Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
DAY 19 REMOTE USER VPN ACCESS
2010-10-19	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Access – Are things getting too easy, or too hard?
DAY
2024-07-09/a>	Johannes Ullrich	Microsoft Patch Tuesday July 2024
2024-06-11/a>	Johannes Ullrich	Microsoft Patch Tuesday June 2024
2024-03-12/a>	Johannes Ullrich	Microsoft Patch Tuesday - March 2024
2024-03-05/a>	Johannes Ullrich	Apple Releases iOS/iPadOS Updates with Zero Day Fixes.
2024-01-22/a>	Johannes Ullrich	Apple Updates Everything - New 0 Day in WebKit
2023-12-12/a>	Johannes Ullrich	Microsoft Patch Tuesday December 2023
2023-10-10/a>	Johannes Ullrich	October 2023 Microsoft Patch Tuesday Summary
2023-09-07/a>	Johannes Ullrich	Apple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-06-22/a>	Johannes Ullrich	Apple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-05-16/a>	Jesse La Grew	Signals Defense With Faraday Bags & Flipper Zero
2023-04-07/a>	Johannes Ullrich	Apple Patching Two 0-Day Vulnerabilities in iOS and macOS
2023-02-14/a>	Johannes Ullrich	Microsoft February 2023 Patch Tuesday
2022-11-29/a>	Johannes Ullrich	Packet Tuesday Episode 3: TCP Urgent Flag. https://packettuesday.com
2022-08-17/a>	Johannes Ullrich	Apple Patches Two Exploited Vulnerabilities
2022-05-10/a>	Renato Marinho	Microsoft May 2022 Patch Tuesday
2022-05-03/a>	Rob VandenBrink	Finding the Real "Last Patched" Day (Interim Version)
2022-02-10/a>	Johannes Ullrich	iOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2022-01-11/a>	Johannes Ullrich	Microsoft Patch Tuesday - January 2022
2021-11-27/a>	Didier Stevens	Video: SANS Holiday Hack Challenge 2021 Q&A with Ed Skoudis
2021-09-14/a>	Renato Marinho	Microsoft September 2021 Patch Tuesday
2021-04-13/a>	Richard Porter	Microsoft April 2021 Patch Tuesday
2021-03-03/a>	Johannes Ullrich	Microsoft Releases Exchange Emergency Patch to Fix Actively Exploited Vulnerability
2020-12-08/a>	Johannes Ullrich	December 2020 Microsoft Patch Tuesday: Exchange, Sharepoint, Dynamics and DNS Spoofing
2020-06-18/a>	Jan Kopriva	Broken phishing accidentally exploiting Outlook zero-day
2020-05-14/a>	Rob VandenBrink	Patch Tuesday Revisited - CVE-2020-1048 isn't as "Medium" as MS Would Have You Believe
2020-05-01/a>	Jim Clausing	Attack traffic on TCP port 9673
2020-03-23/a>	Didier Stevens	Windows Zeroday Actively Exploited: Type 1 Font Parsing Remote Code Execution Vulnerability
2020-03-10/a>	Johannes Ullrich	Microsoft Patch Tuesday March 2020
2019-07-09/a>	John Bambenek	MSFT July 2019 Patch Tuesday
2019-04-25/a>	Rob VandenBrink	Unpatched Vulnerability Alert - WebLogic Zero Day
2018-12-11/a>	Richard Porter	Microsoft December 2018 Patch Tuesday
2018-10-09/a>	Johannes Ullrich	October 2018 Microsoft Patch Tuesday
2018-09-11/a>	Johannes Ullrich	Microsoft September Patch Tuesday Summary
2018-06-12/a>	Johannes Ullrich	Microsoft June 2018 Patch Tuesday
2018-02-01/a>	Johannes Ullrich	Adobe Flash 0-Day Used Against South Korean Targets
2017-07-11/a>	Renato Marinho	July's Microsoft Patch Tuesday
2017-05-02/a>	Richard Porter	Do you have Intel AMT? Then you have a problem today! Intel Active Management Technology INTEL-SA-00075
2017-03-14/a>	Johannes Ullrich	February and March Microsoft Patch Tuesday
2017-02-14/a>	Johannes Ullrich	Microsoft Patch Tuesday Delayed
2017-02-04/a>	Xavier Mertens	Detecting Undisclosed Vulnerabilities with Security Tools & Features
2017-01-10/a>	Johannes Ullrich	January 2017 Microsoft Patch Tuesday
2016-09-13/a>	Rob VandenBrink	Microsoft Patch Tuesday Analysis
2016-08-25/a>	Xavier Mertens	Out-of-Band iOS Patch Fixes 0-Day Vulnerabilities
2016-07-12/a>	Johannes Ullrich	Microsoft Patch Tuesday Summary for July 2016
