Internet Storm Center
Sign In
Sign Up
Handler on Duty:
Johannes Ullrich
Threat Level:
green
Date
Author
Title
PHP UPDATE
2013-01-17
Russ McRee
PHP 5.4.11 and PHP 5.3.21 released
2010-02-27
Guy Bruneau
PHP 5.2.13 Security Update
PHP
2024-11-06/a>
Jesse La Grew
[Guest Diary] Insights from August Web Traffic Surge
2024-03-29/a>
Xavier Mertens
Quick Forensics Analysis of Apache logs
2023-09-23/a>
Guy Bruneau
Scanning for Laravel - a PHP Framework for Web Artisants
2022-09-07/a>
Johannes Ullrich
PHP Deserialization Exploit attempt
2022-02-02/a>
Johannes Ullrich
Finding elFinder: Who is looking for your files?
2021-11-30/a>
Johannes Ullrich
Hunting for PHPUnit Installed via Composer
2020-06-05/a>
Remco Verhoef
Not so FastCGI!
2019-07-18/a>
Xavier Mertens
Malicious PHP Script Back on Stage?
2019-04-04/a>
Xavier Mertens
New Waves of Scans Detected by an Old Rule
2018-11-16/a>
Xavier Mertens
Basic Obfuscation With Permissive Languages
2018-07-11/a>
Remco Verhoef
Well, Hello Again Peppa!
2018-07-02/a>
Guy Bruneau
Hello Peppa! - PHP Scans
2018-06-13/a>
Xavier Mertens
A Bunch of Compromized Wordpress Sites
2018-05-06/a>
Guy Bruneau
Scans Attempting to use PowerShell to Download PHP Script
2017-09-14/a>
Xavier Mertens
Another webshell, another backdoor!
2017-08-07/a>
Xavier Mertens
Increase of phpMyAdmin scans
2017-02-28/a>
Xavier Mertens
Analysis of a Simple PHP Backdoor
2016-12-26/a>
Russ McRee
Critical security update: PHPMailer 5.2.20 (CVE-2016-10045)
2016-07-13/a>
Xavier Mertens
Drupal: Patch released today to fix a highly critical RCE in contributed modules
2015-07-12/a>
Guy Bruneau
PHP 5.x Security Updates
2014-09-19/a>
Guy Bruneau
PHP Fixes Several Bugs in Version 5.4 and 5.5
2014-08-22/a>
Richard Porter
PHP 5.4.32 Released http://www.php.net/ChangeLog-5.php#5.4.32
2014-08-22/a>
Richard Porter
PHP 5.5.16 is available http://www.php.net/ChangeLog-5.php#5.5.16
2014-08-16/a>
Lenny Zeltser
Web Server Attack Investigation - Installing a Bot and Reverse Shell via a PHP Vulnerability
2014-04-04/a>
Stephen Hall
PHP 5.4.27 released
2014-03-27/a>
Alex Stanford
Mass XSSodus in PHP
2013-10-25/a>
Johannes Ullrich
PHP.net compromise aftermath: Why Code Signing Beats Hashes
2013-10-24/a>
Johannes Ullrich
False Positive: php.net Malware Alert
2013-09-19/a>
Bojan Zdrnja
Arrays in requests, PHP and DedeCMS
2013-08-11/a>
Bojan Zdrnja
XATattacks (attacks on xat.com)
2013-08-04/a>
Johannes Ullrich
BBCode tag "[php]" used to inject php code
2013-06-07/a>
Daniel Wesemann
PHP patches - see http://www.php.net/ChangeLog-5.php - fixes CVE2013-2110
2013-02-22/a>
Chris Mohan
PHP 5.4.12 and PHP 5.3.22 released http://www.php.net/ChangeLog-5.php
2013-01-17/a>
Russ McRee
PHP 5.4.11 and PHP 5.3.21 released
2012-09-19/a>
Russ McRee
Script kiddie scavenging with Shellbot.S
2012-06-14/a>
Johannes Ullrich
PHP 5.4.4 and 5.3.14 released with fixes for DES crypt issue and phar heap overflow
2012-05-08/a>
Kevin Liston
PHP 5.4.3 and PHP 5.3.13 Released
2012-04-05/a>
Johannes Ullrich
Evil hides everywhere: Web Application Exploits in Headers
2012-03-07/a>
Johannes Ullrich
What happened to RFI attacks?
