PATCH WINDOW |
2008-04-18 | John Bambenek | The Patch Window is Gone: Automated Patch-Based Exploit Generation |
PATCH |
2025-03-11/a> | Johannes Ullrich | Microsoft Patch Tuesday: March 2025 |
2024-12-11/a> | Johannes Ullrich | Apple Updates Everything (iOS, iPadOS, macOS, watchOS, tvOS, visionOS) |
2024-12-10/a> | Johannes Ullrich | Microsoft Patch Tuesday: December 2024 |
2024-08-29/a> | Xavier Mertens | Live Patching DLLs with Python |
2024-07-09/a> | Johannes Ullrich | Microsoft Patch Tuesday July 2024 |
2024-06-11/a> | Johannes Ullrich | Microsoft Patch Tuesday June 2024 |
2024-03-12/a> | Johannes Ullrich | Microsoft Patch Tuesday - March 2024 |
2024-03-05/a> | Johannes Ullrich | Apple Releases iOS/iPadOS Updates with Zero Day Fixes. |
2023-12-12/a> | Johannes Ullrich | Microsoft Patch Tuesday December 2023 |
2023-10-10/a> | Johannes Ullrich | October 2023 Microsoft Patch Tuesday Summary |
2023-09-26/a> | Johannes Ullrich | Apple Releases MacOS Sonoma Including Numerous Security Patches |
2023-09-11/a> | Johannes Ullrich | Apple fixes 0-Day Vulnerability in Older Operating Systems |
2023-03-27/a> | Johannes Ullrich | Apple Updates Everything (including Studio Display) |
2023-02-14/a> | Johannes Ullrich | Microsoft February 2023 Patch Tuesday |
2023-01-24/a> | Johannes Ullrich | Apple Updates (almost) Everything: Patch Overview |
2022-10-11/a> | Johannes Ullrich | October 2022 Microsoft Patch Tuesday |
2022-10-07/a> | Xavier Mertens | Critical Fortinet Vulnerability Ahead |
2022-07-20/a> | Johannes Ullrich | Apple Patches Everything Day |
2022-05-16/a> | Johannes Ullrich | Apple Patches Everything |
2022-05-10/a> | Renato Marinho | Microsoft May 2022 Patch Tuesday |
2022-05-03/a> | Rob VandenBrink | Finding the Real "Last Patched" Day (Interim Version) |
2022-03-31/a> | Johannes Ullrich | Apple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS, |
2022-02-10/a> | Johannes Ullrich | iOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched |
2022-01-11/a> | Johannes Ullrich | Microsoft Patch Tuesday - January 2022 |
2021-09-14/a> | Renato Marinho | Microsoft September 2021 Patch Tuesday |
2021-08-20/a> | Xavier Mertens | Waiting for the C2 to Show Up |
2021-04-13/a> | Richard Porter | Microsoft April 2021 Patch Tuesday |
2020-12-08/a> | Johannes Ullrich | December 2020 Microsoft Patch Tuesday: Exchange, Sharepoint, Dynamics and DNS Spoofing |
2020-11-25/a> | Xavier Mertens | Live Patching Windows API Calls Using PowerShell |
2020-05-14/a> | Rob VandenBrink | Patch Tuesday Revisited - CVE-2020-1048 isn't as "Medium" as MS Would Have You Believe |
2020-03-10/a> | Johannes Ullrich | Microsoft Patch Tuesday March 2020 |
2020-02-29/a> | Guy Bruneau | Hazelcast IMDG Discover Scan |
2019-07-09/a> | John Bambenek | MSFT July 2019 Patch Tuesday |
2018-12-19/a> | Xavier Mertens | Microsoft OOB Patch for Internet Explorer: Scripting Engine Memory Corruption Vulnerability |
2018-12-11/a> | Richard Porter | Microsoft December 2018 Patch Tuesday |
2018-11-13/a> | Johannes Ullrich | November 2018 Microsoft Patch Tuesday |
2018-10-09/a> | Johannes Ullrich | October 2018 Microsoft Patch Tuesday |
2018-09-11/a> | Johannes Ullrich | Microsoft September Patch Tuesday Summary |
2018-07-17/a> | Scott Fendley | Oracle Critical Patch Update Release |
2018-06-12/a> | Johannes Ullrich | Microsoft June 2018 Patch Tuesday |
2018-04-25/a> | Johannes Ullrich | Yet Another Drupal RCE Vulnerability |
2017-12-20/a> | Richard Porter | VMWare Security Advisory: VMSA-2017-0021: https://www.vmware.com/security/advisories/VMSA-2017-0021.html |
2017-12-12/a> | Johannes Ullrich | December Microsoft Patch Tuesday Summary |
2017-09-08/a> | Adrien de Beaupre | YASRV (Yet Another Struts RCE Vulnerability) yes a different one from yesterday |
2017-09-05/a> | Adrien de Beaupre | Struts vulnerability patch released by apache, patch now |
2017-07-11/a> | Renato Marinho | July's Microsoft Patch Tuesday |
2017-03-14/a> | Johannes Ullrich | February and March Microsoft Patch Tuesday |
2017-02-14/a> | Johannes Ullrich | Microsoft Patch Tuesday Delayed |
2017-02-04/a> | Xavier Mertens | Detecting Undisclosed Vulnerabilities with Security Tools & Features |
2017-01-10/a> | Johannes Ullrich | January 2017 Microsoft Patch Tuesday |
2016-09-13/a> | Rob VandenBrink | Microsoft Patch Tuesday Analysis |
2016-09-02/a> | Johannes Ullrich | Apple Patches "Trident" Vulnerabilities in OS X / Safari |
2016-07-12/a> | Johannes Ullrich | Microsoft Patch Tuesday Summary for July 2016 |
2016-02-09/a> | Johannes Ullrich | Microsoft February 2016 Patch Tuesday |
2016-01-12/a> | Alex Stanford | January 2016 Microsoft Patch Tuesday |
2015-12-08/a> | Johannes Ullrich | December 2015 Microsoft Patch Tuesday |
2015-11-10/a> | Johannes Ullrich | November 2015 Microsoft Patch Tuesday |
2015-10-13/a> | Alex Stanford | October 2015 Microsoft Patch Tuesday |
2015-09-08/a> | Johannes Ullrich | September 2015 Microsoft Patch Tuesday |
2015-08-11/a> | Manuel Humberto Santander Pelaez | August 2015 Microsoft Patch Tuesday |
