ISC Diary Archive: Dec 2009

Archive Matrix

2003	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2004	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2005	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2006	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2007	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2008	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2009	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2010	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2011	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2012	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2013	Jan	Feb	Mar	Apr	May

Archive Diary List

2009-12-01

Date	Author	Title
2009-12-31	Joel Esler	Have a Happy New Year (2 Comments)
2009-12-31	Joel Esler	Sendmail 8.14.4 has been released (0 Comments)
2009-12-30	Guy Bruneau	Ready to use IDS Sensor with Sguil (2 Comments)
2009-12-30	John Bambenek	GSM Cell Phone Encryption is Cracked - Interception of Cell Calls Possible (4 Comments)
2009-12-30	Guy Bruneau	KDC DoS in cross-realm referral processing (0 Comments)
2009-12-29	Rick Wanner	Microsoft responds to possible IIS 6 0-day (0 Comments)
2009-12-29	Rick Wanner	What's up with port 12174? Possible Symantec server compromise? (5 Comments)
2009-12-28	Joel Esler	It's been 10 years (2 Comments)
2009-12-28	Joel Esler	How this weekend's attempted Terrorist attack relates to IT. (5 Comments)
2009-12-28	Johannes Ullrich	8 Basic Rules to Implement Secure File Uploads http://jbu.me/48 (inspired by IIS ; bug) (oneliner) (0 Comments)
2009-12-28	Joel Esler	We are receiving reports of another Blackberry outage. (oneliner) (1 Comments)
2009-12-28	Joel Esler	Microsoft puts up a blurb on their website about the IIS 0day. (0 Comments)
2009-12-27	Patrick Nolan	Pressure increasing for Microsoft to patch IIS 0 day (2 Comments)
2009-12-25	Marcus Sachs	Did any digital nasties show up under your tree this year? (2 Comments)
2009-12-24	Guy Bruneau	Microsoft IIS File Parsing Extension Vulnerability (0 Comments)
2009-12-24	Guy Bruneau	F5 BIG-IP ASM and PSM Remote Buffer Overflow (0 Comments)
2009-12-23	John Bambenek	Merry Festivus: Commence the "Airing of Infosec Grievaces" (21 Comments)
2009-12-23	Marcus Sachs	Blackberry Outage (5 Comments)
2009-12-23	Johannes Ullrich	Tell us about your Christmas Family Emergency Kit (17 Comments)
2009-12-22	Marcus Sachs	Howard Schmidt named as new Cybersecurity Coordinator (2 Comments)
2009-12-21	John Bambenek	There is no such thing as a free lunch . (0 Comments)
2009-12-21	Marcus Sachs	iPhone Botnet Analysis (3 Comments)
2009-12-19	Deborah Hale	Educationing Our Communities (4 Comments)
2009-12-19	Deborah Hale	Frustrations of ISP Abuse Handling (13 Comments)
2009-12-18	Stephen Hall	Wireshark 1.2.5 released - including three security fixes (oneliner) (0 Comments)
2009-12-18	Stephen Hall	Twitter outage via DNS hijacking (5 Comments)
2009-12-17	Daniel Wesemann	PHP 5.2.12 has been released; contains security fixes. See http://www.php.net (oneliner) (0 Comments)
2009-12-17	Daniel Wesemann	In caches, danger lurks (2 Comments)
2009-12-17	Daniel Wesemann	overlay.xul is back (0 Comments)
2009-12-16	Rob VandenBrink	Cisco WebEx WRF Player Vulnerabilities (0 Comments)
2009-12-16	Rob VandenBrink	Beware the Attack of the Christmas Greeting Cards ! (0 Comments)
2009-12-16	Rob VandenBrink	Seamonkey Update to 2.0.1, find the release notes here ==> http://www.seamonkey-project.org/releases/seamonkey2.0.1 (oneliner) (0 Comments)
2009-12-16	Mark Hofman	Firefox 3.5.6 is available, time to update. (oneliner) (0 Comments)
2009-12-15	Johannes Ullrich	Important BIND name server updates - DNSSEC (0 Comments)
2009-12-15	Johannes Ullrich	Adobe 0-day in the wild - again (10 Comments)
2009-12-14	Adrien de Beaupre	PostgreSQL 8.4.2, 8.3.9, 8.2.15, 8.1.19, 8.0.23 and 7.4.27 have security fixes http://www.postgresql.org/docs/current/static/release.html (0 Comments)
2009-12-14	Adrien de Beaupre	Anti-forensics, COFEE vs. DECAF (6 Comments)
2009-12-13	Mark Hofman	Metrics and SPAM (8 Comments)
2009-12-11	Joel Esler	Microsoft Update providing 403 error code? (24 Comments)
2009-12-11	Joel Esler	Another good reason to update to Thunderbird 3.0 (0 Comments)
2009-12-10	Adrien de Beaupre	Facebook Password Reset Confirmation. Customer Support. (Malware) (2 Comments)
2009-12-09	Swa Frantzen	Facebook announces privacy improvements (1 Comments)
2009-12-09	Swa Frantzen	OSSEC 2.3 released (0 Comments)
2009-12-09	Johannes Ullrich	New Poll: What DNS service do you use (see right hand sidebar) (oneliner) (1 Comments)
2009-12-09	Swa Frantzen	ntpd upgrade to prevent spoofed looping (0 Comments)
2009-12-09	Swa Frantzen	Adobe flash player and air patched (2 Comments)
2009-12-08	Deborah Hale	December 2009 Black Tuesday Overview (3 Comments)
2009-12-07	Rob VandenBrink	Layer 2 Network Protections – reloaded! (0 Comments)
2009-12-07	Rick Wanner	Cheat Sheet: Analyzing Malicious Documents (0 Comments)
2009-12-05	Guy Bruneau	Java JRE Buffer and Integer Overflow (0 Comments)
2009-12-04	Daniel Wesemann	Disregard INFOCON change notifications just sent - we had a glitch on the main server (oneliner) (0 Comments)
2009-12-04	Daniel Wesemann	The economics of security advice (MSFT research paper) (0 Comments)
2009-12-04	Daniel Wesemann	Max Power's Malware Paradise (4 Comments)
2009-12-04	Joel Esler	We are receiving reports that Bing.com is down. Thank you for writing in. (oneliner) (0 Comments)
2009-12-03	Mark Hofman	Next week will be a big patch week - Adobe is also releasing patches "Adobe is planning to release an update for Adobe Flash Player 10.0.32.18 and earlier versions, and an update to Adobe AIR 1.5.2 and earlier versions, to resolve critical security issues (oneliner) (0 Comments)
2009-12-03	Mark Hofman	Apple released some Java updates today APPLE-SA-2009-12-03-1 & 2 (for 10.5 and 10.6). Fixes a number of security issues so updating is a good idea. (oneliner) (0 Comments)
2009-12-03	Mark Hofman	Avast false positives (2 Comments)
2009-12-02	Rob VandenBrink	SPAM and Malware taking advantage of H1N1 concerns (1 Comments)
2009-12-02	Rob VandenBrink	Updates to Sysinternals Toolkit (0 Comments)
2009-12-02	Rob VandenBrink	Microsoft Black Screen of Death - Fact of Fiction? (1 Comments)
2009-12-01	Chris Carboni	Vulnerabilities in the PDF distiller of the BlackBerry Attachment Service (1 Comments)
2009-12-01	Chris Carboni	Clientless SSL VPN products break web browser domain-based security models (0 Comments)