Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
MAC OS X
2018-11-04	Pasquale Stirparo	Beyond good ol' LaunchAgent - part 1
2018-10-21	Pasquale Stirparo	Beyond good ol’ LaunchAgent - part 0
2018-05-23	Remco Verhoef	Track naughty and nice binaries with Google Santa
2013-12-17	Adrien de Beaupre	Apple security updates Mac OS X and Safari
2013-09-10	Swa Frantzen	Macs need to patch too!
2013-03-02	Scott Fendley	Apple Blocks Older Insecure Versions of Flash Player
2012-04-12	Guy Bruneau	Apple Java Updates for Mac OS X
2012-02-24	Guy Bruneau	Flashback Trojan in the Wild
2012-02-04	Scott Fendley	Apple Security Advisory 2012-001 v1.1
2011-06-23	Jim Clausing	Apple Security Updates 2011-004
2010-11-16	Guy Bruneau	Mac OS X Server v10.6.5 (10H575) Security Update: http://support.apple.com/kb/HT4452
2008-07-17	Mari Nichols	Firefox Releases 3.0.1 and fixes 3 security vulnerabilities
MAC
2024-10-28/a>	Johannes Ullrich	Apple Updates Everything
2024-10-07/a>	Xavier Mertens	macOS Sequoia: System/Network Admins, Hold On!
2024-07-30/a>	Johannes Ullrich	Apple Patches Everything. July 2024 Edition
2024-07-10/a>	Jesse La Grew	Finding Honeypot Data Clusters Using DBSCAN: Part 1
2024-01-22/a>	Johannes Ullrich	Apple Updates Everything - New 0 Day in WebKit
2024-01-19/a>	Xavier Mertens	macOS Python Script Replacing Wallet Applications with Rogue Apps
2023-12-11/a>	Johannes Ullrich	Apple Patches Everything
2023-09-26/a>	Johannes Ullrich	Apple Releases MacOS Sonoma Including Numerous Security Patches
2023-09-11/a>	Johannes Ullrich	Apple fixes 0-Day Vulnerability in Older Operating Systems
2023-09-07/a>	Johannes Ullrich	Apple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-08-26/a>	Xavier Mertens	macOS: Who?s Behind This Network Connection?
2023-06-22/a>	Johannes Ullrich	Apple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-04-07/a>	Johannes Ullrich	Apple Patching Two 0-Day Vulnerabilities in iOS and macOS
2023-03-27/a>	Johannes Ullrich	Apple Updates Everything (including Studio Display)
2022-07-26/a>	Xavier Mertens	How is Your macOS Security Posture?
2022-07-20/a>	Johannes Ullrich	Apple Patches Everything Day
2022-04-20/a>	Brad Duncan	"aa" distribution Qakbot (Qbot) infection with DarkVNC traffic
2022-03-31/a>	Johannes Ullrich	Apple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS,
2022-03-25/a>	Xavier Mertens	XLSB Files: Because Binary is Stealthier Than XML
2022-03-14/a>	Johannes Ullrich	Apple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more
2022-02-10/a>	Johannes Ullrich	iOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2022-01-27/a>	Johannes Ullrich	Apple Patches Everything
2022-01-22/a>	Xavier Mertens	Mixed VBA & Excel4 Macro In a Targeted Excel Sheet
2021-12-28/a>	Russ McRee	LotL Classifier tests for shells, exfil, and miners
2021-12-20/a>	Jan Kopriva	PowerPoint attachments, Agent Tesla and code reuse in malware
2021-12-02/a>	Brad Duncan	TA551 (Shathak) pushes IcedID (Bokbot)
2021-09-23/a>	Xavier Mertens	Excel Recipe: Some VBA Code with a Touch of Excel4 Macro
2021-09-01/a>	Brad Duncan	STRRAT: a Java-based RAT that doesn't care if you have Java
2021-08-06/a>	Xavier Mertens	Malicious Microsoft Word Remains A Key Infection Vector
2021-04-23/a>	Xavier Mertens	Malicious PowerPoint Add-On: "Small Is Beautiful"
2021-03-12/a>	Guy Bruneau	Microsoft DHCP Logs Shipped to ELK
2021-03-03/a>	Brad Duncan	Qakbot infection with Cobalt Strike
2021-02-25/a>	Daniel Wesemann	Forensicating Azure VMs
2021-02-23/a>	Jan Kopriva	Qakbot in a response to Full Disclosure post
2021-02-05/a>	Xavier Mertens	VBA Macro Trying to Alter the Application Menus
2021-02-03/a>	Brad Duncan	Excel spreadsheets push SystemBC malware
2021-02-02/a>	Xavier Mertens	New Example of XSL Script Processing aka "Mitre T1220"
2021-01-26/a>	Brad Duncan	TA551 (Shathak) Word docs push Qakbot (Qbot)
2021-01-20/a>	Brad Duncan	Qakbot activity resumes after holiday break
2021-01-14/a>	Bojan Zdrnja	Dynamically analyzing a heavily obfuscated Excel 4 macro malicious file
2021-01-13/a>	Brad Duncan	Hancitor activity resumes after a hoilday break
2020-12-22/a>	Xavier Mertens	Malware Victim Selection Through WiFi Identification
2020-12-09/a>	Brad Duncan	Recent Qakbot (Qbot) activity
2020-11-20/a>	Xavier Mertens	Malicious Python Code and LittleSnitch Detection
2020-11-09/a>	Xavier Mertens	How Attackers Brush Up Their Malicious Scripts
2020-10-26/a>	Didier Stevens	Excel 4 Macros: "Abnormal Sheet Visibility"
2020-10-14/a>	Brad Duncan	More TA551 (Shathak) Word docs push IcedID (Bokbot)
2020-09-23/a>	Xavier Mertens	Malicious Word Document with Dynamic Content
2020-09-18/a>	Xavier Mertens	A Mix of Python & VBA in a Malicious Word Document
2020-09-10/a>	Brad Duncan	Recent Dridex activity
2020-09-09/a>	Johannes Ullrich	A First Look at macOS 11 Big Sur Network Traffic (New! Now with more GREASE!)
2020-08-26/a>	Xavier Mertens	Malicious Excel Sheet with a NULL VT Score
2020-08-19/a>	Xavier Mertens	Example of Word Document Delivering Qakbot
2020-08-07/a>	Brad Duncan	TA551 (Shathak) Word docs push IcedID (Bokbot)
2020-08-06/a>	Xavier Mertens	A Fork of the FTCode Powershell Ransomware
2020-08-03/a>	Xavier Mertens	Powershell Bot with Multiple C2 Protocols
2020-07-15/a>	Brad Duncan	Word docs with macros for IcedID (Bokbot)
2020-07-11/a>	Guy Bruneau	VMware XPC Client validation privilege escalation vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0017.html
2020-07-10/a>	Brad Duncan	Excel spreasheet macro kicks off Formbook infection
2020-07-04/a>	Russ McRee	Happy FouRth of July from the Internet Storm Center
2020-06-12/a>	Xavier Mertens	Malicious Excel Delivering Fileless Payload
2020-06-10/a>	Brad Duncan	Job application-themed malspam pushes ZLoader
2020-06-01/a>	Didier Stevens	XLMMacroDeobfuscator: An Update
2020-05-20/a>	Brad Duncan	Microsoft Word document with malicious macro pushes IcedID (Bokbot)
2020-04-05/a>	Guy Bruneau	Maldoc XLS Invoice with Excel 4 Macros
2020-03-29/a>	Didier Stevens	Obfuscated Excel 4 Macros
2020-03-18/a>	Brad Duncan	Trickbot gtag red5 distributed as a DLL file
2020-03-09/a>	Didier Stevens	Malicious Spreadsheet With Data Connection and Excel 4 Macros
2020-03-06/a>	Xavier Mertens	A Safe Excel Sheet Not So Safe
2020-02-24/a>	Didier Stevens	Maldoc: Excel 4 Macros and VBA, Devil and Angel?
2020-02-23/a>	Didier Stevens	Maldoc: Excel 4 Macros in OOXML Format
2020-02-21/a>	Xavier Mertens	Quick Analysis of an Encrypted Compound Document Format
2020-01-22/a>	Brad Duncan	German language malspam pushes Ursnif
2020-01-09/a>	Xavier Mertens	Quick Analyzis of a(nother) Maldoc
2019-12-11/a>	Brad Duncan	German language malspam pushes yet another wave of Trickbot
2019-12-04/a>	Jan Kopriva	Analysis of a strangely poetic malware
2019-10-02/a>	Brad Duncan	A recent example of Emotet malspam
2019-09-26/a>	Rob VandenBrink	Mining MAC Address and OUI Information
2019-09-18/a>	Brad Duncan	Emotet malspam is back
2019-07-08/a>	Didier Stevens	Machine Code? No!
2019-07-04/a>	Didier Stevens	Machine Code?
2019-06-18/a>	Brad Duncan	Malspam with password-protected Word docs pushing Dridex
2019-03-17/a>	Didier Stevens	Video: Maldoc Analysis: Excel 4.0 Macro
2019-03-16/a>	Didier Stevens	Maldoc: Excel 4.0 Macros
2019-03-13/a>	Brad Duncan	Malspam pushes Emotet with Qakbot as the follow-up malware
2019-01-24/a>	Brad Duncan	Malspam with Word docs uses macro to run Powershell script and steal system data
2018-12-18/a>	Brad Duncan	Malspam links to password-protected Word docs that push IcedID (Bokbot)
2018-11-27/a>	Xavier Mertens	More obfuscated shell scripts: Fake MacOS Flash update
2018-11-15/a>	Brad Duncan	Emotet infection with IcedID banking Trojan
2018-11-04/a>	Pasquale Stirparo	Beyond good ol' LaunchAgent - part 1
2018-10-21/a>	Pasquale Stirparo	Beyond good ol’ LaunchAgent - part 0
2018-08-24/a>	Xavier Mertens	Microsoft Publisher Files Delivering Malware
2018-06-29/a>	Remco Verhoef	Crypto community target of MacOS malware
2018-05-25/a>	Xavier Mertens	Antivirus Evasion? Easy as 1,2,3
2018-05-23/a>	Remco Verhoef	Track naughty and nice binaries with Google Santa
2018-05-01/a>	Xavier Mertens	Diving into a Simple Maldoc Generator
2017-12-19/a>	Xavier Mertens	Example of 'MouseOver' Link in a Powerpoint File
2017-12-16/a>	Xavier Mertens	Microsoft Office VBA Macro Obfuscation via Metadata
2017-11-15/a>	Xavier Mertens	If you want something done right, do it yourself!
2017-09-19/a>	Jim Clausing	New tool: mac-robber.py
2017-02-26/a>	Guy Bruneau	It is Tax Season - Watch out for Suspicious Attachment
2016-09-30/a>	Xavier Mertens	Another Day, Another Malicious Behaviour
2015-02-19/a>	Daniel Wesemann	Macros? Really?!
2014-01-24/a>	Chris Mohan	Security Update for OS X for CVE-2014-1252 http://support.apple.com/kb/HT6117
2013-12-17/a>	Adrien de Beaupre	Apple security updates Mac OS X and Safari
2013-10-22/a>	Richard Porter	Greenbone and OpenVAS Scanner
2013-10-02/a>	John Bambenek	Obamacare related domain registration spike, Government shutdown domain registration beginning
2013-09-10/a>	Swa Frantzen	Macs need to patch too!
2013-08-09/a>	Kevin Shortt	Copy Machines - Changing Scanned Content
2013-03-02/a>	Scott Fendley	Apple Blocks Older Insecure Versions of Flash Player
2012-07-05/a>	Adrien de Beaupre	New OS X trojan backdoor MaControl variant reported
2012-05-05/a>	Tony Carothers	Vulnerability Exploit for Snow Leopard
2012-04-12/a>	Guy Bruneau	Apple Java Updates for Mac OS X
2012-02-24/a>	Guy Bruneau	Flashback Trojan in the Wild
2012-02-04/a>	Scott Fendley	Apple Security Advisory 2012-001 v1.1
2011-08-05/a>	donald smith	New Mac Trojan: BASH/QHost.WB
2011-06-23/a>	Jim Clausing	Apple Security Updates 2011-004
2011-06-15/a>	Pedro Bueno	Hit by MacDefender, Apple Web Security (name your Mac FakeAV here)...
2011-05-26/a>	Swa Frantzen	MacDefender ups the ante with removing the password need for installation
2011-05-06/a>	Richard Porter	Unpatched Exploit: Skype for MAC
2010-11-16/a>	Guy Bruneau	Mac OS X Server v10.6.5 (10H575) Security Update: http://support.apple.com/kb/HT4452
2010-06-17/a>	Deborah Hale	Digital Copy Machines - Security Risk?
2010-06-15/a>	Manuel Humberto Santander Pelaez	Apple releases advisory for Mac OS X - Multiple vulnerabilities discovered
2010-03-29/a>	Adrien de Beaupre	APPLE-SA-2010-03-29-1 Security Update 2010-002 / Mac OS X v10.6.3
2010-02-05/a>	Jim Clausing	Memory Analysis - time to move beyond XP
2010-01-12/a>	Adrien de Beaupre	PoC for CVE-2009-0689 MacOS X 10.5/10.6 vulnerability
2009-12-07/a>	Rob VandenBrink	Layer 2 Network Protections – reloaded!
2009-11-09/a>	Guy Bruneau	Apple Security Update 2009-006 for Mac OS X v10.6.2
2009-01-24/a>	Pedro Bueno	Identifying and Removing the iWork09 Trojan
2008-07-17/a>	Mari Nichols	Firefox Releases 3.0.1 and fixes 3 security vulnerabilities
2008-04-30/a>	Bojan Zdrnja	(Minor) evolution in Mac DNS changer malware
2008-04-02/a>	Adrien de Beaupre	When is a DMG file not a DMG file
2006-12-12/a>	Swa Frantzen	Microsoft Office 2004 - Mac OS X updated
2006-11-29/a>	Toby Kohlenberg	New Vulnerability Announcement and patches from Apple
OS
2024-11-22/a>	Xavier Mertens	An Infostealer Searching for « BIP-0039 » Data
2024-11-07/a>	Xavier Mertens	Steam Account Checker Poisoned with Infostealer
2024-10-31/a>	Guy Bruneau	October 2024 Activity with Username chenzilong
2024-10-28/a>	Johannes Ullrich	Apple Updates Everything
2024-10-09/a>	Xavier Mertens	From Perfctl to InfoStealer
2024-10-08/a>	Johannes Ullrich	Microsoft Patch Tuesday - October 2024
2024-10-07/a>	Xavier Mertens	macOS Sequoia: System/Network Admins, Hold On!
2024-09-25/a>	Johannes Ullrich	DNS Reflection Update and Odd Corrupted DNS Requests
2024-09-25/a>	Guy Bruneau	OSINT - Image Analysis or More Where, When, and Metadata [Guest Diary]
2024-09-18/a>	Guy Bruneau	Time-to-Live Analysis of DShield Data with Vega-Lite
2024-09-18/a>	Xavier Mertens	Python Infostealer Patching Windows Exodus App
2024-08-27/a>	Xavier Mertens	Why Is Python so Popular to Infect Windows Hosts?
2024-08-20/a>	Johannes Ullrich	Where are we with CVE-2024-38063: Microsoft IPv6 Vulnerability
2024-07-30/a>	Johannes Ullrich	Apple Patches Everything. July 2024 Edition
2024-07-09/a>	Johannes Ullrich	Microsoft Patch Tuesday July 2024
2024-06-20/a>	Guy Bruneau	No Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary]
2024-06-11/a>	Johannes Ullrich	Microsoft Patch Tuesday June 2024
2024-05-31/a>	Xavier Mertens	"K1w1" InfoStealer Uses gofile.io for Exfiltration
2024-05-30/a>	Xavier Mertens	Feeding MISP with OSSEC
2024-05-22/a>	Rob VandenBrink	NMAP Scanning without Scanning (Part 2) - The ipinfo API
2024-04-29/a>	Guy Bruneau	Linux Trojan - Xorddos with Filename eyshcjdmzg
2024-04-13/a>	Johannes Ullrich	Critical Palo Alto GlobalProtect Vulnerability Exploited (CVE-2024-3400)
2024-03-12/a>	Johannes Ullrich	Microsoft Patch Tuesday - March 2024
2024-03-05/a>	Johannes Ullrich	Apple Releases iOS/iPadOS Updates with Zero Day Fixes.
2024-02-20/a>	Xavier Mertens	Python InfoStealer With Dynamic Sandbox Detection
2024-01-25/a>	Xavier Mertens	Facebook AdsManager Targeted by a Python Infostealer
2024-01-22/a>	Johannes Ullrich	Apple Updates Everything - New 0 Day in WebKit
2024-01-19/a>	Xavier Mertens	macOS Python Script Replacing Wallet Applications with Rogue Apps
2023-12-31/a>	Tom Webb	Pi-Hole Pi4 Docker Deployment
2023-12-22/a>	Xavier Mertens	Shall We Play a Game?
2023-12-12/a>	Johannes Ullrich	Microsoft Patch Tuesday December 2023
2023-12-11/a>	Johannes Ullrich	Apple Patches Everything
2023-11-09/a>	Guy Bruneau	Routers Targeted for Gafgyt Botnet [Guest Diary]
2023-10-25/a>	Johannes Ullrich	Apple Patches Everything. Releases iOS 17.1, MacOS 14.1 and updates for older versions fixing exploited vulnerability
2023-10-10/a>	Johannes Ullrich	October 2023 Microsoft Patch Tuesday Summary
2023-10-09/a>	Didier Stevens	ZIP's DOSTIME & DOSDATE Formats
2023-09-29/a>	Xavier Mertens	Are You Still Storing Passwords In Plain Text Files?
2023-09-26/a>	Johannes Ullrich	Apple Releases MacOS Sonoma Including Numerous Security Patches
2023-09-11/a>	Johannes Ullrich	Apple fixes 0-Day Vulnerability in Older Operating Systems
2023-09-09/a>	Guy Bruneau	?Anyone get the ASN of the Truck that Hit Me?!?: Creating a PowerShell Function to Make 3rd Party API Calls for Extending Honeypot Information [Guest Diary]
2023-09-07/a>	Johannes Ullrich	Apple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-08-26/a>	Xavier Mertens	macOS: Who?s Behind This Network Connection?
2023-08-25/a>	Xavier Mertens	Python Malware Using Postgresql for C2 Communications
2023-06-29/a>	Brad Duncan	GuLoader- or DBatLoader/ModiLoader-style infection for Remcos RAT
2023-06-23/a>	Xavier Mertens	Word Document with an Online Attached Template
2023-06-22/a>	Johannes Ullrich	Apple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-05-30/a>	Brad Duncan	Malspam pushes ModiLoader (DBatLoader) infection for Remcos RAT
2023-05-28/a>	Guy Bruneau	We Can no Longer Ignore the Cost of Cybersecurity
2023-05-04/a>	Xavier Mertens	Infostealer Embedded in a Word Document
2023-04-08/a>	Xavier Mertens	Microsoft Netlogon: Potential Upcoming Impacts of CVE-2022-38023
2023-04-07/a>	Johannes Ullrich	Apple Patching Two 0-Day Vulnerabilities in iOS and macOS
2023-03-27/a>	Johannes Ullrich	Apple Updates Everything (including Studio Display)
2023-03-12/a>	Guy Bruneau	AsynRAT Trojan - Bill Payment (Pago de la factura)
2023-03-01/a>	Xavier Mertens	Python Infostealer Targeting Gamers
2023-02-18/a>	Guy Bruneau	Spear Phishing Handlers for Username/Password
2023-02-14/a>	Johannes Ullrich	Microsoft February 2023 Patch Tuesday
2023-02-04/a>	Guy Bruneau	Assemblyline as a Malware Analysis Sandbox
2023-01-24/a>	Johannes Ullrich	Apple Updates (almost) Everything: Patch Overview
2023-01-21/a>	Guy Bruneau	DShield Sensor JSON Log to Elasticsearch
2023-01-08/a>	Guy Bruneau	DShield Sensor JSON Log Analysis
2022-12-21/a>	Guy Bruneau	DShield Sensor Setup in Azure
2022-12-18/a>	Guy Bruneau	Infostealer Malware with Double Extension
2022-11-28/a>	Johannes Ullrich	Ukraine Themed Twitter Spam Pushing iOS Scareware
2022-11-04/a>	Xavier Mertens	Remcos Downloader with Unicode Obfuscation
2022-10-11/a>	Johannes Ullrich	October 2022 Microsoft Patch Tuesday
2022-09-22/a>	Xavier Mertens	RAT Delivered Through FODHelper
2022-08-13/a>	Guy Bruneau	Phishing HTML Attachment as Voicemail Audio Transcription
2022-08-11/a>	Xavier Mertens	InfoStealer Script Based on Curl and NSudo
2022-08-10/a>	Johannes Ullrich	And Here They Come Again: DNS Reflection Attacks
2022-08-02/a>	Johannes Ullrich	A Little DDoS in the Morning - Followup
2022-08-01/a>	Johannes Ullrich	A Little DDoS In the Morning
2022-07-26/a>	Xavier Mertens	How is Your macOS Security Posture?
