Internet Storm Center
Sign In
Sign Up
Participate: Learn more about our honeypot network
https://isc.sans.edu/tools/honeypot/
Handler on Duty:
Xavier Mertens
Threat Level:
green
Date
Author
Title
OFFICE ONLINE SEARCH FAKE AV WEBSENSE
2010-01-08
Rob VandenBrink
Microsoft OfficeOnline, Searching for Trust and Malware
OFFICE
2022-10-27/a>
Tom Webb
Supersizing your DUO and 365 Integration
2022-05-30/a>
Xavier Mertens
New Microsoft Office Attack Vector via "ms-msdt" Protocol Scheme (CVE-2022-30190)
2022-04-17/a>
Didier Stevens
Video: Office Protects You From Malicious ISO Files
2022-04-16/a>
Didier Stevens
Office Protects You From Malicious ISO Files
2021-12-19/a>
Didier Stevens
Office 2021: VBA Project Version
2021-11-28/a>
Didier Stevens
Video: YARA Rules for Office Maldocs
2021-11-23/a>
Didier Stevens
YARA Rule for OOXML Maldocs: Less False Positives
2021-09-08/a>
Johannes Ullrich
Microsoft Offers Workaround for 0-Day Office Vulnerability (CVE-2021-40444)
2020-12-12/a>
Didier Stevens
Office 95 Excel 4 Macros
2020-11-08/a>
Didier Stevens
Quick Tip: Extracting all VBA Code from a Maldoc
2020-09-23/a>
Xavier Mertens
Malicious Word Document with Dynamic Content
2020-08-20/a>
Rob VandenBrink
Office 365 Mail Forwarding Rules (and other Mail Rules too)
2020-02-21/a>
Xavier Mertens
Quick Analysis of an Encrypted Compound Document Format
2019-12-28/a>
Didier Stevens
Corrupt Office Documents
2019-12-09/a>
Didier Stevens
(Lazy) Sunday Maldoc Analysis
2019-04-07/a>
Guy Bruneau
Fake Office 365 Payment Information Update
2019-04-01/a>
Didier Stevens
Analysis of PDFs Created with OpenOffice/LibreOffice
2018-12-13/a>
Xavier Mertens
Phishing Attack Through Non-Delivery Notification
2018-10-10/a>
Xavier Mertens
New Campaign Using Old Equation Editor Vulnerability
2018-09-04/a>
Rob VandenBrink
Let's Trade: You Read My Email, I'll Read Your Password!
2018-05-25/a>
Xavier Mertens
Antivirus Evasion? Easy as 1,2,3
2018-05-01/a>
Xavier Mertens
Diving into a Simple Maldoc Generator
2017-12-16/a>
Xavier Mertens
Microsoft Office VBA Macro Obfuscation via Metadata
2017-11-15/a>
Xavier Mertens
If you want something done right, do it yourself!
2017-04-28/a>
Xavier Mertens
Another Day, Another Obfuscation Technique
2017-01-31/a>
Johannes Ullrich
Malicious Office files using fileless UAC bypass to drop KEYBASE malware
2016-09-30/a>
Xavier Mertens
Another Day, Another Malicious Behaviour
2016-07-19/a>
Didier Stevens
Office Maldoc: Let's Focus on the VBA Macros Later...
2016-01-24/a>
Didier Stevens
Obfuscated MIME Files
2015-02-20/a>
Tom Webb
Fast analysis of a Tax Scam
2015-02-19/a>
Daniel Wesemann
Macros? Really?!
