Internet Storm Center
Sign In
Sign Up
Watch ISC TV. Great for NOCs, SOCs and Living Rooms:
https://isctv.sans.edu
Handler on Duty:
Jesse La Grew
Threat Level:
green
Date
Author
Title
FIREFOX JAVASCRIPT
2015-08-07
Tony Carothers
Critical Firefox Update Today
FIREFOX
2015-08-07/a>
Tony Carothers
Critical Firefox Update Today
2014-10-14/a>
Johannes Ullrich
Updates for Firefox and Thunderbird. http://www.mozilla.org/firefox/new/
2014-04-29/a>
Russ McRee
Firefox 29.0 & Thunderbird 24.5 released: http://www.mozilla.org/security/known-vulnerabilities/
2014-03-19/a>
Mark Hofman
Mozilla released updates for Firefox ( v 28.0), Thunderbird (v 24.4) and Firefox Extended Support Release (ESR) updates to 24.4.0 (Fixes include the issues highlighted at the pwn2own contest.)
2014-02-04/a>
Johannes Ullrich
Firefox 27 Available http://www.mozilla.org/en-US/firefox/27.0/releasenotes/
2013-11-02/a>
Rick Wanner
Protecting Your Family's Computers
2013-08-07/a>
Johannes Ullrich
Firefox 23 and Mixed Active Content
2013-06-25/a>
Bojan Zdrnja
Mozilla Firefox 22 released, fixes 14 security vulnerabilities, more info at http://www.mozilla.org/en-US/firefox/22.0/releasenotes/
2013-05-14/a>
Swa Frantzen
Firefox & Thunderbird released
2013-04-03/a>
Mark Hofman
Firefox 20 and Thunderbird 17.0.5 updates
2013-02-19/a>
Johannes Ullrich
Firefox 19 Release with various security fixes.
2013-02-06/a>
Kevin Shortt
Firefox updated to 18.02 -> https://www.mozilla.org/en-US/firefox/18.0.2/releasenotes/
2013-01-15/a>
Rob VandenBrink
When Disabling IE6 (or Java, or whatever) is not an Option...
2013-01-09/a>
Rob VandenBrink
Firefox and Thunderbird Updates
2013-01-08/a>
Richard Porter
Firefox 18 Released, Security Fixes http://www.mozilla.org/security/known-vulnerabilities/firefox.html
2012-12-01/a>
Guy Bruneau
Firefox 17.0.1 Bug Fixes - http://www.mozilla.org/en-US/firefox/17.0.1/releasenotes/
2012-10-28/a>
Tony Carothers
Firefox 16.02 Released
2012-10-11/a>
Rob VandenBrink
Firefox 16 / Thunderbird 16 updates
2012-08-28/a>
Johannes Ullrich
Firefox 15 Released (includes silent future updates) http://www.mozilla.org/en-US/firefox/15.0/releasenotes/buglist.html
2012-07-17/a>
Jim Clausing
Firefox 14.0.1, Thunderbird 14.0 out - both claim security fixes, but release notes not updated yet with security details
2012-06-20/a>
Raul Siles
Firefox 13.0.1 Update
2012-06-06/a>
Jim Clausing
Firefox, Thunderbird, and Seamonkey Security Updates
2012-03-27/a>
Johannes Ullrich
Firefox 3.6 EOL
2012-02-11/a>
Mark Hofman
Yet another version of Firefox has been released. One security fix. More info can be found here: https://www.mozilla.org/en-US/firefox/10.0.1/releasenotes/
2012-01-31/a>
Russ McRee
Firefox 10 and VMWare advisories and updates
2011-12-22/a>
Johannes Ullrich
Firefox 9 Security Fixes
2011-12-21/a>
Chris Mohan
Firefox 9 has been released patching known vulnerabilities http://www.mozilla.org/security/known-vulnerabilities/firefox.html#firefox9
2011-11-08/a>
Swa Frantzen
Firefox 8.0 released
2011-09-30/a>
Tony Carothers
Firefox v. 7.0.1 Is Live
2011-09-27/a>
Jason Lam
Firefox 3.6.23 security update is out and so is version 7 (time to break some add-on)
2011-09-06/a>
Guy Bruneau
Firefox 6.0.2 released to removed trust to DigiNotar certificate authority http://www.mozilla.org/en-US/firefox/6.0.2/releasenotes/
2011-08-31/a>
Johannes Ullrich
Firefox/Thunderbird 6.0.1 released to blocklist bad DigiNotar SSL certificates
2011-08-16/a>
Scott Fendley
Firefox 3.6.20 Corrects Several Critical Vulnerabilities
2011-08-14/a>
Guy Bruneau
FireCAT 2.0 Released
2011-07-13/a>
Kevin Shortt
Firefox Update 5.0.1 Available - http://www.mozilla.com/en-US/firefox/new/
2011-06-21/a>
Guy Bruneau
Firefox 5.0 is out with support Do Not Track on Multiple Platform - http://www.mozilla.com/en-US/firefox/new/
2011-06-09/a>
Richard Porter
One Browser to Rule them All?
