Threat Level: green Handler on Duty: Deborah Hale

SANS ISC: Diaries by Keyword - SANS Internet Storm Center Diaries by Keyword


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Date Author Title
2016-02-23Xavier MertensVMware VMSA-2016-0002
2016-02-13Guy BruneauVMware VMSA-2015-0007.3 has been Re-released
2016-02-09Johannes UllrichMicrosoft February 2016 Patch Tuesday
2016-01-24Didier StevensObfuscated MIME Files
2016-01-12Alex StanfordJanuary 2016 Microsoft Patch Tuesday
2015-12-08Johannes UllrichDecember 2015 Microsoft Patch Tuesday
2015-11-10Johannes UllrichNovember 2015 Microsoft Patch Tuesday
2015-10-13Alex StanfordOctober 2015 Microsoft Patch Tuesday
2015-09-08Lenny ZeltserA Close Look at PayPal Overpayment Scams That Target Craigslist Sellers
2015-09-08Johannes UllrichSeptember 2015 Microsoft Patch Tuesday
2015-08-11Manuel Humberto Santander PelaezAugust 2015 Microsoft Patch Tuesday
2015-07-14Johannes UllrichJuly 2015 Microsoft Patch Tuesday
2015-06-09Johannes UllrichMicrosoft Patch Tuesday Summary for June 2015
2015-05-15Didier StevensAnother Maldoc? I'm Afraid So...
2015-05-12Johannes UllrichMay 2015 Microsoft Patch Tuesday Summary
2015-05-09Didier StevensMalicious Word Document: This Time The Maldoc Is A MIME File
2015-04-28Daniel WesemannScammy Nepal earthquake donation requests
2015-04-15Johannes UllrichMS15-034: HTTP.sys (IIS) DoS And Possible Remote Code Execution. PATCH NOW
2015-04-14Alex StanfordMicrosoft Patch Tuesday - April 2015
2015-03-10Johannes UllrichMicrosoft March Patch Tuesday
2015-02-10Mark BaggettMicrosoft Update Advisory for February 2015
2015-01-13Johannes UllrichMicrosoft Patch Tuesday - January 2015 (Really? Telnet?)
2014-12-09Alex StanfordMicrosoft Patch Tuesday - December 2014
2014-11-18Jim ClausingMicrosoft November out-of-cycle patch MS14-068
2014-11-11Johannes UllrichMicrosoft November 2014 Patch Tuesday
2014-10-14Johannes UllrichMicrosoft October 2014 Patch Tuesday
2014-09-09Alex StanfordMicrosoft Patch Tuesday - September 2014
2014-08-12Alex StanfordMicrosoft Patch Tuesday - August 2014
2014-07-08Alex StanfordMicrosoft Patch Tuesday - July
2014-06-10Alex StanfordMicrosoft Patch Tuesday June 2014
2014-05-13Johannes UllrichMicrosoft May 2014 Patch Tuesday
2014-05-01Johannes UllrichMicrosoft Announces Special Patch for IE 0-day (Win XP included!)
2014-04-08Richard PorterApril 2014 Microsoft Patches
2014-03-11Johannes UllrichMicrosoft Patch Tuesday March 2014
2014-02-11Johannes UllrichFebruary 2014 Microsoft Patch Tuesday
2014-01-14Johannes UllrichMicrosoft Patch Tuesday January 2014
2013-12-10Johannes UllrichMicrosoft December Patch Tuesday
2013-11-12Johannes UllrichNovember 2013 Microsoft Patch Tuesday
2013-11-09Guy BruneauIE Zero-Day Vulnerability Exploiting msvcrt.dll
2013-11-01Russ McReeSecunia's PSI Country Report - Q3 2013
2013-10-08Johannes UllrichMicrosoft October 2013 Patch Tuesday
2013-10-04Pedro BuenoCSAM: WebHosting BruteForce logs
2013-10-03Johannes UllrichOctober Patch Tuesday Preview (CVE-2013-3893 patch coming!)