2022-07-20/a>	Johannes Ullrich	Apple Patches Everything Day
2022-06-23/a>	Xavier Mertens	FLOSS 2.0 Has Been Released
2022-05-31/a>	Xavier Mertens	First Exploitation of Follina Seen in the Wild
2022-05-30/a>	Xavier Mertens	New Microsoft Office Attack Vector via "ms-msdt" Protocol Scheme (CVE-2022-30190)
2022-05-10/a>	Renato Marinho	Microsoft May 2022 Patch Tuesday
2022-05-05/a>	Brad Duncan	Password-protected Excel spreadsheet pushes Remcos RAT
2022-04-20/a>	Brad Duncan	"aa" distribution Qakbot (Qbot) infection with DarkVNC traffic
2022-04-13/a>	Jan Kopriva	How is Ukrainian internet holding up during the Russian invasion?
2022-03-31/a>	Johannes Ullrich	Apple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS,
2022-03-23/a>	Brad Duncan	Arkei Variants: From Vidar to Mars Stealer
2022-03-14/a>	Johannes Ullrich	Apple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more
2022-03-09/a>	Xavier Mertens	Infostealer in a Batch File
2022-03-07/a>	Johannes Ullrich	No Bitcoin - No Problem: Follow Up to Last Weeks Donation Scam
2022-03-04/a>	Johannes Ullrich	Scam E-Mail Impersonating Red Cross
2022-02-18/a>	Xavier Mertens	Remcos RAT Delivered Through Double Compressed Archive
2022-02-13/a>	Guy Bruneau	DHL Spear Phishing to Capture Username/Password
2022-02-10/a>	Johannes Ullrich	iOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2022-01-27/a>	Johannes Ullrich	Apple Patches Everything
2022-01-21/a>	Xavier Mertens	Obscure Wininet.dll Feature?
2022-01-11/a>	Johannes Ullrich	Microsoft Patch Tuesday - January 2022
2021-12-21/a>	Xavier Mertens	More Undetected PowerShell Dropper
2021-12-02/a>	Brad Duncan	TA551 (Shathak) pushes IcedID (Bokbot)
2021-11-30/a>	Johannes Ullrich	Hunting for PHPUnit Installed via Composer
2021-09-24/a>	Xavier Mertens	Keep an Eye on Your Users Mobile Devices (Simple Inventory)
2021-09-21/a>	Johannes Ullrich	A First Look at Apple's iOS 15 "Private Relay" feature.
2021-09-15/a>	Brad Duncan	Hancitor campaign abusing Microsoft's OneDrive
2021-09-14/a>	Renato Marinho	Microsoft September 2021 Patch Tuesday
2021-09-11/a>	Guy Bruneau	Shipping to Elasticsearch Microsoft DNS Logs
2021-09-08/a>	Johannes Ullrich	Microsoft Offers Workaround for 0-Day Office Vulnerability (CVE-2021-40444)
2021-09-01/a>	Brad Duncan	STRRAT: a Java-based RAT that doesn't care if you have Java
2021-08-06/a>	Xavier Mertens	Malicious Microsoft Word Remains A Key Infection Vector
2021-07-31/a>	Guy Bruneau	Unsolicited DNS Queries
2021-07-21/a>	Johannes Ullrich	"Summer of SAM": Microsoft Releases Guidance for CVE-2021-36934
2021-07-09/a>	Brad Duncan	Hancitor tries XLL as initial malware file
2021-06-30/a>	Johannes Ullrich	CVE-2021-1675: Incomplete Patch and Leaked RCE Exploit
2021-05-08/a>	Guy Bruneau	Who is Probing the Internet for Research Purposes?
2021-04-13/a>	Richard Porter	Microsoft April 2021 Patch Tuesday
2021-04-06/a>	Jan Kopriva	Malspam with Lokibot vs. Outlook and RFCs
2021-03-31/a>	Xavier Mertens	Quick Analysis of a Modular InfoStealer
2021-03-17/a>	Xavier Mertens	Defenders, Know Your Operating System Like Attackers Do!
2021-03-12/a>	Guy Bruneau	Microsoft DHCP Logs Shipped to ELK
2021-03-10/a>	Rob VandenBrink	SharpRDP - PSExec without PSExec, PSRemoting without PowerShell
2021-03-06/a>	Xavier Mertens	Spotting the Red Team on VirusTotal!
2021-03-03/a>	Brad Duncan	Qakbot infection with Cobalt Strike
2021-03-03/a>	Johannes Ullrich	Microsoft Releases Exchange Emergency Patch to Fix Actively Exploited Vulnerability
2021-02-24/a>	Brad Duncan	Malspam pushes GuLoader for Remcos RAT
2021-02-12/a>	Xavier Mertens	AgentTesla Dropped Through Automatic Click in Microsoft Help File
2021-02-03/a>	Brad Duncan	Excel spreadsheets push SystemBC malware
2021-01-26/a>	Brad Duncan	TA551 (Shathak) Word docs push Qakbot (Qbot)
2021-01-20/a>	Brad Duncan	Qakbot activity resumes after holiday break
2021-01-18/a>	Rob VandenBrink	The CIS Benchmark for Cisco Nexus (NX-OS) 1.0 went live last week, find it here: https://www.cisecurity.org/cis-benchmarks/
2021-01-13/a>	Brad Duncan	Hancitor activity resumes after a hoilday break
2020-12-29/a>	Jan Kopriva	Want to know what's in a folder you don't have a permission to access? Try asking your AV solution...
2020-12-09/a>	Brad Duncan	Recent Qakbot (Qbot) activity
2020-12-08/a>	Johannes Ullrich	December 2020 Microsoft Patch Tuesday: Exchange, Sharepoint, Dynamics and DNS Spoofing
2020-12-05/a>	Guy Bruneau	Is IP 91.199.118.137 testing Access to aahwwx.52host.xyz?
2020-11-20/a>	Xavier Mertens	Malicious Python Code and LittleSnitch Detection
2020-11-12/a>	Daniel Wesemann	Exposed Blob Storage in Azure
2020-11-12/a>	Daniel Wesemann	Preventing Exposed Azure Blob Storage
2020-11-09/a>	Xavier Mertens	How Attackers Brush Up Their Malicious Scripts
2020-10-28/a>	Jan Kopriva	SMBGhost - the critical vulnerability many seem to have forgotten to patch
2020-10-26/a>	Didier Stevens	Excel 4 Macros: "Abnormal Sheet Visibility"
2020-10-14/a>	Brad Duncan	More TA551 (Shathak) Word docs push IcedID (Bokbot)
2020-09-23/a>	Xavier Mertens	Malicious Word Document with Dynamic Content
2020-09-20/a>	Guy Bruneau	Analysis of a Salesforce Phishing Emails
2020-09-17/a>	Xavier Mertens	Suspicious Endpoint Containment with OSSEC
2020-09-09/a>	Johannes Ullrich	A First Look at macOS 11 Big Sur Network Traffic (New! Now with more GREASE!)
2020-09-01/a>	Johannes Ullrich	Exposed Windows Domain Controllers Used in CLDAP DDoS Attacks
2020-08-18/a>	Rick Wanner	ISC Blocked
2020-08-07/a>	Brad Duncan	TA551 (Shathak) Word docs push IcedID (Bokbot)
2020-07-19/a>	Guy Bruneau	Scanning Activity for ZeroShell Unauthenticated Access
2020-07-15/a>	Brad Duncan	Word docs with macros for IcedID (Bokbot)
2020-07-15/a>	Johannes Ullrich	PATCH NOW - SIGRed - CVE-2020-1350 - Microsoft DNS Server Vulnerability
2020-07-10/a>	Brad Duncan	Excel spreasheet macro kicks off Formbook infection
2020-06-24/a>	Jan Kopriva	Using Shell Links as zero-touch downloaders and to initiate network connections
2020-06-10/a>	Brad Duncan	Job application-themed malspam pushes ZLoader
2020-06-01/a>	Didier Stevens	XLMMacroDeobfuscator: An Update
2020-05-21/a>	Xavier Mertens	Malware Triage with FLOSS: API Calls Based Behavior
2020-05-20/a>	Brad Duncan	Microsoft Word document with malicious macro pushes IcedID (Bokbot)
2020-05-19/a>	Rick Wanner	Cisco Advisories for FTD, ASA, Firepower 1000
2020-04-07/a>	Johannes Ullrich	Increase in RDP Scanning
2020-04-05/a>	Guy Bruneau	Maldoc XLS Invoice with Excel 4 Macros
2020-03-30/a>	Jan Kopriva	Crashing explorer.exe with(out) a click
2020-03-29/a>	Didier Stevens	Obfuscated Excel 4 Macros
2020-03-12/a>	Xavier Mertens	Critical SMBv3 Vulnerability: Remote Code Execution
2020-03-10/a>	Johannes Ullrich	Microsoft Patch Tuesday March 2020
2020-03-09/a>	Didier Stevens	Malicious Spreadsheet With Data Connection and Excel 4 Macros
2020-02-24/a>	Didier Stevens	Maldoc: Excel 4 Macros and VBA, Devil and Angel?
2020-02-23/a>	Didier Stevens	Maldoc: Excel 4 Macros in OOXML Format
2020-01-15/a>	Johannes Ullrich	CVE-2020-0601 Followup
2019-12-12/a>	Xavier Mertens	Code & Data Reuse in the Malware Ecosystem
2019-11-08/a>	Xavier Mertens	Microsoft Apps Diverted from Their Main Use
2019-10-09/a>	Brad Duncan	What data does Vidar malware steal from an infected host?
2019-10-03/a>	Xavier Mertens	"Lost_Files" Ransomware
2019-09-24/a>	Xavier Mertens	Huge Amount of remotewebaccess.com Sites Found in Certificate Transparency Logs
2019-08-25/a>	Guy Bruneau	Are there any Advantages of Buying Cyber Security Insurance?
2019-08-14/a>	Brad Duncan	Recent example of MedusaHTTP malware
2019-07-17/a>	Xavier Mertens	Analyzis of DNS TXT Records
2019-07-09/a>	John Bambenek	MSFT July 2019 Patch Tuesday
2019-07-07/a>	Rick Wanner	OpSec and OSInt
2019-06-18/a>	Brad Duncan	Malspam with password-protected Word docs pushing Dridex
2019-05-29/a>	Xavier Mertens	Behavioural Malware Analysis with Microsoft ASA
2019-05-22/a>	Johannes Ullrich	An Update on the Microsoft Windows RDP "Bluekeep" Vulnerability (CVE-2019-0708) [now with pcaps]
2019-03-17/a>	Didier Stevens	Video: Maldoc Analysis: Excel 4.0 Macro
2019-03-16/a>	Didier Stevens	Maldoc: Excel 4.0 Macros
2019-03-06/a>	Xavier Mertens	Keep an Eye on Disposable Email Addresses
2019-01-31/a>	Xavier Mertens	Tracking Unexpected DNS Changes
2019-01-24/a>	Brad Duncan	Malspam with Word docs uses macro to run Powershell script and steal system data
2019-01-14/a>	Rob VandenBrink	Microsoft LAPS - Blue Team / Red Team
2018-12-29/a>	Didier Stevens	Video: De-DOSfuscation Example
2018-12-19/a>	Xavier Mertens	Using OSSEC Active-Response as a DFIR Framework
2018-12-19/a>	Xavier Mertens	Microsoft OOB Patch for Internet Explorer: Scripting Engine Memory Corruption Vulnerability
2018-12-15/a>	Didier Stevens	De-DOSfuscation Example
2018-12-12/a>	Didier Stevens	Yet Another DOSfuscation Sample
2018-12-11/a>	Richard Porter	Microsoft December 2018 Patch Tuesday
2018-11-27/a>	Xavier Mertens	More obfuscated shell scripts: Fake MacOS Flash update
2018-11-13/a>	Johannes Ullrich	November 2018 Microsoft Patch Tuesday
2018-11-11/a>	Pasquale Stirparo	Community contribution: joining forces or multiply solutions?
2018-11-04/a>	Pasquale Stirparo	Beyond good ol' LaunchAgent - part 1
2018-10-26/a>	Xavier Mertens	Dissecting Malicious Office Documents with Linux
2018-10-21/a>	Pasquale Stirparo	Beyond good ol’ LaunchAgent - part 0
2018-10-10/a>	Xavier Mertens	New Campaign Using Old Equation Editor Vulnerability
2018-10-09/a>	Johannes Ullrich	October 2018 Microsoft Patch Tuesday
2018-10-08/a>	Guy Bruneau	Apple Security Updates
2018-09-30/a>	Didier Stevens	When DOSfuscation Helps...
2018-09-20/a>	Xavier Mertens	Hunting for Suspicious Processes with OSSEC
2018-09-11/a>	Johannes Ullrich	Microsoft September Patch Tuesday Summary
2018-09-05/a>	Rob VandenBrink	Where have all my Certificates gone? (And when do they expire?)
2018-07-30/a>	Didier Stevens	Malicious Word documents using DOSfuscation
2018-06-29/a>	Remco Verhoef	Crypto community target of MacOS malware
2018-06-25/a>	Didier Stevens	Guilty by association
2018-06-12/a>	Johannes Ullrich	Microsoft June 2018 Patch Tuesday
2018-06-05/a>	Xavier Mertens	Malicious Post-Exploitation Batch File
2018-05-25/a>	Xavier Mertens	Antivirus Evasion? Easy as 1,2,3
2018-05-23/a>	Remco Verhoef	Track naughty and nice binaries with Google Santa
2018-05-22/a>	Xavier Mertens	Malware Distributed via .slk Files
2018-04-28/a>	Rick Wanner	Microsoft Security Update for Spectre V2
2018-01-26/a>	Xavier Mertens	Investigating Microsoft BITS Activity
2018-01-23/a>	Johannes Ullrich	Apple Updates Everything, Again
2018-01-19/a>	Jim Clausing	Followup to IPv6 brute force and IPv6 blocking
2017-12-13/a>	Xavier Mertens	Tracking Newly Registered Domains
2017-12-12/a>	Johannes Ullrich	December Microsoft Patch Tuesday Summary
2017-11-28/a>	Xavier Mertens	Apple High Sierra Uses a Passwordless Root Account
2017-11-25/a>	Guy Bruneau	Exim Remote Code Exploit
2017-10-20/a>	Rick Wanner	One year Anniversary of Dyn DDOS
2017-08-15/a>	Renato Marinho	(Banker(GoogleChromeExtension)).targeting("Brazil")
2017-08-02/a>	Bojan Zdrnja	Attacking NoSQL applications (part 2)
2017-07-30/a>	Renato Marinho	SMBLoris - the new SMB flaw
2017-07-11/a>	Renato Marinho	July's Microsoft Patch Tuesday
2017-07-07/a>	Renato Marinho	DDoS Extortion E-mail: Yet Another Bluff?
2017-06-28/a>	Brad Duncan	Catching up with Blank Slate: a malspam campaign still going strong
2017-05-20/a>	Xavier Mertens	Typosquatting: Awareness and Hunting
2017-05-08/a>	Renato Marinho	Exploring a P2P Transient Botnet - From Discovery to Enumeration
2017-05-06/a>	Xavier Mertens	The story of the CFO and CEO...
2017-04-27/a>	Johannes Ullrich	BGP Hijacking: The Internet is Still/Again Broken
2017-04-02/a>	Guy Bruneau	IPFire - A Household Multipurpose Security Gateway
2017-03-18/a>	Rick Wanner	Cisco IOS Remote Code Execution Vulnerability -> https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp
2017-03-15/a>	Xavier Mertens	Retro Hunting!
2017-03-14/a>	Johannes Ullrich	February and March Microsoft Patch Tuesday
2017-02-14/a>	Johannes Ullrich	Microsoft Patch Tuesday Delayed
2017-02-09/a>	Brad Duncan	CryptoShield Ransomware from Rig EK
2017-02-02/a>	Rick Wanner	Multiple vulnerabilities discovered in popular printer models
2016-12-29/a>	Rick Wanner	More on Protocol 47 denys
2016-12-19/a>	John Bambenek	UPDATED x1: Mirai Scanning for Port 6789 Looking for New Victims / Now hitting tcp/23231
2016-12-11/a>	Russ McRee	Steganography in Action: Image Steganography & StegExpose
2016-12-09/a>	Rick Wanner	Mirai - now with DGA
2016-12-06/a>	Bojan Zdrnja	Attacking NoSQL applications
2016-12-05/a>	Didier Stevens	Hancitor Maldoc Videos
2016-10-25/a>	Xavier Mertens	Another Day, Another Spam...
2016-10-22/a>	Guy Bruneau	Request for Packets TCP 4786 - CVE-2016-6385
2016-10-11/a>	Xavier Mertens	WiFi Still Remains a Good Attack Vector
2016-10-02/a>	Guy Bruneau	Is there an Infosec Cybersecurity Talent Shortage?
2016-09-30/a>	Xavier Mertens	Another Day, Another Malicious Behaviour
2016-09-17/a>	Guy Bruneau	Multiple Cisco Products affected by IKEv1 Vulnerability
2016-09-13/a>	Rob VandenBrink	Microsoft Patch Tuesday Analysis
2016-09-05/a>	Xavier Mertens	Malware Delivered via '.pub' Files
2016-09-02/a>	Johannes Ullrich	Apple Patches "Trident" Vulnerabilities in OS X / Safari
2016-08-25/a>	Xavier Mertens	Out-of-Band iOS Patch Fixes 0-Day Vulnerabilities
2016-08-11/a>	Pasquale Stirparo	Looking for the insider: Forensic Artifacts on iOS Messaging App
2016-07-12/a>	Johannes Ullrich	Microsoft Patch Tuesday Summary for July 2016
2016-07-12/a>	Xavier Mertens	Hunting for Malicious Files with MISP + OSSEC
2016-05-29/a>	Guy Bruneau	Analysis of a Distributed Denial of Service (DDoS)
2016-05-05/a>	Xavier Mertens	Microsoft BITS Used to Download Payloads
2016-03-21/a>	Xavier Mertens	IP Addresses Triage
2016-03-07/a>	Xavier Mertens	OSX Ransomware Spread via a Rogue BitTorrent Client Installer
2016-02-26/a>	Xavier Mertens	Quick Audit of *NIX Systems
2016-02-22/a>	Xavier Mertens	Reducing False Positives with Open Data Sources
2016-02-18/a>	Xavier Mertens	Hunting for Executable Code in Windows Environments
2016-02-09/a>	Johannes Ullrich	Microsoft February 2016 Patch Tuesday
2016-02-07/a>	Rick Wanner	DDOS is down, but still a concern for ISPs
2016-02-03/a>	Xavier Mertens	EMET 5.5 Released
2016-01-09/a>	Xavier Mertens	Virtual Bitlocker Containers
2015-12-15/a>	Russ McRee	Security Management vs Chaos: Understanding the Butterfly Effect to Manage Outcomes & Reduce Chaos
2015-09-21/a>	Xavier Mertens	Detecting XCodeGhost Activity
2015-08-31/a>	Xavier Mertens	Detecting file changes on Microsoft systems with FCIV
2015-08-18/a>	Russ McRee	Microsoft Security Bulletin MS15-093 - Critical OOB - Internet Explorer RCE
2015-07-14/a>	Johannes Ullrich	July 2015 Microsoft Patch Tuesday
2015-06-23/a>	Kevin Shortt	XOR DDOS Mitigation and Analysis
2015-06-18/a>	Johannes Ullrich	OS X and iOS Unauthorized Cross Application Resource Access (XARA)
2015-06-02/a>	Alex Stanford	Guest Diary: Xavier Mertens - Playing with IP Reputation with Dshield & OSSEC
2015-04-15/a>	Johannes Ullrich	MS15-034: HTTP.sys (IIS) DoS And Possible Remote Code Execution. PATCH NOW
2015-03-18/a>	Daniel Wesemann	New SANS memory forensics poster
2015-03-17/a>	Didier Stevens	Improperly issued SSL certificate for domain "live.fi" could be used in attempts to spoof content. https://technet.microsoft.com/library/security/3046310
2015-02-27/a>	Rick Wanner	DDOS are way down? Why?
2015-02-19/a>	Daniel Wesemann	Macros? Really?!
2015-02-19/a>	Daniel Wesemann	DNS-based DDoS
2015-02-13/a>	Johannes Ullrich	Microsoft February Patch Failures Continue: KB3023607 vs. Cisco AnyConnect Client
2015-02-11/a>	Johannes Ullrich	Microsoft Hardens GPO by Fixing Two Serious Vulnerabilities.
2015-01-27/a>	Johannes Ullrich	New Critical GLibc Vulnerability CVE-2015-0235 (aka GHOST)
2014-11-24/a>	Richard Porter	Someone is using this? PoS: Compressor
2014-10-17/a>	Johannes Ullrich	Apple Updates (not just Yosemite)
2014-10-02/a>	Johannes Ullrich	Why is your Mac all for sudden using Bing as a search engine?