2015-07-23/a> | Mark Hofman | Some more 0-days from ZDI |
2015-07-14/a> | Johannes Ullrich | Adobe Updates Flash Player, Shockwave and PDF Reader |
2015-07-14/a> | Johannes Ullrich | July 2015 Microsoft Patch Tuesday |
2015-06-09/a> | Johannes Ullrich | Microsoft Patch Tuesday Summary for June 2015 |
2015-05-12/a> | Johannes Ullrich | May 2015 Microsoft Patch Tuesday Summary |
2015-04-14/a> | Alex Stanford | Microsoft Patch Tuesday - April 2015 |
2015-03-10/a> | Johannes Ullrich | Microsoft March Patch Tuesday |
2015-02-13/a> | Johannes Ullrich | Microsoft February Patch Failures Continue: KB3023607 vs. Cisco AnyConnect Client |
2015-02-11/a> | Johannes Ullrich | Microsoft Hardens GPO by Fixing Two Serious Vulnerabilities. |
2015-02-10/a> | Mark Baggett | Microsoft Update Advisory for February 2015 |
2015-01-23/a> | Adrien de Beaupre | Infocon change to yellow for Adobe Flash issues |
2015-01-13/a> | Johannes Ullrich | Microsoft Patch Tuesday - January 2015 (Really? Telnet?) |
2014-12-09/a> | Alex Stanford | Microsoft Patch Tuesday - December 2014 |
2014-11-18/a> | Jim Clausing | Microsoft November out-of-cycle patch MS14-068 |
2014-11-11/a> | Johannes Ullrich | Microsoft November 2014 Patch Tuesday |
2014-11-11/a> | Johannes Ullrich | Adobe Flash Update |
2014-10-17/a> | Johannes Ullrich | Apple Updates (not just Yosemite) |
2014-10-14/a> | Johannes Ullrich | Microsoft October 2014 Patch Tuesday |
2014-10-14/a> | Johannes Ullrich | Adobe October 2014 Bulletins for Flash Player and Coldfusion |
2014-09-29/a> | Johannes Ullrich | Apple Released Update to Fix Shellshock Vulnerability http://support.apple.com/kb/DL1769 |
2014-09-09/a> | Alex Stanford | Microsoft Patch Tuesday - September 2014 |
2014-08-12/a> | Alex Stanford | Microsoft Patch Tuesday - August 2014 |
2014-07-15/a> | Daniel Wesemann | Oracle July 2014 CPU (patch bundle) |
2014-07-08/a> | Alex Stanford | Microsoft Patch Tuesday - July |
2014-07-01/a> | Johannes Ullrich | Apple Releases Patches for All Products |
2014-06-10/a> | Alex Stanford | Microsoft Patch Tuesday June 2014 |
2014-06-06/a> | Johannes Ullrich | Microsoft June Patch Tuesday Advance Notification |
2014-05-13/a> | Johannes Ullrich | Microsoft May 2014 Patch Tuesday |
2014-05-01/a> | Johannes Ullrich | Microsoft Announces Special Patch for IE 0-day (Win XP included!) |
2014-04-22/a> | Johannes Ullrich | Apple Patches for OS X, iOS and Apple TV. |
2014-04-16/a> | Johannes Ullrich | Oracle Critical Patch Update for April 2014 |
2014-04-08/a> | Richard Porter | April 2014 Microsoft Patches |
2014-03-21/a> | Johannes Ullrich | Cisco AsyncOS Patch |
2014-03-11/a> | Johannes Ullrich | Adobe Updates: Flash Player |
2014-03-11/a> | Johannes Ullrich | Microsoft Patch Tuesday March 2014 |
2014-03-08/a> | Guy Bruneau | Microsoft March Patch Pre-Announcement |
2014-02-25/a> | Alex Stanford | Apple releases OS X 10.9.2 patching SSL vulnerability and updates Safari |
2014-02-11/a> | Johannes Ullrich | February 2014 Microsoft Patch Tuesday |
2014-02-11/a> | Johannes Ullrich | Adobe February 2014 Patch Tuesday |
2014-02-07/a> | Johannes Ullrich | Microsoft Advance Notification for February 2014 |
2014-02-04/a> | Johannes Ullrich | Adobe Flash Player Emergency Patch |
2014-01-30/a> | Johannes Ullrich | Oracle Reports Vulnerability |
2014-01-14/a> | Johannes Ullrich | Microsoft Patch Tuesday January 2014 |
2014-01-14/a> | Johannes Ullrich | Adobe Patch Tuesday January 2014 |
2014-01-14/a> | Johannes Ullrich | Oracle Critical Patch Update January 2014 |
2014-01-10/a> | Basil Alawi S.Taher | Cisco Small Business Devices backdoor fix |
2014-01-09/a> | Johannes Ullrich | Microsoft Security Bulletin Advance Notification for January 2014 http://technet.microsoft.com/en-us/security/bulletin/ms14-jan |
2013-12-10/a> | Johannes Ullrich | Microsoft December Patch Tuesday |
2013-12-07/a> | Guy Bruneau | Microsoft December Patch Pre-Announcement |
2013-12-04/a> | Adrien de Beaupre | VMware Security Advisory VMSA-2013-0014 |
2013-11-12/a> | Johannes Ullrich | November 2013 Microsoft Patch Tuesday |
2013-11-08/a> | Johannes Ullrich | Microsoft Patch Tuesday Preview |
2013-11-01/a> | Russ McRee | Secunia's PSI Country Report - Q3 2013 |
2013-10-08/a> | Johannes Ullrich | Microsoft October 2013 Patch Tuesday |
2013-10-03/a> | Johannes Ullrich | October Patch Tuesday Preview (CVE-2013-3893 patch coming!) |
2013-09-11/a> | Johannes Ullrich | Reboot Wednesday: Yesterday's Patch Tuesday Aftermath |
2013-09-10/a> | Swa Frantzen | Adobe September 2013 Black Tuesday Overview |
2013-09-10/a> | Swa Frantzen | Microsoft September 2013 Black Tuesday Overview |
2013-09-10/a> | Swa Frantzen | Macs need to patch too! |
2013-09-07/a> | Guy Bruneau | Microsoft September Patch Pre-Announcement |
2013-08-19/a> | Johannes Ullrich | Microsoft re-releases MS13-066: https://technet.microsoft.com/security/bulletin/MS13-066 |
2013-08-15/a> | Johannes Ullrich | Microsoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx |
2013-08-13/a> | Swa Frantzen | Microsoft August 2013 Black Tuesday Overview |
2013-08-13/a> | Swa Frantzen | Microsoft security advisories: RDP and MD5 deprecation in Microsoft root certificates |
2013-07-09/a> | Swa Frantzen | Microsoft July 2013 Black Tuesday Overview |
2013-07-09/a> | Swa Frantzen | Adobe July 2013 Black Tuesday Overview |
2013-07-06/a> | Guy Bruneau | Microsoft July Patch Pre-Announcement |
2013-06-26/a> | Adrien de Beaupre | Multiple Cisco security advisories |
2013-06-11/a> | Swa Frantzen | Microsoft June 2013 Black Tuesday Overview |
2013-06-11/a> | Swa Frantzen | Adobe June 2013 Black Tuesday Overview |
2013-06-11/a> | Swa Frantzen | vmware security advisory VMSA-2013-0008 |
2013-06-05/a> | Richard Porter | BIND 9 Update fixing CVE-2013-3919 |
2013-05-22/a> | Adrien de Beaupre | Privilege escalation, why should I care? |
2013-05-14/a> | Swa Frantzen | Microsoft May 2013 Black Tuesday Overview |
2013-05-14/a> | Swa Frantzen | Firefox & Thunderbird released |
2013-05-14/a> | Swa Frantzen | Adobe May 2013 Black Tuesday Overview |
2013-05-14/a> | Swa Frantzen | Microsoft Security Advisory 2846338 |
2013-04-09/a> | Swa Frantzen | Microsoft April 2013 Black Tuesday Overview |
2013-04-09/a> | Swa Frantzen | Adobe April 2013 Black Tuesday Overview |
2013-04-04/a> | Johannes Ullrich | Microsoft April Patch Tuesday Advance Notification |
2013-03-12/a> | Swa Frantzen | Microsoft March 2013 Black Tuesday Overview |
2013-03-12/a> | Swa Frantzen | Adobe March 2013 Black Tueday |
2013-02-27/a> | Adam Swanger | Adobe Flash Player Security Update - http://www.adobe.com/support/security/bulletins/apsb13-08.html |
2013-02-22/a> | Chris Mohan | VMware releases new and updated security advisories |
2013-02-14/a> | Adam Swanger | ISC Monthly Threat Update - February 2013 http://isc.sans.edu/podcastdetail.html?id=3121 |
2013-02-12/a> | Adam Swanger | Microsoft February 2013 Black Tuesday Update - Overview |
2013-02-12/a> | Swa Frantzen | Adobe Feb 2013 Black Tuesday patches |
2013-02-08/a> | Johannes Ullrich | Microsoft February Patch Tuesday Advance Notification |
2013-01-22/a> | Richard Porter | Using Metasploit for Patch Sanity Checks |
2013-01-14/a> | Richard Porter | January 2013 Microsoft Out of Cycle Patch |
2013-01-10/a> | Adam Swanger | ISC Monthly Threat Update New Format |
2013-01-09/a> | Rob VandenBrink | SQL Injection Flaw in Ruby on Rails |
2013-01-09/a> | Rob VandenBrink | Firefox and Thunderbird Updates |
2013-01-09/a> | Rob VandenBrink | Security Updates for Adobe Reader / Acrobat - http://www.adobe.com/support/security/bulletins/apsb13-02.html |
2013-01-08/a> | Richard Porter | Microsoft January 2013 Black Tuesday Update - Overview |
2013-01-08/a> | Richard Porter | Firefox 18 Released, Security Fixes http://www.mozilla.org/security/known-vulnerabilities/firefox.html |
2013-01-04/a> | Daniel Wesemann | Patch pre-notification from Adobe and Microsoft |
2012-12-11/a> | John Bambenek | Microsoft December 2012 Black Tuesday Update - Overview |
2012-11-13/a> | Jim Clausing | Microsoft November 2012 Black Tuesday Update - Overview |
2012-10-17/a> | Mark Hofman | Oracle Critical Patch Update October |
2012-10-09/a> | Johannes Ullrich | Adobe Flash Player update http://www.adobe.com/support/security/bulletins/apsb12-22.html |
2012-10-09/a> | Johannes Ullrich | Microsoft October 2012 Black Tuesday Update - Overview |
2012-10-04/a> | Johannes Ullrich | Microsoft October Patch Pre-Announcement |
2012-09-11/a> | Adam Swanger | Microsoft September 2012 Black Tuesday Update - Overview |
2012-08-14/a> | Rick Wanner | Microsoft August 2012 Black Tuesday Update - Overview |
2012-08-14/a> | Rick Wanner | Adobe Security Bulletins - http://blogs.adobe.com/psirt/2012/08/adobe-security-bulletins-posted-2.html |
2012-08-04/a> | Kevin Liston | Vendors: More Patch-Release Options Please |
2012-07-15/a> | Guy Bruneau | Oracle July 2012 Critical Patch Pre-Release Announcement |
2012-07-10/a> | Swa Frantzen | Microsoft July 2012 Black Tuesday Update - Overview |
2012-07-10/a> | Swa Frantzen | Microsoft revoking trust in Microsoft certificates - SA 2728973 |
2012-07-10/a> | Swa Frantzen | Microsoft fix-it to disable gadgets - SA 2719662 |
2012-07-05/a> | Adrien de Beaupre | Microsoft advanced notification for July 2012 patch Tuesday |
2012-06-22/a> | Kevin Liston | Updated Poll: Which Patch Delivery Schedule Works the Best for You? |
2012-06-12/a> | Swa Frantzen | Adobe June 2012 Black Tuesday patches |
2012-06-12/a> | Swa Frantzen | Microsoft June 2012 Black Tuesday Update - Overview |
2012-06-12/a> | Swa Frantzen | Java 7u5 and 6u33 released |
2012-06-11/a> | Johannes Ullrich | Microsoft Update Security |
2012-06-07/a> | Johannes Ullrich | Microsoft June Security Bulletin Advance Notification |
2012-05-23/a> | Mark Baggett | Problems with MS12-035 affecting XP, SBS and Windows 2003? |
2012-05-08/a> | Adam Swanger | Microsoft May 2012 Black Tuesday Update - Overview |