2014-07-10/a>
Rob VandenBrink
Certificate Errors in Office 365 Today
2014-06-22/a>
Russ McRee
OfficeMalScanner helps identify the source of a compromise
2013-11-05/a>
Daniel Wesemann
TIFF images in MS-Office documents used in targeted attacks
2012-09-14/a>
Lenny Zeltser
Analyzing Malicious RTF Files Using OfficeMalScanner's RTFScan
2012-06-04/a>
Lenny Zeltser
Decoding Common XOR Obfuscation in Malicious Code
2011-01-28/a>
Guy Bruneau
OpenOffice Security Fixes
2010-10-26/a>
Pedro Bueno
Cyber Security Awareness Month - Day 26 - Sharing Office Files
2010-06-05/a>
Guy Bruneau
OpenOffice.org 3.2.1 Fixes Bugs and Vulnerabilities
2010-02-22/a>
Rob VandenBrink
Multiple Security Updates for OpenOffice ==> http://www.openoffice.org/security/bulletin.html
2010-01-08/a>
Rob VandenBrink
Microsoft OfficeOnline, Searching for Trust and Malware
2009-07-16/a>
Bojan Zdrnja
OWC exploits used in SQL injection attacks
2009-07-13/a>
Adrien de Beaupre
Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution
ONLINE
2021-11-10/a>
Xavier Mertens
Shadow IT Makes People More Vulnerable to Phishing
2017-12-14/a>
Russ McRee
Security Planner: Improve your online safety
2012-11-26/a>
John Bambenek
Online Shopping for the Holidays? Tips, News and a Fair Warning
2010-10-04/a>
Mark Hofman
Online Voting
2010-01-08/a>
Rob VandenBrink
Microsoft OfficeOnline, Searching for Trust and Malware
SEARCH
2023-03-16/a>
Xavier Mertens
Simple Shellcode Dissection
2023-01-21/a>
Guy Bruneau
DShield Sensor JSON Log to Elasticsearch
2021-09-11/a>
Guy Bruneau
Shipping to Elasticsearch Microsoft DNS Logs
2021-09-09/a>
Johannes Ullrich
Updates to Our Datafeeds/API
2021-05-08/a>
Guy Bruneau
Who is Probing the Internet for Research Purposes?
2021-02-13/a>
Guy Bruneau
Using Logstash to Parse IPtables Firewall Logs
2020-12-19/a>
Guy Bruneau
Secure Communication using TLS in Elasticsearch
2020-05-29/a>
Johannes Ullrich
The Impact of Researchers on Our Data
2019-11-29/a>
Russ McRee
ISC Snapshot: Search with SauronEye
2018-11-30/a>
Remco Verhoef
CoinMiners searching for hosts
2018-11-14/a>
Brad Duncan
Day in the life of a researcher: Finding a wave of Trickbot malspam
2017-05-18/a>
Xavier Mertens
My Little CVE Bot
2015-11-22/a>
Guy Bruneau
OpenDNS Research Used to Predict Threat
2015-11-04/a>
Johannes Ullrich
Internet Wide Scanners Wanted
2015-08-16/a>
Guy Bruneau
Are you a "Hunter"?
2015-07-21/a>
Didier Stevens
Searching Through the VirusTotal Database
2010-02-15/a>
Johannes Ullrich
Various Olympics Related Dangerous Google Searches
2010-01-08/a>
Rob VandenBrink
Microsoft OfficeOnline, Searching for Trust and Malware
FAKE
2022-03-02/a>
Johannes Ullrich
The More Often Something is Repeated, the More True It Becomes: Dealing with Social Media
2022-01-03/a>
Xavier Mertens
McAfee Phishing Campaign with a Nice Fake Scan
2021-08-04/a>
Yee Ching Tok
Pivoting and Hunting for Shenanigans from a Reported Phishing Domain
2020-04-18/a>
Guy Bruneau
Maldoc Falsely Represented as DOCX Invoice Redirecting to Fake Apple Store
2020-02-05/a>
Brad Duncan
Fake browser update pages are "still a thing"
2019-04-07/a>
Guy Bruneau
Fake Office 365 Payment Information Update
2019-04-02/a>
Johannes Ullrich
Fake AV is Back: LaCie Network Drives Used to Spread Malware
2019-03-21/a>
Xavier Mertens
New Wave of Extortion Emails: Central Intelligence Agency Case
2017-07-07/a>
Renato Marinho
DDoS Extortion E-mail: Yet Another Bluff?
2016-05-12/a>
Xavier Mertens
Another Day, Another Wave of Phishing Emails
2015-09-28/a>
Johannes Ullrich
"Transport of London" Malicious E-Mail
2014-02-21/a>
Johannes Ullrich
UPS Malware Spam Using Fake SPF Headers
2013-04-29/a>
Adam Swanger
Report Fake Tech Support Calls submission form reminder
2013-04-16/a>
John Bambenek
Fake Boston Marathon Scams Update
2013-01-03/a>
Manuel Humberto Santander Pelaez
New year and new CA compromised
2012-12-06/a>
Daniel Wesemann
Fake tech support calls - revisited
2012-10-03/a>
Kevin Shortt
Fake Support Calls Reported
2012-06-19/a>
Daniel Wesemann
Vulnerabilityqueerprocessbrittleness
2011-07-25/a>
Bojan Zdrnja
When the FakeAV coder(s) fail
2011-07-21/a>
Daniel Wesemann
Down the FakeAV rabbit hole
2011-05-19/a>
Daniel Wesemann
Fake AV Bingo
2011-05-04/a>
Bojan Zdrnja
More on Google image poisoning
2011-01-18/a>
Daniel Wesemann
Yet another rogue anti-virus
2010-11-11/a>
Daniel Wesemann
Fake AV scams via Skype Chat
2010-02-27/a>
Johannes Ullrich
Search Engine Poisoning: Chile Earthquake
2010-02-15/a>
Johannes Ullrich
Various Olympics Related Dangerous Google Searches
2010-02-08/a>
Adrien de Beaupre
When is a 0day not a 0day? Fake OpenSSh exploit, again.