2013-10-02John BambenekObamacare related domain registration spike, Government shutdown domain registration beginning
2013-09-19Bojan ZdrnjaArrays in requests, PHP and DedeCMS
2013-09-10Swa FrantzenMicrosoft September 2013 Black Tuesday Overview
2013-09-07Guy BruneauMicrosoft September Patch Pre-Announcement
2013-08-28Bojan ZdrnjaMS13-056 (false positive)? alerts
2013-08-15Johannes UllrichMicrosoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx
2013-08-13Swa FrantzenMicrosoft August 2013 Black Tuesday Overview
2013-07-21Guy BruneauUbuntu Forums Security Breach
2013-07-09Swa FrantzenMicrosoft July 2013 Black Tuesday Overview
2013-06-11Swa FrantzenMicrosoft June 2013 Black Tuesday Overview
2013-06-11Swa FrantzenOther Microsoft Black Tuesday News
2013-05-14Swa FrantzenMicrosoft May 2013 Black Tuesday Overview
2013-05-09Johannes UllrichMicrosoft released a Fix-it for the Internet Explorer 8 Vulnerability http://support.microsoft.com/kb/2847140
2013-04-17John BambenekUPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun
2013-04-09Swa FrantzenMicrosoft April 2013 Black Tuesday Overview
2013-03-12Swa FrantzenMicrosoft March 2013 Black Tuesday Overview
2013-03-03Richard PorterUptick in MSSQL Activity
2013-02-12Adam SwangerMicrosoft February 2013 Black Tuesday Update - Overview
2013-01-14Richard PorterJanuary 2013 Microsoft Out of Cycle Patch
2013-01-09Rob VandenBrinkSecurity Update - Cisco Prime LMS (cisco-sa-20130109-lms - remote execution as root vulnerability) - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms
2013-01-08Richard PorterMicrosoft January 2013 Black Tuesday Update - Overview
2012-12-11John BambenekMicrosoft December 2012 Black Tuesday Update - Overview
2012-11-13Jim ClausingMicrosoft November 2012 Black Tuesday Update - Overview
2012-10-09Johannes UllrichMicrosoft October 2012 Black Tuesday Update - Overview
2012-09-11Adam SwangerMicrosoft September 2012 Black Tuesday Update - Overview
2012-08-22Adrien de BeauprePhishing/spam via SMS
2012-08-14Rick WannerMicrosoft August 2012 Black Tuesday Update - Overview
2012-07-30Guy BruneauEnd of Days for MS-CHAPv2
2012-07-10Swa FrantzenMicrosoft July 2012 Black Tuesday Update - Overview
2012-06-12Swa FrantzenMicrosoft June 2012 Black Tuesday Update - Overview
2012-06-12Swa FrantzenMicrosoft Security Advisory 2719615 - MSXML - CVE-2012-1889
2012-05-08Adam SwangerMicrosoft May 2012 Black Tuesday Update - Overview
2012-05-05Tony CarothersVulnerability Exploit for Snow Leopard
2012-04-27Mark HofmanMicrosoft has added MSSQL 2008 R2 SP1 to the list of affected software for MS12-027 (Thanks Ryan). More info here --> http://technet.microsoft.com/security/bulletin/ms12-027
2012-04-26Richard PorterPacketstorm Security and Metasploit have Exploit code for MS12-027
2012-04-10Swa FrantzenWindows Vista RIP
2012-04-10Swa FrantzenMicrosoft April 2012 Black Tuesday Update - Overview
2012-03-13Lenny ZeltserMarch 2012 Microsoft Black Tuesday
2012-02-14Johannes UllrichFebruary 2012 Microsoft Black Tuesday
2012-01-10Adrien de BeaupreJanuary 2012 Microsoft Black Tuesday Summary
2012-01-06Guy BruneauJanuary 2012 Patch Tuesday Pre-release
2011-12-13Johannes UllrichDecember 2011 Microsoft Black Tuesday Summary
2011-11-08Swa FrantzenMicrosoft November 2011 Black Tuesday Overview
2011-11-03Guy BruneauNovember 2011 Patch Tuesday Pre-release
2011-10-11Swa FrantzenMicrosoft Black Tuesday Overview October 2011
2011-10-11Swa FrantzenMicrosoft Security Intelligence Report (SIR) - Volume 11
2011-09-30Tony CarothersMicrosoft Security Essentials Mis-identifes Chrome
2011-09-13Swa FrantzenMore DigiNotar intermediate certificates blacklisted at Microsoft
2011-09-13Swa FrantzenMicrosoft September 2011 Black Tuesday
2011-09-09Johannes UllrichEarly Patch Tuesday Today: Microsoft September 2011 Patches
2011-08-11Johannes UllrichAs part of this weeks patch tuesday, microsoft also re-release MS11-043 to address stability issues.