2012-02-07/a>
Johannes Ullrich
Secure E-Mail Access
2012-02-03/a>
Guy Bruneau
PHP 5.3.10 Released, Fixes CVE-2012-0830 available for download http://www.php.net/archive/2012.php#id2012-02-02-1
2012-02-03/a>
Johannes Ullrich
Critical PHP bug patched
2012-01-16/a>
Kevin Shortt
php 5.3.9 released -Jan-10-2011
2012-01-12/a>
Rob VandenBrink
PHP 5.39 was release on the 10th, amongst other things, it addresses CVE-2011-4885 (prevents attacks based on hash collisions) and CVE-2011-4566 (integer overflow when parsing invalid exif header)
2011-08-22/a>
Jim Clausing
DO NOT upgrade to PHP 5.3.7, significant bug in crypt() function, see http://www.php.net/
2011-08-18/a>
Rob VandenBrink
PHP 5.37 release. Some security updates, plus lots of bug fixes ==> http://www.php.net/archive/2011.php#id2011-08-18-1
2010-08-31/a>
Bojan Zdrnja
Interesting PHP injection
2010-08-10/a>
Daniel Wesemann
SSH - new brute force tool?
2010-07-04/a>
Manuel Humberto Santander Pelaez
Interesting analysis of the PHP SplObjectStorage Vulnerability
2010-06-14/a>
Manuel Humberto Santander Pelaez
Another way to get protection for application-level attacks
2010-05-23/a>
Manuel Humberto Santander Pelaez
e-mail scam announcing Fidel Castro's funeral ... and nasty malware to your computer.
2010-02-27/a>
Guy Bruneau
PHP 5.2.13 Security Update
2010-01-29/a>
Johannes Ullrich
Analyzing isc.sans.org weblogs, part 2, RFI attacks
2009-12-28/a>
Johannes Ullrich
8 Basic Rules to Implement Secure File Uploads http://jbu.me/48 (inspired by IIS ; bug)
2009-11-20/a>
Mark Hofman
PHP 5.3.1 is released. With many of the websites on the net relying on PHP and the number of attacks we see, consider upgrading. This release has over 100 bug fixes, some of which are security related.
2009-08-01/a>
Deborah Hale
Website Warnings
2009-06-26/a>
Mark Hofman
PHPMYADMIN scans
2009-06-24/a>
Kyle Haugsness
Exploit tools are publicly available for phpMyAdmin
2009-06-21/a>
Scott Fendley
phpMyAdmin Scans
2009-04-07/a>
Johannes Ullrich
Common Apache Misconception
2009-02-03/a>
Swa Frantzen
On the importance of patching fast
2008-12-10/a>
Stephen Hall
PHP Group has released PHP version 5.2.8
2008-09-09/a>
Swa Frantzen
wordpress upgrade
2008-08-19/a>
Johannes Ullrich
A morning stroll through my web logs
2008-05-05/a>
John Bambenek
PHP 5.2.6 out w/ security updates
2006-12-24/a>
Swa Frantzen
phpBB 2.0.22 - upgrade time
2006-11-29/a>
Toby Kohlenberg
New Vulnerability Announcement and patches from Apple
2006-09-13/a>
Swa Frantzen
PHP - shared hosters, take note.
UPDATE
2023-04-22/a>
Didier Stevens
YARA v4.3.1 Release
2023-04-02/a>
Didier Stevens
YARA v4.3.0 Release
2023-01-07/a>
Didier Stevens
YARA v4.3.0-rc1 --skip-larger
2022-12-05/a>
Didier Stevens
VLC's Check For Updates: No Updates?