2010-01-08/a>
Rob VandenBrink
Microsoft OfficeOnline, Searching for Trust and Malware
2009-09-17/a>
Bojan Zdrnja
Why is Rogue/Fake AV so successful?
2009-09-04/a>
Adrien de Beaupre
Fake anti-virus
2009-02-06/a>
Adrien de Beaupre
Fake stimulus payments
2008-09-15/a>
donald smith
Fake antivirus 2009 and search engine results
AV
2023-02-24/a>
Brad Duncan
URL files and WebDAV used for IcedID (Bokbot) infection
2022-06-16/a>
Xavier Mertens
Houdini is Back Delivered Through a JavaScript Dropper
2022-06-01/a>
Jan Kopriva
HTML phishing attachments - now with anti-analysis features
2022-03-31/a>
Johannes Ullrich
Spring Vulnerability Update - Exploitation Attempts CVE-2022-22965
2022-03-30/a>
Johannes Ullrich
Possible new Java Spring Framework Vulnerability (Updated: not a Spring problem)
2022-03-30/a>
Johannes Ullrich
Java Springtime Confusion: What Vulnerability are We Talking About
2022-01-18/a>
Jan Kopriva
Phishing e-mail with...an advertisement?
2022-01-03/a>
Xavier Mertens
McAfee Phishing Campaign with a Nice Fake Scan
2021-11-18/a>
Xavier Mertens
JavaScript Downloader Delivers Agent Tesla Trojan
2021-10-21/a>
Brad Duncan
"Stolen Images Evidence" campaign pushes Sliver-based malware
2021-10-16/a>
Guy Bruneau
Apache is Actively Scan for CVE-2021-41773 & CVE-2021-42013
2021-10-09/a>
Guy Bruneau
Scanning for Previous Oracle WebLogic Vulnerabilities
2021-08-17/a>
Johannes Ullrich
Laravel (<=v8.4.2) exploit attempts for CVE-2021-3129 (debug mode: Remote code execution)
2021-05-22/a>
Xavier Mertens
"Serverless" Phishing Campaign
2021-05-18/a>
Xavier Mertens
From RunDLL32 to JavaScript then PowerShell
2021-04-28/a>
Xavier Mertens
Deeper Analyzis of my Last Malicious PowerPoint Add-On
2021-04-19/a>
Jan Kopriva
Hunting phishing websites with favicon hashes
2021-03-02/a>
Russ McRee
Adversary Simulation with Sim
2021-01-22/a>
Xavier Mertens
Another File Extension to Block in your MTA: .jnlp
2020-11-13/a>
Xavier Mertens
Old Worm But New Obfuscation Technique
2020-07-24/a>
Xavier Mertens
Compromized Desktop Applications by Web Technologies
2020-07-08/a>
Xavier Mertens
If You Want Something Done Right, You Have To Do It Yourself... Malware Too!