2012-04-15/a> | Rick Wanner | .Net update affects printing from some applications |
2012-04-13/a> | Daniel Wesemann | Oracle CPU Patches announced for Apr 17 |
2012-04-10/a> | Swa Frantzen | Microsoft April 2012 Black Tuesday Update - Overview |
2012-04-10/a> | Swa Frantzen | Adobe April 2012 Black Tuesday Update |
2012-04-06/a> | Johannes Ullrich | Another OS X Java Patch |
2012-04-06/a> | Johannes Ullrich | Microsoft April Patch Tuesday Pre-Announcement (6 Patches): http://technet.microsoft.com/en-us/security/bulletin/ms12-apr |
2012-04-06/a> | Johannes Ullrich | Adobe Patch Tuesday Prerelease (Reader/Acrobat) http://www.adobe.com/support/security/bulletins/apsb12-08.html |
2012-03-13/a> | Lenny Zeltser | March 2012 Microsoft Black Tuesday |
2012-03-12/a> | Johannes Ullrich | Apple Released Safari 5.1.4 |
2012-03-08/a> | Johannes Ullrich | Apple Patches |
2012-03-08/a> | Johannes Ullrich | Microsoft March Patch Tuesday Pre-Anouncement out. 6 patches, 1 critical: http://technet.microsoft.com/en-us/security/bulletin/ms12-mar |
2012-03-05/a> | Johannes Ullrich | Adobe Flash Player Security Update |
2012-02-16/a> | Tony Carothers | Java Update for February |
2012-02-14/a> | Johannes Ullrich | Adobe Shockwave Player and RoboHelp for Word Patches |
2012-02-14/a> | Johannes Ullrich | February 2012 Microsoft Black Tuesday |
2012-02-01/a> | Russ McRee | Oracle Security Alert: http://www.oracle.com/technetwork/topics/security/alert-cve-2011-5035-1506603.html |
2012-01-31/a> | Russ McRee | Firefox 10 and VMWare advisories and updates |
2012-01-18/a> | Richard Porter | Oracle Quarterly Released, http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html |
2012-01-10/a> | Adrien de Beaupre | January 2012 Microsoft Black Tuesday Summary |
2012-01-10/a> | Adrien de Beaupre | Adobe January 2012 Black Tuesday overview |
2012-01-06/a> | Guy Bruneau | January 2012 Patch Tuesday Pre-release |
2011-12-13/a> | Johannes Ullrich | December 2011 Microsoft Black Tuesday Summary |
2011-12-08/a> | Adrien de Beaupre | Microsoft Security Bulletin Advance Notification for December 2011 |
2011-11-08/a> | Swa Frantzen | Apple Black Tuesday |
2011-11-08/a> | Swa Frantzen | Microsoft November 2011 Black Tuesday Overview |
2011-11-08/a> | Swa Frantzen | Abobe November 2011 Black Tuesday Overview |
2011-11-03/a> | Guy Bruneau | November 2011 Patch Tuesday Pre-release |
2011-10-19/a> | Mark Hofman | Oracle Critical Patch Update |
2011-10-11/a> | Swa Frantzen | Microsoft Black Tuesday Overview October 2011 |
2011-10-11/a> | Swa Frantzen | Apple iTunes 10.5 |
2011-09-21/a> | Swa Frantzen | Emergency patch expected for Flash Player |
2011-09-13/a> | Swa Frantzen | Microsoft September 2011 Black Tuesday |
2011-09-13/a> | Swa Frantzen | Adobe September 2011 Black Tuesday overview |
2011-09-09/a> | Johannes Ullrich | Early Patch Tuesday Today: Microsoft September 2011 Patches |
2011-09-08/a> | Rob VandenBrink | Should We Still Test Patches? |
2011-09-08/a> | Mark Hofman | Microsoft has released their advanced notification for patch Tuesday. 15 Vulnerabilities to be addressed. more here --> http://blogs.technet.com/b/msrc/archive/2011/09/08/advanced-notification-for-the-september-2011-bulletin-release.aspx |
2011-08-31/a> | Johannes Ullrich | Firefox/Thunderbird 6.0.1 released to blocklist bad DigiNotar SSL certificates |
2011-08-30/a> | Johannes Ullrich | Apache patch out for "byte range" DoS vulnerability http://www.apache.org/dist/httpd/Announcement2.2.html |
2011-08-09/a> | Swa Frantzen | Microsoft August 2011 Black Tuesday Overview |
2011-08-09/a> | Swa Frantzen | Adobe August 2011 Black Tuesday Overview |
2011-08-05/a> | Johannes Ullrich | Microsoft Patch Tuesday Advance Notification: 13 Bulletins coming http://www.microsoft.com/technet/security/Bulletin/MS11-aug.mspx |
2011-07-12/a> | Swa Frantzen | Microsoft July 2011 Black Tuesday Overview |
2011-07-07/a> | Rob VandenBrink | "There's a Patch for that" (or maybe not) |
2011-07-06/a> | Rob VandenBrink | "Too Important to Patch" - Wait? What? |
2011-06-28/a> | Johannes Ullrich | Update: Google Chrome 12.0.742.112 released http://googlechromereleases.blogspot.com/2011/06/stable-channel-update_28.html |
2011-06-14/a> | Swa Frantzen | Adobe releases patches |
2011-06-14/a> | Swa Frantzen | Microsoft June 2011 Black Tuesday Overview |
2011-06-09/a> | Richard Porter | Chrome Version 12.0.742.91 Released |
2011-05-10/a> | Swa Frantzen | May 2011 Microsoft Black Tuesday Overview |
2011-05-06/a> | Richard Porter | Updated Exploit Index for Microsoft |
2011-04-11/a> | Jim Clausing | April 2011 Microsoft Black Tuesday Summary |
2011-04-08/a> | Johannes Ullrich | Dark Black Tuesday Coming Up: 17 Microsoft Bulletins |
2011-03-08/a> | Jim Clausing | March 2011 Microsoft Black Tuesday Summary |
2011-02-09/a> | Mark Hofman | Adobe Patches (shockwave, Flash, Reader & Coldfusion) |
2011-02-08/a> | Joel Esler | Feburary 2011 Microsoft Black Tuesday Summary |
2011-02-04/a> | Daniel Wesemann | Busy patch tuesday ahead |