2022-08-20/a>
Didier Stevens
YARA 4.2.3 Released
2022-07-02/a>
Didier Stevens
YARA 4.2.2 Released
2022-04-30/a>
Didier Stevens
YARA 4.2.1 Released
2022-03-14/a>
Johannes Ullrich
Apple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more
2021-11-29/a>
Didier Stevens
Wireshark 3.6.0 Released
2021-10-31/a>
Didier Stevens
Sysinternals: Autoruns and Sysmon updates
2021-10-28/a>
Yee Ching Tok
Multiple Apple Patches for October 2021
2021-10-10/a>
Didier Stevens
Wireshark 3.4.9 Released
2021-08-21/a>
Didier Stevens
New Versions Of Sysinternals Tools
2021-07-25/a>
Didier Stevens
Wireshark 3.4.7 Released
2021-04-25/a>
Didier Stevens
Wireshark 3.4.5 Released
2021-03-14/a>
Didier Stevens
Wireshark 3.4.4 Released
2021-02-06/a>
Didier Stevens
YARA v4.0.5
2021-01-31/a>
Didier Stevens
YARA v4.0.4
2020-12-20/a>
Didier Stevens
Wireshark 3.4.2 Released
2020-12-13/a>
Didier Stevens
Wireshark 3.4.1 Released
2020-09-27/a>
Didier Stevens
Wireshark 3.2.7 Released
2020-08-15/a>
Didier Stevens
Wireshark 3.2.6 Released
2020-05-24/a>
Didier Stevens
Wireshark 3.2.4 Released
2020-04-11/a>
Didier Stevens
Wireshark 3.2.3 Released: Mac Users Pay Attention Please
2020-03-14/a>
Didier Stevens
Phishing PDF With Incremental Updates.
2020-03-07/a>
Didier Stevens
Wireshark 3.2.2 Released: Windows' Users Pay Attention Please
2020-02-05/a>
Brad Duncan
Fake browser update pages are "still a thing"
2020-02-01/a>
Didier Stevens
Wireshark 3.2.1 Released
2019-12-21/a>
Didier Stevens
Wireshark 3.2.0 Released
2019-12-08/a>
Didier Stevens
Wireshark 3.0.7 Released
2019-10-27/a>
Didier Stevens
Wireshark 3.0.6 Released
2019-09-21/a>
Didier Stevens
Wireshark 3.0.5 Release: Potential Windows Crash when Updating
2019-07-09/a>
John Bambenek
MSFT July 2019 Patch Tuesday
2017-07-30/a>
Guy Bruneau
Re-release of MS Oulook Security Patches https://portal.msrc.microsoft.com/en-us/security-guidance/summary
2016-09-13/a>
Rob VandenBrink
Apple iOS 10 and 10.0.1 Released
2016-02-27/a>
Guy Bruneau
OpenSSL Security Update Planned for 1 March Release
2015-10-09/a>
Guy Bruneau
Adobe Acrobat and Reader Pre-Announcement
2015-04-04/a>
Didier Stevens
VMware Product Updates Address Critical Information Disclosure Issue In JRE
2014-08-22/a>
Richard Porter
PHP 5.4.32 Released http://www.php.net/ChangeLog-5.php#5.4.32
2014-08-22/a>
Richard Porter
PHP 5.5.16 is available http://www.php.net/ChangeLog-5.php#5.5.16
2014-08-12/a>
Adrien de Beaupre
Adobe updates for 2014/08
2014-08-01/a>
Chris Mohan
WireShark 1.10.9 and 1.12.0 has been released
2014-07-11/a>
Rob VandenBrink
Metasploit Update Alert
2014-06-12/a>
Guy Bruneau
BIND Security Update for CVE-2014-3859
2014-04-24/a>
Rob VandenBrink
Apple IOS updates to 7.1.1, OSX Security update 2014-002, Airport Updates - http://support.apple.com/kb/HT1222, http://support.apple.com/kb/HT6208, http://support.apple.com/kb/HT6207, http://support.apple.com/kb/HT6203
2014-04-12/a>
Guy Bruneau
Critical Security Update for JetPack WordPress Plugin. Bug has existed since Jetpack 1.9, released in October 2012. - http://jetpack.me/2014/04/10/jetpack-security-update/
2014-04-02/a>
Kevin Shortt
Apple Security Update for Safari 6.1.3/7.0.3: http://support.apple.com/kb/HT6181
2014-03-06/a>
Mark Baggett
Port 5000 traffic and snort signature
2014-02-14/a>
Chris Mohan
SYM14-004 Symantec Endpoint Protection Management Vulnerabilities - http://www.symantec.com/business/support/index?page=content&id=TECH214866
2013-12-18/a>
Adrien de Beaupre
Wireshark 1.10.4 and 1.8.12 are available
2013-12-17/a>