2014-09-29/a>	Johannes Ullrich	Apple Released Update to Fix Shellshock Vulnerability http://support.apple.com/kb/DL1769
2014-09-18/a>	Johannes Ullrich	Apple Releases OS X 10.9.5 / Safari 6.2 and 7.1 with several security fixes http://support.apple.com/kb/HT1222
2014-09-16/a>	Mark Hofman	FreeBSD Denial of Service advisory (CVE-2004-0230)
2014-08-31/a>	Rick Wanner	1900/UDP (SSDP) Scanning and DDOS
2014-08-29/a>	Johannes Ullrich	False Positive or Not? Difficult to Analyze Javascript
2014-08-25/a>	Jim Clausing	UDP port 1900 DDoS traffic
2014-08-17/a>	Rick Wanner	Part 1: Is your home network unwittingly contributing to NTP DDOS attacks?
2014-08-17/a>	Rick Wanner	Part 2: Is your home network unwittingly contributing to NTP DDOS attacks?
2014-08-15/a>	Tom Webb	AppLocker Event Logs with OSSEC 2.8
2014-08-09/a>	Adrien de Beaupre	Complete application ownage via Multi-POST XSRF
2014-07-11/a>	Rob VandenBrink	Apple pushes OS X update to block out of date Flash versions - http://support.apple.com/kb/HT5655
2014-07-08/a>	Johannes Ullrich	Hardcoded Netgear Prosafe Switch Password
2014-07-01/a>	Johannes Ullrich	Apple Releases Patches for All Products
2014-07-01/a>	Johannes Ullrich	Microsoft No-IP Takedown
2014-06-28/a>	Mark Hofman	No more Microsoft advisory email notifications?
2014-06-24/a>	Kevin Shortt	NTP DDoS Counts Have Dropped
2014-06-23/a>	Russ McRee	Microsoft Interflow announced today at 26th FIRST conference
2014-06-17/a>	Rob VandenBrink	New Security Advisories / Updates from Microsoft - Heads up for Next Patch Tuesday!
2014-06-06/a>	Johannes Ullrich	Microsoft June Patch Tuesday Advance Notification
2014-06-02/a>	Rick Wanner	Using nmap to scan for DDOS reflectors
2014-05-07/a>	Johannes Ullrich	De-Clouding your Life: Things that should not go into the cloud.
2014-05-01/a>	Johannes Ullrich	Microsoft Announces Special Patch for IE 0-day (Win XP included!)
2014-04-30/a>	Russ McRee	UltraDNS DDOS
2014-04-24/a>	Rob VandenBrink	Apple IOS updates to 7.1.1, OSX Security update 2014-002, Airport Updates - http://support.apple.com/kb/HT1222, http://support.apple.com/kb/HT6208, http://support.apple.com/kb/HT6207, http://support.apple.com/kb/HT6203
2014-03-26/a>	Johannes Ullrich	Full Disclosure Mailing List is back: http://insecure.org/news/fulldisclosure/
2014-03-26/a>	Johannes Ullrich	Cisco Semiannual IOS Security Advisory http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar14.html
2014-03-24/a>	Johannes Ullrich	New Microsoft Advisory: Unpatched Word Flaw used in Targeted Attacks
2014-03-12/a>	Johannes Ullrich	Wordpress "Pingback" DDoS Attacks
2014-03-11/a>	Johannes Ullrich	Microsoft Patch Tuesday March 2014
2014-03-10/a>	Basil Alawi S.Taher	Sysinternals Process Explorer v16.02, Process Monitor v3.1, PSExec v2.1 and Sigcheck v2.03 update
2014-03-10/a>	Basil Alawi S.Taher	Apple iOS 7.1
2014-03-08/a>	Guy Bruneau	Microsoft March Patch Pre-Announcement
2014-03-02/a>	Stephen Hall	Symantec goes yellow
2014-02-25/a>	Alex Stanford	Apple releases OS X 10.9.2 patching SSL vulnerability and updates Safari
2014-02-21/a>	Jim Clausing	Apple updates iOS and Apple TV
2014-02-17/a>	Chris Mohan	NTP reflection attacks continue
2014-02-11/a>	Johannes Ullrich	February 2014 Microsoft Patch Tuesday
2014-02-07/a>	Johannes Ullrich	Microsoft Advance Notification for February 2014
2014-02-07/a>	Rob VandenBrink	New ISO Standards on Vulnerability Handling and Disclosure
2014-02-03/a>	Johannes Ullrich	When an Attack isn't an Attack
2014-01-24/a>	Chris Mohan	Security Update for OS X for CVE-2014-1252 http://support.apple.com/kb/HT6117
2014-01-14/a>	Johannes Ullrich	Microsoft Patch Tuesday January 2014
2014-01-09/a>	Johannes Ullrich	Microsoft Security Bulletin Advance Notification for January 2014 http://technet.microsoft.com/en-us/security/bulletin/ms14-jan
2013-12-24/a>	Daniel Wesemann	Unfriendly crontab additions
2013-12-17/a>	Adrien de Beaupre	Apple security updates Mac OS X and Safari
2013-12-07/a>	Guy Bruneau	Microsoft December Patch Pre-Announcement
2013-11-29/a>	Russ McRee	MS Exchange update, includes failed backup fix: http://support.microsoft.com/kb/2892464
2013-11-28/a>	Rob VandenBrink	Microsoft Security Advisory (2914486): Vulnerability in Microsoft Windows Kernel 0 day exploit in wild
2013-11-22/a>	Rick Wanner	Port 0 DDOS
2013-11-22/a>	Rick Wanner	Apple not updating OS X Mountain Lion?
2013-11-14/a>	Johannes Ullrich	iOS 7.0.4 released. Fixes issue with unauthorized in App purchases http://lists.apple.com/archives/security-announce/2013/Nov/msg00000.html
2013-11-12/a>	Johannes Ullrich	November 2013 Microsoft Patch Tuesday
2013-11-10/a>	Rick Wanner	Microsoft and Facebook announce bug bounty
2013-11-08/a>	Johannes Ullrich	Microsoft Patch Tuesday Preview
2013-11-05/a>	Daniel Wesemann	TIFF images in MS-Office documents used in targeted attacks
2013-10-31/a>	Russ McRee	Happy Halloween: The Ghost Really May Be In The Machine
2013-10-25/a>	Rob VandenBrink	Kaspersky flags TCPIP.SYS as Malware
2013-10-24/a>	Johannes Ullrich	False Positive: php.net Malware Alert
2013-10-24/a>	Johannes Ullrich	Are you a small business that experienced a DoS attack?
2013-10-17/a>	Adrien de Beaupre	Microsoft phish
2013-10-08/a>	Johannes Ullrich	CSAM: ANY queries used in reflective DoS attack
2013-10-04/a>	Pedro Bueno	CSAM: WebHosting BruteForce logs
2013-10-01/a>	Johannes Ullrich	iOS 7 Adds Multipath TCP
2013-09-27/a>	Rick Wanner	IOS 7.0.2 released
2013-09-18/a>	Rob VandenBrink	Apple IOS 7 - Brace for Impact!
2013-09-18/a>	Rob VandenBrink	Cisco DCNM Update Released
2013-09-17/a>	John Bambenek	Microsoft Releases Out-of-Band Advisory for all Versions of Internet Explorer
2013-09-13/a>	Rob VandenBrink	OS X v10.8.5 update - details here: http://support.apple.com/kb/HT5880
2013-09-11/a>	Johannes Ullrich	Reboot Wednesday: Yesterday's Patch Tuesday Aftermath
2013-09-10/a>	Swa Frantzen	Microsoft September 2013 Black Tuesday Overview
2013-09-10/a>	Swa Frantzen	Macs need to patch too!
2013-08-26/a>	Alex Stanford	Stop, Drop and File Carve
2013-08-19/a>	Johannes Ullrich	Microsoft re-releases MS13-066: https://technet.microsoft.com/security/bulletin/MS13-066
2013-08-15/a>	Johannes Ullrich	Microsoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx
2013-08-13/a>	Swa Frantzen	Microsoft security advisories: RDP and MD5 deprecation in Microsoft root certificates
2013-07-27/a>	Scott Fendley	Defending Against Web Server Denial of Service Attacks
2013-07-18/a>	Chris Mohan	Blog Spam - annoying junk or a source of intelligence?
2013-07-16/a>	Johannes Ullrich	Why don't we see more examples of web app attacks via POST?
2013-07-15/a>	Johannes Ullrich	Problems with MS13-057
2013-07-12/a>	Johannes Ullrich	DNS resolution is failing for Microsofts Teredo server (teredo.ipv6.microsoft.com)
2013-07-12/a>	Johannes Ullrich	Microsoft Teredo Server "Sunset"
2013-07-09/a>	Swa Frantzen	Microsoft July 2013 Black Tuesday Overview
2013-07-06/a>	Guy Bruneau	Microsoft July Patch Pre-Announcement
2013-06-11/a>	Swa Frantzen	Microsoft June 2013 Black Tuesday Overview
2013-06-05/a>	Johannes Ullrich	Apple releases OS 10.8.4
2013-06-05/a>	Richard Porter	Windows Sysinternals Updated http://technet.microsoft.com/en-us/sysinternals/default.aspx
2013-06-05/a>	Richard Porter	BIND 9 Update fixing CVE-2013-3919
2013-05-14/a>	Swa Frantzen	Microsoft May 2013 Black Tuesday Overview
2013-05-14/a>	Swa Frantzen	Microsoft Security Advisory 2846338
2013-05-09/a>	Johannes Ullrich	Microsoft released a Fix-it for the Internet Explorer 8 Vulnerability http://support.microsoft.com/kb/2847140
2013-05-04/a>	Kevin Shortt	The Zero-Day Pendulum Swings
2013-04-23/a>	Russ McRee	Microsoft's Security Intelligence Report (SIRv14) released
2013-04-21/a>	John Bambenek	A Chargen-based DDoS? Chargen is still a thing?
2013-04-17/a>	John Bambenek	UPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun
2013-04-16/a>	John Bambenek	Fake Boston Marathon Scams Update
2013-04-15/a>	John Bambenek	Please send any spam (full headers), URLs or other suspicious content scamming off Boston Marathon explosions to handlers@sans.org
2013-04-04/a>	Johannes Ullrich	Postgresql Patches Critical Vulnerability
2013-04-04/a>	Johannes Ullrich	Microsoft April Patch Tuesday Advance Notification
2013-03-28/a>	John Bambenek	Where Were You During the Great DDoS Cybergeddon of 2013?
2013-03-27/a>	Rob VandenBrink	Several Cisco IOS DOS Issues Resolved
2013-03-19/a>	Johannes Ullrich	Windows 7 SP1 and Windows Server 2008 R2 SP1 Being "pushed" today
2013-03-18/a>	Kevin Shortt	Spamhaus DDOS
2013-03-12/a>	Swa Frantzen	Microsoft March 2013 Black Tuesday Overview
2013-03-02/a>	Scott Fendley	Apple Blocks Older Insecure Versions of Flash Player
2013-02-17/a>	Guy Bruneau	HP ArcSight Connector Appliance and Logger Vulnerabilities
2013-02-12/a>	Adam Swanger	Microsoft February 2013 Black Tuesday Update - Overview
2013-02-11/a>	John Bambenek	Is This Chinese Registrar Really Trying to XSS Me?
2013-02-08/a>	Johannes Ullrich	Microsoft February Patch Tuesday Advance Notification
2013-02-04/a>	Russ McRee	An expose of a recent SANS GIAC XSS vulnerability
2013-01-28/a>	Johannes Ullrich	iOS 6.1 Released
2013-01-25/a>	Johannes Ullrich	Vulnerability Scans via Search Engines (Request for Logs)
2013-01-17/a>	Russ McRee	CentOS announces release of CentOS-5.9 - http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.9
2013-01-14/a>	Richard Porter	January 2013 Microsoft Out of Cycle Patch
2013-01-09/a>	Richard Porter	The 80's called - They Want Their Mainframe Back!
2013-01-09/a>	Rob VandenBrink	Hotmail seeing some temporary access issues
2013-01-08/a>	Richard Porter	Yahoo Web Interface Report: Compose and Send
2013-01-08/a>	Richard Porter	A picture worth a 1000 barcodes?
2013-01-08/a>	Richard Porter	Microsoft January 2013 Black Tuesday Update - Overview
2013-01-04/a>	Daniel Wesemann	Patch pre-notification from Adobe and Microsoft
2013-01-01/a>	Johannes Ullrich	FixIt Available for Internet Explorer Vulnerability
2012-12-11/a>	John Bambenek	Microsoft December 2012 Black Tuesday Update - Overview
2012-11-15/a>	Jim Clausing	Another month another password disclosure breach
2012-11-13/a>	Jim Clausing	Microsoft November 2012 Black Tuesday Update - Overview
2012-10-04/a>	Johannes Ullrich	Microsoft October Patch Pre-Announcement
2012-09-27/a>	Kevin Shortt	Cisco IOS Security Advisory Bundle - http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep12.html
2012-09-20/a>	Russ McRee	Financial sector advisory: attacks and threats against financial institutions
2012-09-14/a>	Lenny Zeltser	Analyzing Malicious RTF Files Using OfficeMalScanner's RTFScan
2012-09-11/a>	Adam Swanger	Microsoft September 2012 Black Tuesday Update - Overview
2012-08-21/a>	Adrien de Beaupre	RuggedCom fails key management 101 on Rugged Operating System (ROS)
2012-08-15/a>	Guy Bruneau	Cisco IOS XR Software Route Processor DoS Vulnerability - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr
2012-08-14/a>	Rick Wanner	Microsoft August 2012 Black Tuesday Update - Overview
2012-07-25/a>	Johannes Ullrich	Apple OS X 10.8 (Mountain Lion) released
2012-07-25/a>	Johannes Ullrich	Microsoft Exchange/Sharepoint and others: Oracle Outside In Vulnerability
2012-07-18/a>	Rob VandenBrink	Vote NO to Weak Keys!
2012-07-10/a>	Swa Frantzen	Microsoft July 2012 Black Tuesday Update - Overview
2012-07-10/a>	Swa Frantzen	Microsoft revoking trust in Microsoft certificates - SA 2728973
2012-07-10/a>	Swa Frantzen	Microsoft fix-it to disable gadgets - SA 2719662
2012-07-05/a>	Adrien de Beaupre	New OS X trojan backdoor MaControl variant reported
2012-07-05/a>	Adrien de Beaupre	Microsoft advanced notification for July 2012 patch Tuesday
2012-06-20/a>	Raul Siles	CVE-2012-0217 (from MS12-042) applies to other environments too
2012-06-13/a>	Johannes Ullrich	Microsoft Certificate Updater
2012-06-12/a>	Swa Frantzen	Microsoft June 2012 Black Tuesday Update - Overview
2012-06-12/a>	Swa Frantzen	Microsoft Security Advisory 2719615 - MSXML - CVE-2012-1889
2012-06-11/a>	Johannes Ullrich	Microsoft Update Security
2012-06-07/a>	Johannes Ullrich	Microsoft June Security Bulletin Advance Notification
2012-06-04/a>	Lenny Zeltser	Decoding Common XOR Obfuscation in Malicious Code
2012-06-04/a>	Johannes Ullrich	Microsoft Emergency Bulletin: Unauthorized Certificate used in "Flame"
2012-06-01/a>	Johannes Ullrich	Apple Releases iOS Security Specs
2012-05-23/a>	Mark Baggett	Problems with MS12-035 affecting XP, SBS and Windows 2003?
2012-05-21/a>	Kevin Shortt	DNS ANY Request Cannon - Need More Packets
2012-05-16/a>	Johannes Ullrich	Microsoft released an update for its Enhanced Mitigation Experience Tool (EMET) http://blogs.technet.com/b/srd/archive/2012/05/15/introducing-emet-v3.aspx
2012-05-16/a>	Johannes Ullrich	Avira Antivirus false positives http://forum.avira.com/wbb/index.php?page=Thread&threadID=144875
2012-05-07/a>	Guy Bruneau	iOS 5.1.1 Software Update for iPod, iPhone, iPad
2012-05-05/a>	Tony Carothers	Vulnerability Exploit for Snow Leopard
2012-04-26/a>	Richard Porter	Packetstorm Security and Metasploit have Exploit code for MS12-027
2012-04-15/a>	Rick Wanner	.Net update affects printing from some applications
2012-04-14/a>	Rick Wanner	Flashback Trojan Removal Tool Released
2012-04-12/a>	Guy Bruneau	Apple Java Updates for Mac OS X
2012-04-06/a>	Johannes Ullrich	Another OS X Java Patch
2012-04-06/a>	Johannes Ullrich	Microsoft April Patch Tuesday Pre-Announcement (6 Patches): http://technet.microsoft.com/en-us/security/bulletin/ms12-apr
2012-03-30/a>	Daniel Wesemann	Tomorrow, the world will end
2012-03-16/a>	Russ McRee	MS12-020 RDP vulnerabilities: Patch, Mitigate, Detect
2012-03-12/a>	Johannes Ullrich	Apple Released Safari 5.1.4
2012-03-08/a>	Johannes Ullrich	Apple Patches
2012-03-08/a>	Johannes Ullrich	Microsoft March Patch Tuesday Pre-Anouncement out. 6 patches, 1 critical: http://technet.microsoft.com/en-us/security/bulletin/ms12-mar
2012-03-05/a>	Johannes Ullrich	Flashback Malware now with Twitter C&C
2012-02-27/a>	Johannes Ullrich	Odd Vanishing Signatures in OS X XProtect
2012-02-24/a>	Guy Bruneau	Flashback Trojan in the Wild
2012-02-23/a>	donald smith	DNS-Changer "clean DNS" extension requested
2012-02-20/a>	Johannes Ullrich	The Ultimate OS X Hardening Guide Collection
2012-02-04/a>	Scott Fendley	Apple Security Advisory 2012-001 v1.1
2012-02-03/a>	Guy Bruneau	Sophos 2012 Security Threat Report
2012-01-31/a>	Russ McRee	OSINT tactics: parsing from FOCA for Maltego
2012-01-24/a>	Bojan Zdrnja	Is it time to get rid of NetBIOS?
2012-01-22/a>	Johannes Ullrich	Javascript DDoS Tool Analysis
2012-01-16/a>	Kevin Shortt	Zappos Breached
2012-01-10/a>	Adrien de Beaupre	January 2012 Microsoft Black Tuesday Summary
2012-01-06/a>	Guy Bruneau	January 2012 Patch Tuesday Pre-release
2011-12-29/a>	Richard Porter	ASP.Net Vulnerability
2011-12-28/a>	Daniel Wesemann	Hash collisions vulnerability in web servers
2011-12-13/a>	Johannes Ullrich	December 2011 Microsoft Black Tuesday Summary
2011-12-08/a>	Adrien de Beaupre	Microsoft Security Bulletin Advance Notification for December 2011
2011-11-03/a>	Guy Bruneau	November 2011 Patch Tuesday Pre-release
2011-10-21/a>	Johannes Ullrich	JBoss Worm
2011-10-13/a>	Johannes Ullrich	Critical OS X Vulnerability Patched
2011-09-27/a>	donald smith	New feature in JUNOS to drop or ignore path attributes.
2011-09-09/a>	Johannes Ullrich	Early Patch Tuesday Today: Microsoft September 2011 Patches
2011-09-08/a>	Mark Hofman	Microsoft has released their advanced notification for patch Tuesday. 15 Vulnerabilities to be addressed. more here --> http://blogs.technet.com/b/msrc/archive/2011/09/08/advanced-notification-for-the-september-2011-bulletin-release.aspx
2011-09-06/a>	Johannes Ullrich	Microsoft Releases Diginotar Related Patch and Advisory
2011-08-30/a>	Johannes Ullrich	Apache patch out for "byte range" DoS vulnerability http://www.apache.org/dist/httpd/Announcement2.2.html
2011-08-25/a>	Kevin Shortt	Revival of an Unpatched Apache HTTPD DoS
2011-08-24/a>	Rob VandenBrink	Citrix Access Gateway Cross Site Scripting vulnerability and fix ==> http://support.citrix.com/article/CTX129971
2011-08-11/a>	Johannes Ullrich	As part of this weeks patch tuesday, microsoft also re-release MS11-043 to address stability issues.
2011-08-09/a>	Swa Frantzen	Microsoft August 2011 Black Tuesday Overview
2011-08-08/a>	Rob VandenBrink	Ping is Bad (Sometimes)
2011-08-05/a>	Johannes Ullrich	Microsoft Patch Tuesday Advance Notification: 13 Bulletins coming http://www.microsoft.com/technet/security/Bulletin/MS11-aug.mspx
2011-07-29/a>	Richard Porter	Apple Lion talking on TCP 5223
2011-07-25/a>	Johannes Ullrich	iOS 4.3.5 released fixing an SSL certificate verification flaw. http://support.apple.com/kb/HT1222
2011-07-23/a>	Johannes Ullrich	Apple Battery Firmware Default Password
2011-07-21/a>	Mark Hofman	Lion Released
2011-07-21/a>	Johannes Ullrich	Lion: What is new in Security
2011-06-28/a>	Johannes Ullrich	Update: Java update for OS X fixes security issues http://support.apple.com/kb/HT1222
2011-06-26/a>	Rick Wanner	Nagios script for ISC threat level http://www.aj-services.com/?p=275
2011-06-23/a>	Jim Clausing	Apple Security Updates 2011-004
2011-06-15/a>	Pedro Bueno	Hit by MacDefender, Apple Web Security (name your Mac FakeAV here)...