2011-08-09Swa FrantzenMicrosoft August 2011 Black Tuesday Overview
2011-07-19Richard PorterSMS Phishing at the SANSFire 2011 Handler Dinner
2011-07-12Swa FrantzenMicrosoft July 2011 Black Tuesday Overview
2011-06-14Swa FrantzenMicrosoft June 2011 Black Tuesday Overview
2011-05-10Swa FrantzenMay 2011 Microsoft Black Tuesday Overview
2011-04-15Kevin ListonMS11-020 (KB2508429) Upgrading from Critical to PATCH NOW
2011-04-11Jim ClausingApril 2011 Microsoft Black Tuesday Summary
2011-03-08Jim ClausingMarch 2011 Microsoft Black Tuesday Summary
2011-02-08Joel EslerFeburary 2011 Microsoft Black Tuesday Summary
2011-01-11Kevin ShorttJanuary 2011 Microsoft Black Tuesday Summary
2011-01-08Guy BruneauJanuary 2011 Patch Tuesday Pre-release
2011-01-05Johannes UllrichCurrently Unpatched Windows / Internet Explorer Vulnerabilities
2010-12-23Mark HofmanOlder AV Scam Active again.
2010-12-15Manuel Humberto Santander PelaezHP StorageWorks P2000 G3 MSA hardcoded user
2010-12-14Manuel Humberto Santander PelaezDecember 2010 Microsoft Black Tuesday Summary
2010-12-01Deborah HaleA Gentle Reminder - It is that time of year again
2010-11-09Johannes UllrichNovember 2010 Microsoft Black Tuesday Summary
2010-10-12Adrien de BeaupreOctober 2010 Microsoft Black Tuesday Summary
2010-10-08Rick WannerPatch Tuesday Pre-release -- 16 updates
2010-09-30Pedro BuenoMS OOB .NET patch is now also available via Windows Update.
2010-09-14Adrien de BeaupreSeptember 2010 Microsoft Black Tuesday Summary
2010-08-29Swa FrantzenDLL hijacking - what are you doing ?
2010-08-22Manuel Humberto Santander PelaezSCADA: A big challenge for information security professionals
2010-08-10Jim ClausingAugust 2010 Micrsoft Black Tuesday Summary
2010-07-26Guy BruneauSophosLabs Released Free Tool to Validate Microsoft Shortcut
2010-07-13Jim ClausingJuly 2010 Microsoft Black Tuesday Summary
2010-07-08Kyle HaugsnessNew poll on MSRC
2010-06-08Manuel Humberto Santander PelaezJune 2010 Microsoft Black Tuesday Summary
2010-05-11Scott FendleyMay 2010 Microsoft Patches
2010-04-22Guy BruneauMS10-025 Security Update has been Pulled
2010-04-16G. N. WhiteMS10-021: Encountering A Failed WinXP Update
2010-04-13Johannes UllrichMicrosoft April 2010 Patch Tuesday
2010-03-29Pedro BuenoMicrosoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix.
2010-03-09John BambenekMarch 2010 - Microsoft Patch Tuesday Diary
2010-03-03Mark HofmanMS10-015 re-released
2010-03-01Mark HofmanAS/NZ "Online Offensive - Fight fraud online" week March 1-7
2010-02-19Mark HofmanMS10-015 may cause Windows XP to blue screen (but only if you have malware on it)
2010-02-11Deborah HaleCritical Update for AD RMS
2010-02-09Johannes UllrichFebruary 2010 Black Tuesday Overview
2010-01-21Johannes UllrichMicrosoft January Out of Band Patch
2010-01-13Johannes UllrichSMS Donations Advertised via Twitter
2010-01-12Johannes UllrichMicrosoft Security Bulletin: January 2010
2009-12-08Deborah HaleDecember 2009 Black Tuesday Overview
2009-11-10Swa FrantzenMicrosoft November Black Tuesday Overview
2009-10-14Johannes UllrichOdd Apache/MSIE issue with downloads from ISC
2009-10-13Johannes UllrichMicrosoft October 2009 Black Tuesday Overview
2009-09-08Guy BruneauMicrosoft September 2009 Black Tuesday Overview
2009-08-18Bojan ZdrnjaMS09-039 exploit in the wild?
2009-08-11Swa FrantzenMicrosoft August 2009 Black Tuesday Overview
2009-07-14Swa FrantzenMicrosoft July Black Tuesday Overview
2009-07-06Stephen Hall0-day in Microsoft DirectShow (msvidctl.dll) used in drive-by attacks
2009-06-09Swa FrantzenMicrosoft June Black Tuesday Overview
2009-05-20Pedro BuenoCyber Warfare and Kylin thoughts
2009-05-12Swa FrantzenMay Black Tuesday Overview
2009-05-10Mari NicholsIs your Symantec Antivirus Alerting working correctly?