2011-01-18/a> | Daniel Wesemann | Oracle Patches (Jan2011 CPU) |
2011-01-13/a> | Rob VandenBrink | Blackberry BES Server Updates for PDF Vulnerabilities |
2011-01-11/a> | Kevin Shortt | January 2011 Microsoft Black Tuesday Summary |
2011-01-08/a> | Guy Bruneau | January 2011 Patch Tuesday Pre-release |
2010-12-20/a> | Guy Bruneau | Patch Issues with Outlook 2007 |
2010-12-14/a> | Manuel Humberto Santander Pelaez | December 2010 Microsoft Black Tuesday Summary |
2010-12-10/a> | Mark Hofman | Microsoft patches |
2010-12-02/a> | Kevin Johnson | SQL Injection: Wordpress 3.0.2 released |
2010-12-02/a> | Kevin Johnson | ProFTPD distribution servers compromised |
2010-11-29/a> | Stephen Hall | Sun security updates |
2010-11-09/a> | Johannes Ullrich | November 2010 Microsoft Black Tuesday Summary |
2010-11-04/a> | Johannes Ullrich | Microsoft Patches Pre-Announcement |
2010-10-12/a> | Adrien de Beaupre | October 2010 Microsoft Black Tuesday Summary |
2010-10-08/a> | Rick Wanner | Patch Tuesday Pre-release -- 16 updates |
2010-09-30/a> | Pedro Bueno | MS OOB .NET patch is now also available via Windows Update. |
2010-09-28/a> | Daniel Wesemann | MS10-070 OOB Patch for ASP.NET vulnerability |
2010-09-27/a> | Adrien de Beaupre | MS OOB patch tomorrow for Security Advisory 2416728 |
2010-09-14/a> | Adrien de Beaupre | September 2010 Microsoft Black Tuesday Summary |
2010-08-29/a> | Swa Frantzen | DLL hijacking - what are you doing ? |
2010-08-10/a> | Jason Lam | Adobe critical security updates |
2010-08-10/a> | Jim Clausing | August 2010 Micrsoft Black Tuesday Summary |
2010-08-07/a> | Stephen Hall | Countdown to Tuesday... |
2010-08-02/a> | Johannes Ullrich | Microsoft Out-of-Band bulletin addresses LNK/Shortcut vulnerability |
2010-07-13/a> | Jim Clausing | July 2010 Microsoft Black Tuesday Summary |
2010-06-08/a> | Manuel Humberto Santander Pelaez | June 2010 Microsoft Black Tuesday Summary |
2010-06-03/a> | Guy Bruneau | Microsoft Patch Tuesday June 2010 Pre-Release |
2010-05-11/a> | Scott Fendley | May 2010 Microsoft Patches |
2010-05-08/a> | Guy Bruneau | Microsoft Patch Tuesday May 2010 Pre-Release |
2010-04-14/a> | Mark Hofman | Oracle has released 47 critical patches (Includes SUN patches) |
2010-04-14/a> | Mark Hofman | And let the patching games continue |
2010-04-13/a> | Johannes Ullrich | Microsoft April 2010 Patch Tuesday |
2010-04-08/a> | Guy Bruneau | Microsoft Patch Tuesday April 2010 Pre-Release |
2010-04-02/a> | Guy Bruneau | Oracle Java SE and Java for Business Critical Patch Update Advisory |
2010-03-29/a> | Pedro Bueno | Microsoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix. |
2010-03-29/a> | Adrien de Beaupre | OOB Update for Internet Explorer MS10-018 |
2010-03-09/a> | John Bambenek | March 2010 - Microsoft Patch Tuesday Diary |
2010-03-03/a> | Mark Hofman | MS10-015 re-released |
2010-02-17/a> | Rob VandenBrink | Multiple Security Updates for ESX 3.x and ESXi 3.x |
2010-02-11/a> | Johannes Ullrich | MS10-015 may cause Windows XP to blue screen |
2010-02-09/a> | Mark Hofman | Oracle has an unscheduled security alert and patch for CVE-2010-0073. The issue affects WebLogic Server and is remotely exploitable. Details and patch are here http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0073.html |
2010-02-09/a> | Johannes Ullrich | February 2010 Black Tuesday Overview |
2010-02-04/a> | Johannes Ullrich | Microsoft Patch Tuesday Pre-Release |
2010-01-21/a> | Chris Carboni | Security Update Available for Shockwave Player |
2010-01-21/a> | Chris Carboni | * Microsoft Out Of Band Patch Release |
2010-01-21/a> | Johannes Ullrich | Microsoft January Out of Band Patch |
2010-01-12/a> | Johannes Ullrich | Microsoft Security Bulletin: January 2010 |
2010-01-12/a> | Johannes Ullrich | Oracle Patches Relased |
2010-01-12/a> | Johannes Ullrich | Pre-Announced Adobe Reader and Acrobat Patch Found! |
2009-12-09/a> | Swa Frantzen | Adobe flash player and air patched |
2009-12-08/a> | Deborah Hale | December 2009 Black Tuesday Overview |
2009-12-03/a> | Mark Hofman | Apple released some Java updates today APPLE-SA-2009-12-03-1 & 2 (for 10.5 and 10.6). Fixes a number of security issues so updating is a good idea. |
2009-12-03/a> | Mark Hofman | Next week will be a big patch week - Adobe is also releasing patches "Adobe is planning to release an update for Adobe Flash Player 10.0.32.18 and earlier versions, and an update to Adobe AIR 1.5.2 and earlier versions, to resolve critical security issues |
2009-11-21/a> | Mark Hofman | VMware vCenter and ESX updates available http://lists.vmware.com/pipermail/security-announce/2009/000070.html |
2009-11-13/a> | Adrien de Beaupre | Conficker patch via email? |
2009-11-10/a> | Swa Frantzen | Microsoft November Black Tuesday Overview |
2009-10-28/a> | Johannes Ullrich | Firefox 3.5.4 released. Lots of security bug fixes. (thanks Gilbert!) |
2009-10-16/a> | Adrien de Beaupre | Disable MS09-054 patch, or Firefox Plugin? |
2009-10-13/a> | Johannes Ullrich | Microsoft October 2009 Black Tuesday Overview |
