008 Black Tuesday Overview
2008-09-09/a>
Swa Frantzen
Apple updates iTunes+QuickTime
2008-09-08/a>
Raul Siles
Quick Analysis of the 2007 Web Application Security Statistics
2008-09-07/a>
Daniel Wesemann
Staying current, but not too current
2008-09-03/a>
Daniel Wesemann
Static analysis of Shellcode - Part 2
2008-08-25/a>
John Bambenek
Thoughts on the Best Western Compromise
2008-08-20/a>
Adrien de Beaupre
From the mailbag, Opera 9.52...
2008-08-12/a>
Stephen Hall
August 2008 Black Tuesday Overview
2008-08-10/a>
Stephen Hall
From lolly pops to afterglow
2008-08-03/a>
Deborah Hale
Securing A Network - Lessons Learned
2008-08-01/a>
Swa Frantzen
Apple's Security Update 2008-005: DNS workaround finally included
2008-07-30/a>
David Goldsmith
Serious 0-Day Flaw in Oracle -- Patch Released
2008-07-18/a>
Adrien de Beaupre
Exit process?
2008-07-16/a>
Maarten Van Horenbeeck
Firefox 2.0.0.16 fixes two security vulnerabilities
2008-07-15/a>
Maarten Van Horenbeeck
Oracle (and BEA, Hyperion and TimesTen) critical patch update July 15th, 2008
2008-07-15/a>
Maarten Van Horenbeeck
BlackBerry PDF parsing vulnerability
2008-07-14/a>
Daniel Wesemann
Obfuscated JavaScript Redux
2008-07-11/a>
Jim Clausing
Updates to some of our favorite tools
2008-07-09/a>
Johannes Ullrich
Unpatched Word Vulnerability
2008-07-08/a>
Swa Frantzen
July 2008 black tuesday overview
2008-07-07/a>
Pedro Bueno
Bad url classification
2008-06-24/a>
Jason Lam
SQL Injection mitigation in ASP
2008-06-24/a>
Jason Lam
Adobe Reader and Acrobat 8.1.2 Security Update
2008-06-13/a>
Johannes Ullrich
Floods: More of the same (2)
2008-06-10/a>
Swa Frantzen
June 2008 Black Tuesday Overview
2008-06-02/a>
Jim Clausing
Emergingthreats.net and ThePlanet
2008-05-26/a>
Marcus Sachs
Predictable Response
2008-05-17/a>
Jim Clausing
Disaster donation scams continue
2008-05-13/a>
Swa Frantzen
May 2008 black tuesday overview
2008-05-07/a>
Jim Clausing
More on automated exploit generation
2008-05-05/a>
John Bambenek
Defenses Against Automated Patch-Based Exploit Generation
2008-04-24/a>
Maarten Van Horenbeeck
Targeted attacks using malicious PDF files
2008-04-20/a>
Joel Esler
Software Update -- Did Apple Do Enough?
2008-04-18/a>
John Bambenek
The Patch Window is Gone: Automated Patch-Based Exploit Generation
2008-04-09/a>
Joel Esler
ISC Podcast Episode Number 2
2008-04-08/a>
Swa Frantzen
April 2008 - Black Tuesday Overview
2008-04-08/a>
Swa Frantzen
Notes file viewer vulnerabilities
2008-04-07/a>
John Bambenek
HP USB Keys Shipped with Malware for your Proliant Server
2008-04-06/a>
Daniel Wesemann
Advanced obfuscated JavaScript analysis
2008-04-03/a>
Bojan Zdrnja
Mixed (VBScript and JavaScript) obfuscation
2008-03-30/a>
Mark Hofman
Mail Anyone?
2008-03-27/a>
Maarten Van Horenbeeck
Guarding the guardians: a story of PGP key ring theft
2008-03-20/a>
Joel Esler
APPLE-SA-2008-03-19 AirPort Extreme Base Station Firmware 7.3.1
2008-03-20/a>
Joel Esler
Potential Vulnerability in Flash CS3 Professional, Flash Professional 8 and Flash Basic 8?