2011-05-16/a>
Jason Lam
Firefox 3.5 forced upgrade coming soon
2011-04-29/a>
Guy Bruneau
Firefox, Thunderbird and SeaMonkey Security Updates
2011-04-10/a>
Raul Siles
Recent security enhancements in web browsers (e.g. Google Chrome)
2011-03-23/a>
Johannes Ullrich
Firefox 4 Security Features
2011-03-23/a>
Johannes Ullrich
Firefox 3 Updates and SSL Blocklist extension
2011-03-04/a>
Mark Hofman
And a new version of Firefox (thx all) hits the road, Version 3.6.15 more details here http://www.mozilla.com/en-US/firefox/3.6.15/releasenotes/ (and I agree it was a bit quick after 3.6.14)
2011-03-02/a>
Chris Mohan
Updates: Firefox 3.6.14/3.5.17, Thunderbird 3.1.8, Adobe Flash v10.2.152.32 & WireShark 1.4.4
2011-02-26/a>
Rick Wanner
Firefox 4 Beta 12 released
2011-01-10/a>
Manuel Humberto Santander Pelaez
VirusTotal VTzilla firefox/chrome plugin
2010-12-09/a>
Mark Hofman
Firefox version 3.6.13 is being pushed out, time to update (thanks Vincent). Thunderbird 3.1.7 and 3.0.11 can also be added to the list as well as SeaMonkey 2.0.11. - M
2010-11-15/a>
Stephen Hall
Mozilla Firefox 3.6.12 Remote Denial Of Service
2010-10-28/a>
Rick Wanner
Firefox 3.6.12 available - http://www.mozilla.com/en-US/firefox/personal.html
2010-10-26/a>
Pedro Bueno
Firefox news
2010-10-20/a>
Jim Clausing
Firefox 3.6.11 and 3.5.14 released, includes security updates ( http://www.mozilla.com/firefox/3.6.11/releasenotes/ )
2010-08-23/a>
Manuel Humberto Santander Pelaez
Firefox plugins to perform penetration testing activities
2010-07-25/a>
Rick Wanner
New Firefox Version, 3.6.8
2010-07-25/a>
Rick Wanner
Mozilla advisory for Firefox...Upgrade to 3.6.8. http://www.mozilla.org/security/announce/2010/mfsa2010-48.html
2010-07-23/a>
Mark Hofman
Firefox 3.6.8 is out. Yes it only seems like yesterday when you installed FF 3.6.7 (it was for me). The release notes say a stability issue has been fixed in this release.
2010-06-27/a>
Jim Clausing
Firefox 3.6.6 out - fixes issues with "crash protection"
2010-06-23/a>
Scott Fendley
Mozilla Firefox Updates
2010-04-02/a>
Guy Bruneau
Firefox 3.6.3 fix for CVE-2010-1121 http://www.mozilla.org/security/announce/2010/mfsa2010-25.html
2010-03-20/a>
Scott Fendley
Firefox 3.6.2 to be released March 30
2010-03-12/a>
Mark Hofman
Firefox 3.6 is being pushed out to users. http://www.mozilla.com/en-US/firefox/3.6/releasenotes/
2010-01-21/a>
Chris Carboni
Firefox Upgrade Available
2010-01-06/a>
Guy Bruneau
Firefox security and stability update for version 3.5.7 and 3.0.17 available for download
2009-12-17/a>
Daniel Wesemann
overlay.xul is back
2009-12-16/a>
Mark Hofman
Firefox 3.5.6 is available, time to update.