Adrien de Beaupre
Apple security updates Mac OS X and Safari
2013-10-17/a>
Adrien de Beaupre
Chrome updated http://googlechromereleases.blogspot.ca/2013/10/stable-channel-update_15.html
2013-10-15/a>
Rob VandenBrink
Java Quarterly Updates
2013-07-28/a>
Guy Bruneau
Wireshark 1.8.9 and 1.10.1 Security Update
2013-07-03/a>
Kevin Shortt
Apple Security Update 2013-003
2013-06-05/a>
Richard Porter
Windows Sysinternals Updated http://technet.microsoft.com/en-us/sysinternals/default.aspx
2013-05-22/a>
Adrien de Beaupre
Apple QuickTime 7.7.4 for Windows updated, MANY security vulnerabilities: http://support.apple.com/kb/HT1222
2013-05-22/a>
Adrien de Beaupre
Chrome 24.0.1312.52 has been updated for Windows, Mac, Linux, and Chrome Frame
2013-04-19/a>
Russ McRee
Java 8 release schedule delayed for renewed focus on security
2013-04-03/a>
Mark Hofman
Firefox 20 and Thunderbird 17.0.5 updates
2013-03-07/a>
Guy Bruneau
Wireshark Security Updates
2013-02-27/a>
Adam Swanger
Adobe Flash Player Security Update - http://www.adobe.com/support/security/bulletins/apsb13-08.html
2013-02-22/a>
Chris Mohan
PHP 5.4.12 and PHP 5.3.22 released http://www.php.net/ChangeLog-5.php
2013-02-22/a>
Chris Mohan
Chrome 25.0.1364.87 addresses multiple vulnerabilities http://googlechromereleases.blogspot.com.au/2013/02/stable-channel-update_21.html
2013-02-12/a>
Adam Swanger
Microsoft February 2013 Black Tuesday Update - Overview
2013-02-01/a>
Jim Clausing
Oracle quitely releases Java 7u13 early
2013-01-17/a>
Russ McRee
PHP 5.4.11 and PHP 5.3.21 released
2013-01-09/a>
Rob VandenBrink
SQL Injection Flaw in Ruby on Rails
2013-01-09/a>
Rob VandenBrink
Firefox and Thunderbird Updates
2013-01-09/a>
Rob VandenBrink
Security Updates for Adobe Flash - http://www.adobe.com/support/security/bulletins/apsb13-01.html
2013-01-09/a>
Johannes Ullrich
New Format for Monthly Threat Update
2013-01-08/a>
Richard Porter
Firefox 18 Released, Security Fixes http://www.mozilla.org/security/known-vulnerabilities/firefox.html
2012-12-11/a>
John Bambenek
Microsoft December 2012 Black Tuesday Update - Overview
2012-11-13/a>
Jim Clausing
Microsoft November 2012 Black Tuesday Update - Overview
2012-10-28/a>
Tony Carothers
Firefox 16.02 Released
2012-09-21/a>
Guy Bruneau
Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 (2755801)
2012-09-20/a>
Russ McRee
Apple and Cisco Security Advisories 19 SEP 2012
2012-08-22/a>
Adrien de Beaupre
Apple Remote Desktop update fixes no encryption issue
2012-08-21/a>
Adrien de Beaupre
YYABCAFU - Yes Yet Another Bleeping Critical Adobe Flash Update
2012-08-15/a>
Guy Bruneau
Wireshark Security Update
2012-08-02/a>
Guy Bruneau
Opera Security Update
2012-07-18/a>
Rob VandenBrink
Snort Updated today
2012-06-25/a>
Guy Bruneau
Issues with Windows Update Agent
2012-06-20/a>
Raul Siles
Firefox 13.0.1 Update
2012-06-06/a>
Jim Clausing
Firefox, Thunderbird, and Seamonkey Security Updates
2012-05-04/a>
Guy Bruneau
Adobe Security Flash Update
2012-03-06/a>
Mark Hofman
Websense posted a small article relating to mass injection into wordpress sites (thanks Chris) More info Here --> http://community.websense.com/blogs/securitylabs/archive/2012/03/05/mass-injection-of-wordpress-sites.aspx
2012-02-04/a>
Scott Fendley
Apple Security Advisory 2012-001 v1.1
2011-11-02/a>
Russ McRee
Wireshark updates: 1.6.3 and 1.4.10 released
2011-10-22/a>
Guy Bruneau
Oracle Java SE Critical Patch Update
2011-10-01/a>
Mark Hofman
Hot on the heels fo FF, Thunderbird v 7.0.1 and SeaMonkey v 2.4.1 have been updated.
