Diaries by Keyword: MS

DateAuthorTitle
2013-11-09Guy BruneauIE Zero-Day Vulnerability Exploiting msvcrt.dll
2013-11-01Russ McReeSecunia's PSI Country Report - Q3 2013
2013-10-04Pedro BuenoCSAM: WebHosting BruteForce logs
2013-10-03Johannes UllrichOctober Patch Tuesday Preview (CVE-2013-3893 patch coming!)
2013-10-02John BambenekObamacare related domain registration spike, Government shutdown domain registration beginning
2013-09-19Bojan ZdrnjaArrays in requests, PHP and DedeCMS
2013-09-10Swa FrantzenMicrosoft September 2013 Black Tuesday Overview
2013-09-07Guy BruneauMicrosoft September Patch Pre-Announcement
2013-08-28Bojan ZdrnjaMS13-056 (false positive)? alerts
2013-08-15Johannes UllrichMicrosoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx
2013-08-13Swa FrantzenMicrosoft August 2013 Black Tuesday Overview
2013-07-21Guy BruneauUbuntu Forums Security Breach
2013-07-09Swa FrantzenMicrosoft July 2013 Black Tuesday Overview
2013-06-11Swa FrantzenMicrosoft June 2013 Black Tuesday Overview
2013-06-11Swa FrantzenOther Microsoft Black Tuesday News
2013-05-14Swa FrantzenMicrosoft May 2013 Black Tuesday Overview
2013-05-09Johannes UllrichMicrosoft released a Fix-it for the Internet Explorer 8 Vulnerability http://support.microsoft.com/kb/2847140
2013-04-17John BambenekUPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun
2013-04-09Swa FrantzenMicrosoft April 2013 Black Tuesday Overview
2013-03-12Swa FrantzenMicrosoft March 2013 Black Tuesday Overview
2013-03-03Richard PorterUptick in MSSQL Activity
2013-02-12Adam SwangerMicrosoft February 2013 Black Tuesday Update - Overview
2013-01-14Richard PorterJanuary 2013 Microsoft Out of Cycle Patch
2013-01-09Rob VandenBrinkSecurity Update - Cisco Prime LMS (cisco-sa-20130109-lms - remote execution as root vulnerability) - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms
2012-12-11John BambenekMicrosoft December 2012 Black Tuesday Update - Overview
2012-11-13Jim ClausingMicrosoft November 2012 Black Tuesday Update - Overview
2012-08-22Adrien de BeauprePhishing/spam via SMS
2012-07-30Guy BruneauEnd of Days for MS-CHAPv2
2012-07-10Swa FrantzenMicrosoft July 2012 Black Tuesday Update - Overview
2012-06-12Swa FrantzenMicrosoft June 2012 Black Tuesday Update - Overview
2012-06-12Swa FrantzenMicrosoft Security Advisory 2719615 - MSXML - CVE-2012-1889
2012-05-08Adam SwangerMicrosoft May 2012 Black Tuesday Update - Overview
2012-05-05Tony CarothersVulnerability Exploit for Snow Leopard
2012-04-27Mark HofmanMicrosoft has added MSSQL 2008 R2 SP1 to the list of affected software for MS12-027 (Thanks Ryan). More info here --> http://technet.microsoft.com/security/bulletin/ms12-027
2012-04-26Richard PorterPacketstorm Security and Metasploit have Exploit code for MS12-027
2012-04-10Swa FrantzenWindows Vista RIP
2012-04-10Swa FrantzenMicrosoft April 2012 Black Tuesday Update - Overview
2012-01-06Guy BruneauJanuary 2012 Patch Tuesday Pre-release
2011-11-08Swa FrantzenMicrosoft November 2011 Black Tuesday Overview
2011-11-03Guy BruneauNovember 2011 Patch Tuesday Pre-release
2011-10-11Swa FrantzenMicrosoft Black Tuesday Overview October 2011
2011-10-11Swa FrantzenMicrosoft Security Intelligence Report (SIR) - Volume 11
2011-09-30Tony CarothersMicrosoft Security Essentials Mis-identifes Chrome
2011-09-13Swa FrantzenMicrosoft September 2011 Black Tuesday
2011-09-13Swa FrantzenMore DigiNotar intermediate certificates blacklisted at Microsoft
2011-08-11Johannes UllrichAs part of this weeks patch tuesday, microsoft also re-release MS11-043 to address stability issues.
