Date Author Title
2023-05-30Johannes UllrichYour Business Data and Machine Learning at Risk: Attacks Against Apache NiFi
2022-08-28Didier StevensSysinternals Updates: Sysmon v14.0 and ZoomIt v6.01
2021-11-14Didier StevensExternal Email System FBI Compromised: Sending Out Fake Warnings
2021-09-20Johannes Ullrich#OMIGOD Exploits Captured in the Wild. Researchers responsible for half of scans for related ports.
2021-03-19Xavier MertensPastebin.com Used As a Simple C2 Channel
2020-11-07Guy BruneauCryptojacking Targeting WebLogic TCP/7001
2020-09-17Xavier MertensSuspicious Endpoint Containment with OSSEC
2020-02-02Didier StevensVideo: Stego & Cryptominers
2019-12-26Xavier MertensBypassing UAC to Install a Cryptominer
2019-10-24Johannes UllrichYour Supply Chain Doesn't End At Receiving: How Do You Decommission Network Equipment?
2019-07-18Xavier MertensMalicious PHP Script Back on Stage?
2019-01-02Xavier MertensMalicious Script Leaking Data via FTP
2018-08-30Xavier MertensCrypto Mining Is More Popular Than Ever!
2018-07-13Xavier MertensCryptominer Delivered Though Compromized JavaScript File
2018-06-22Lorna HutchesonXPS Attachment Used for Phishing
2018-06-13Xavier MertensA Bunch of Compromized Wordpress Sites
2018-03-04Xavier MertensThe Crypto Miners Fight For CPU Cycles
2016-08-29Russ McReeRecommended Reading: Intrusion Detection Using Indicators of Compromise Based on Best Practices and Windows Event Logs
2015-03-07Guy BruneauShould it be Mandatory to have an Independent Security Audit after a Breach?
2014-07-19Russ McReeKeeping the RATs out: the trap is sprung - Part 3
2014-07-18Russ McReeKeeping the RATs out: **it happens - Part 2
2014-07-16Russ McReeKeeping the RATs out: an exercise in building IOCs - Part 1
2014-03-22Guy BruneauHow the Compromise of a User Account Lead to a Spam Incident
2013-06-21Guy BruneauSysinternals Updates for Autoruns, Strings & ZoomIt http://blogs.technet.com/b/sysinternals/archive/2013/06/20/updates-autoruns-v11-61-strings-v2-52-zoomit-v4-5.aspx
2013-02-22Johannes UllrichWhen web sites go bad: bible . org compromise
2011-09-26Jason LamMySQL.com compromised spreading malware
2011-06-19Guy BruneauSega Pass Compromised - 1.29 Million Customers Data Leaked
2011-04-18John BambenekWordpress.com Security Breach
2011-04-02Rick WannerRSA/EMC: Anatomy of a compromise
2011-02-21Adrien de BeaupreWinamp forums compromised
2010-12-13Deborah HaleGawker Media Breach of Security
2010-01-26Jason Lame107 CMS system website compromised
2009-10-22Adrien de BeaupreSysinternals updates: Disk2vhd v1.1, ZoomIt v4.1, Coreinfo v2.0, VMMap v2.4
2009-10-05Adrien de BeaupreTime to change your hotmail/gmail/yahoo password
2009-08-28Adrien de Beaupreapache.org compromised
2009-07-29Bojan ZdrnjaIncreasing number of attacks on security sites
2008-11-16Maarten Van HorenbeeckDetection of Trojan control channels
2008-08-25John BambenekThoughts on the Best Western Compromise