2011-06-14/a>	Swa Frantzen	Microsoft June 2011 Black Tuesday Overview
2011-06-01/a>	Johannes Ullrich	Enabling Privacy Enhanced Addresses for IPv6
2011-05-31/a>	Johannes Ullrich	Apple Improving OS X Anti-Malware Feature
2011-05-23/a>	Mark Hofman	Microsoft Support Scam (again)
2011-05-20/a>	Guy Bruneau	Distributed Denial of Service Cheat Sheet
2011-05-13/a>	Jason Lam	Microsoft Security Intelligence Report volume 10
2011-05-10/a>	Swa Frantzen	May 2011 Microsoft Black Tuesday Overview
2011-05-06/a>	Richard Porter	Updated Exploit Index for Microsoft
2011-05-06/a>	Richard Porter	Unpatched Exploit: Skype for MAC
2011-04-14/a>	Johannes Ullrich	Apple Security Patches for OS X and iOS
2011-04-11/a>	Jim Clausing	April 2011 Microsoft Black Tuesday Summary
2011-04-08/a>	Johannes Ullrich	Dark Black Tuesday Coming Up: 17 Microsoft Bulletins
2011-04-05/a>	Mark Hofman	Sony DDOS
2011-04-05/a>	Mark Hofman	DNS.be DDOS
2011-04-03/a>	Richard Porter	Extreme Disclosure? Not yet but a great trend!
2011-03-09/a>	Kevin Shortt	AVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B
2011-03-09/a>	Chris Mohan	Possible Issue with Forefront Update KB2508823
2011-03-08/a>	Jim Clausing	March 2011 Microsoft Black Tuesday Summary
2011-03-04/a>	Mark Hofman	DDOS, the new black?
2011-03-02/a>	Chris Mohan	Microsoft’s Autorun update v2.1 now automatically deployed from Windows Update
2011-02-24/a>	Johannes Ullrich	Windows 7 / 2008 R2 Service Pack 1 Problems
2011-02-23/a>	Johannes Ullrich	Windows 7 Service Pack 1 out
2011-02-21/a>	Adrien de Beaupre	Winamp forums compromised
2011-02-14/a>	Richard Porter	Anonymous Damage Control Anybody?
2011-02-12/a>	Kevin Liston	DDoS Analysis Process
2011-02-10/a>	Chris Mohan	Befriending Windows Security Log Events
2011-02-05/a>	Guy Bruneau	OpenSSH Legacy Certificate Information Disclosure Vulnerability
2011-02-02/a>	Johannes Ullrich	Having Phish on Friday
2011-01-29/a>	Mark Hofman	Sourceforge attack
2011-01-27/a>	Guy Bruneau	ISC DHCP DHCPv6 Vulnerability
2011-01-19/a>	Johannes Ullrich	Microsoft's Secure Developer Tools
2011-01-08/a>	Guy Bruneau	January 2011 Patch Tuesday Pre-release
2011-01-06/a>	Johannes Ullrich	OS X 10.6.6 released. Probably some security content but Apple hasn't released details yet.
2011-01-05/a>	Johannes Ullrich	Currently Unpatched Windows / Internet Explorer Vulnerabilities
2011-01-04/a>	Johannes Ullrich	Microsoft Advisory: Vulnerability in Graphics Rendering Engine
2010-12-26/a>	Manuel Humberto Santander Pelaez	ISC infocon monitor app for OS X
2010-12-22/a>	John Bambenek	IIS 7.5 0-Day DoS (processing FTP requests)
2010-12-20/a>	Guy Bruneau	Patch Issues with Outlook 2007
2010-12-14/a>	Manuel Humberto Santander Pelaez	December 2010 Microsoft Black Tuesday Summary
2010-12-10/a>	Mark Hofman	Microsoft patches
2010-12-09/a>	Mark Hofman	Having a look at the DDOS tool used in the attacks today
2010-12-08/a>	Rob VandenBrink	Interesting DDOS activity around Wikileaks
2010-11-16/a>	Guy Bruneau	Mac OS X Server v10.6.5 (10H575) Security Update: http://support.apple.com/kb/HT4452
2010-11-11/a>	Johannes Ullrich	OS X 10.6.5 released with security patches. Careful: issues with PGP WDE! (see PGP support forums)
2010-11-04/a>	Johannes Ullrich	Microsoft Patches Pre-Announcement
2010-11-04/a>	Johannes Ullrich	Microsoft Smart Screen False Positivies
2010-10-22/a>	Manuel Humberto Santander Pelaez	Intypedia project
2010-10-20/a>	Jim Clausing	Tools updates - Oct 2010
2010-10-17/a>	Stephen Hall	Cyber Security Awareness Month - Day 17 - What a boss should and should not have access to
2010-10-12/a>	Adrien de Beaupre	October 2010 Microsoft Black Tuesday Summary
2010-10-08/a>	Rick Wanner	Patch Tuesday Pre-release -- 16 updates
2010-09-28/a>	Daniel Wesemann	MS10-070 OOB Patch for ASP.NET vulnerability
2010-09-27/a>	Adrien de Beaupre	MS OOB patch tomorrow for Security Advisory 2416728
2010-09-18/a>	Rick Wanner	Microsoft Security Advisory for ASP.NET
2010-09-14/a>	Adrien de Beaupre	September 2010 Microsoft Black Tuesday Summary
2010-09-14/a>	Adrien de Beaupre	BlackEnergy DDoS
2010-09-02/a>	Daniel Wesemann	Microsoft EMETv2 released
2010-08-16/a>	Raul Siles	DDOS: State of the Art
2010-08-13/a>	Guy Bruneau	Cisco IOS Software 15.1(2)T TCP DoS
2010-08-10/a>	Jim Clausing	August 2010 Micrsoft Black Tuesday Summary
2010-08-07/a>	Stephen Hall	DnsMadeEasy under a "quite large and unique" ddos.
2010-08-04/a>	Adrien de Beaupre	Multiple Cisco Advisories
2010-08-02/a>	Johannes Ullrich	Microsoft Out-of-Band bulletin addresses LNK/Shortcut vulnerability
2010-08-02/a>	Manuel Humberto Santander Pelaez	Securing Windows Internet Kiosk
2010-07-30/a>	Johannes Ullrich	Microsoft LNK vulnerability fix coming on Monday
2010-07-29/a>	Rob VandenBrink	NoScript 2.0 released
2010-07-29/a>	Rob VandenBrink	FBI, Slovenian and Spanish Police announce more arrests of Mariposa Botnet Creator, Operators
2010-07-21/a>	Adrien de Beaupre	Update on .LNK vulnerability
2010-07-20/a>	Manuel Humberto Santander Pelaez	LNK vulnerability now with Metasploit module implementing the WebDAV method
2010-07-13/a>	Jim Clausing	July 2010 Microsoft Black Tuesday Summary
2010-06-24/a>	Jason Lam	Help your competitor - Advise them of vulnerability
2010-06-23/a>	Johannes Ullrich	IPv6 Support in iOS 4
2010-06-18/a>	Adrien de Beaupre	End of the road for Cisco CSA
2010-06-15/a>	Manuel Humberto Santander Pelaez	Microsoft Windows Help and Support Center vulnerability (CVE 2010-1885) exploit in the wild
2010-06-15/a>	Manuel Humberto Santander Pelaez	Apple releases advisory for Mac OS X - Multiple vulnerabilities discovered
2010-06-15/a>	Manuel Humberto Santander Pelaez	iPhone 4 Order Security Breach Exposes Private Information
2010-06-10/a>	Deborah Hale	Microsoft Help Centre Handling of Escape Sequences May Lead to Exploit
2010-06-10/a>	Deborah Hale	Microsoft Security Advisory 2219475
2010-06-08/a>	Manuel Humberto Santander Pelaez	June 2010 Microsoft Black Tuesday Summary
2010-06-03/a>	Guy Bruneau	Microsoft Patch Tuesday June 2010 Pre-Release
2010-06-02/a>	Rob VandenBrink	New Mac malware - OSX/Onionspy
2010-05-18/a>	Johannes Ullrich	Canonical Display Driver Vulnerability
2010-05-11/a>	Scott Fendley	May 2010 Microsoft Patches
2010-05-08/a>	Guy Bruneau	Microsoft Patch Tuesday May 2010 Pre-Release
2010-05-08/a>	Guy Bruneau	Wireshark DOCSIS Dissector DoS Vulnerability
2010-04-30/a>	Johannes Ullrich	Sharepoint XSS Vulnerability
2010-04-26/a>	Raul Siles	Vulnerable Sites Database
2010-04-21/a>	Guy Bruneau	McAfee DAT 5958 Update Issues
2010-04-21/a>	Guy Bruneau	Google Chrome Security Update v4.1.249.1059 Released: http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html
2010-04-13/a>	Johannes Ullrich	Microsoft April 2010 Patch Tuesday
2010-04-08/a>	Guy Bruneau	Microsoft Patch Tuesday April 2010 Pre-Release
2010-04-01/a>	Jim Clausing	OSSEC v2.4 released. http://www.ossec.net/main/ossec-v24-released
2010-03-29/a>	Adrien de Beaupre	APPLE-SA-2010-03-29-1 Security Update 2010-002 / Mac OS X v10.6.3
2010-03-27/a>	Guy Bruneau	HP-UX Running NFS/ONCplus, Inadvertently Enabled NFS
2010-03-10/a>	Rob VandenBrink	Microsoft Security Advisory 981374 - Remote Code Execution Vulnerability for IE6 and IE7
2010-03-10/a>	Rob VandenBrink	Microsoft re-release of KB973811 - attacks on Extended Protection for Authentication
2010-03-09/a>	John Bambenek	March 2010 - Microsoft Patch Tuesday Diary
2010-03-08/a>	Raul Siles	Microsoft announced two important bulletins (fixing multiple vulns. affecting Windows and Office) for tomorrow: http://www.microsoft.com/technet/security/Bulletin/MS10-mar.mspx
2010-03-03/a>	Mark Hofman	MS10-015 re-released
2010-03-01/a>	Mark Hofman	Microsoft will drop support for Vista (without any Service Packs) on April 13 and support for XP SP2 ends July 13. (i.e. no more security updates). If you are still running these, it it time to update.
2010-02-25/a>	Andre Ludwig	Microsoft, restraining orders, and how a big botnet (waledec) ate curb.
2010-02-11/a>	Johannes Ullrich	MS10-015 may cause Windows XP to blue screen
2010-02-11/a>	Deborah Hale	Critical Update for AD RMS
2010-02-10/a>	Marcus Sachs	Vulnerability in TLS/SSL Could Allow Spoofing
2010-02-09/a>	Johannes Ullrich	February 2010 Black Tuesday Overview
2010-02-05/a>	Jim Clausing	Memory Analysis - time to move beyond XP
2010-02-04/a>	Johannes Ullrich	Microsoft Patch Tuesday Pre-Release
2010-02-03/a>	Johannes Ullrich	Information Disclosure Vulnerability in Internet Explorer
2010-02-02/a>	Johannes Ullrich	Pushdo Update
2010-01-21/a>	Johannes Ullrich	Microsoft January Out of Band Patch
2010-01-21/a>	Johannes Ullrich	New Microsoft Advisory: Vulnerability in Windows Kernel Privilege Escalation (CVE-2010-0232)
2010-01-21/a>	Chris Carboni	* Microsoft Out Of Band Patch Release
2010-01-19/a>	Jim Clausing	49Gbps DDoS, IPv4 exhaustion, and DNSSEC, oh my!
2010-01-19/a>	Johannes Ullrich	Unpatched Microsoft Windows (all versions) Privilege Escalation Vulnerability Released
2010-01-12/a>	Adrien de Beaupre	PoC for CVE-2009-0689 MacOS X 10.5/10.6 vulnerability
2010-01-12/a>	Johannes Ullrich	Microsoft Patch Tuesday - Preannouncement
2010-01-12/a>	Johannes Ullrich	Microsoft Security Bulletin: January 2010
2010-01-12/a>	Johannes Ullrich	Microsoft Advices XP Users to Uninstall Flash Player 6
2010-01-06/a>	Johannes Ullrich	Denial of Service Attack Aftermath (and what did Iran have to do with it?)
2009-12-30/a>	Guy Bruneau	KDC DoS in cross-realm referral processing
2009-12-29/a>	Rick Wanner	Microsoft responds to possible IIS 6 0-day
2009-12-24/a>	Guy Bruneau	F5 BIG-IP ASM and PSM Remote Buffer Overflow
2009-12-09/a>	Swa Frantzen	ntpd upgrade to prevent spoofed looping
2009-12-09/a>	Swa Frantzen	OSSEC 2.3 released
2009-12-08/a>	Deborah Hale	December 2009 Black Tuesday Overview
2009-12-03/a>	Mark Hofman	Avast false positives
2009-12-02/a>	Rob VandenBrink	Microsoft Black Screen of Death - Fact of Fiction?
2009-11-25/a>	Jim Clausing	Microsoft Updates requiring reboot
2009-11-24/a>	Rick Wanner	Microsoft Security Advisory 977981 - IE 6 and IE 7
2009-11-18/a>	Rob VandenBrink	Using a Cisco Router as a “Remote Collector” for tcpdump or Wireshark
2009-11-14/a>	Adrien de Beaupre	Microsoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released
2009-11-10/a>	Swa Frantzen	Microsoft November Black Tuesday Overview
2009-11-07/a>	Marcus Sachs	More Thoughts on Legacy Systems
2009-11-02/a>	Rob VandenBrink	Microsoft releases v1.02 of Enhanced Mitigation Evaluation Toolkit (EMET)
2009-10-19/a>	Daniel Wesemann	Backed up, lately ?
2009-10-17/a>	Rick Wanner	Mozilla disables Microsoft plug-ins?
2009-10-16/a>	Adrien de Beaupre	Disable MS09-054 patch, or Firefox Plugin?
2009-10-13/a>	Johannes Ullrich	Microsoft October 2009 Black Tuesday Overview
2009-10-04/a>	Guy Bruneau	Samba Security Information Disclosure and DoS
2009-09-16/a>	Bojan Zdrnja	SMB2 remote exploit released
2009-09-12/a>	Jim Clausing	OSSEC version 2.2 available
2009-09-12/a>	Jim Clausing	Apple Updates
2009-09-09/a>	Mark Hofman	Possible DDOS on gov.au sites starting tonight?
2009-09-08/a>	Guy Bruneau	Cisco Security Advisory TCP DoS
2009-08-31/a>	Pedro Bueno	Microsoft IIS 5/6 FTP 0Day released
2009-08-26/a>	Johannes Ullrich	WSUS 3.0 SP2 released
2009-08-18/a>	Deborah Hale	Website compromises - what's happening?
2009-08-11/a>	Swa Frantzen	Microsoft August 2009 Black Tuesday Overview
2009-08-08/a>	Guy Bruneau	XML Libraries Data Parsing Vulnerabilities
2009-07-29/a>	Bojan Zdrnja	BIND 9 DoS attacks in the wild
2009-07-28/a>	Adrien de Beaupre	YYAMCCBA
2009-07-28/a>	Adrien de Beaupre	MS released two OOB bulletins and an advisory
2009-07-24/a>	Rick Wanner	Microsoft Out of Band Patch
2009-07-17/a>	John Bambenek	Cross-Platform, Cross-Browser DoS Vulnerability
2009-07-14/a>	Swa Frantzen	Microsoft July Black Tuesday Overview
2009-07-13/a>	Adrien de Beaupre	Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution
2009-07-12/a>	Mari Nichols	CA Apologizes for False Positive
2009-07-09/a>	John Bambenek	Latest Updates on Ongoing DDoS on Governmental/Commercial Websites in USA and S. Korea
2009-07-08/a>	Marcus Sachs	RFI: DDoS Against Government and Civilian Web Sites
2009-06-23/a>	Bojan Zdrnja	Slowloris and Iranian DDoS attacks
2009-06-21/a>	Bojan Zdrnja	Apache HTTP DoS tool mitigation
2009-06-18/a>	Bojan Zdrnja	Apache HTTP DoS tool released
2009-06-11/a>	Rick Wanner	MIR-ROR Motile Incident Response - Respond Objectively Remediate
2009-06-10/a>	Rick Wanner	SysInternals Survey
2009-06-09/a>	Swa Frantzen	Microsoft June Black Tuesday Overview
2009-05-28/a>	Stephen Hall	Microsoft DirectShow vulnerability
2009-05-27/a>	donald smith	Host file black lists
2009-05-27/a>	donald smith	WebDAV write-up
2009-05-15/a>	Daniel Wesemann	IIS6.0 WebDav Remote Auth Bypass
2009-05-12/a>	Swa Frantzen	MSFT's version of responsible disclosure
2009-05-12/a>	Swa Frantzen	May Black Tuesday Overview
2009-05-05/a>	Bojan Zdrnja	Every dot matters
2009-04-30/a>	Marcus Sachs	Microsoft Revises 08-069, 08-076, and 09-012
2009-04-24/a>	John Bambenek	Data Leak Prevention: Proactive Security Requirements of Breach Notification Laws
2009-04-15/a>	Marcus Sachs	2009 Data Breach Investigation Report
2009-04-14/a>	Swa Frantzen	April Black Tuesday Overview
2009-03-25/a>	Mari Nichols	Cisco Releases IOS Bundle of Vulnerabilities
2009-03-10/a>	Swa Frantzen	March black Tuesday overview
2009-03-08/a>	Marcus Sachs	Behind the Estonia Cyber Attacks
2009-02-28/a>	Rick Wanner	OSSEC Version 2 available!
2009-02-14/a>	Deborah Hale	Microsoft Time Sync Appears to Down
2009-02-10/a>	Swa Frantzen	February Black Tuesday Overview
2009-01-31/a>	Swa Frantzen	DNS DDoS - let's use a long term solution
2009-01-31/a>	Swa Frantzen	Windows 7 - not so secure ?
2009-01-31/a>	Swa Frantzen	VMware updates
2009-01-25/a>	Rick Wanner	Twam?? Twammers?
2009-01-24/a>	Pedro Bueno	Identifying and Removing the iWork09 Trojan
2009-01-13/a>	Johannes Ullrich	January Black Tuesday Overview
2008-12-16/a>	donald smith	Microsoft announces an out of band patch for IE zero day
2008-12-12/a>	Johannes Ullrich	MSIE 0-day Spreading Via SQL Injection
2008-12-10/a>	Mark Hofman	Microsoft wordpad text converter issue
2008-12-09/a>	Swa Frantzen	December Black Tuesday Overview
2008-12-04/a>	Bojan Zdrnja	Finjan blocking access to isc.sans.org
2008-12-03/a>	Andre Ludwig	New ISC Poll! Has your organization suffered a DDoS (Distributed Denial of Service) attack in the last year?
2008-11-29/a>	Pedro Bueno	Ubuntu users: Time to update!
2008-11-25/a>	Andre Ludwig	OS X Dns Changers part three
2008-11-11/a>	Swa Frantzen	November Black Tuesday Overview
2008-10-23/a>	Mark Hofman	Microsoft out-of-band patch - Severity Critical
2008-10-14/a>	Swa Frantzen	October Black Tuesday Overview
2008-10-10/a>	Marcus Sachs	Fake Microsoft Update Email
2008-09-10/a>	Adrien de Beaupre	Mailbag: OSSEC 1.6 released, NMAP 4.75 released
2008-09-09/a>	Swa Frantzen	September 2008 Black Tuesday Overview
2008-09-09/a>	Swa Frantzen	wordpress upgrade
2008-08-25/a>	John Bambenek	Thoughts on the Best Western Compromise
2008-08-12/a>	Stephen Hall	August 2008 Black Tuesday Overview
2008-08-02/a>	Maarten Van Horenbeeck	A little of that human touch
2008-08-01/a>	Robert Danford	Microsoft Malicious Software Removal Tool users double check it's running
2008-07-20/a>	Kevin Liston	Denial of Service Attack Against Georgia-- Are You Participating?
2008-07-17/a>	Mari Nichols	Firefox Releases 3.0.1 and fixes 3 security vulnerabilities
2008-07-09/a>	Johannes Ullrich	Unpatched Word Vulnerability
2008-07-08/a>	Swa Frantzen	July 2008 black tuesday overview
2008-07-08/a>	Johannes Ullrich	Mulitple Vendors DNS Spoofing Vulnerability
2008-07-07/a>	Scott Fendley	Microsoft Snapshot Viewer Security Advisory
2008-07-07/a>	Pedro Bueno	Bad url classification
2008-06-24/a>	Jason Lam	Microsoft SQL Injection Prevention Strategy
2008-06-10/a>	Swa Frantzen	June 2008 Black Tuesday Overview
2008-06-06/a>	Kevin Liston	Microsoft Security Bulletin Advance Notification for June 2008
2008-05-23/a>	Mike Poor	Cisco IOS Rootkit thoughts
2008-05-13/a>	Swa Frantzen	May 2008 black tuesday overview
2008-05-13/a>	Swa Frantzen	Microsoft office file block & MOICE
2008-05-07/a>	Jim Clausing	OSSEC 1.5 released
2008-05-06/a>	John Bambenek	Windows XP Service Pack 3 Released
2008-05-01/a>	Adrien de Beaupre	Windows XP SteadyState
2008-05-01/a>	Adrien de Beaupre	Windows Detours
2008-04-22/a>	donald smith	Symantec decomposer rar bypass allowed malicious content.