2020-06-11/a>
Xavier Mertens
Anti-Debugging JavaScript Techniques
2020-04-03/a>
Xavier Mertens
Obfuscated with a Simple 0x0A
2020-03-27/a>
Xavier Mertens
Malicious JavaScript Dropping Payload in the Registry
2020-01-27/a>
Johannes Ullrich
Network Security Perspective on Coronavirus Preparedness
2019-12-31/a>
Johannes Ullrich
Some Thoughts About the Critical Citrix ADC/Gateway Vulnerability (CVE-2019-19781)
2019-11-23/a>
Guy Bruneau
Local Malware Analysis with Malice
2019-08-09/a>
Xavier Mertens
100% JavaScript Phishing Page
2019-07-25/a>
Rob VandenBrink
When Users Attack! Users (and Admins) Thwarting Security Controls
2019-06-20/a>
Xavier Mertens
Using a Travel Packing App for Infosec Purpose
2019-06-10/a>
Xavier Mertens
Interesting JavaScript Obfuscation Example
2019-05-29/a>
Xavier Mertens
Behavioural Malware Analysis with Microsoft ASA
2019-04-02/a>
Johannes Ullrich
Fake AV is Back: LaCie Network Drives Used to Spread Malware
2019-02-07/a>
Xavier Mertens
Phishing Kit with JavaScript Keylogger
2019-02-02/a>
Guy Bruneau
Scanning for WebDAV PROPFIND Exploiting CVE-2017-7269
2018-11-20/a>
Xavier Mertens
VMware Affected by Dell EMC Avamar Vulnerability
2018-07-17/a>
Xavier Mertens
Searching for Geographically Improbable Login Attempts
2018-07-13/a>
Xavier Mertens
Cryptominer Delivered Though Compromized JavaScript File
2018-06-18/a>
Xavier Mertens
Malicious JavaScript Targeting Mobile Browsers
2017-11-03/a>
Xavier Mertens
Simple Analysis of an Obfuscated JAR File
2017-10-06/a>
Johannes Ullrich
What's in a cable? The dangers of unauthorized cables
2017-08-23/a>
Xavier Mertens
Malicious script dropping an executable signed by Avast?
2017-06-22/a>
Xavier Mertens
Obfuscating without XOR
2017-04-02/a>
Guy Bruneau
IPFire - A Household Multipurpose Security Gateway
2017-03-24/a>
Xavier Mertens
Nicely Obfuscated JavaScript Sample
2017-03-04/a>
Xavier Mertens
How your pictures may affect your website reputation
2017-02-12/a>
Xavier Mertens
Analysis of a Suspicious Piece of JavaScript
2016-08-28/a>
Guy Bruneau
Spam with Obfuscated Javascript
2016-06-18/a>
Rob VandenBrink
Controlling JavaScript Malware Before it Runs
2016-02-20/a>
Didier Stevens
Locky: JavaScript Deobfuscation
2016-02-07/a>
Xavier Mertens
More Malicious JavaScript Obfuscation
2016-01-15/a>
Xavier Mertens
JavaScript Deobfuscation Tool
2015-11-09/a>
John Bambenek
ICYMI: Widespread Unserialize Vulnerability in Java
2015-08-07/a>
Tony Carothers
Critical Firefox Update Today
2015-06-16/a>
John Bambenek
CVE-2014-4114 and an Interesting AV Bypass Technique
2014-12-06/a>
Rick Wanner
Google App Engine Java Security Sandbox bypasses
2014-08-29/a>
Johannes Ullrich
False Positive or Not? Difficult to Analyze Javascript
2014-07-15/a>
Daniel Wesemann
Oracle Java: 20 new vulnerabilities patched
2014-07-13/a>
Tony Carothers
Oracle July 2014 Update Pre-Notification
2014-07-06/a>
Richard Porter
Physical Access, Point of Sale, Vegas
2014-07-05/a>
Guy Bruneau
Java Support ends for Windows XP
2014-07-02/a>
Johannes Ullrich
Simple Javascript Extortion Scheme Advertised via Bing
2014-05-27/a>
Kevin Shortt
Avast forums hacked
2014-02-11/a>
Johannes Ullrich
Adobe February 2014 Patch Tuesday
2014-02-05/a>
Johannes Ullrich
To Merrillville or Sochi: How Dangerous is it to travel?
2013-12-23/a>
Rob VandenBrink
How-To's for the Holidays - Java Whitelisting using AD Group Policy
2013-10-28/a>
Daniel Wesemann
Exploit cocktail (Struts, Java, Windows) going after 3-month old vulnerabilities
2013-10-15/a>
Rob VandenBrink
Java Quarterly Updates
2013-10-08/a>
Johannes Ullrich
Anti-Virus Company Avira Homepage Defaced
2013-09-10/a>
Swa Frantzen
More Black Tuesday workload
2013-08-07/a>
Johannes Ullrich
Firefox 23 and Mixed Active Content
2013-04-23/a>
Russ McRee
Microsoft's Security Intelligence Report (SIRv14) released
2013-04-19/a>
Russ McRee
Java 8 release schedule delayed for renewed focus on security
2013-04-16/a>
Rob VandenBrink
Java 7 Update 21 is available - Watch for Behaviour Changes !
