| 2024-05-16 | Rob VandenBrink | Why yq? Adventures in XML |
| 2023-12-11 | Rob VandenBrink | What is sitemap.xml, and Why a Pentester Should Care |
| 2022-09-16 | Didier Stevens | Word Maldoc With CustomXML and Renamed VBAProject.bin |
| 2022-09-15 | Xavier Mertens | Malicious Word Document with a Frameset |
| 2022-03-18 | Johannes Ullrich | Scans for Movable Type Vulnerability (CVE-2021-20837) |
| 2021-01-24 | Didier Stevens | Video: Doc & RTF Malicious Document |
| 2021-01-23 | Didier Stevens | CyberChef: Analyzing OOXML Files for URLs |
| 2020-10-10 | Didier Stevens | Open Packaging Conventions |
| 2018-10-26 | Xavier Mertens | Dissecting Malicious Office Documents with Linux |
| 2016-02-03 | Xavier Mertens | Automating Vulnerability Scans |
| 2014-03-12 | Johannes Ullrich | Wordpress "Pingback" DDoS Attacks |
| 2013-11-01 | Russ McRee | Secunia's PSI Country Report - Q3 2013 |
| 2011-11-10 | Rob VandenBrink | Stuff I Learned Scripting - - Parsing XML in a One-Liner |
| 2009-08-08 | Kevin Liston | Sun OpenSSO Enterprise/Sun Access Manager XML Vulnerabilities |
| 2009-08-08 | Guy Bruneau | XML Libraries Data Parsing Vulnerabilities |
| 2009-02-19 | Bojan Zdrnja | MS09-002, XML/DOC and initial infection vector |
| 2009-01-31 | Swa Frantzen | VMware updates |
| 2006-11-14 | Jim Clausing | MS06-071: MSXML Core Services |
| 2006-09-19 | Swa Frantzen | Yet another MSIE 0-day: VML |