2008-04-18/a>	John Bambenek	IIS Vulnerability Documented by Microsoft - Includes Workarounds
2008-04-18/a>	John Bambenek	The Patch Window is Gone: Automated Patch-Based Exploit Generation
2008-04-16/a>	William Stearns	Windows XP Service Pack 3 - unofficial schedule: Apr 21-28
2008-04-10/a>	Deborah Hale	DSLReports Being Attacked Again
2008-04-09/a>	Joel Esler	ISC Podcast Episode Number 2
2008-04-08/a>	Swa Frantzen	April 2008 - Black Tuesday Overview
2008-04-03/a>	Bojan Zdrnja	Opera fixes vulnerabilities and Microsoft announces April's fixes
2008-04-02/a>	Adrien de Beaupre	When is a DMG file not a DMG file
2008-03-25/a>	Raul Siles	Microsoft Jet Database Engine Advisory Update (950627)
2008-03-22/a>	Koon Yaw Tan	Microsoft Security Advisory Released (950627)
2007-01-03/a>	Toby Kohlenberg	VLC Media Player udp URL handler Format String Vulnerability
2006-12-26/a>	Swa Frantzen	Vista: better security [Y/N] ?
2006-12-12/a>	Swa Frantzen	The missing Microsoft patches
2006-12-12/a>	Swa Frantzen	Microsoft Black Tuesday - December 2006 overview
2006-12-12/a>	Jim Clausing	MS06-075: csrss local privilege escalation (CVE-2006-5585)
2006-12-12/a>	Lorna Hutcheson	MS06-072: Cumulative Security Update for Internet Explorer (925454)
2006-12-12/a>	Robert Danford	MS06-078: 2 Windows Media Format Vulnerabilities (CVE-2006-4702, CVE-2006-6134)
2006-12-12/a>	Swa Frantzen	Microsoft Office 2004 - Mac OS X updated
2006-12-12/a>	Swa Frantzen	Offline Microsoft Patching
2006-11-29/a>	Toby Kohlenberg	New Vulnerability Announcement and patches from Apple
2006-11-20/a>	Joel Esler	MS06-070 Remote Exploit
2006-11-14/a>	Jim Clausing	MS06-069: Adobe Flash Player
2006-11-14/a>	Jim Clausing	MS06-071: MSXML Core Services
2006-11-10/a>	Tony Carothers	A busy Black Tuesday coming up.....
2006-10-09/a>	Swa Frantzen	Microsoft black tuesday - October 2006 STATUS
2006-10-05/a>	Swa Frantzen	MS06-053 revisited ?
2006-09-30/a>	Swa Frantzen	Yellow: WebViewFolderIcon setslice exploit spreading
2006-09-28/a>	Swa Frantzen	Powerpoint, yet another new vulnerability
2006-09-28/a>	Swa Frantzen	MSIE: One patched, one pops up again (setslice)
2006-09-26/a>	Jim Clausing	MS06-049 re-release
2006-09-21/a>	Johannes Ullrich	Apple updates Airport Drivers
2006-09-12/a>	Michael Haisley	Microsoft Security Bulletin MS06-054
2006-09-12/a>	Swa Frantzen	Microsoft security patches for September 2006
2006-09-12/a>	Michael Haisley	Microsoft Security Bulletin MS06-052
2006-08-17/a>	Swa Frantzen	Microsoft August 2006 Patches: STATUS
X
2024-11-19/a>	Xavier Mertens	Detecting the Presence of a Debugger in Linux
2024-11-18/a>	Johannes Ullrich	Exploit attempts for unpatched Citrix vulnerability
2024-11-06/a>	Jesse La Grew	[Guest Diary] Insights from August Web Traffic Surge
2024-10-09/a>	Xavier Mertens	From Perfctl to InfoStealer
2024-09-24/a>	Johannes Ullrich	Exploitation of RAISECOM Gateway Devices Vulnerability CVE-2024-7120
2024-09-18/a>	Xavier Mertens	Python Infostealer Patching Windows Exodus App
2024-09-16/a>	Xavier Mertens	Managing PE Files With Overlays
2024-08-26/a>	Xavier Mertens	From Highly Obfuscated Batch File to XWorm and Redline
2024-07-26/a>	Xavier Mertens	ExelaStealer Delivered "From Russia With Love"
2024-07-25/a>	Xavier Mertens	XWorm Hidden With Process Hollowing
2024-07-16/a>	Guy Bruneau	Who You Gonna Call? AndroxGh0st Busters! [Guest Diary]
2024-07-13/a>	Didier Stevens	16-bit Hash Collisions in .xls Spreadsheets
2024-07-08/a>	Xavier Mertens	Kunai: Keep an Eye on your Linux Hosts Activity
2024-06-20/a>	Guy Bruneau	No Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary]
2024-06-17/a>	Xavier Mertens	New NetSupport Campaign Delivered Through MSIX Packages
2024-05-31/a>	Xavier Mertens	"K1w1" InfoStealer Uses gofile.io for Exfiltration
2024-05-27/a>	Jan Kopriva	Files with TXZ extension used as malspam attachments
2024-05-16/a>	Rob VandenBrink	Why yq? Adventures in XML
2024-05-06/a>	Johannes Ullrich	Detecting XFinity/Comcast DNS Spoofing
2024-04-30/a>	Johannes Ullrich	Another Day, Another NAS: Attacks against Zyxel NAS326 devices CVE-2023-4473, CVE-2023-4474
2024-04-29/a>	Guy Bruneau	Linux Trojan - Xorddos with Filename eyshcjdmzg
2024-04-01/a>	Bojan Zdrnja	The amazingly scary xz sshd backdoor
2024-02-20/a>	Xavier Mertens	Python InfoStealer With Dynamic Sandbox Detection
2024-02-09/a>	Xavier Mertens	MSIX With Heavily Obfuscated PowerShell Script
2023-12-23/a>	Xavier Mertens	Python Keylogger Using Mailtrap.io
2023-12-20/a>	Guy Bruneau	How to Protect your Webserver from Directory Enumeration Attack ? Apache2 [Guest Diary]
2023-12-16/a>	Xavier Mertens	An Example of RocketMQ Exploit Scanner
2023-12-15/a>	Xavier Mertens	CSharp Payload Phoning to a CobaltStrike Server
2023-12-11/a>	Rob VandenBrink	What is sitemap.xml, and Why a Pentester Should Care
2023-12-10/a>	Guy Bruneau	Honeypots: From the Skeptical Beginner to the Tactical Enthusiast
2023-11-15/a>	Xavier Mertens	Redline Dropped Through MSIX Package
2023-10-31/a>	Xavier Mertens	Multiple Layers of Anti-Sandboxing Techniques
2023-10-18/a>	Jesse La Grew	Hiding in Hex
2023-10-05/a>	Jim Clausing	New tool: le-hex-to-ip.py
2023-08-23/a>	Xavier Mertens	More Exotic Excel Files Dropping AgentTesla
2023-07-24/a>	Rob VandenBrink	JQ: Another Tool We Thought We Knew
2023-07-12/a>	Brad Duncan	Loader activity for Formbook "QM18"
2023-07-01/a>	Russ McRee	Sandfly Security
2023-06-24/a>	Guy Bruneau	Email Spam with Attachment Modiloader
2023-06-19/a>	Xavier Mertens	Malware Delivered Through .inf File
2023-05-30/a>	Brad Duncan	Malspam pushes ModiLoader (DBatLoader) infection for Remcos RAT
2023-05-26/a>	Xavier Mertens	Using DFIR Techniques To Recover From Infrastructure Outages
2023-05-20/a>	Xavier Mertens	Phishing Kit Collecting Victim's IP Address
2023-05-17/a>	Xavier Mertens	Increase in Malicious RAR SFX files
2023-04-18/a>	Johannes Ullrich	UDDIs are back? Attackers rediscovering old exploits.
2023-04-03/a>	Johannes Ullrich	Tax Season Risks
2023-03-31/a>	Guy Bruneau	Using Linux grep and Windows findstr to Manipulate Files
2023-03-31/a>	Jan Kopriva	Use of X-Frame-Options and CSP frame-ancestors security headers on 1 million most popular domains
2023-03-16/a>	Xavier Mertens	Simple Shellcode Dissection
2023-03-12/a>	Guy Bruneau	AsynRAT Trojan - Bill Payment (Pago de la factura)
2023-03-11/a>	Xavier Mertens	Overview of a Mirai Payload Generator
2023-03-07/a>	Johannes Ullrich	Hackers Love This VSCode Extension: What You Can Do to Stay Safe
2023-02-04/a>	Guy Bruneau	Assemblyline as a Malware Analysis Sandbox
2023-01-26/a>	Tom Webb	Live Linux IR with UAC
2023-01-23/a>	Xavier Mertens	Who's Resolving This Domain?
2023-01-02/a>	Xavier Mertens	NetworkMiner 2.8 Released
2022-12-31/a>	Didier Stevens	YARA v4.3.0-rc1 --print-xor-key
2022-12-22/a>	Guy Bruneau	Exchange OWASSRF Exploited for Remote Code Execution
2022-12-20/a>	Xavier Mertens	Linux File System Monitoring & Actions
2022-10-07/a>	Xavier Mertens	Critical Fortinet Vulnerability Ahead
2022-09-26/a>	Xavier Mertens	Easy Python Sandbox Detection
2022-09-23/a>	Xavier Mertens	Kids Like Cookies, Malware Too!
2022-09-16/a>	Didier Stevens	Word Maldoc With CustomXML and Renamed VBAProject.bin
2022-09-15/a>	Xavier Mertens	Malicious Word Document with a Frameset
2022-09-01/a>	Johannes Ullrich	Jolokia Scans: Possible Hunt for Vulnerable Apache Geode Servers (CVE-2022-37021)
2022-08-23/a>	Xavier Mertens	Who's Looking at Your security.txt File?
2022-08-19/a>	Johannes Ullrich	Windows Security Blocks UPX Compressed (packed) Binaries
2022-08-03/a>	Johannes Ullrich	l9explore and LeakIX Internet wide recon scans.
2022-07-28/a>	Johannes Ullrich	Exfiltrating Data With Bookmarks
2022-07-10/a>	Guy Bruneau	Excel 4 Emotet Maldoc Analysis using CyberChef
2022-07-07/a>	Brad Duncan	Emotet infection with Cobalt Strike
2022-06-28/a>	Johannes Ullrich	Possible Scans for HiByMusic Devices
2022-06-26/a>	Didier Stevens	More Decoding Analysis
2022-06-25/a>	Xavier Mertens	Malicious Code Passed to PowerShell via the Clipboard
2022-06-23/a>	Xavier Mertens	FLOSS 2.0 Has Been Released
2022-06-22/a>	Xavier Mertens	Malicious PowerShell Targeting Cryptocurrency Browser Extensions
2022-06-10/a>	Russ McRee	EPSScall: An Exploit Prediction Scoring System App
2022-06-03/a>	Xavier Mertens	Sandbox Evasion... With Just a Filename!
2022-05-31/a>	Xavier Mertens	First Exploitation of Follina Seen in the Wild
2022-05-30/a>	Xavier Mertens	New Microsoft Office Attack Vector via "ms-msdt" Protocol Scheme (CVE-2022-30190)
2022-05-24/a>	Yee Ching Tok	ctx Python Library Updated with "Extra" Features
2022-05-19/a>	Brad Duncan	Bumblebee Malware from TransferXL URLs
2022-05-07/a>	Guy Bruneau	Phishing PDF Received in my ISC Mailbox
2022-04-20/a>	Brad Duncan	"aa" distribution Qakbot (Qbot) infection with DarkVNC traffic
2022-04-06/a>	Brad Duncan	Windows MetaStealer Malware
2022-03-31/a>	Johannes Ullrich	Spring Vulnerability Update - Exploitation Attempts CVE-2022-22965
2022-03-30/a>	Didier Stevens	Quickie: Parsing XLSB Documents
2022-03-25/a>	Xavier Mertens	XLSB Files: Because Binary is Stealthier Than XML
2022-03-18/a>	Johannes Ullrich	Scans for Movable Type Vulnerability (CVE-2021-20837)
2022-03-09/a>	Xavier Mertens	Infostealer in a Batch File
2022-03-05/a>	Didier Stevens	oledump's Extra Option
2022-02-22/a>	Xavier Mertens	A Good Old Equation Editor Vulnerability Delivering Malware
2022-02-10/a>	Johannes Ullrich	Zyxel Network Storage Devices Hunted By Mirai Variant
2022-02-01/a>	Xavier Mertens	Automation is Nice But Don't Replace Your Knowledge
2022-01-25/a>	Bojan Zdrnja	Local privilege escalation vulnerability in polkit's pkexec (CVE-2021-4034)
2022-01-22/a>	Xavier Mertens	Mixed VBA & Excel4 Macro In a Targeted Excel Sheet
2022-01-05/a>	Xavier Mertens	Code Reuse In the Malware Landscape
2022-01-02/a>	Guy Bruneau	Exchange Server - Email Trapped in Transport Queues
2021-12-03/a>	Xavier Mertens	The UPX Packer Will Never Die!
2021-12-01/a>	Xavier Mertens	Info-Stealer Using webhook.site to Exfiltrate Data
2021-11-26/a>	Guy Bruneau	Searching for Exposed ASUS Routers Vulnerable to CVE-2021-20090
2021-11-21/a>	Didier Stevens	Backdooring PAM
2021-11-20/a>	Guy Bruneau	Hikvision Security Cameras Potentially Exposed to Remote Code Execution
2021-11-19/a>	Xavier Mertens	Downloader Disguised as Excel Add-In (XLL)
2021-11-04/a>	Tom Webb	Xmount for Disk Images
2021-10-30/a>	Guy Bruneau	Remote Desktop Protocol (RDP) Discovery
2021-10-16/a>	Guy Bruneau	Apache is Actively Scan for CVE-2021-41773 & CVE-2021-42013
2021-10-14/a>	Xavier Mertens	Port-Forwarding with Windows for the Win
2021-10-09/a>	Guy Bruneau	Scanning for Previous Oracle WebLogic Vulnerabilities
2021-10-01/a>	Xavier Mertens	New Tool to Add to Your LOLBAS List: cvtres.exe
2021-09-25/a>	Didier Stevens	Strings Analysis: VBA & Excel4 Maldoc
2021-09-25/a>	Didier Stevens	Video: Strings Analysis: VBA & Excel4 Maldoc
2021-09-24/a>	Xavier Mertens	Keep an Eye on Your Users Mobile Devices (Simple Inventory)
2021-09-23/a>	Xavier Mertens	Excel Recipe: Some VBA Code with a Touch of Excel4 Macro
2021-09-20/a>	Johannes Ullrich	#OMIGOD Exploits Captured in the Wild. Researchers responsible for half of scans for related ports.
2021-09-15/a>	Brad Duncan	Hancitor campaign abusing Microsoft's OneDrive
2021-09-08/a>	Johannes Ullrich	Microsoft Offers Workaround for 0-Day Office Vulnerability (CVE-2021-40444)
2021-09-07/a>	Johannes Ullrich	Why I Gave Up on IPv6. And no, it is not because of security issues.
2021-09-01/a>	Brad Duncan	STRRAT: a Java-based RAT that doesn't care if you have Java
2021-08-24/a>	Johannes Ullrich	Attackers Hunting For Twilio Credentials
2021-08-13/a>	Guy Bruneau	Scanning for Microsoft Exchange eDiscovery
2021-08-09/a>	Jan Kopriva	ProxyShell - how many Exchange servers are affected and where are they?
2021-07-28/a>	Jan Kopriva	A sextortion e-mail from...IT support?!
2021-06-26/a>	Guy Bruneau	CVE-2019-9670: Zimbra Collaboration Suite XXE vulnerability
2021-06-12/a>	Guy Bruneau	Fortinet Targeted for Unpatched SSL VPN Discovery Activity
2021-06-11/a>	Xavier Mertens	Sonicwall SRA 4600 Targeted By an Old Vulnerability
2021-05-30/a>	Didier Stevens	Sysinternals: Procmon, Sysmon, TcpView and Process Explorer update
2021-04-16/a>	Xavier Mertens	HTTPS Support for All Internal Services
2021-04-02/a>	Xavier Mertens	C2 Activity: Sandboxes or Real Victims?
2021-03-31/a>	Xavier Mertens	Quick Analysis of a Modular InfoStealer
2021-03-10/a>	Rob VandenBrink	SharpRDP - PSExec without PSExec, PSRemoting without PowerShell
2021-03-03/a>	Brad Duncan	Qakbot infection with Cobalt Strike
2021-03-03/a>	Johannes Ullrich	Microsoft Releases Exchange Emergency Patch to Fix Actively Exploited Vulnerability
2021-02-28/a>	Didier Stevens	Maldocs: Protection Passwords
2021-02-22/a>	Didier Stevens	Unprotecting Malicious Documents For Inspection
2021-02-17/a>	Brad Duncan	Malspam pushing Trickbot gtag rob13
2021-02-13/a>	Guy Bruneau	vSphere Replication updates address a command injection vulnerability (CVE-2021-21976) - https://www.vmware.com/security/advisories/VMSA-2021-0001.html
2021-02-04/a>	Bojan Zdrnja	Abusing Google Chrome extension syncing for data exfiltration and C&C
2021-02-03/a>	Brad Duncan	Excel spreadsheets push SystemBC malware
2021-02-02/a>	Xavier Mertens	New Example of XSL Script Processing aka "Mitre T1220"
2021-02-01/a>	Rob VandenBrink	Taking a Shot at Reverse Shell Attacks, CNC Phone Home and Data Exfil from Servers
2021-01-30/a>	Guy Bruneau	Wireshark 3.2.11 is now available which contains Bug Fixes - https://www.wireshark.org
2021-01-24/a>	Didier Stevens	Video: Doc & RTF Malicious Document
2021-01-23/a>	Didier Stevens	CyberChef: Analyzing OOXML Files for URLs
2021-01-22/a>	Xavier Mertens	Another File Extension to Block in your MTA: .jnlp
2021-01-20/a>	Brad Duncan	Qakbot activity resumes after holiday break
2021-01-18/a>	Didier Stevens	Doc & RTF Malicious Document
2021-01-18/a>	Rob VandenBrink	The CIS Benchmark for Cisco Nexus (NX-OS) 1.0 went live last week, find it here: https://www.cisecurity.org/cis-benchmarks/
2021-01-15/a>	Brad Duncan	Throwback Friday: An Example of Rig Exploit Kit
2021-01-14/a>	Bojan Zdrnja	Dynamically analyzing a heavily obfuscated Excel 4 macro malicious file
2021-01-06/a>	Johannes Ullrich	Scans for Zyxel Backdoors are Commencing.
2021-01-05/a>	Johannes Ullrich	Netfox Detective: An Alternative Open-Source Packet Analysis Tool
2021-01-02/a>	Guy Bruneau	Protecting Home Office and Enterprise in 2021
2020-12-23/a>	Jim Clausing	Analysis Dridex Dropper, IoC extraction (guest diary)
2020-12-18/a>	Jan Kopriva	A slightly optimistic tale of how patching went for CVE-2019-19781
2020-12-12/a>	Didier Stevens	Office 95 Excel 4 Macros
2020-12-09/a>	Brad Duncan	Recent Qakbot (Qbot) activity
2020-12-08/a>	Johannes Ullrich	December 2020 Microsoft Patch Tuesday: Exchange, Sharepoint, Dynamics and DNS Spoofing
2020-12-04/a>	Guy Bruneau	Detecting Actors Activity with Threat Intel
2020-11-21/a>	Guy Bruneau	VMware privilege escalation vulnerabilities (CVE-2020-4004, CVE-2020-4005) - https://www.vmware.com/security/advisories/VMSA-2020-0026.html
2020-11-05/a>	Xavier Mertens	Did You Spot "Invoke-Expression"?
2020-10-26/a>	Didier Stevens	Excel 4 Macros: "Abnormal Sheet Visibility"
2020-10-10/a>	Didier Stevens	Open Packaging Conventions
2020-10-07/a>	Johannes Ullrich	Today, Nobody is Going to Attack You.
2020-10-03/a>	Guy Bruneau	Scanning for SOHO Routers
2020-10-02/a>	Xavier Mertens	Analysis of a Phishing Kit
2020-09-15/a>	Brad Duncan	Traffic Analysis Quiz: Oh No... Another Infection!