2009-10-13/a> | Daniel Wesemann | Adobe Reader and Acrobat - Black Tuesday continues |
2009-09-08/a> | Guy Bruneau | Microsoft September 2009 Black Tuesday Overview |
2009-08-19/a> | Daniel Wesemann | Checking your protection |
2009-08-11/a> | Swa Frantzen | Microsoft August 2009 Black Tuesday Overview |
2009-07-31/a> | Deborah Hale | The iPhone patch is out |
2009-07-30/a> | Mark Hofman | Happy patching day |
2009-07-28/a> | Adrien de Beaupre | MS released two OOB bulletins and an advisory |
2009-07-24/a> | Rick Wanner | Microsoft Out of Band Patch |
2009-07-14/a> | Swa Frantzen | Microsoft July Black Tuesday Overview |
2009-07-14/a> | Swa Frantzen | ISC DHCP client updated |
2009-07-14/a> | Swa Frantzen | Oracle Black Tuesday |
2009-07-02/a> | Daniel Wesemann | Time to update updating on PCs for 3rd party apps |
2009-07-02/a> | Daniel Wesemann | Unpatched Bloatware on new PCs |
2009-06-23/a> | Bojan Zdrnja | New Thunderbird out, patches couple of vulnerabilities |
2009-06-09/a> | Swa Frantzen | Microsoft June Black Tuesday Overview |
2009-06-09/a> | Swa Frantzen | Adobe June Black Tuesday upgrades |
2009-05-29/a> | Lorna Hutcheson | Blackberry Server Vulnerability |
2009-05-29/a> | Lorna Hutcheson | VMWare Patches Released |
2009-05-22/a> | Mark Hofman | Patching and Adobe |
2009-05-22/a> | Mark Hofman | Patching and Apple - Java issue |
2009-05-12/a> | Swa Frantzen | MSFT's version of responsible disclosure |
2009-05-12/a> | Swa Frantzen | Apple patches and updates |
2009-05-12/a> | Swa Frantzen | Adobe Acrobat (reader) patches released |
2009-05-12/a> | Swa Frantzen | May Black Tuesday Overview |
2009-04-14/a> | Swa Frantzen | April Black Tuesday Overview |
2009-04-14/a> | Swa Frantzen | Oracle quarterly patches |
2009-03-18/a> | Adrien de Beaupre | Adobe Security Bulletin Adobe Reader and Acrobat |
2009-03-10/a> | Swa Frantzen | March black Tuesday overview |
2009-03-10/a> | Swa Frantzen | Adobe Acrobat 9.1 released |
2009-02-25/a> | Andre Ludwig | Adobe flash player patch |
2009-02-25/a> | donald smith | AutoRun disabling patch released |
2009-02-10/a> | Swa Frantzen | February Black Tuesday Overview |
2009-02-06/a> | Adrien de Beaupre | Time to patch your HP printers |
2009-02-06/a> | Adrien de Beaupre | Other patches and updates du jour... |
2009-02-04/a> | Daniel Wesemann | Firefox 3.0.6 |
2009-02-03/a> | Swa Frantzen | On the importance of patching fast |
2009-01-31/a> | Swa Frantzen | VMware updates |
2009-01-13/a> | Johannes Ullrich | January Black Tuesday Overview |
2008-12-17/a> | donald smith | Opera 9.6.3 released with security fixes |
2008-12-17/a> | donald smith | Internet Explorer 960714 is released |
2008-12-16/a> | donald smith | Microsoft announces an out of band patch for IE zero day |
2008-12-09/a> | Swa Frantzen | December Black Tuesday Overview |
2008-11-11/a> | Swa Frantzen | November Black Tuesday Overview |
2008-10-23/a> | Mark Hofman | Microsoft out-of-band patch - Severity Critical |
2008-10-21/a> | Johannes Ullrich | Wireshark 1.0.4 released |
2008-10-14/a> | Swa Frantzen | October Black Tuesday Overview |
2008-10-14/a> | Swa Frantzen | Oracle quarterly patches on black tuesday |
2008-09-29/a> | Daniel Wesemann | Patchbag: WinZip / MPlayer / RealWin SCADA vuln |
2008-09-09/a> | Swa Frantzen | Google Chrome being polished |
2008-09-09/a> | Swa Frantzen | September 2008 Black Tuesday Overview |
2008-09-09/a> | Swa Frantzen | Apple updates iTunes+QuickTime |
2008-08-20/a> | Adrien de Beaupre | From the mailbag, Opera 9.52... |
2008-08-12/a> | Stephen Hall | August 2008 Black Tuesday Overview |
2008-08-01/a> | Swa Frantzen | Apple's Security Update 2008-005: DNS workaround finally included |
2008-07-30/a> | David Goldsmith | Serious 0-Day Flaw in Oracle -- Patch Released |
2008-07-16/a> | Maarten Van Horenbeeck | Firefox 2.0.0.16 fixes two security vulnerabilities |
2008-07-15/a> | Maarten Van Horenbeeck | Oracle (and BEA, Hyperion and TimesTen) critical patch update July 15th, 2008 |
2008-07-08/a> | Swa Frantzen | July 2008 black tuesday overview |
2008-06-10/a> | Swa Frantzen | June 2008 Black Tuesday Overview |
2008-05-13/a> | Swa Frantzen | May 2008 black tuesday overview |
2008-05-05/a> | John Bambenek | Defenses Against Automated Patch-Based Exploit Generation |
2008-04-18/a> | John Bambenek | The Patch Window is Gone: Automated Patch-Based Exploit Generation |
2008-04-09/a> | Joel Esler | ISC Podcast Episode Number 2 |
2008-04-08/a> | Swa Frantzen | April 2008 - Black Tuesday Overview |
2008-04-08/a> | Swa Frantzen | Notes file viewer vulnerabilities |
2008-03-11/a> | Swa Frantzen | March Black Tuesday Overview |
2008-02-12/a> | Swa Frantzen | February Black Tuesday Overview |
2008-01-08/a> | Swa Frantzen | January Black Tuesday overview |
2007-12-11/a> | Swa Frantzen | December black tuesday overview |
2007-11-13/a> | Swa Frantzen | november black tuesday overview |
2007-10-09/a> | Swa Frantzen | October Black Tuesday overview |