2013-03-07/a>
Guy Bruneau
Apple Blocking Java Web plug-in
2013-03-05/a>
Richard Porter
Java j6u43 update #YAJU http://www.oracle.com/technetwork/java/javase/6u43-relnotes-1915290.html
2013-03-04/a>
Richard Porter
Java 7u17 update #YAJU http://www.oracle.com/technetwork/java/javase/7u17-relnotes-1915289.html
2013-03-01/a>
Jim Clausing
And the Java 0-days just keep on coming
2013-02-26/a>
Rob VandenBrink
All I need Java for is ....
2013-02-25/a>
Johannes Ullrich
Trustwave Trustkeeper Phish
2013-02-20/a>
Johannes Ullrich
Update Palooza
2013-02-19/a>
Johannes Ullrich
Oracle Updates Java (Java 7 Update 15, Java 6 update 41)
2013-02-12/a>
Swa Frantzen
Adobe Feb 2013 Black Tuesday patches
2013-02-08/a>
Kevin Shortt
Is it Spam or Is it Malware?
2013-02-01/a>
Jim Clausing
Oracle quitely releases Java 7u13 early
2013-01-19/a>
Guy Bruneau
Java 7 Update 11 Still has a Flaw
2013-01-15/a>
Rob VandenBrink
When Disabling IE6 (or Java, or whatever) is not an Option...
2013-01-13/a>
Stephen Hall
Java 0-Day patched as Java 7 U 11 released
2013-01-12/a>
Stephen Hall
Java 0-day impact to Java 6 (and beyond?)
2013-01-10/a>
Johannes Ullrich
Java is still exploitable and is likely going to remain so.
2012-11-01/a>
Daniel Wesemann
Patched your Java yet?
2012-10-18/a>
Rob VandenBrink
Another Java update! Java SE 1.6.0_37 Available ==> http://www.oracle.com/technetwork/java/javase/releasenotes-136954.html
2012-10-17/a>
Rob VandenBrink
Time to update - Java version 7 update 9 (JRE 7u9, JDK 7u9) is out! Release notes here - http://www.oracle.com/technetwork/java/javase/7u9-relnotes-1863279.html
2012-09-01/a>
Russ McRee
Blackhole targeting Java vulnerability via fake Microsoft Services Agreement email phish
2012-08-31/a>
Russ McRee
Not so fast: Java 7 Update 7 critical vulnerability discovered in less than 24 hours
2012-08-27/a>
Kevin Liston
Quick Bits about Today's Java 0-Day
2012-08-05/a>
Daniel Wesemann
Phishing for Payroll with unpatched Java
2012-06-25/a>
Guy Bruneau
Using JSDetox to Analyze and Deobfuscate Javascript
2012-06-19/a>
Daniel Wesemann
Vulnerabilityqueerprocessbrittleness
2012-06-12/a>
Swa Frantzen
Java 7u5 and 6u33 released
2012-05-22/a>
Johannes Ullrich
nmap 6 released
2012-05-16/a>
Johannes Ullrich
Avira Antivirus false positives http://forum.avira.com/wbb/index.php?page=Thread&threadID=144875
2012-04-25/a>
Daniel Wesemann
Blacole's obfuscated JavaScript
2012-04-12/a>
Guy Bruneau
Apple Java Updates for Mac OS X
2012-04-06/a>
Johannes Ullrich
Another OS X Java Patch
2012-03-25/a>
Daniel Wesemann
evilcode.class
2012-02-16/a>
Tony Carothers
Java Update for February
2012-02-14/a>
Johannes Ullrich
Adobe Shockwave Player and RoboHelp for Word Patches
2012-01-22/a>
Johannes Ullrich
Javascript DDoS Tool Analysis
2012-01-03/a>
Bojan Zdrnja
The tale of obfuscated JavaScript continues
2011-12-12/a>
Daniel Wesemann
Java 6u30 released
2011-12-10/a>
Daniel Wesemann
Unwanted Presents
2011-12-07/a>
Lenny Zeltser
V8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation
2011-10-22/a>
Guy Bruneau
Oracle Java SE Critical Patch Update
2011-09-05/a>
Raul Siles
Java 7 Officially Released
2011-08-19/a>
Kevin Shortt
Java SE 6 Update 27 released. No security updates, many bug fixes ==> http://www.oracle.com/technetwork/java/javase/6u27-relnotes-444147.html
2011-07-28/a>
Guy Bruneau
Java 7.0 released. Get it here - http://blogs.oracle.com/javase/entry/java_7_has_released
2011-07-25/a>
Bojan Zdrnja
When the FakeAV coder(s) fail
2011-07-21/a>
Daniel Wesemann
Down the FakeAV rabbit hole
2011-06-28/a>
Johannes Ullrich
Update: Java update for OS X fixes security issues http://support.apple.com/kb/HT1222
2011-06-13/a>
Bojan Zdrnja