2020-09-10/a>	Brad Duncan	Recent Dridex activity
2020-09-03/a>	Xavier Mertens	Sandbox Evasion Using NTP
2020-08-26/a>	Xavier Mertens	Malicious Excel Sheet with a NULL VT Score
2020-08-25/a>	Xavier Mertens	Keep An Eye on LOLBins
2020-08-22/a>	Guy Bruneau	VMware App Volumes patches address Stored Cross-Site Scripting (XSS) vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0019.html
2020-08-22/a>	Guy Bruneau	Remote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2020-08-18/a>	Xavier Mertens	Using API's to Track Attackers
2020-08-08/a>	Guy Bruneau	Scanning Activity Include Netcat Listener
2020-08-05/a>	Brad Duncan	Traffic Analysis Quiz: What's the Malware From This Infection?
2020-07-27/a>	Didier Stevens	Analyzing Metasploit ASP .NET Payloads
2020-07-20/a>	Rick Wanner	Sextortion Update: The Final Final Chapter
2020-07-19/a>	Guy Bruneau	Scanning Activity for ZeroShell Unauthenticated Access
2020-07-11/a>	Guy Bruneau	VMware XPC Client validation privilege escalation vulnerability - https://www.vmware.com/security/advisories/VMSA-2020-0017.html
2020-07-11/a>	Guy Bruneau	Scanning Home Internet Facing Devices to Exploit
2020-06-30/a>	Russ McRee	ISC Snapshot: SpectX IP Hitcount Query
2020-06-16/a>	Xavier Mertens	Sextortion to The Next Level
2020-06-13/a>	Guy Bruneau	Mirai Botnet Activity
2020-06-12/a>	Xavier Mertens	Malicious Excel Delivering Fileless Payload
2020-06-10/a>	Brad Duncan	Job application-themed malspam pushes ZLoader
2020-06-04/a>	Xavier Mertens	Anti-Debugging Technique based on Memory Protection
2020-06-01/a>	Didier Stevens	XLMMacroDeobfuscator: An Update
2020-05-28/a>	Xavier Mertens	Flashback on CVE-2019-19781
2020-05-16/a>	Guy Bruneau	Scanning for Outlook Web Access (OWA) & Microsoft Exchange Control Panel (ECP)
2020-05-13/a>	Brad Duncan	Malspam with links to zip archives pushes Dridex malware
2020-05-01/a>	Jim Clausing	Attack traffic on TCP port 9673
2020-04-24/a>	Xavier Mertens	Malicious Excel With a Strong Obfuscation and Sandbox Evasion
2020-04-21/a>	Russ McRee	SpectX: Log Parser for DFIR
2020-04-06/a>	Didier Stevens	Password Protected Malicious Excel Files
2020-04-05/a>	Guy Bruneau	Maldoc XLS Invoice with Excel 4 Macros
2020-03-29/a>	Didier Stevens	Obfuscated Excel 4 Macros
2020-03-26/a>	Xavier Mertens	Very Large Sample as Evasion Technique?
2020-03-25/a>	Brad Duncan	Recent Dridex activity
2020-03-09/a>	Didier Stevens	Malicious Spreadsheet With Data Connection and Excel 4 Macros
2020-03-06/a>	Xavier Mertens	A Safe Excel Sheet Not So Safe
2020-03-03/a>	Johannes Ullrich	Introduction to EvtxEcmd (Evtx Explorer)
2020-02-24/a>	Didier Stevens	Maldoc: Excel 4 Macros and VBA, Devil and Angel?
2020-02-23/a>	Didier Stevens	Maldoc: Excel 4 Macros in OOXML Format
2020-02-14/a>	Xavier Mertens	Keep an Eye on Command-Line Browsers
2020-02-07/a>	Xavier Mertens	Sandbox Detection Tricks & Nice Obfuscation in a Single VBScript
2020-01-13/a>	Didier Stevens	Citrix ADC Exploits: Overview of Observed Payloads
2020-01-11/a>	Johannes Ullrich	Citrix ADC Exploits are Public and Heavily Used. Attempts to Install Backdoor
2020-01-10/a>	Xavier Mertens	More Data Exfiltration
2020-01-07/a>	Johannes Ullrich	A Quick Update on Scanning for CVE-2019-19781 (Citrix ADC / Gateway Vulnerability)
2019-12-31/a>	Johannes Ullrich	Some Thoughts About the Critical Citrix ADC/Gateway Vulnerability (CVE-2019-19781)
2019-12-26/a>	Xavier Mertens	Bypassing UAC to Install a Cryptominer
2019-12-13/a>	Jan Kopriva	Internet banking sites and their use of TLS... and SSLv3... and SSLv2?!
2019-12-03/a>	Brad Duncan	Ursnif infection with Dridex
2019-11-13/a>	Brad Duncan	An example of malspam pushing Lokibot malware, November 2019
2019-11-09/a>	Guy Bruneau	Fake Netflix Update Request by Text
2019-11-08/a>	Xavier Mertens	Microsoft Apps Diverted from Their Main Use
2019-10-30/a>	Xavier Mertens	Keep an Eye on Remote Access to Mailboxes
2019-10-20/a>	Guy Bruneau	Scanning Activity for NVMS-9000 Digital Video Recorder
2019-10-14/a>	Didier Stevens	YARA's XOR Modifier
2019-09-22/a>	Didier Stevens	Video: Encrypted Sextortion PDFs
2019-09-19/a>	Xavier Mertens	Agent Tesla Trojan Abusing Corporate Email Accounts
2019-09-16/a>	Didier Stevens	Encrypted Sextortion PDFs
2019-09-07/a>	Guy Bruneau	Unidentified Scanning Activity
2019-08-28/a>	Xavier Mertens	Malware Samples Compiling Their Next Stage on Premise
2019-08-05/a>	Rick Wanner	Sextortion: Follow the Money - The Final Chapter
2019-07-20/a>	Guy Bruneau	Re-evaluating Network Security - It is Increasingly More Complex
2019-07-18/a>	Rob VandenBrink	The Other Side of Critical Control 1: 802.1x Wired Network Access Controls
2019-07-17/a>	Xavier Mertens	Analyzis of DNS TXT Records
2019-07-10/a>	Rob VandenBrink	Dumping File Contents in Hex (in PowerShell)
2019-07-06/a>	Didier Stevens	Malicious XSL Files
2019-07-05/a>	Didier Stevens	A "Stream O" Maldoc
2019-06-25/a>	Brad Duncan	Rig Exploit Kit sends Pitou.B Trojan
2019-06-18/a>	Brad Duncan	Malspam with password-protected Word docs pushing Dridex
2019-06-18/a>	Johannes Ullrich	What You Need To Know About TCP "SACK Panic"
2019-06-17/a>	Brad Duncan	An infection from Rig exploit kit
2019-04-27/a>	Didier Stevens	Quick Tip for Dissecting CVE-2017-11882 Exploits
2019-04-22/a>	Didier Stevens	.rar Files and ACE Exploit CVE-2018-20250
2019-03-25/a>	Didier Stevens	"VelvetSweatshop" Maldocs: Shellcode Analysis
2019-03-24/a>	Didier Stevens	Decoding QR Codes with Python
2019-03-23/a>	Didier Stevens	"VelvetSweatshop" Maldocs
2019-03-21/a>	Xavier Mertens	New Wave of Extortion Emails: Central Intelligence Agency Case
2019-03-17/a>	Didier Stevens	Video: Maldoc Analysis: Excel 4.0 Macro
2019-03-16/a>	Didier Stevens	Maldoc: Excel 4.0 Macros
2019-03-06/a>	Xavier Mertens	Keep an Eye on Disposable Email Addresses
2019-02-25/a>	Didier Stevens	Sextortion Email Variant: With QR Code
2019-02-05/a>	Rob VandenBrink	Mitigations against Mimikatz Style Attacks
2019-02-02/a>	Guy Bruneau	Scanning for WebDAV PROPFIND Exploiting CVE-2017-7269
2019-02-01/a>	Rick Wanner	Sextortion: Follow the Money Part 3 - The cashout begins!
2019-01-28/a>	Bojan Zdrnja	Relaying Exchange?s NTLM authentication to domain admin (and more)
2019-01-18/a>	John Bambenek	Sextortion Bitcoin on the Move
2019-01-10/a>	Brad Duncan	Heartbreaking Emails: "Love You" Malspam
2018-12-23/a>	Guy Bruneau	Scanning Activity, end Goal is to add Hosts to Mirai Botnet
2018-12-19/a>	Xavier Mertens	Microsoft OOB Patch for Internet Explorer: Scripting Engine Memory Corruption Vulnerability
2018-12-14/a>	Rick Wanner	Bombstortion?? Boomstortion??
2018-11-27/a>	Rob VandenBrink	Data Exfiltration in Penetration Tests
2018-11-26/a>	Xavier Mertens	Obfuscated bash script targeting QNap boxes
2018-11-23/a>	Didier Stevens	Video: Dissecting a CVE-2017-11882 Exploit
2018-11-20/a>	Xavier Mertens	Querying DShield from Cortex
2018-11-10/a>	Didier Stevens	Video: CyberChef: BASE64/XOR Recipe
2018-11-04/a>	Pasquale Stirparo	Beyond good ol' LaunchAgent - part 1
2018-10-26/a>	Xavier Mertens	Dissecting Malicious Office Documents with Linux
2018-10-21/a>	Pasquale Stirparo	Beyond good ol’ LaunchAgent - part 0
2018-10-17/a>	Russ McRee	RedHunt Linux - Adversary Emulation, Threat Hunting & Intelligence
2018-10-13/a>	Didier Stevens	Maldoc: Once More It's XOR
2018-10-10/a>	Xavier Mertens	New Campaign Using Old Equation Editor Vulnerability
2018-10-07/a>	Didier Stevens	YARA XOR Strings: Some Remarks
2018-10-06/a>	Didier Stevens	YARA: XOR Strings
2018-09-28/a>	Xavier Mertens	More Excel DDE Code Injection
2018-09-24/a>	Didier Stevens	Analyzing Encoded Shellcode with scdbg
2018-08-13/a>	Didier Stevens	New Extortion Tricks: Now Including Your (Partial) Phone Number!
2018-08-05/a>	Didier Stevens	Video: Maldoc analysis with standard Linux tools
2018-07-12/a>	Johannes Ullrich	New Extortion Tricks: Now Including Your Password!
2018-07-04/a>	Didier Stevens	XPS Metadata
2018-07-03/a>	Didier Stevens	Progress indication for scripts on Windows
2018-07-02/a>	Guy Bruneau	VMware ESXi, Workstation, and Fusion address multiple out-of-bounds read vulnerabilities https://www.vmware.com/security/advisories/VMSA-2018-0016.html
2018-07-01/a>	Didier Stevens	Video: Analyzing XPS Files
2018-06-30/a>	Didier Stevens	XPS samples
2018-06-26/a>	Didier Stevens	Analyzing XPS files
2018-06-22/a>	Lorna Hutcheson	XPS Attachment Used for Phishing
2018-06-15/a>	Lorna Hutcheson	SMTP Strangeness - Possible C2
2018-06-05/a>	Xavier Mertens	Malicious Post-Exploitation Batch File
2018-05-25/a>	Xavier Mertens	Antivirus Evasion? Easy as 1,2,3
2018-05-23/a>	Remco Verhoef	Track naughty and nice binaries with Google Santa
2018-05-22/a>	Xavier Mertens	Malware Distributed via .slk Files
2018-05-20/a>	Didier Stevens	DASAN GPON home routers exploits in-the-wild
2018-05-19/a>	Xavier Mertens	Malicious Powershell Targeting UK Bank Customers
2018-05-10/a>	Bojan Zdrnja	Exfiltrating data from (very) isolated environments
2018-05-07/a>	Xavier Mertens	Adding Persistence Via Scheduled Tasks
2018-05-03/a>	Renato Marinho	WebLogic Exploited in the Wild (Again)
2018-03-05/a>	Xavier Mertens	Malicious Bash Script with Multiple Features
2018-02-02/a>	Xavier Mertens	Simple but Effective Malicious XLS Sheet
2018-01-31/a>	Tom Webb	Tax Phishing Time
2018-01-23/a>	Johannes Ullrich	Apple Updates Everything, Again
2017-11-28/a>	Xavier Mertens	Apple High Sierra Uses a Passwordless Root Account
2017-11-25/a>	Guy Bruneau	Exim Remote Code Exploit
2017-11-17/a>	Xavier Mertens	Top-100 Malicious IP STIX Feed
2017-10-27/a>	Renato Marinho	"Catch-All" Google Chrome Malicious Extension Steals All Posted Data
2017-10-24/a>	Xavier Mertens	Stop relying on file extensions
2017-10-18/a>	Renato Marinho	Baselining Servers to Detect Outliers
2017-09-30/a>	Lorna Hutcheson	Who's Borrowing your Resources?
2017-09-25/a>	Renato Marinho	XPCTRA Malware Steals Banking and Digital Wallet User's Credentials
2017-09-18/a>	Xavier Mertens	Getting some intelligence from malspam
2017-09-18/a>	Johannes Ullrich	SANS Securingthehuman posted a follow up to their Equifax breach webcast: https://securingthehuman.sans.org/blog/2017/09/15/equifax-webcast-follow-up
2017-09-16/a>	Guy Bruneau	VMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities - https://www.vmware.com/security/advisories/VMSA-2017-0015.html
2017-09-10/a>	Didier Stevens	Analyzing JPEG files
2017-09-06/a>	Adrien de Beaupre	Modern Web Application Penetration Testing , Hash Length Extension Attacks
2017-09-01/a>	Brad Duncan	Malspam pushing Locky ransomware tries HoeflerText notifications for Chrome and FireFox
2017-08-29/a>	Renato Marinho	Second Google Chrome Extension Banker Malware in Two Weeks
2017-08-25/a>	Xavier Mertens	Malicious AutoIT script delivered in a self-extracting RAR file
2017-08-18/a>	Guy Bruneau	tshark 2.4 New Feature - Command Line Export Objects
2017-08-18/a>	Renato Marinho	EngineBox Malware Supports 10+ Brazilian Banks
2017-08-15/a>	Renato Marinho	(Banker(GoogleChromeExtension)).targeting("Brazil")
2017-07-30/a>	Guy Bruneau	Text Banking Scams
2017-07-07/a>	Renato Marinho	DDoS Extortion E-mail: Yet Another Bluff?
2017-06-22/a>	Xavier Mertens	Obfuscating without XOR
2017-06-14/a>	Xavier Mertens	Systemd Could Fallback to Google DNS?
2017-06-06/a>	Didier Stevens	Malware and XOR - Part 2
2017-06-05/a>	Didier Stevens	Malware and XOR - Part 1
2017-04-20/a>	Xavier Mertens	DNS Query Length... Because Size Does Matter
2017-04-19/a>	Xavier Mertens	Hunting for Malicious Excel Sheets
2017-04-11/a>	Brad Duncan	Dridex malspam seen on Monday 2017-04-10
2017-04-02/a>	Guy Bruneau	IPFire - A Household Multipurpose Security Gateway
2017-03-19/a>	Xavier Mertens	Searching for Base64-encoded PE Files
2017-03-18/a>	Xavier Mertens	Example of Multiple Stages Dropper
2017-03-08/a>	Richard Porter	What is really being proxied?
2017-02-25/a>	Guy Bruneau	Unpatched Microsoft Edge and IE Bug
2017-01-30/a>	Didier Stevens	py2exe Decompiling - Part 2
2017-01-24/a>	Johannes Ullrich	Critical Vulnerability in Cisco WebEx Chrome Plugin
2017-01-07/a>	Xavier Mertens	Using Security Tools to Compromize a Network
2017-01-06/a>	John Bambenek	Great Misadventures of Security Vendors: Absurd Sandboxing Edition
2017-01-05/a>	John Bambenek	New Year's Resolution: Build Your Own Malware Lab?
2016-12-11/a>	Russ McRee	Steganography in Action: Image Steganography & StegExpose
2016-12-10/a>	Didier Stevens	Sleeping VBS Really Wants To Sleep
2016-09-17/a>	Guy Bruneau	Multiple Cisco Products affected by IKEv1 Vulnerability
2016-09-02/a>	Johannes Ullrich	Apple Patches "Trident" Vulnerabilities in OS X / Safari
2016-09-01/a>	Xavier Mertens	Maxmind.com (Ab)used As Anti-Analysis Technique
2016-08-31/a>	Deborah Hale	Dropbox Breach
2016-08-24/a>	Xavier Mertens	Example of Targeted Attack Through a Proxy PAC File
2016-07-27/a>	Xavier Mertens	Analyze of a Linux botnet client source code
2016-07-27/a>	Xavier Mertens	Critical Xen PV guests vulnerabilities
2016-07-26/a>	Johannes Ullrich	Command and Control Channels Using "AAAA" DNS Records
2016-07-18/a>	Johannes Ullrich	HTTP Proxy Header Vulnerability ("httpoxy")
2016-07-03/a>	Guy Bruneau	Is Data Privacy part of your Company's Culture?
2016-05-29/a>	Guy Bruneau	Analysis of a Distributed Denial of Service (DDoS)
2016-05-18/a>	Russ McRee	Resources: Windows Auditing & Monitoring, Linux 2FA
2016-05-08/a>	Jim Clausing	Guest Diary: Linux Capabilities - A friend and foe
2016-04-21/a>	Daniel Wesemann	Decoding Pseudo-Darkleech (#1)
2016-04-15/a>	Xavier Mertens	Windows Command Line Persistence?
2016-03-30/a>	Xavier Mertens	What to watch with your FIM?
2016-03-28/a>	Xavier Mertens	Improving Bash Forensics Capabilities
2016-03-13/a>	Xavier Mertens	SSH Honeypots (Ab)used as Proxy
2016-03-13/a>	Guy Bruneau	A Look at the Mandiant M-Trends 2016 Report
2016-03-07/a>	Xavier Mertens	OSX Ransomware Spread via a Rogue BitTorrent Client Installer
2016-02-27/a>	Guy Bruneau	Wireshark Fixes Several Bugs and Vulnerabilities
2016-02-26/a>	Xavier Mertens	Quick Audit of *NIX Systems
2016-02-22/a>	Xavier Mertens	Reducing False Positives with Open Data Sources
2016-02-18/a>	Xavier Mertens	Hunting for Executable Code in Windows Environments
2016-02-13/a>	Guy Bruneau	VMware VMSA-2015-0007.3 has been Re-released
2016-02-03/a>	Xavier Mertens	Automating Vulnerability Scans
2016-01-25/a>	Rob VandenBrink	Assessing Remote Certificates with Powershell
2015-12-16/a>	Xavier Mertens	Playing With Sandboxes Like a Boss
2015-12-05/a>	Guy Bruneau	Are you looking to setup your own Malware Sandbox?
2015-10-20/a>	Bojan Zdrnja	When encoding saves the day
2015-10-12/a>	Guy Bruneau	Critical Vulnerability in Multiple Cisco Products - Apache Struts 2 Command Execution http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2
2015-09-21/a>	Xavier Mertens	Detecting XCodeGhost Activity
2015-08-18/a>	Russ McRee	Microsoft Security Bulletin MS15-093 - Critical OOB - Internet Explorer RCE
2015-08-07/a>	Tony Carothers	Critical Firefox Update Today
2015-07-31/a>	Russ McRee	froxlor Server Management Portal severe security issue
2015-07-27/a>	Daniel Wesemann	Angler's best friends
2015-07-17/a>	Didier Stevens	Process Explorer and VirusTotal
2015-06-27/a>	Guy Bruneau	Is Windows XP still around in your Network a year after Support Ended?
2015-06-25/a>	Bojan Zdrnja	Web security subtleties and exploitation of combined vulnerabilities
2015-06-23/a>	Kevin Shortt	XOR DDOS Mitigation and Analysis
2015-06-18/a>	Johannes Ullrich	OS X and iOS Unauthorized Cross Application Resource Access (XARA)
2015-05-15/a>	Didier Stevens	Another Maldoc? I'm Afraid So...
2015-04-30/a>	Brad Duncan	Dalexis/CTB-Locker malspam campaign
2015-04-08/a>	Tom Webb	Is it a breach or not?
2015-03-10/a>	Brad Duncan	Threatglass has pcap files with exploit kit activity
2015-03-08/a>	Brad Duncan	What Happened to You, Asprox Botnet?
2015-02-23/a>	Richard Porter	Subscribing to the DShield Top 20 on a Palo Alto Networks Firewall
2015-02-20/a>	Tom Webb	Fast analysis of a Tax Scam
2015-02-06/a>	Johannes Ullrich	Anthem, TurboTax and How Things "Fit Together" Sometimes
2015-02-04/a>	Alex Stanford	Exploit Kit Evolution - Neutrino
2015-01-29/a>	Bojan Zdrnja	Blindly confirming XXE
2014-11-25/a>	Adrien de Beaupre	Less is, umm, less?
2014-10-17/a>	Johannes Ullrich	Apple Updates (not just Yosemite)
2014-10-14/a>	Johannes Ullrich	Updates for Firefox and Thunderbird. http://www.mozilla.org/firefox/new/
2014-10-02/a>	Johannes Ullrich	Why is your Mac all for sudden using Bing as a search engine?