2011-09-18/a>
Guy Bruneau
Google Chrome Security Updates
2011-09-06/a>
Guy Bruneau
Firefox 6.0.2 released to removed trust to DigiNotar certificate authority http://www.mozilla.org/en-US/firefox/6.0.2/releasenotes/
2011-09-05/a>
Raul Siles
Java 7 Officially Released
2011-07-15/a>
Deborah Hale
Apple Software Updates
2011-06-28/a>
Johannes Ullrich
Update: Thunderbird 5.0 released. https://www.mozilla.org/en-US/thunderbird/
2011-06-23/a>
Jim Clausing
Apple Security Updates 2011-004
2011-06-09/a>
Richard Porter
Chrome Version 12.0.742.91 Released
2011-06-01/a>
Adrien de Beaupre
Wireshark 1.4.7 and 1.2.17 Released - http://www.wireshark.org/news/20110531.html
2011-05-20/a>
Guy Bruneau
Sysinternals Updates, Analyzing Stuxnet Infection with Sysinternals Tools Part 3
2011-05-16/a>
Jason Lam
Firefox 3.5 forced upgrade coming soon
2011-05-04/a>
Richard Porter
Microsoft Sysinterals Update
2011-05-01/a>
Deborah Hale
Java 6.25 Is Now Available
2011-04-14/a>
Adrien de Beaupre
Sysinternals updates, a new blog post, and webcast
2011-03-21/a>
Kevin Shortt
APPLE-SA-2011-03-21-1 Mac OS X v10.6.7 and Security Update 2011-001
2011-03-09/a>
Chris Mohan
Possible Issue with Forefront Update KB2508823
2011-03-02/a>
Chris Mohan
Microsoft’s Autorun update v2.1 now automatically deployed from Windows Update
2011-02-21/a>
Adrien de Beaupre
Kaspersky update servers unreachable
2011-01-27/a>
Chris Carboni
Opera Updates
2010-12-03/a>
Mark Hofman
AVG Update Bricking windows 7 64 bit
2010-11-30/a>
Joel Esler
VMWare Security Advisory
2010-11-16/a>
Guy Bruneau
Mac OS X Server v10.6.5 (10H575) Security Update: http://support.apple.com/kb/HT4452
2010-08-25/a>
Pedro Bueno
Adobe released security update for Shockwave player that fix several CVEs: APSB1020
2010-08-19/a>
Rob VandenBrink
Don points us to multiple Adobe updates (Reader and Acrobat 9.3.4 among them) ==> http://www.adobe.com/support/downloads/new.jsp
2010-08-10/a>
Jason Lam
Adobe critical security updates
2010-08-10/a>
Daniel Wesemann
New Apple security updates for iPad/Pod/Phone. See http://support.apple.com/kb/ht1222
2010-07-21/a>
Adrien de Beaupre
Update on .LNK vulnerability
2010-06-29/a>
donald smith
Adobe Reader 9.3.3/8.2.3 addressing CVE-2010-1297
2010-05-12/a>
Rob VandenBrink
Adobe Shockwave Update
2010-04-13/a>
Adrien de Beaupre
Security update available for Adobe Reader and Acrobat
2010-04-02/a>
Guy Bruneau
Foxit Reader Security Update
2010-03-29/a>
Adrien de Beaupre
APPLE-SA-2010-03-29-1 Security Update 2010-002 / Mac OS X v10.6.3
2010-03-29/a>
Adrien de Beaupre
OOB Update for Internet Explorer MS10-018
2010-03-22/a>
Guy Bruneau
New Opera 10.51 available with security fixes. More information available at: http://www.opera.com/docs/changelogs/windows/1051/
2010-03-12/a>
Mark Hofman
Firefox 3.6 is being pushed out to users. http://www.mozilla.com/en-US/firefox/3.6/releasenotes/
2010-03-11/a>
Mark Hofman
A new version of Safari is out. Looks like for Mac and Windows. Plenty of security fixes (mostly for Windows Safari users http://support.apple.com/kb/HT4070 )
2010-03-10/a>
Rob VandenBrink
Microsoft re-release of KB973811 - attacks on Extended Protection for Authentication
2010-03-08/a>
Raul Siles
Microsoft announced two important bulletins (fixing multiple vulns. affecting Windows and Office) for tomorrow: http://www.microsoft.com/technet/security/Bulletin/MS10-mar.mspx
2010-03-01/a>
Mark Hofman
Microsoft will drop support for Vista (without any Service Packs) on April 13 and support for XP SP2 ends July 13. (i.e. no more security updates). If you are still running these, it it time to update.