Harry Potter and the Rogue anti-virus: Part 1
2011-06-07/a>
Johannes Ullrich
Oracle Releases Java Version 1.6.0.26 http://java.com/en/download/manual.jsp
2011-06-06/a>
Manuel Humberto Santander Pelaez
Phishing: Same goal, same techniques and people still falling for such scams
2011-06-06/a>
Johannes Ullrich
The Havij SQL Injection Tool
2011-06-03/a>
Guy Bruneau
Oracle Java SE Critical Patch Update Pre-Release Announcement - June 2011
2011-05-19/a>
Daniel Wesemann
Fake AV Bingo
2011-05-04/a>
Bojan Zdrnja
More on Google image poisoning
2011-05-01/a>
Deborah Hale
Java 6.25 Is Now Available
2011-04-23/a>
Manuel Humberto Santander Pelaez
Image search can lead to malware download
2011-03-27/a>
Guy Bruneau
Strange Shockwave File with Surprising Attachments
2011-03-14/a>
Bojan Zdrnja
Tsunami in Japan and self modifying RogueAV code
2011-03-09/a>
Jim Clausing
Apple updates Java
2011-03-09/a>
Kevin Shortt
AVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B
2011-02-15/a>
Jason Lam
Oracle Java 6 Update 24
2011-02-09/a>
Mark Hofman
Adobe Patches (shockwave, Flash, Reader & Coldfusion)
2011-02-09/a>
Mark Hofman
Java Floating point issue (CVE-2010-4476)
2011-02-07/a>
Pedro Bueno
The Good , the Bad and the Unknown Online Scanners
2011-02-04/a>
Daniel Wesemann
Oh, just click "yes"
2011-01-18/a>
Daniel Wesemann
Yet another rogue anti-virus
2010-12-29/a>
Daniel Wesemann
Beware of strange web sites bearing gifts ...
2010-12-24/a>
Daniel Wesemann
A question of class
2010-12-23/a>
Mark Hofman
Older AV Scam Active again.
2010-12-08/a>
Rob VandenBrink
Java 6, Update 23 is out => http://java.sun.com/javase/6/webnotes/ReleaseNotes.html , http://www.oracle.com/technetwork/java/javase/6u23releasenotes-191058.html , http://www.oracle.com/technetwork/java/javase/2col/6u23bugfixes-191074.html
2010-12-03/a>
Mark Hofman
AVG Update Bricking windows 7 64 bit
2010-12-02/a>
Kevin Johnson
Robert Hansen and our happiness
2010-11-11/a>
Daniel Wesemann
Java Exploits
2010-10-30/a>
Guy Bruneau
Security Update for Shockwave Player
2010-08-25/a>
Pedro Bueno
Adobe released security update for Shockwave player that fix several CVEs: APSB1020
2010-08-17/a>
Bojan Zdrnja
Do you like Bing? So do the RogueAV guys!
2010-07-21/a>
Adrien de Beaupre
Update on .LNK vulnerability
2010-07-20/a>
Manuel Humberto Santander Pelaez
LNK vulnerability now with Metasploit module implementing the WebDAV method
2010-07-18/a>
Manuel Humberto Santander Pelaez
New metasploit GUI written in Java
2010-07-04/a>
Manuel Humberto Santander Pelaez
Malware inside PDF Files
2010-07-01/a>
Bojan Zdrnja
Down the RogueAV and Blackhat SEO rabbit hole (part 2)
2010-06-29/a>
donald smith
Interesting idea to help prevent RogueAV from using SEO without being noticed:)
2010-06-28/a>
Bojan Zdrnja
Down the RogueAV and Blackhat SEO rabbit hole
2010-05-23/a>
Manuel Humberto Santander Pelaez
Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability
2010-05-12/a>
Rob VandenBrink
Adobe Shockwave Update
2010-04-14/a>
Mark Hofman
ClamAV 0.94 EOL Reminder
2010-04-10/a>
Andre Ludwig
New bug/exploit for javaws
2010-04-02/a>
Guy Bruneau
Oracle Java SE and Java for Business Critical Patch Update Advisory
2010-03-05/a>
Kyle Haugsness
Javascript obfuscators used in the wild
2010-02-27/a>
Johannes Ullrich
Search Engine Poisoning: Chile Earthquake
2010-01-14/a>
Bojan Zdrnja
Rogue AV exploiting Haiti earthquake
2010-01-13/a>
Guy Bruneau
Sun Java JRE 6 Update 18 Released
2010-01-08/a>
Rob VandenBrink
Microsoft OfficeOnline, Searching for Trust and Malware
2009-12-05/a>
Guy Bruneau
Java JRE Buffer and Integer Overflow
2009-12-03/a>
Mark Hofman
Avast false positives
2009-11-13/a>
Adrien de Beaupre
Conficker patch via email?