2007-09-11/a> | Swa Frantzen | September microsoft patch overview |
2007-08-14/a> | Swa Frantzen | August 'Black Tuesday' overview |
2007-07-10/a> | Swa Frantzen | July 'Black Tuesday' overview |
2007-06-12/a> | Johannes Ullrich | June 2007, Microsoft Patch Tuesday Overview. |
2007-05-08/a> | Swa Frantzen | May 2007, Black Tuesday patch overview |
2007-04-10/a> | Swa Frantzen | Microsoft black Tuesday patches - April 2007 |
2007-04-03/a> | Swa Frantzen | * Microsoft out of cycle patch |
2007-02-13/a> | Swa Frantzen | Microsoft Black Tuesday patches - February 2007 |
2007-01-09/a> | Swa Frantzen | Microsoft Patches - January 2007 - overview |
2006-12-12/a> | Swa Frantzen | Microsoft Black Tuesday - December 2006 overview |
2006-12-12/a> | Robert Danford | MS06-078: 2 Windows Media Format Vulnerabilities (CVE-2006-4702, CVE-2006-6134) |
2006-12-12/a> | Swa Frantzen | Offline Microsoft Patching |
2006-12-12/a> | Swa Frantzen | The missing Microsoft patches |
2006-11-14/a> | Swa Frantzen | Microsoft Black Tuesday Overview |
2006-10-09/a> | Swa Frantzen | Microsoft black tuesday - October 2006 STATUS |
2006-09-26/a> | Jim Clausing | MS06-049 re-release |
2006-09-12/a> | Swa Frantzen | Microsoft security patches for September 2006 |
2006-08-17/a> | Swa Frantzen | Microsoft August 2006 Patches: STATUS |
WINDOW |
2024-12-20/a> | Xavier Mertens | Christmas "Gift" Delivered Through SSH |
2023-08-11/a> | Xavier Mertens | Show me All Your Windows! |
2023-06-29/a> | Brad Duncan | GuLoader- or DBatLoader/ModiLoader-style infection for Remcos RAT |
2023-03-22/a> | Didier Stevens | Windows 11 Snipping Tool Privacy Bug: Inspecting PNG Files |
2023-02-19/a> | Didier Stevens | "Unsupported 16-bit Application" or HTML? |
2023-02-09/a> | Xavier Mertens | A Backdoor with Smart Screenshot Capability |
2022-11-05/a> | Guy Bruneau | Windows Malware with VHD Extension |
2022-06-26/a> | Didier Stevens | My Paste Command |
2022-06-24/a> | Xavier Mertens | Python (ab)using The Windows GUI |
2022-04-28/a> | Johannes Ullrich | A Day of SMB: What does our SMB/RPC Honeypot see? CVE-2022-26809 |
2022-04-14/a> | Johannes Ullrich | An Update on CVE-2022-26809 - MSRPC Vulnerabliity - PATCH NOW |
2022-04-06/a> | Brad Duncan | Windows MetaStealer Malware |
2022-02-25/a> | Didier Stevens | Windows, Fixed IPv4 Addresses and APIPA |
2021-10-14/a> | Xavier Mertens | Port-Forwarding with Windows for the Win |
2021-07-21/a> | Johannes Ullrich | "Summer of SAM": Microsoft Releases Guidance for CVE-2021-36934 |
2021-07-19/a> | Rick Wanner | New Windows Print Spooler Vulnerability - CVE-2021-34481 |
2021-05-02/a> | Didier Stevens | PuTTY And FileZilla Use The Same Fingerprint Registry Keys |
2020-09-30/a> | Johannes Ullrich | Scans for FPURL.xml: Reconnaissance or Not? |
2020-09-02/a> | Xavier Mertens | Python and Risky Windows API Calls |
2020-09-01/a> | Johannes Ullrich | Exposed Windows Domain Controllers Used in CLDAP DDoS Attacks |
2020-08-25/a> | Xavier Mertens | Keep An Eye on LOLBins |
2020-06-24/a> | Jan Kopriva | Using Shell Links as zero-touch downloaders and to initiate network connections |
2020-03-30/a> | Jan Kopriva | Crashing explorer.exe with(out) a click |
2020-03-23/a> | Didier Stevens | Windows Zeroday Actively Exploited: Type 1 Font Parsing Remote Code Execution Vulnerability |
2020-03-16/a> | Jan Kopriva | Desktop.ini as a post-exploitation tool |
2020-02-18/a> | Jan Kopriva | Discovering contents of folders in Windows without permissions |
2020-02-17/a> | Didier Stevens | curl and SSPI |
2020-02-15/a> | Didier Stevens | bsdtar on Windows 10 |
2020-01-09/a> | Kevin Shortt | Windows 7 - End of Life |
2019-06-27/a> | Rob VandenBrink | Finding the Gold in a Pile of Pennies - Long Tail Analysis in PowerShell |
2019-06-06/a> | Xavier Mertens | Keep an Eye on Your WMI Logs |
2019-05-22/a> | Johannes Ullrich | An Update on the Microsoft Windows RDP "Bluekeep" Vulnerability (CVE-2019-0708) [now with pcaps] |
2019-03-05/a> | Rob VandenBrink | Powershell, Active Directory and the Windows Host Firewall |
2019-01-14/a> | Rob VandenBrink | Still Running Windows 7? Time to think about that upgrade project! |
2018-12-19/a> | Xavier Mertens | Restricting PowerShell Capabilities with NetSh |
2018-12-19/a> | Xavier Mertens | Microsoft OOB Patch for Internet Explorer: Scripting Engine Memory Corruption Vulnerability |
2018-06-05/a> | Xavier Mertens | Malicious Post-Exploitation Batch File |
2018-05-07/a> | Xavier Mertens | Adding Persistence Via Scheduled Tasks |
2018-05-02/a> | Russ McRee | Windows Commands Reference - An InfoSec Must Have |
2017-11-15/a> | Xavier Mertens | If you want something done right, do it yourself! |
2017-11-11/a> | Xavier Mertens | Keep An Eye on your Root Certificates |
2017-01-18/a> | Rob VandenBrink | Making Windows 10 a bit less "Creepy" - Common Privacy Settings |
2017-01-12/a> | Mark Baggett | System Resource Utilization Monitor |
2016-11-18/a> | Didier Stevens | VBA Shellcode and Windows 10 |