2010-02-27/a>
Guy Bruneau
PHP 5.2.13 Security Update
2010-02-11/a>
Deborah Hale
The Mysterious Blue Screen
2010-01-06/a>
Guy Bruneau
Firefox security and stability update for version 3.5.7 and 3.0.17 available for download
2009-12-16/a>
Rob VandenBrink
Seamonkey Update to 2.0.1, find the release notes here ==> http://www.seamonkey-project.org/releases/seamonkey2.0.1
2009-12-03/a>
Mark Hofman
Apple released some Java updates today APPLE-SA-2009-12-03-1 & 2 (for 10.5 and 10.6). Fixes a number of security issues so updating is a good idea.
2009-12-02/a>
Rob VandenBrink
Microsoft Black Screen of Death - Fact of Fiction?
2009-11-25/a>
Jim Clausing
Tool updates
2009-11-25/a>
Jim Clausing
Microsoft Updates requiring reboot
2009-11-11/a>
Rob VandenBrink
Apple Safari 4.0.4 Released
2009-11-09/a>
Guy Bruneau
Apple Security Update 2009-006 for Mac OS X v10.6.2
2009-11-06/a>
Mark Hofman
A new version of Firefox (3.5.5) just became available. According to the release notes they are stability improvements.
2009-10-22/a>
Adrien de Beaupre
Sysinternals updates: Disk2vhd v1.1, ZoomIt v4.1, Coreinfo v2.0, VMMap v2.4
2009-09-24/a>
Jim Clausing
A couple more tools
2009-09-04/a>
Adrien de Beaupre
SeaMonkey Security Update
2009-08-05/a>
donald smith
Security Update 2009-003 / Mac OS X v10.5.8
2009-08-04/a>
donald smith
Java Security Update
2009-07-18/a>
Patrick Nolan
Chrome update contains Security fixes
2009-06-10/a>
Swa Frantzen
Java 6 update 14 released
2009-06-02/a>
Deborah Hale
Another Quicktime Update
2009-05-26/a>
Jason Lam
Vista & Win2K8 SP2 available
2009-02-10/a>
Swa Frantzen
Java up to date ?
2008-11-29/a>
Pedro Bueno
Ubuntu users: Time to update!
2008-11-13/a>
Jim Clausing
Some recently updated tools
2008-10-10/a>
Marcus Sachs
Fake Microsoft Update Email
2008-09-10/a>
Adrien de Beaupre
Apple updates iPod Touch + Bonjour for Windows
2008-07-11/a>
Jim Clausing
Updates to some of our favorite tools
2008-04-20/a>
Joel Esler
Software Update -- Did Apple Do Enough?
2008-03-20/a>
Joel Esler
APPLE-SA-2008-03-19 AirPort Extreme Base Station Firmware 7.3.1
2008-03-20/a>
Joel Esler
Potential Vulnerability in Flash CS3 Professional, Flash Professional 8 and Flash Basic 8?
Homepage
Diaries
Podcasts
Jobs
Data
TCP/UDP Port Activity
Port Trends
SSH/Telnet Scanning Activity
Weblogs
Threat Feeds Activity
Threat Feeds Map
Useful InfoSec Links
Presentations & Papers
Research Papers
API
Tools
DShield Sensor
DNS Looking Glass
Honeypot (RPi/AWS)
InfoSec Glossary
Contact Us
Contact Us
About Us
Handlers
About Us
Slack Channel
Mastodon
Bluesky
X
Integrate
our data
into your projects