2009-11-03/a>
Bojan Zdrnja
Adobe released Shockwave Player 11.5.2.602 which fixes several critical security vulnerabilities
2009-09-08/a>
Guy Bruneau
Bug Fixes in Sun SDK 5 and Java SE 6
2009-08-04/a>
donald smith
Java Security Update
2009-07-15/a>
Bojan Zdrnja
Make sure you update that Java
2009-07-01/a>
Bojan Zdrnja
Mobile phone trojans
2009-06-10/a>
Swa Frantzen
Java 6 update 14 released
2009-05-27/a>
donald smith
WebDAV write-up
2009-05-24/a>
Raul Siles
IIS admins, help finding WebDAV remotely using nmap
2009-05-22/a>
Mark Hofman
Patching and Apple - Java issue
2009-05-21/a>
Adrien de Beaupre
IIS admins, help finding WebDAV
2009-05-10/a>
Mari Nichols
Is your Symantec Antivirus Alerting working correctly?
2009-05-04/a>
Tom Liston
Adobe Reader/Acrobat Critical Vulnerability
2009-04-07/a>
Bojan Zdrnja
Advanced JavaScript obfuscation (or why signature scanning is a failure)
2009-04-02/a>
Bojan Zdrnja
JavaScript insertion and log deletion attack tools
2009-03-25/a>
David Goldsmith
Java Runtime Environment 6.0 Update 13 Released
2009-02-25/a>
Andre Ludwig
Adobe Acrobat pdf 0-day exploit, No JavaScript needed!
2009-02-10/a>
Swa Frantzen
Java up to date ?
2008-11-02/a>
Adrien de Beaupre
Daylight saving time
2008-09-15/a>
donald smith
Fake antivirus 2009 and search engine results
2008-08-10/a>
Stephen Hall
From lolly pops to afterglow
2008-07-14/a>
Daniel Wesemann
Obfuscated JavaScript Redux
2008-07-09/a>
Johannes Ullrich
Java Update
2008-06-30/a>
Marcus Sachs
More SQL Injection with Fast Flux hosting
2008-05-20/a>
Raul Siles
List of malicious domains inserted through SQL injection
2008-05-20/a>
Raul Siles
Java 6 Update 6 has been released
2008-04-06/a>
Daniel Wesemann
Advanced obfuscated JavaScript analysis
2008-04-03/a>
Bojan Zdrnja
Mixed (VBScript and JavaScript) obfuscation
WEBSENSE
2011-05-14/a>
Guy Bruneau
Websense Study Claims Canada Next Hotbed for Cybercrime Web Hosting Activity
2011-04-01/a>
John Bambenek
LizaMoon Mass SQL-Injection Attack Infected at least 500k Websites
2010-01-08/a>
Rob VandenBrink
Microsoft OfficeOnline, Searching for Trust and Malware
Homepage
Diaries
Podcasts
Jobs
Data
TCP/UDP Port Activity
Port Trends
SSH/Telnet Scanning Activity
Weblogs
Threat Feeds Activity
Threat Feeds Map
Useful InfoSec Links
Presentations & Papers
Research Papers
API
Tools
DShield Sensor
DNS Looking Glass
Honeypot (RPi/AWS)
InfoSec Glossary
Forums
Auditing
Diary Discussions
Forensics
General Discussions
Industry News
Network Security
Penetration Testing
Software Security
Contact Us
Contact Us
About Us
Handlers
Slack Channel
Mastodon
Twitter
Follow updates by subscribing to the handler's
diary RSS feed