2009-11-06/a>
Mark Hofman
A new version of Firefox (3.5.5) just became available. According to the release notes they are stability improvements.
2009-10-28/a>
Johannes Ullrich
Firefox 3.5.4 released. Lots of security bug fixes. (thanks Gilbert!)
2009-10-17/a>
Rick Wanner
Mozilla disables Microsoft plug-ins?
2009-10-16/a>
Adrien de Beaupre
Disable MS09-054 patch, or Firefox Plugin?
2009-10-08/a>
Johannes Ullrich
Firefox Plugin Collections
2009-09-10/a>
Guy Bruneau
Firefox 3.5.3 and 3.0.14 has been released
2009-08-04/a>
Mark Hofman
Firefox Updates
2009-07-22/a>
Chris Carboni
Firefox 3.0.12 is Available
2009-07-19/a>
Marcus Sachs
Mozilla Comments on Firefox 3.5.1 issue
2009-07-17/a>
Stephen Hall
Firefox 3.5.1 has been released
2009-07-14/a>
Swa Frantzen
Firefox new exploit
2009-06-30/a>
Chris Carboni
Firefox 3.5 is available
2009-06-11/a>
Rick Wanner
Firefox 3.0.11 is available
2009-03-27/a>
David Goldsmith
Firefox 3.0.8 Released
2009-03-19/a>
Mark Hofman
Browsers Tumble at CanSecWest
2009-03-04/a>
Deborah Hale
Firefox Releases version 3.0.7
2009-02-04/a>
Daniel Wesemann
Firefox 3.0.6
2008-12-17/a>
donald smith
Firefox 3.0.5 fixes several security issues.
2008-11-13/a>
Jim Clausing
New Firefoxen out
2008-09-26/a>
Patrick Nolan
Firefox v2.0.0.17 and Thunderbird v2.0.0.17 release fixes vulnerabilities
2008-09-25/a>
Jim Clausing
Firefox 3.0.3 will be out probably tomorrow
2008-07-17/a>
Mari Nichols
Firefox Releases 3.0.1 and fixes 3 security vulnerabilities
2008-07-16/a>
Maarten Van Horenbeeck
Firefox 2.0.0.16 fixes two security vulnerabilities
2008-07-02/a>
Jim Clausing
Firefox 2.0.0.15 is out
2008-06-19/a>
William Stearns
Firefox vunerability
2008-06-16/a>
Marcus Sachs
Firefox 3.0 to be Released on Tuesday
2008-05-08/a>
Joel Esler
COMPROMISED FILE IN VIETNAMESE LANGUAGE PACK FOR FIREFOX 2
2008-04-17/a>
Chris Carboni
Firefox Update
2008-03-26/a>
Raul Siles
Firefox 2.0.0.13 is out
2008-03-24/a>
Raul Siles
Next-generation Web browsers?
JAVASCRIPT
2022-06-16/a>
Xavier Mertens
Houdini is Back Delivered Through a JavaScript Dropper
2022-06-01/a>
Jan Kopriva
HTML phishing attachments - now with anti-analysis features
2022-01-18/a>
Jan Kopriva
Phishing e-mail with...an advertisement?