2008-03-11/a>
Swa Frantzen
March Black Tuesday Overview
2008-02-12/a>
Swa Frantzen
February Black Tuesday Overview
2008-01-08/a>
Swa Frantzen
January Black Tuesday overview
2007-12-11/a>
Swa Frantzen
December black tuesday overview
2007-11-13/a>
Swa Frantzen
november black tuesday overview
2007-10-09/a>
Swa Frantzen
October Black Tuesday overview
2007-09-11/a>
Swa Frantzen
September microsoft patch overview
2007-08-14/a>
Swa Frantzen
August 'Black Tuesday' overview
2007-07-10/a>
Swa Frantzen
July 'Black Tuesday' overview
2007-06-12/a>
Johannes Ullrich
June 2007, Microsoft Patch Tuesday Overview.
2007-05-08/a>
Swa Frantzen
May 2007, Black Tuesday patch overview
2007-04-10/a>
Swa Frantzen
Microsoft black Tuesday patches - April 2007
2007-04-03/a>
Swa Frantzen
* Microsoft out of cycle patch
2007-02-13/a>
Swa Frantzen
Microsoft Black Tuesday patches - February 2007
2007-01-09/a>
Swa Frantzen
Microsoft Patches - January 2007 - overview
2007-01-03/a>
Toby Kohlenberg
VLC Media Player udp URL handler Format String Vulnerability
2006-12-12/a>
Swa Frantzen
Offline Microsoft Patching
2006-12-12/a>
Swa Frantzen
The missing Microsoft patches
2006-12-12/a>
Swa Frantzen
Microsoft Black Tuesday - December 2006 overview
2006-12-12/a>
Robert Danford
MS06-078: 2 Windows Media Format Vulnerabilities (CVE-2006-4702, CVE-2006-6134)
2006-11-29/a>
Toby Kohlenberg
New Adobe vulnerability
2006-11-14/a>
Swa Frantzen
Microsoft Black Tuesday Overview
2006-10-09/a>
Swa Frantzen
Microsoft black tuesday - October 2006 STATUS
2006-09-26/a>
Jim Clausing
MS06-049 re-release
2006-09-12/a>
Swa Frantzen
Microsoft security patches for September 2006
2006-09-09/a>
Jim Clausing
New feature at isc.sans.org
2006-08-17/a>
Swa Frantzen
Microsoft August 2006 Patches: STATUS
REST
2020-04-27/a>
Xavier Mertens
Powershell Payload Stored in a PSCredential Object
2018-03-03/a>
Xavier Mertens
Reminder: Beware of the "Cloud"
2017-09-05/a>
Adrien de Beaupre
Struts vulnerability patch released by apache, patch now
2016-07-03/a>
Guy Bruneau
Is Data Privacy part of your Company's Culture?
2016-01-31/a>
Guy Bruneau
Windows 10 and System Protection for DATA Default is OFF
2015-09-01/a>
Daniel Wesemann
Encryption of "data at rest" in servers
2015-08-29/a>
Tom Webb
Automating Metrics using RTIR REST API
2013-02-22/a>
Johannes Ullrich
Zendesk breach affects Tumblr/Pinterest/Twitter
2010-07-29/a>
Rob VandenBrink
FBI, Slovenian and Spanish Police announce more arrests of Mariposa Botnet Creator, Operators
2010-06-07/a>
Manuel Humberto Santander Pelaez
Software Restriction Policy to keep malware away
2009-09-07/a>
Lorna Hutcheson
Encrypting Data
Homepage
Diaries
Podcasts
Jobs
Data
TCP/UDP Port Activity
Port Trends
SSH/Telnet Scanning Activity
Weblogs
Threat Feeds Activity
Threat Feeds Map
Useful InfoSec Links
Presentations & Papers
Research Papers
API
Tools
DShield Sensor
DNS Looking Glass
Honeypot (RPi/AWS)
InfoSec Glossary
Contact Us
Contact Us
About Us
Handlers
About Us
Slack Channel
Mastodon
Bluesky
X
Learn
about the Internet Storm Center
and our
volunteer InfoSec handlers