2016-08-29/a> | Russ McRee | Recommended Reading: Intrusion Detection Using Indicators of Compromise Based on Best Practices and Windows Event Logs |
2016-08-02/a> | Tom Webb | Windows 10 Anniversary Update Available |
2016-07-12/a> | Xavier Mertens | Hunting for Malicious Files with MISP + OSSEC |
2016-05-22/a> | Pasquale Stirparo | The strange case of WinZip MRU Registry key |
2016-05-18/a> | Russ McRee | Resources: Windows Auditing & Monitoring, Linux 2FA |
2016-04-15/a> | Xavier Mertens | Windows Command Line Persistence? |
2016-03-30/a> | Xavier Mertens | What to watch with your FIM? |
2016-02-18/a> | Xavier Mertens | Hunting for Executable Code in Windows Environments |
2016-01-31/a> | Guy Bruneau | Windows 10 and System Protection for DATA Default is OFF |
2015-12-09/a> | Xavier Mertens | Enforcing USB Storage Policy with PowerShell |
2015-08-12/a> | Rob VandenBrink | Windows Service Accounts - Why They're Evil and Why Pentesters Love them! |
2014-08-15/a> | Tom Webb | AppLocker Event Logs with OSSEC 2.8 |
2014-07-05/a> | Guy Bruneau | Java Support ends for Windows XP |
2014-04-06/a> | Basil Alawi S.Taher | "Power Worm" PowerShell based Malware |
2014-04-04/a> | Rob VandenBrink | Windows 8.1 Released |
2014-03-24/a> | Johannes Ullrich | New Microsoft Advisory: Unpatched Word Flaw used in Targeted Attacks |
2014-03-04/a> | Daniel Wesemann | XPired! |
2014-01-10/a> | Basil Alawi S.Taher | Windows Autorun-3 |
2014-01-04/a> | Tom Webb | Monitoring Windows Networks Using Syslog (Part One) |
2013-10-30/a> | Russ McRee | SIR v15: Five good reasons to leave Windows XP behind |
2013-03-19/a> | Johannes Ullrich | Windows 7 SP1 and Windows Server 2008 R2 SP1 Being "pushed" today |
2013-02-28/a> | Daniel Wesemann | Parsing Windows Eventlogs in Powershell |
2012-10-24/a> | Rob VandenBrink | Time to run Windows Update - - Microsoft Updates KB2755801 for Windows RT / IE10 / Flash Player - http://technet.microsoft.com/en-us/security/advisory/2755801 |
2012-07-19/a> | Mark Baggett | Diagnosing Malware with Resource Monitor |
2012-06-25/a> | Guy Bruneau | Issues with Windows Update Agent |
2012-05-08/a> | Bojan Zdrnja | Windows Firewall Bypass Vulnerability and NetBIOS NS |
2012-05-06/a> | Jim Clausing | Tool updates and Win 8 |
2012-04-10/a> | Swa Frantzen | Windows Vista RIP |
2011-12-21/a> | Johannes Ullrich | New Vulnerability in Windows 7 64 bit |
2011-07-09/a> | Chris Mohan | Safer Windows Incident Response |
2011-06-30/a> | Rob VandenBrink | Update for RSA Authentication Manager |
2011-06-01/a> | Johannes Ullrich | Enabling Privacy Enhanced Addresses for IPv6 |
2011-03-27/a> | Guy Bruneau | Strange Shockwave File with Surprising Attachments |
2011-03-15/a> | Lenny Zeltser | Limiting Exploit Capabilities by Using Windows Integrity Levels |
2011-02-24/a> | Johannes Ullrich | Windows 7 / 2008 R2 Service Pack 1 Problems |
2011-02-23/a> | Johannes Ullrich | Windows 7 Service Pack 1 out |
2011-02-16/a> | Jason Lam | Windows 0-day SMB mrxsmb.dll vulnerability |
2011-02-10/a> | Chris Mohan | Befriending Windows Security Log Events |
2011-01-24/a> | Rob VandenBrink | Where have all the COM Ports Gone? - How enumerating COM ports led to me finding a “misplaced” Microsoft tool |
2011-01-04/a> | Johannes Ullrich | Microsoft Advisory: Vulnerability in Graphics Rendering Engine |
2010-11-24/a> | Bojan Zdrnja | Privilege escalation 0-day in almost all Windows versions |
2010-08-02/a> | Manuel Humberto Santander Pelaez | Securing Windows Internet Kiosk |
2010-06-15/a> | Manuel Humberto Santander Pelaez | Microsoft Windows Help and Support Center vulnerability (CVE 2010-1885) exploit in the wild |
2010-02-11/a> | Deborah Hale | The Mysterious Blue Screen |
2009-11-14/a> | Adrien de Beaupre | Microsoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released |
2009-11-12/a> | Rob VandenBrink | Windows 7 / Windows Server 2008 Remote SMB Exploit |
2009-10-24/a> | Marcus Sachs | Windows 7 - How is it doing? |
2009-09-08/a> | Guy Bruneau | Vista/2008/Windows 7 SMB2 BSOD 0Day |
2009-08-26/a> | Johannes Ullrich | WSUS 3.0 SP2 released |
2009-07-16/a> | Guy Bruneau | Changes in Windows Security Center |
2009-07-02/a> | Daniel Wesemann | Time to update updating on PCs for 3rd party apps |
2009-04-16/a> | Adrien de Beaupre | Strange Windows Event Log entry |
2009-01-31/a> | Swa Frantzen | Windows 7 - not so secure ? |
2008-08-15/a> | Jim Clausing | OMFW 2008 reflections |
2008-06-12/a> | Bojan Zdrnja | Safari on Windows - not looking good |
2008-05-17/a> | Lorna Hutcheson | XP SP3 Issues |
2008-05-06/a> | John Bambenek | Windows XP Service Pack 3 Released |
2008-05-01/a> | Adrien de Beaupre | Windows XP SteadyState |
2008-04-29/a> | Bojan Zdrnja | Windows Service Pack blocker tool |
2008-04-18/a> | John Bambenek | The Patch Window is Gone: Automated Patch-Based Exploit Generation |
2008-04-16/a> | William Stearns | Windows XP Service Pack 3 - unofficial schedule: Apr 21-28 |
2007-01-03/a> | Toby Kohlenberg | VLC Media Player udp URL handler Format String Vulnerability |