2014-10-01/a>	Russ McRee	Xen Security Advisory - XSA 108 - http://xenbits.xen.org/xsa/advisory-108.html
2014-09-29/a>	Johannes Ullrich	Apple Released Update to Fix Shellshock Vulnerability http://support.apple.com/kb/DL1769
2014-09-19/a>	Guy Bruneau	PHP Fixes Several Bugs in Version 5.4 and 5.5
2014-09-18/a>	Johannes Ullrich	Apple Releases OS X 10.9.5 / Safari 6.2 and 7.1 with several security fixes http://support.apple.com/kb/HT1222
2014-08-16/a>	Lenny Zeltser	Web Server Attack Investigation - Installing a Bot and Reverse Shell via a PHP Vulnerability
2014-08-09/a>	Adrien de Beaupre	Complete application ownage via Multi-POST XSRF
2014-08-04/a>	Russ McRee	Threats & Indicators: A Security Intelligence Lifecycle
2014-07-22/a>	Daniel Wesemann	Ivan's Order of Magnitude
2014-07-22/a>	Daniel Wesemann	App "telemetry"
2014-07-11/a>	Rob VandenBrink	Apple pushes OS X update to block out of date Flash versions - http://support.apple.com/kb/HT5655
2014-07-05/a>	Guy Bruneau	Java Support ends for Windows XP
2014-07-05/a>	Guy Bruneau	Malware Analysis with pedump
2014-07-02/a>	Johannes Ullrich	Simple Javascript Extortion Scheme Advertised via Bing
2014-07-01/a>	Johannes Ullrich	Apple Releases Patches for All Products
2014-06-08/a>	Guy Bruneau	efax Spam Containing Malware
2014-05-18/a>	Russ McRee	sed and awk will always rock
2014-04-29/a>	Russ McRee	Firefox 29.0 & Thunderbird 24.5 released: http://www.mozilla.org/security/known-vulnerabilities/
2014-04-21/a>	Daniel Wesemann	Allow us to leave!
2014-04-11/a>	Guy Bruneau	Heartbleed Fix Available for Download for Cisco Products
2014-03-27/a>	Alex Stanford	Mass XSSodus in PHP
2014-03-19/a>	Mark Hofman	Mozilla released updates for Firefox ( v 28.0), Thunderbird (v 24.4) and Firefox Extended Support Release (ESR) updates to 24.4.0 (Fixes include the issues highlighted at the pwn2own contest.)
2014-03-12/a>	Johannes Ullrich	Wordpress "Pingback" DDoS Attacks
2014-03-07/a>	Tom Webb	Linux Memory Dump with Rekall
2014-03-04/a>	Daniel Wesemann	XPired!
2014-02-28/a>	Daniel Wesemann	Fiesta!
2014-02-25/a>	Alex Stanford	Apple releases OS X 10.9.2 patching SSL vulnerability and updates Safari
2014-02-24/a>	Russ McRee	Explicit Trusted Proxy in HTTP/2.0 or...not so much
2014-02-13/a>	Johannes Ullrich	Linksys Worm ("TheMoon") Captured
2014-02-12/a>	Johannes Ullrich	Suspected Mass Exploit Against Linksys E1000 / E1200 Routers
2014-02-09/a>	Basil Alawi S.Taher	Mandiant Highlighter 2
2014-02-07/a>	Rob VandenBrink	Hello Virustotal? It's Microsoft Calling.
2014-02-04/a>	Johannes Ullrich	Firefox 27 Available http://www.mozilla.org/en-US/firefox/27.0/releasenotes/
2014-01-09/a>	Bojan Zdrnja	Is XXE the new SQLi?
2014-01-04/a>	Tom Webb	Monitoring Windows Networks Using Syslog (Part One)
2013-12-24/a>	Daniel Wesemann	Unfriendly crontab additions
2013-12-23/a>	Scott Fendley	VMWare ESX/ESXi Security Advisory
2013-12-17/a>	Adrien de Beaupre	Apple security updates Mac OS X and Safari
2013-12-07/a>	Guy Bruneau	Suspected Active Rovnix Botnet Controller
2013-12-06/a>	Guy Bruneau	VMware ESX 4.x Security Advisory
2013-12-01/a>	Richard Porter	BPF, PCAP, Binary, hex, why they matter?
2013-11-29/a>	Russ McRee	MS Exchange update, includes failed backup fix: http://support.microsoft.com/kb/2892464
2013-11-28/a>	Rob VandenBrink	Microsoft Security Advisory (2914486): Vulnerability in Microsoft Windows Kernel 0 day exploit in wild
2013-11-22/a>	Rick Wanner	Apple not updating OS X Mountain Lion?
2013-11-02/a>	Rick Wanner	Protecting Your Family's Computers
2013-11-01/a>	Russ McRee	Secunia's PSI Country Report - Q3 2013
2013-10-30/a>	Russ McRee	SIR v15: Five good reasons to leave Windows XP behind
2013-10-18/a>	Guy Bruneau	VMware Release Multiple Security Updates
2013-10-01/a>	John Bambenek	*Metaspoit Releases Module to Exploit Unpatched IE Vuln CVE-2013-3893
2013-09-20/a>	Russ McRee	Threat Level Yellow: Protection recommendations regarding Internet Explorer exploits in the wild
2013-09-18/a>	Rob VandenBrink	Cisco DCNM Update Released
2013-09-17/a>	John Bambenek	Microsoft Releases Out-of-Band Advisory for all Versions of Internet Explorer
2013-09-13/a>	Rob VandenBrink	OS X v10.8.5 update - details here: http://support.apple.com/kb/HT5880
2013-09-10/a>	Swa Frantzen	Macs need to patch too!
2013-08-19/a>	Johannes Ullrich	Running Snort on ESXi using the Distributed Switch
2013-08-15/a>	Johannes Ullrich	Microsoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx
2013-08-11/a>	Bojan Zdrnja	XATattacks (attacks on xat.com)
2013-08-09/a>	Kevin Shortt	Copy Machines - Changing Scanned Content
2013-08-07/a>	Johannes Ullrich	Firefox 23 and Mixed Active Content
2013-08-02/a>	Johannes Ullrich	Fake American Express Alerts
2013-07-28/a>	Guy Bruneau	Wireshark 1.8.9 and 1.10.1 Security Update
2013-07-21/a>	Guy Bruneau	Why use Regular Expressions?
2013-06-25/a>	Bojan Zdrnja	Mozilla Firefox 22 released, fixes 14 security vulnerabilities, more info at http://www.mozilla.org/en-US/firefox/22.0/releasenotes/
2013-06-11/a>	Swa Frantzen	Other Microsoft Black Tuesday News
2013-06-05/a>	Johannes Ullrich	Apple releases OS 10.8.4
2013-05-22/a>	Adrien de Beaupre	Privilege escalation, why should I care?
2013-05-20/a>	Guy Bruneau	Safe - Tools, Tactics and Techniques
2013-05-14/a>	Swa Frantzen	Firefox & Thunderbird released
2013-05-14/a>	Swa Frantzen	CVE-2013-2094: Linux privilege escalation
2013-05-09/a>	Johannes Ullrich	Microsoft released a Fix-it for the Internet Explorer 8 Vulnerability http://support.microsoft.com/kb/2847140
2013-05-08/a>	Johannes Ullrich	"De Flashing" the ISC Web Site and Flash XSS issues
2013-05-07/a>	Jim Clausing	NGINX updates address buffer overflow (CVE-2013-2028) see http://nginx.org/en/CHANGES-1.4
2013-04-18/a>	John Bambenek	ISC Handler Lenny Zeltser's REMnux v4 Reviewed on Hak5
2013-04-17/a>	John Bambenek	UPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun
2013-04-15/a>	Rob VandenBrink	Oops - You Mean That Deleted Server was a Certificate Authority?
2013-04-03/a>	Mark Hofman	Firefox 20 and Thunderbird 17.0.5 updates
2013-03-02/a>	Scott Fendley	Apple Blocks Older Insecure Versions of Flash Player
2013-02-21/a>	Pedro Bueno	NBC site redirecting to Exploit kit
2013-02-19/a>	Johannes Ullrich	Firefox 19 Release with various security fixes.
2013-02-17/a>	Guy Bruneau	HP ArcSight Connector Appliance and Logger Vulnerabilities
2013-02-17/a>	Guy Bruneau	Adobe Acrobat and Reader Security Update Planned this Week
2013-02-16/a>	Lorna Hutcheson	Fedora RedHat Vulnerabilty Released
2013-02-13/a>	Swa Frantzen	More adobe reader and acrobat (PDF) trouble
2013-02-11/a>	John Bambenek	Is This Chinese Registrar Really Trying to XSS Me?
2013-02-06/a>	Kevin Shortt	Firefox updated to 18.02 -> https://www.mozilla.org/en-US/firefox/18.0.2/releasenotes/
2013-02-06/a>	Adam Swanger	Sysinternals in particular Process Explorer update https://blogs.technet.com/b/sysinternals/?Redirected=true
2013-02-04/a>	Russ McRee	An expose of a recent SANS GIAC XSS vulnerability
2013-01-15/a>	Rob VandenBrink	When Disabling IE6 (or Java, or whatever) is not an Option...
2013-01-09/a>	Rob VandenBrink	Firefox and Thunderbird Updates
2013-01-08/a>	Jim Clausing	Cuckoo 0.5 is out and the world didn't end
2013-01-08/a>	Richard Porter	Firefox 18 Released, Security Fixes http://www.mozilla.org/security/known-vulnerabilities/firefox.html
2013-01-05/a>	Guy Bruneau	Adobe ColdFusion Security Advisory
2013-01-04/a>	Guy Bruneau	"FixIt" Patch for CVE-2012-4792 Bypassed
2013-01-02/a>	Russ McRee	EMET 3.5: The Value of Looking Through an Attacker's Eyes
2013-01-01/a>	Johannes Ullrich	FixIt Available for Internet Explorer Vulnerability
2012-12-10/a>	Johannes Ullrich	Your CPA License has not been revoked
2012-12-07/a>	Richard Porter	Reports of Strange TCP Port 443 Behavior
2012-12-06/a>	Johannes Ullrich	How to identify if you are behind a "Transparent Proxy"
2012-12-03/a>	John Bambenek	John McAfee Exposes His Location in Photo About His Being on Run
2012-12-02/a>	Guy Bruneau	Zero Day MySQL Buffer Overflow
2012-12-01/a>	Guy Bruneau	Firefox 17.0.1 Bug Fixes - http://www.mozilla.org/en-US/firefox/17.0.1/releasenotes/
2012-11-30/a>	Daniel Wesemann	Snipping Leaks
2012-11-16/a>	Guy Bruneau	VMware security updates for vSphere API and ESX Service Console - http://www.vmware.com/security/advisories/VMSA-2012-0016.html
2012-10-28/a>	Tony Carothers	Firefox 16.02 Released
2012-10-11/a>	Rob VandenBrink	Firefox 16 / Thunderbird 16 updates
2012-09-09/a>	Guy Bruneau	Phishing/Spam Pretending to be from BBB
2012-08-28/a>	Johannes Ullrich	Firefox 15 Released (includes silent future updates) http://www.mozilla.org/en-US/firefox/15.0/releasenotes/buglist.html
2012-08-17/a>	Guy Bruneau	Suspicious eFax Spear Phishing Messages
2012-08-15/a>	Guy Bruneau	Cisco IOS XR Software Route Processor DoS Vulnerability - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr
2012-08-05/a>	Daniel Wesemann	Phishing for Payroll with unpatched Java
2012-07-25/a>	Johannes Ullrich	Microsoft Exchange/Sharepoint and others: Oracle Outside In Vulnerability
2012-07-19/a>	Mark Baggett	A Heap of Overflows?
2012-07-17/a>	Jim Clausing	Firefox 14.0.1, Thunderbird 14.0 out - both claim security fixes, but release notes not updated yet with security details
2012-07-05/a>	Adrien de Beaupre	New OS X trojan backdoor MaControl variant reported
2012-06-25/a>	Guy Bruneau	Using JSDetox to Analyze and Deobfuscate Javascript
2012-06-20/a>	Raul Siles	Firefox 13.0.1 Update
2012-06-18/a>	Guy Bruneau	CVE-2012-1875 exploit is now available
2012-06-12/a>	Johannes Ullrich	The bane of XSS
2012-06-06/a>	Jim Clausing	Firefox, Thunderbird, and Seamonkey Security Updates
2012-05-22/a>	Johannes Ullrich	nmap 6 released
2012-05-05/a>	Tony Carothers	Vulnerability Exploit for Snow Leopard
2012-04-26/a>	Richard Porter	Packetstorm Security and Metasploit have Exploit code for MS12-027
2012-04-21/a>	Guy Bruneau	WordPress Release Security Update
2012-04-15/a>	Rick Wanner	.Net update affects printing from some applications
2012-04-14/a>	Rick Wanner	Flashback Trojan Removal Tool Released
2012-04-12/a>	Guy Bruneau	Apple Java Updates for Mac OS X
2012-04-06/a>	Johannes Ullrich	Another OS X Java Patch
2012-03-27/a>	Johannes Ullrich	Firefox 3.6 EOL
2012-03-27/a>	Guy Bruneau	Wireshark 1.6.6 and 1.4.2 Released
2012-03-27/a>	Guy Bruneau	Opera 11.62 for Windows patch several bugs and vulnerabilities - http://www.opera.com/docs/changelogs/windows/1162/
2012-03-16/a>	Guy Bruneau	VMware New and Updated Security Advisories
2012-03-16/a>	Russ McRee	MS12-020 RDP vulnerabilities: Patch, Mitigate, Detect
2012-03-12/a>	Johannes Ullrich	Apple Released Safari 5.1.4
2012-03-11/a>	Johannes Ullrich	An Analysis of Jester's QR Code Attack. (Guest Diary)
2012-03-09/a>	Guy Bruneau	VMware New and Updated Advisories
2012-03-08/a>	Johannes Ullrich	Apple Patches
2012-03-07/a>	Guy Bruneau	Reflected XSS in Splunk Web Affecting Version 4.0 to 4.3
2012-03-05/a>	Johannes Ullrich	Flashback Malware now with Twitter C&C
2012-03-03/a>	Jim Clausing	New automated sandbox for Android malware
2012-02-29/a>	Johannes Ullrich	COX Network Outage
2012-02-27/a>	Johannes Ullrich	Odd Vanishing Signatures in OS X XProtect
2012-02-24/a>	Guy Bruneau	Flashback Trojan in the Wild
2012-02-23/a>	donald smith	DNS-Changer "clean DNS" extension requested
2012-02-20/a>	Johannes Ullrich	The Ultimate OS X Hardening Guide Collection
2012-02-11/a>	Mark Hofman	Yet another version of Firefox has been released. One security fix. More info can be found here: https://www.mozilla.org/en-US/firefox/10.0.1/releasenotes/
2012-02-04/a>	Scott Fendley	Apple Security Advisory 2012-001 v1.1
2012-01-31/a>	Russ McRee	Firefox 10 and VMWare advisories and updates
2012-01-13/a>	Guy Bruneau	Sysinternals Updates - http://blogs.technet.com/b/sysinternals/archive/2012/01/13/updates-autoruns-v11-21-coreinfo-v3-03-portmon-v-3-03-process-explorer-v15-12-mark-s-blog-and-mark-at-rsa-2012.aspx
2012-01-05/a>	Russ McRee	WordPress 3.3.1 fixes 15 issues with WordPress 3.3 including XSS. Download 3.3.1 or visit Dashboard --> Updates in your site admin panel.
2011-12-22/a>	Johannes Ullrich	Firefox 9 Security Fixes
2011-12-21/a>	Chris Mohan	Firefox 9 has been released patching known vulnerabilities http://www.mozilla.org/security/known-vulnerabilities/firefox.html#firefox9
2011-12-19/a>	Guy Bruneau	Process Explorer Update 15.11 with bugfixes - http://technet.microsoft.com/en-us/sysinternals/bb896653
2011-12-13/a>	Johannes Ullrich	December 2011 Adobe Black Tuesday
2011-12-08/a>	Adrien de Beaupre	Newest Adobe Flash 11.1.102.55 and Previous 0 Day Exploit
2011-12-06/a>	Pedro Bueno	The RedRet connection...
2011-11-22/a>	Pedro Bueno	Updates on ZeroAccess and BlackHole front...
2011-11-10/a>	Rob VandenBrink	Stuff I Learned Scripting - - Parsing XML in a One-Liner
2011-11-08/a>	Swa Frantzen	Firefox 8.0 released
2011-11-03/a>	Richard Porter	An Apple, Inc. Sandbox to play in.
2011-11-01/a>	Russ McRee	Honeynet Project: Android Reverse Engineering (A.R.E.) Virtual Machine released
2011-10-19/a>	Pedro Bueno	The old new Stuxnet...DuQu?
2011-10-13/a>	Johannes Ullrich	Critical OS X Vulnerability Patched
2011-09-30/a>	Tony Carothers	Firefox v. 7.0.1 Is Live
2011-09-27/a>	Jason Lam	Firefox 3.6.23 security update is out and so is version 7 (time to break some add-on)
2011-09-06/a>	Guy Bruneau	Firefox 6.0.2 released to removed trust to DigiNotar certificate authority http://www.mozilla.org/en-US/firefox/6.0.2/releasenotes/
2011-09-05/a>	Bojan Zdrnja	Bitcoin – crypto currency of future or heaven for criminals?
2011-08-31/a>	Johannes Ullrich	Firefox/Thunderbird 6.0.1 released to blocklist bad DigiNotar SSL certificates
2011-08-31/a>	Johannes Ullrich	Kernel.org Compromise
2011-08-24/a>	Rob VandenBrink	Citrix Access Gateway Cross Site Scripting vulnerability and fix ==> http://support.citrix.com/article/CTX129971
2011-08-16/a>	Scott Fendley	Firefox 3.6.20 Corrects Several Critical Vulnerabilities
2011-08-14/a>	Guy Bruneau	FireCAT 2.0 Released
2011-08-14/a>	Guy Bruneau	Telex - A Radical New Approach to Bypass Security
2011-08-11/a>	Guy Bruneau	BlackBerry Enterprise Server Critical Update
2011-08-10/a>	Johannes Ullrich	Theoretical and Practical Password Entropy
2011-08-05/a>	Johannes Ullrich	Microsoft Patch Tuesday Advance Notification: 13 Bulletins coming http://www.microsoft.com/technet/security/Bulletin/MS11-aug.mspx
2011-07-31/a>	Daniel Wesemann	Anatomy of a Unix breach
2011-07-29/a>	Richard Porter	Apple Lion talking on TCP 5223
2011-07-28/a>	Guy Bruneau	XenApp and XenDesktop could result in Arbitrary Code Execution
2011-07-23/a>	Johannes Ullrich	Apple Battery Firmware Default Password
2011-07-21/a>	Johannes Ullrich	Lion: What is new in Security
2011-07-19/a>	Richard Porter	SMS Phishing at the SANSFire 2011 Handler Dinner
2011-07-13/a>	Kevin Shortt	Firefox Update 5.0.1 Available - http://www.mozilla.com/en-US/firefox/new/
2011-06-28/a>	Johannes Ullrich	Update: Java update for OS X fixes security issues http://support.apple.com/kb/HT1222
2011-06-23/a>	Jim Clausing	Apple Security Updates 2011-004
2011-06-21/a>	Guy Bruneau	Firefox 5.0 is out with support Do Not Track on Multiple Platform - http://www.mozilla.com/en-US/firefox/new/
2011-06-15/a>	Pedro Bueno	Hit by MacDefender, Apple Web Security (name your Mac FakeAV here)...
2011-06-09/a>	Richard Porter	One Browser to Rule them All?