2009-04-23Kyle HaugsnessPossible MS09-013 activity
2009-04-14Swa FrantzenApril Black Tuesday Overview
2009-03-10Swa FrantzenMarch black Tuesday overview
2009-02-19Bojan ZdrnjaMS09-002, XML/DOC and initial infection vector
2009-02-17Bojan ZdrnjaMS09-002 exploit in the wild
2009-02-13Andre LudwigThird party information on conficker
2009-02-10Swa FrantzenFebruary Black Tuesday Overview
2009-01-13Johannes UllrichJanuary Black Tuesday Overview
2009-01-12William SaluskyDownadup / Conficker - MS08-067 exploit and Windows domain account lockout
2008-12-15Toby KohlenbergNew MS SQL Server vulnerability
2008-12-12Johannes UllrichMSIE 0-day Spreading Via SQL Injection
2008-12-09Swa FrantzenDecember Black Tuesday Overview
2008-12-09Swa FrantzenContacting us might be hard today
2008-11-29Pedro BuenoPossible Mumbai Scams?
2008-11-11Swa FrantzenNovember Black Tuesday Overview
2008-10-14Swa FrantzenOctober Black Tuesday Overview
2008-09-09Swa FrantzenSeptember 2008 Black Tuesday Overview
2008-08-22Patrick NolanMS08-051 V2.0 Patch issued August 20, 2008
2008-08-15Jim ClausingAnother MS update that may have escaped notice
2008-08-12Stephen HallAugust 2008 Black Tuesday Overview
2008-07-08Swa FrantzenJuly 2008 black tuesday overview
2008-06-13Johannes UllrichFloods: More of the same (2)
2008-06-10Swa FrantzenJune 2008 Black Tuesday Overview
2008-05-19Maarten Van HorenbeeckText message and telephone aid scams
2008-05-17Lorna HutchesonXP SP3 Issues
2008-05-13Swa FrantzenMay 2008 black tuesday overview
2008-04-22donald smithMaximus root kit downloads via MySpace social engineering trick.
2008-04-10Deborah HaleSymantec Threatcon Level 2
2008-04-08Swa FrantzenApril 2008 - Black Tuesday Overview
2008-03-11Swa FrantzenMarch Black Tuesday Overview
2008-02-12Swa FrantzenFebruary Black Tuesday Overview
2008-01-08Swa FrantzenJanuary Black Tuesday overview
2007-12-11Swa FrantzenDecember black tuesday overview
2007-11-13Swa Frantzennovember black tuesday overview
2007-10-09Swa FrantzenOctober Black Tuesday overview
2007-09-11Swa FrantzenSeptember microsoft patch overview
2007-08-14Swa FrantzenAugust 'Black Tuesday' overview
2007-07-10Swa FrantzenJuly 'Black Tuesday' overview
2007-06-12Johannes UllrichJune 2007, Microsoft Patch Tuesday Overview.
2007-05-08Swa FrantzenMay 2007, Black Tuesday patch overview
2007-04-10Swa FrantzenMicrosoft black Tuesday patches - April 2007
2007-04-03Swa Frantzen* Microsoft out of cycle patch
2007-02-13Swa FrantzenMicrosoft Black Tuesday patches - February 2007
2007-01-09Swa FrantzenMicrosoft Patches - January 2007 - overview
2006-12-12Swa FrantzenMicrosoft Black Tuesday - December 2006 overview
2006-11-14Jim ClausingMS06-071: MSXML Core Services
2006-11-14Swa FrantzenMicrosoft Black Tuesday Overview
2006-10-10Johannes UllrichMS06-056: ASP.NET XSS Information Disclosure Vulnerability (moderate)
2006-10-10Johannes UllrichMS06-061: XSLT/MSXML Buffer Overflow Code Execution Vulnerability (moderate)
2006-10-10Kyle HaugsnessMS06-063: Mailslot DoS (Server service)
2006-10-09Swa FrantzenMicrosoft black tuesday - October 2006 STATUS
2006-10-05Swa FrantzenMS06-053 revisited ?
2006-09-30Swa FrantzenYellow: WebViewFolderIcon setslice exploit spreading
2006-09-28Swa FrantzenMSIE: One patched, one pops up again (setslice)
2006-09-22Swa FrantzenYellow: MSIE VML exploit spreading
2006-09-19Swa FrantzenYet another MSIE 0-day: VML
2006-09-15Swa FrantzenMSIE DirectAnimation ActiveX 0-day update
2006-09-12Swa FrantzenMicrosoft security patches for September 2006
2006-08-17Swa FrantzenMicrosoft August 2006 Patches: STATUS