2011-08-09Swa FrantzenMicrosoft August 2011 Black Tuesday Overview
2011-07-19Richard PorterSMS Phishing at the SANSFire 2011 Handler Dinner
2011-07-12Swa FrantzenMicrosoft July 2011 Black Tuesday Overview
2011-06-14Swa FrantzenMicrosoft June 2011 Black Tuesday Overview
2011-04-15Kevin ListonMS11-020 (KB2508429) Upgrading from Critical to PATCH NOW
2011-01-08Guy BruneauJanuary 2011 Patch Tuesday Pre-release
2011-01-05Johannes UllrichCurrently Unpatched Windows / Internet Explorer Vulnerabilities
2010-12-23Mark HofmanOlder AV Scam Active again.
2010-12-15Manuel Humberto Santander PelaezHP StorageWorks P2000 G3 MSA hardcoded user
2010-12-01Deborah HaleA Gentle Reminder - It is that time of year again
2010-10-08Rick WannerPatch Tuesday Pre-release -- 16 updates
2010-09-30Pedro BuenoMS OOB .NET patch is now also available via Windows Update.
2010-08-29Swa FrantzenDLL hijacking - what are you doing ?
2010-08-22Manuel Humberto Santander PelaezSCADA: A big challenge for information security professionals
2010-07-26Guy BruneauSophosLabs Released Free Tool to Validate Microsoft Shortcut
2010-07-08Kyle HaugsnessNew poll on MSRC
2010-05-11Scott FendleyMay 2010 Microsoft Patches
2010-04-22Guy BruneauMS10-025 Security Update has been Pulled
2010-04-16G. N. WhiteMS10-021: Encountering A Failed WinXP Update
2010-03-29Pedro BuenoMicrosoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix.
2010-03-09John BambenekMarch 2010 - Microsoft Patch Tuesday Diary
2010-03-03Mark HofmanMS10-015 re-released
2010-03-01Mark HofmanAS/NZ "Online Offensive - Fight fraud online" week March 1-7
2010-02-19Mark HofmanMS10-015 may cause Windows XP to blue screen (but only if you have malware on it)
2010-02-11Deborah HaleCritical Update for AD RMS
2010-01-13Johannes UllrichSMS Donations Advertised via Twitter
2009-10-14Johannes UllrichOdd Apache/MSIE issue with downloads from ISC
2009-09-08Guy BruneauMicrosoft September 2009 Black Tuesday Overview
2009-08-18Bojan ZdrnjaMS09-039 exploit in the wild?
2009-07-06Stephen Hall0-day in Microsoft DirectShow (msvidctl.dll) used in drive-by attacks
2009-05-20Pedro BuenoCyber Warfare and Kylin thoughts
2009-05-10Mari NicholsIs your Symantec Antivirus Alerting working correctly?
2009-04-23Kyle HaugsnessPossible MS09-013 activity
2009-02-19Bojan ZdrnjaMS09-002, XML/DOC and initial infection vector
2009-02-17Bojan ZdrnjaMS09-002 exploit in the wild
2009-02-13Andre LudwigThird party information on conficker
2009-01-13Johannes UllrichJanuary Black Tuesday Overview
2009-01-12William SaluskyDownadup / Conficker - MS08-067 exploit and Windows domain account lockout
2008-12-15Toby KohlenbergNew MS SQL Server vulnerability
2008-12-12Johannes UllrichMSIE 0-day Spreading Via SQL Injection
2008-12-09Swa FrantzenContacting us might be hard today
2008-11-29Pedro BuenoPossible Mumbai Scams?
2008-08-22Patrick NolanMS08-051 V2.0 Patch issued August 20, 2008
2008-08-15Jim ClausingAnother MS update that may have escaped notice
2008-06-13Johannes UllrichFloods: More of the same (2)
2008-05-19Maarten Van HorenbeeckText message and telephone aid scams
2008-05-17Lorna HutchesonXP SP3 Issues
2008-04-22donald smithMaximus root kit downloads via MySpace social engineering trick.
2008-04-10Deborah HaleSymantec Threatcon Level 2
2006-11-14Jim ClausingMS06-071: MSXML Core Services
2006-10-10Johannes UllrichMS06-056: ASP.NET XSS Information Disclosure Vulnerability (moderate)
2006-10-10Johannes UllrichMS06-061: XSLT/MSXML Buffer Overflow Code Execution Vulnerability (moderate)
2006-10-10Kyle HaugsnessMS06-063: Mailslot DoS (Server service)
2006-10-05Swa FrantzenMS06-053 revisited ?
2006-09-30Swa FrantzenYellow: WebViewFolderIcon setslice exploit spreading
2006-09-28Swa FrantzenMSIE: One patched, one pops up again (setslice)
2006-09-22Swa FrantzenYellow: MSIE VML exploit spreading
2006-09-19Swa FrantzenYet another MSIE 0-day: VML
2006-09-15Swa FrantzenMSIE DirectAnimation ActiveX 0-day update
2006-08-17Swa FrantzenMicrosoft August 2006 Patches: STATUS