2021-11-18/a>
Xavier Mertens
JavaScript Downloader Delivers Agent Tesla Trojan
2021-10-21/a>
Brad Duncan
"Stolen Images Evidence" campaign pushes Sliver-based malware
2021-05-22/a>
Xavier Mertens
"Serverless" Phishing Campaign
2021-05-18/a>
Xavier Mertens
From RunDLL32 to JavaScript then PowerShell
2021-04-28/a>
Xavier Mertens
Deeper Analyzis of my Last Malicious PowerPoint Add-On
2020-11-13/a>
Xavier Mertens
Old Worm But New Obfuscation Technique
2020-07-24/a>
Xavier Mertens
Compromized Desktop Applications by Web Technologies
2020-06-11/a>
Xavier Mertens
Anti-Debugging JavaScript Techniques
2020-03-27/a>
Xavier Mertens
Malicious JavaScript Dropping Payload in the Registry
2019-08-09/a>
Xavier Mertens
100% JavaScript Phishing Page
2019-06-10/a>
Xavier Mertens
Interesting JavaScript Obfuscation Example
2019-02-07/a>
Xavier Mertens
Phishing Kit with JavaScript Keylogger
2018-07-13/a>
Xavier Mertens
Cryptominer Delivered Though Compromized JavaScript File
2018-06-18/a>
Xavier Mertens
Malicious JavaScript Targeting Mobile Browsers
2017-06-22/a>
Xavier Mertens
Obfuscating without XOR
2017-03-24/a>
Xavier Mertens
Nicely Obfuscated JavaScript Sample
2017-03-04/a>
Xavier Mertens
How your pictures may affect your website reputation
2017-02-12/a>
Xavier Mertens
Analysis of a Suspicious Piece of JavaScript
2016-08-28/a>
Guy Bruneau
Spam with Obfuscated Javascript
2016-06-18/a>
Rob VandenBrink
Controlling JavaScript Malware Before it Runs
2016-02-20/a>
Didier Stevens
Locky: JavaScript Deobfuscation
2016-02-07/a>
Xavier Mertens
More Malicious JavaScript Obfuscation
2016-01-15/a>
Xavier Mertens
JavaScript Deobfuscation Tool
2015-08-07/a>
Tony Carothers
Critical Firefox Update Today
2014-08-29/a>
Johannes Ullrich
False Positive or Not? Difficult to Analyze Javascript
2014-07-02/a>
Johannes Ullrich
Simple Javascript Extortion Scheme Advertised via Bing
2013-08-07/a>
Johannes Ullrich
Firefox 23 and Mixed Active Content
2013-04-23/a>
Russ McRee
Microsoft's Security Intelligence Report (SIRv14) released
2013-02-08/a>
Kevin Shortt
Is it Spam or Is it Malware?
2012-06-25/a>
Guy Bruneau
Using JSDetox to Analyze and Deobfuscate Javascript
2012-05-22/a>
Johannes Ullrich
nmap 6 released
2012-04-25/a>
Daniel Wesemann
Blacole's obfuscated JavaScript
2012-01-22/a>
Johannes Ullrich
Javascript DDoS Tool Analysis
2012-01-03/a>
Bojan Zdrnja
The tale of obfuscated JavaScript continues
2011-12-07/a>
Lenny Zeltser
V8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation
2011-06-06/a>
Manuel Humberto Santander Pelaez
Phishing: Same goal, same techniques and people still falling for such scams
2011-04-23/a>
Manuel Humberto Santander Pelaez
Image search can lead to malware download
2010-12-02/a>
Kevin Johnson
Robert Hansen and our happiness
2010-07-04/a>
Manuel Humberto Santander Pelaez
Malware inside PDF Files
2010-03-05/a>
Kyle Haugsness
Javascript obfuscators used in the wild
2009-05-04/a>
Tom Liston
Adobe Reader/Acrobat Critical Vulnerability
2009-04-07/a>
Bojan Zdrnja
Advanced JavaScript obfuscation (or why signature scanning is a failure)
2009-04-02/a>
Bojan Zdrnja
JavaScript insertion and log deletion attack tools
2009-02-25/a>
Andre Ludwig
Adobe Acrobat pdf 0-day exploit, No JavaScript needed!
2008-07-14/a>
Daniel Wesemann
Obfuscated JavaScript Redux
2008-06-30/a>
Marcus Sachs
More SQL Injection with Fast Flux hosting
2008-05-20/a>
Raul Siles
List of malicious domains inserted through SQL injection
2008-04-06/a>
Daniel Wesemann
Advanced obfuscated JavaScript analysis
2008-04-03/a>
Bojan Zdrnja
Mixed (VBScript and JavaScript) obfuscation
Homepage
Diaries
Podcasts
Jobs
Data
TCP/UDP Port Activity
Port Trends
SSH/Telnet Scanning Activity
Weblogs
Threat Feeds Activity
Threat Feeds Map
Useful InfoSec Links
Presentations & Papers
Research Papers
API
Tools
DShield Sensor
DNS Looking Glass
Honeypot (RPi/AWS)
InfoSec Glossary
Forums
Auditing
Diary Discussions
Forensics
General Discussions
Industry News
Network Security
Penetration Testing
Software Security
Contact Us
Contact Us
About Us
Handlers
Slack Channel
Mastodon
Twitter
Have you heard our daily podcast covering the latest
information security threats
?