2011-06-03/a>	Guy Bruneau	VMware ESX Patches and VI Client Update http://www.vmware.com/security/advisories/VMSA-2011-0009.html
2011-06-01/a>	Johannes Ullrich	Enabling Privacy Enhanced Addresses for IPv6
2011-05-31/a>	Johannes Ullrich	Apple Improving OS X Anti-Malware Feature
2011-05-20/a>	Guy Bruneau	Sysinternals Updates, Analyzing Stuxnet Infection with Sysinternals Tools Part 3
2011-05-16/a>	Jason Lam	Firefox 3.5 forced upgrade coming soon
2011-05-12/a>	Johannes Ullrich	ActiveX Flaw Affecting SCADA systems
2011-05-06/a>	Richard Porter	Updated Exploit Index for Microsoft
2011-05-06/a>	Richard Porter	Unpatched Exploit: Skype for MAC
2011-05-01/a>	Deborah Hale	Droid MarketPlace Has a New App
2011-04-29/a>	Guy Bruneau	Firefox, Thunderbird and SeaMonkey Security Updates
2011-04-28/a>	Guy Bruneau	VMware ESXi 4.1 Security and Firmware Updates
2011-04-14/a>	Johannes Ullrich	Apple Security Patches for OS X and iOS
2011-04-14/a>	Adrien de Beaupre	Sysinternals updates, a new blog post, and webcast
2011-04-10/a>	Raul Siles	Recent security enhancements in web browsers (e.g. Google Chrome)
2011-03-29/a>	Daniel Wesemann	Malware emails with fake cellphone invoice
2011-03-23/a>	Johannes Ullrich	Firefox 4 Security Features
2011-03-23/a>	Johannes Ullrich	Firefox 3 Updates and SSL Blocklist extension
2011-03-15/a>	Lenny Zeltser	Limiting Exploit Capabilities by Using Windows Integrity Levels
2011-03-09/a>	Kevin Shortt	AVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B
2011-03-04/a>	Mark Hofman	And a new version of Firefox (thx all) hits the road, Version 3.6.15 more details here http://www.mozilla.com/en-US/firefox/3.6.15/releasenotes/ (and I agree it was a bit quick after 3.6.14)
2011-03-02/a>	Chris Mohan	Updates: Firefox 3.6.14/3.5.17, Thunderbird 3.1.8, Adobe Flash v10.2.152.32 & WireShark 1.4.4
2011-02-26/a>	Rick Wanner	Firefox 4 Beta 12 released
2011-02-21/a>	Adrien de Beaupre	Winamp forums compromised
2011-02-16/a>	Jason Lam	Windows 0-day SMB mrxsmb.dll vulnerability
2011-01-27/a>	Robert Danford	Microsoft Security Advisory for MHTML via Internet Explorer (MS2501696/CVE-2011-0096)
2011-01-25/a>	Johannes Ullrich	Packet Tricks with xxd
2011-01-10/a>	Manuel Humberto Santander Pelaez	VirusTotal VTzilla firefox/chrome plugin
2011-01-06/a>	Johannes Ullrich	OS X 10.6.6 released. Probably some security content but Apple hasn't released details yet.
2011-01-05/a>	Johannes Ullrich	Currently Unpatched Windows / Internet Explorer Vulnerabilities
2010-12-27/a>	Johannes Ullrich	Various sites "Owned and Exposed"
2010-12-26/a>	Manuel Humberto Santander Pelaez	ISC infocon monitor app for OS X
2010-12-17/a>	Johannes Ullrich	Reports of Attacks against EXIM vulnerability
2010-12-13/a>	Deborah Hale	The Week to Top All Weeks
2010-12-10/a>	Mark Hofman	EXIM MTA vulnerability
2010-12-09/a>	Mark Hofman	Firefox version 3.6.13 is being pushed out, time to update (thanks Vincent). Thunderbird 3.1.7 and 3.0.11 can also be added to the list as well as SeaMonkey 2.0.11. - M
2010-12-02/a>	Kevin Johnson	ProFTPD distribution servers compromised
2010-11-19/a>	Jason Lam	Adobe Reader X - Sandbox
2010-11-18/a>	Chris Carboni	All of your pages are belonging to us
2010-11-16/a>	Guy Bruneau	Mac OS X Server v10.6.5 (10H575) Security Update: http://support.apple.com/kb/HT4452
2010-11-15/a>	Stephen Hall	Mozilla Firefox 3.6.12 Remote Denial Of Service
2010-11-14/a>	Marcus Sachs	Stuxnet Analysis
2010-11-12/a>	Guy Bruneau	Scripting with Unix Date
2010-11-11/a>	Johannes Ullrich	OS X 10.6.5 released with security patches. Careful: issues with PGP WDE! (see PGP support forums)
2010-11-01/a>	Manuel Humberto Santander Pelaez	CVE-2010-3654 exploit in the wild
2010-10-28/a>	Rick Wanner	Firefox 3.6.12 available - http://www.mozilla.com/en-US/firefox/personal.html
2010-10-26/a>	Pedro Bueno	Firefox news
2010-10-20/a>	Jim Clausing	Firefox 3.6.11 and 3.5.14 released, includes security updates ( http://www.mozilla.com/firefox/3.6.11/releasenotes/ )
2010-09-26/a>	Daniel Wesemann	PDF analysis paper
2010-09-17/a>	Robert Danford	Circa 2007 Linux Kernel Vulnerability Resurfaces (Was CVE-2007-4573, Now CVE-2010-3301)
2010-09-16/a>	Johannes Ullrich	OpenX Ad-Server Vulnerability
2010-09-14/a>	Adrien de Beaupre	Adobe Flash v10.1.82.76 and earlier vulnerability in-the-wild
2010-09-13/a>	Manuel Humberto Santander Pelaez	Enhanced Mitigation Experience Toolkit can block Adobe 0-day exploit
2010-09-13/a>	Manuel Humberto Santander Pelaez	Adobe SING table parsing exploit (CVE-2010-2883) in the wild
2010-09-02/a>	Daniel Wesemann	SDF, please!
2010-08-25/a>	Pedro Bueno	Adobe released security update for Shockwave player that fix several CVEs: APSB1020
2010-08-23/a>	Manuel Humberto Santander Pelaez	Firefox plugins to perform penetration testing activities
2010-08-22/a>	Manuel Humberto Santander Pelaez	Anatomy of a PDF exploit
2010-08-15/a>	Manuel Humberto Santander Pelaez	Opensolaris project cancelled, replaced by Solaris 11 express
2010-08-09/a>	Jim Clausing	Virtualbox update available - looks like a few stability fixes http://www.virtualbox.org/wiki/Changelog
2010-08-06/a>	Rob VandenBrink	FOXIT PDF Reader update to resolve iPhone/iPad Jailbreak issue ==> http://www.foxitsoftware.com/announcements/2010861227.html
2010-07-25/a>	Rick Wanner	New Firefox Version, 3.6.8
2010-07-25/a>	Rick Wanner	Mozilla advisory for Firefox...Upgrade to 3.6.8. http://www.mozilla.org/security/announce/2010/mfsa2010-48.html
2010-07-24/a>	Manuel Humberto Santander Pelaez	GnuPG gpgsm bug
2010-07-24/a>	Manuel Humberto Santander Pelaez	Transmiting logon information unsecured in the network
2010-07-23/a>	Mark Hofman	Firefox 3.6.8 is out. Yes it only seems like yesterday when you installed FF 3.6.7 (it was for me). The release notes say a stability issue has been fixed in this release.
2010-07-21/a>	Adrien de Beaupre	Adobe Reader Protected Mode
2010-07-04/a>	Bojan Zdrnja	Stored XSS vulnerability on YouTube actively abused?
2010-06-27/a>	Jim Clausing	Firefox 3.6.6 out - fixes issues with "crash protection"
2010-06-23/a>	Scott Fendley	Mozilla Firefox Updates
2010-06-15/a>	Manuel Humberto Santander Pelaez	Microsoft Windows Help and Support Center vulnerability (CVE 2010-1885) exploit in the wild
2010-06-15/a>	Manuel Humberto Santander Pelaez	iPhone 4 Order Security Breach Exposes Private Information
2010-06-06/a>	Manuel Humberto Santander Pelaez	Nice OS X exploit tutorial
2010-06-05/a>	Guy Bruneau	OpenOffice.org 3.2.1 Fixes Bugs and Vulnerabilities
2010-06-02/a>	Rob VandenBrink	New Mac malware - OSX/Onionspy
2010-05-30/a>	Kevin Liston	VMware ESX/ESXi Updates
2010-05-23/a>	Manuel Humberto Santander Pelaez	Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability
2010-05-21/a>	Rick Wanner	Foxit Reader update http://www.foxitsoftware.com/pdf/reader/whatsnew331.htm
2010-05-12/a>	Rob VandenBrink	Adobe Shockwave Update
2010-04-30/a>	Kevin Liston	CVE-2010-0817 SharePoint XSS Scorecard
2010-04-10/a>	Andre Ludwig	New bug/exploit for javaws
2010-04-02/a>	Guy Bruneau	Firefox 3.6.3 fix for CVE-2010-1121 http://www.mozilla.org/security/announce/2010/mfsa2010-25.html
2010-04-02/a>	Guy Bruneau	Foxit Reader Security Update
2010-03-31/a>	Johannes Ullrich	PDF Arbitrary Code Execution - vulnerable by design.
2010-03-29/a>	Adrien de Beaupre	APPLE-SA-2010-03-29-1 Security Update 2010-002 / Mac OS X v10.6.3
2010-03-29/a>	Pedro Bueno	Microsoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix.
2010-03-20/a>	Scott Fendley	Firefox 3.6.2 to be released March 30
2010-03-12/a>	Mark Hofman	Firefox 3.6 is being pushed out to users. http://www.mozilla.com/en-US/firefox/3.6/releasenotes/
2010-03-11/a>	donald smith	New version of foxit pdf reader available. http://www.foxitsoftware.com/downloads/index.php
2010-03-10/a>	Rob VandenBrink	Microsoft Security Advisory 981374 - Remote Code Execution Vulnerability for IE6 and IE7
2010-03-10/a>	Rob VandenBrink	Microsoft re-release of KB973811 - attacks on Extended Protection for Authentication
2010-03-09/a>	John Bambenek	March 2010 - Microsoft Patch Tuesday Diary
2010-03-01/a>	Mark Hofman	Microsoft will drop support for Vista (without any Service Packs) on April 13 and support for XP SP2 ends July 13. (i.e. no more security updates). If you are still running these, it it time to update.
2010-02-28/a>	Mari Nichols	Disasters take practice
2010-02-17/a>	Rob VandenBrink	Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing"
2010-02-17/a>	Rob VandenBrink	Multiple Security Updates for ESX 3.x and ESXi 3.x
2010-02-10/a>	Johannes Ullrich	Twitpic, EXIF and GPS: I Know Where You Did it Last Summer
2010-02-08/a>	Adrien de Beaupre	When is a 0day not a 0day? Fake OpenSSh exploit, again.
2010-02-06/a>	Guy Bruneau	LANDesk Management Gateway Vulnerability
2010-02-05/a>	Jim Clausing	Memory Analysis - time to move beyond XP
2010-02-03/a>	Johannes Ullrich	Information Disclosure Vulnerability in Internet Explorer
2010-02-02/a>	Guy Bruneau	Cisco Secure Desktop Remote XSS Vulnerability
2010-01-24/a>	Pedro Bueno	Outdated client applications
2010-01-21/a>	Chris Carboni	Firefox Upgrade Available
2010-01-19/a>	Johannes Ullrich	Unpatched Microsoft Windows (all versions) Privilege Escalation Vulnerability Released
2010-01-14/a>	Bojan Zdrnja	0-day vulnerability in Internet Explorer 6, 7 and 8
2010-01-12/a>	Adrien de Beaupre	PoC for CVE-2009-0689 MacOS X 10.5/10.6 vulnerability
2010-01-06/a>	Guy Bruneau	Firefox security and stability update for version 3.5.7 and 3.0.17 available for download
2009-12-17/a>	Daniel Wesemann	overlay.xul is back
2009-12-16/a>	Mark Hofman	Firefox 3.5.6 is available, time to update.
2009-12-05/a>	Guy Bruneau	Java JRE Buffer and Integer Overflow
2009-12-02/a>	Rob VandenBrink	Microsoft Black Screen of Death - Fact of Fiction?
2009-11-25/a>	Jim Clausing	Tool updates
2009-11-24/a>	Rick Wanner	Microsoft Security Advisory 977981 - IE 6 and IE 7
2009-11-16/a>	G. N. White	Reports of a successful exploit of the SSL Renegotiation Vulnerability?
2009-11-14/a>	Adrien de Beaupre	Microsoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released
2009-11-12/a>	Rob VandenBrink	Windows 7 / Windows Server 2008 Remote SMB Exploit
2009-11-06/a>	Mark Hofman	A new version of Firefox (3.5.5) just became available. According to the release notes they are stability improvements.
2009-10-28/a>	Johannes Ullrich	Firefox 3.5.4 released. Lots of security bug fixes. (thanks Gilbert!)
2009-10-26/a>	Johannes Ullrich	Today: ISC Login bugfix day. If you have issues logging in using OpenID, please email a copy of your OpenID URL to jullrich\at\sans.edu
2009-10-21/a>	Pedro Bueno	WordPress Hardening
2009-10-17/a>	Rick Wanner	Mozilla disables Microsoft plug-ins?
2009-10-16/a>	Adrien de Beaupre	Disable MS09-054 patch, or Firefox Plugin?
2009-10-16/a>	Stephen Hall	VMWare updates ESX
2009-10-08/a>	Johannes Ullrich	Firefox Plugin Collections
2009-09-16/a>	Bojan Zdrnja	SMB2 remote exploit released
2009-09-12/a>	Jim Clausing	Apple Updates
2009-09-10/a>	Guy Bruneau	Firefox 3.5.3 and 3.0.14 has been released
2009-08-31/a>	Pedro Bueno	Microsoft IIS 5/6 FTP 0Day released
2009-08-25/a>	Bojan Zdrnja	Flash attack vectors (and worms)
2009-08-18/a>	Bojan Zdrnja	MS09-039 exploit in the wild?
2009-08-18/a>	Deborah Hale	Security Bulletin for ColdFusion and JRun
2009-08-13/a>	Jim Clausing	Tools for extracting files from pcaps
2009-08-08/a>	Kevin Liston	Sun OpenSSO Enterprise/Sun Access Manager XML Vulnerabilities
2009-08-08/a>	Guy Bruneau	XML Libraries Data Parsing Vulnerabilities
2009-08-04/a>	Mark Hofman	Firefox Updates
2009-07-22/a>	Chris Carboni	Firefox 3.0.12 is Available
2009-07-19/a>	Marcus Sachs	Mozilla Comments on Firefox 3.5.1 issue
2009-07-18/a>	Patrick Nolan	Chrome update contains Security fixes
2009-07-17/a>	Stephen Hall	Firefox 3.5.1 has been released
2009-07-17/a>	Bojan Zdrnja	A new fascinating Linux kernel vulnerability
2009-07-16/a>	Bojan Zdrnja	OWC exploits used in SQL injection attacks
2009-07-15/a>	Bojan Zdrnja	Make sure you update that Java
2009-07-14/a>	Swa Frantzen	Firefox new exploit
2009-07-13/a>	Adrien de Beaupre	Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution
2009-07-13/a>	Adrien de Beaupre	* Infocon raised to yellow for Excel Web Components ActiveX vulnerability
2009-07-10/a>	Guy Bruneau	WordPress Fixes Multiple vulnerabilities
2009-07-09/a>	Bojan Zdrnja	OpenSSH 0day FUD
2009-07-01/a>	Bojan Zdrnja	New VMWare Security Advisory
2009-06-30/a>	Chris Carboni	Firefox 3.5 is available
2009-06-12/a>	Adrien de Beaupre	Green Dam
2009-06-11/a>	Rick Wanner	Firefox 3.0.11 is available
2009-06-08/a>	Chris Carboni	Kloxo (formerly Lxadmin) Vulnerability Exploited
2009-05-29/a>	Lorna Hutcheson	VMWare Patches Released
2009-05-11/a>	Mari Nichols	Sysinternals Updates 3 Applications
2009-05-06/a>	Tom Liston	Follow The Bouncing Malware: Gone With the WINS
2009-05-02/a>	Rick Wanner	More Swine/Mexican/H1N1 related domains
2009-04-24/a>	Pedro Bueno	Did you check your conference goodies?
2009-04-14/a>	Swa Frantzen	VMware exploits - just how bad is it ?
2009-04-13/a>	Bojan Zdrnja	Twitter worm copycats
2009-04-12/a>	Patrick Nolan	Twitter Worm(s)
2009-04-07/a>	Johannes Ullrich	Tax Season Scams
2009-03-27/a>	David Goldsmith	Firefox 3.0.8 Released
2009-03-19/a>	Mark Hofman	Browsers Tumble at CanSecWest
2009-03-18/a>	Adrien de Beaupre	Adobe Security Bulletin Adobe Reader and Acrobat
2009-03-10/a>	Swa Frantzen	Browser plug-ins, transparent proxies and same origin policies
2009-03-10/a>	Swa Frantzen	conspiracy fodder: pifts.exe
2009-03-04/a>	Deborah Hale	Firefox Releases version 3.0.7
2009-02-25/a>	Andre Ludwig	Adobe Acrobat pdf 0-day exploit, No JavaScript needed!
2009-02-25/a>	Andre Ludwig	Preview/Iphone/Linux pdf issues
2009-02-19/a>	Bojan Zdrnja	MS09-002, XML/DOC and initial infection vector
2009-02-04/a>	Daniel Wesemann	Firefox 3.0.6
2009-01-31/a>	Swa Frantzen	VMware updates
2009-01-24/a>	Pedro Bueno	Identifying and Removing the iWork09 Trojan
2008-12-17/a>	donald smith	Firefox 3.0.5 fixes several security issues.
2008-12-17/a>	donald smith	Internet Explorer 960714 is released
2008-12-10/a>	Bojan Zdrnja	0-day exploit for Internet Explorer in the wild
2008-11-25/a>	Andre Ludwig	OS X Dns Changers part three
2008-11-13/a>	Jim Clausing	New Firefoxen out
2008-10-12/a>	Mari Nichols	Day 12 Containment: Gathering Evidence That Can be Used in Court
2008-09-26/a>	Patrick Nolan	Firefox v2.0.0.17 and Thunderbird v2.0.0.17 release fixes vulnerabilities
2008-09-25/a>	Jim Clausing	Firefox 3.0.3 will be out probably tomorrow
2008-09-19/a>	Bojan Zdrnja	VMWare ESX(i) 3.5 security patches
2008-08-26/a>	John Bambenek	Active attacks using stolen SSH keys (UPDATED)
2008-08-15/a>	Jim Clausing	Another MS update that may have escaped notice
2008-08-15/a>	Jim Clausing	WebEx ActiveX buffer overflow
2008-07-31/a>	Swa Frantzen	Linus - Linux and Security - follow-up
2008-07-29/a>	Swa Frantzen	Linus - Linux and Security
2008-07-19/a>	William Salusky	A twist in fluxnet operations. Enter Hydraflux
2008-07-17/a>	Mari Nichols	Firefox Releases 3.0.1 and fixes 3 security vulnerabilities
2008-07-17/a>	Mari Nichols	Microsoft Updates 2 DirectX Bulletins
2008-07-16/a>	Maarten Van Horenbeeck	Firefox 2.0.0.16 fixes two security vulnerabilities
2008-07-07/a>	Scott Fendley	Microsoft Snapshot Viewer Security Advisory
2008-07-02/a>	Jim Clausing	Firefox 2.0.0.15 is out
2008-06-30/a>	Marcus Sachs	More SQL Injection with Fast Flux hosting
2008-06-19/a>	William Stearns	Firefox vunerability
2008-06-16/a>	Marcus Sachs	Firefox 3.0 to be Released on Tuesday
2008-06-10/a>	Swa Frantzen	Linux ASN.1 BER kernel buffer overflow
2008-05-29/a>	Joel Esler	Creative Software AutoUpdate Engine ActiveX stack buffer overflow
2008-05-17/a>	Lorna Hutcheson	XP SP3 Issues
2008-05-13/a>	Swa Frantzen	OpenSSH: Predictable PRNG in debian and ubuntu Linux
2008-05-08/a>	Joel Esler	COMPROMISED FILE IN VIETNAMESE LANGUAGE PACK FOR FIREFOX 2
2008-05-07/a>	Jim Clausing	More on automated exploit generation
2008-05-06/a>	John Bambenek	Windows XP Service Pack 3 Released
2008-05-05/a>	John Bambenek	Defenses Against Automated Patch-Based Exploit Generation
2008-05-01/a>	Adrien de Beaupre	Windows XP SteadyState
2008-04-29/a>	Bojan Zdrnja	Windows Service Pack blocker tool
2008-04-24/a>	Maarten Van Horenbeeck	Targeted attacks using malicious PDF files
2008-04-22/a>	donald smith	XP SP3 RC2 Available
2008-04-22/a>	donald smith	Maximus root kit downloads via MySpace social engineering trick.
2008-04-18/a>	John Bambenek	The Patch Window is Gone: Automated Patch-Based Exploit Generation
2008-04-17/a>	Chris Carboni	Firefox Update
2008-04-16/a>	William Stearns	Windows XP Service Pack 3 - unofficial schedule: Apr 21-28
2008-04-10/a>	Deborah Hale	Symantec Threatcon Level 2
2008-03-26/a>	Raul Siles	Firefox 2.0.0.13 is out
2008-03-24/a>	Raul Siles	Next-generation Web browsers?
2007-01-03/a>	Toby Kohlenberg	VLC Media Player udp URL handler Format String Vulnerability
2006-12-18/a>	Toby Kohlenberg	ORDB Shutting down
2006-11-29/a>	Toby Kohlenberg	New Vulnerability Announcement and patches from Apple
2006-11-20/a>	Joel Esler	MS06-070 Remote Exploit
2006-11-14/a>	Jim Clausing	MS06-071: MSXML Core Services
2006-10-05/a>	Swa Frantzen	MS06-053 revisited ?
2006-09-21/a>	Johannes Ullrich	Apple updates Airport Drivers
2006-09-19/a>	Swa Frantzen	Yet another MSIE 0-day: VML
2006-09-15/a>	Swa Frantzen	MSIE DirectAnimation ActiveX 0-day update

MAC OS X

MAC

OS

X