2016-05-12/a>	Xavier Mertens	Adobe Released Updates to Fix Critical Vulnerability
2016-04-06/a>	Bojan Zdrnja	YAFP (Yet Another Flash Patch)
2016-02-09/a>	Johannes Ullrich	Microsoft February 2016 Patch Tuesday
2016-02-09/a>	Johannes Ullrich	Adobe Patch Tuesday - February 2016
2016-01-12/a>	Alex Stanford	January 2016 Microsoft Patch Tuesday
2015-12-08/a>	Johannes Ullrich	December 2015 Microsoft Patch Tuesday
2015-11-10/a>	Johannes Ullrich	November 2015 Microsoft Patch Tuesday
2015-10-13/a>	Alex Stanford	October 2015 Microsoft Patch Tuesday
2015-09-08/a>	Johannes Ullrich	September 2015 Microsoft Patch Tuesday
2015-08-11/a>	Manuel Humberto Santander Pelaez	August 2015 Microsoft Patch Tuesday
2015-07-27/a>	Daniel Wesemann	Angler's best friends
2015-07-14/a>	Johannes Ullrich	July 2015 Microsoft Patch Tuesday
2015-07-12/a>	Rick Wanner	Another Adobe Flash Zero Day http://www.kb.cert.org/vuls/id/338736
2015-06-09/a>	Johannes Ullrich	Microsoft Patch Tuesday Summary for June 2015
2015-05-12/a>	Johannes Ullrich	May 2015 Microsoft Patch Tuesday Summary
2015-04-14/a>	Alex Stanford	Microsoft Patch Tuesday - April 2015
2015-03-10/a>	Johannes Ullrich	Microsoft March Patch Tuesday
2015-02-10/a>	Mark Baggett	Microsoft Update Advisory for February 2015
2015-02-05/a>	Johannes Ullrich	Adobe Flash Player Update Released, Fixing CVE 2015-0313
2015-01-23/a>	Adrien de Beaupre	Infocon change to yellow for Adobe Flash issues
2015-01-13/a>	Johannes Ullrich	Microsoft Patch Tuesday - January 2015 (Really? Telnet?)
2014-12-09/a>	Alex Stanford	Microsoft Patch Tuesday - December 2014
2014-11-18/a>	Jim Clausing	Microsoft November out-of-cycle patch MS14-068
2014-11-11/a>	Johannes Ullrich	Microsoft November 2014 Patch Tuesday
2014-10-14/a>	Johannes Ullrich	Microsoft October 2014 Patch Tuesday
2014-09-09/a>	Alex Stanford	Microsoft Patch Tuesday - September 2014
2014-08-12/a>	Alex Stanford	Microsoft Patch Tuesday - August 2014
2014-07-30/a>	Rick Wanner	Symantec Endpoint Protection Privilege Escalation Zero Day
2014-07-28/a>	Johannes Ullrich	Interesting HTTP User Agent "chroot-apach0day"
2014-07-08/a>	Alex Stanford	Microsoft Patch Tuesday - July
2014-06-10/a>	Alex Stanford	Microsoft Patch Tuesday June 2014
2014-06-06/a>	Johannes Ullrich	Microsoft June Patch Tuesday Advance Notification
2014-05-21/a>	John Bambenek	New, Unpatched IE 0 Day published at ZDI
2014-05-13/a>	Johannes Ullrich	Microsoft May 2014 Patch Tuesday
2014-05-01/a>	Johannes Ullrich	Microsoft Announces Special Patch for IE 0-day (Win XP included!)
2014-04-08/a>	Richard Porter	April 2014 Microsoft Patches
2014-03-24/a>	Johannes Ullrich	New Microsoft Advisory: Unpatched Word Flaw used in Targeted Attacks
2014-03-11/a>	Johannes Ullrich	Microsoft Patch Tuesday March 2014
2014-03-08/a>	Guy Bruneau	Microsoft March Patch Pre-Announcement
2014-02-20/a>	Stephen Hall	Abobe out of band patch announcement (APSB14-07)
2014-02-14/a>	Chris Mohan	FireEye reports IE 10 zero-day being used in watering hole attack
2014-02-11/a>	Johannes Ullrich	February 2014 Microsoft Patch Tuesday
2014-02-07/a>	Johannes Ullrich	Microsoft Advance Notification for February 2014
2014-01-14/a>	Johannes Ullrich	Microsoft Patch Tuesday January 2014
2013-12-10/a>	Johannes Ullrich	Microsoft December Patch Tuesday
2013-12-07/a>	Guy Bruneau	Microsoft December Patch Pre-Announcement
2013-11-28/a>	Rob VandenBrink	Microsoft Security Advisory (2914486): Vulnerability in Microsoft Windows Kernel 0 day exploit in wild
2013-11-12/a>	Johannes Ullrich	November 2013 Microsoft Patch Tuesday
2013-11-09/a>	Guy Bruneau	IE Zero-Day Vulnerability Exploiting msvcrt.dll
2013-10-08/a>	Johannes Ullrich	Microsoft October 2013 Patch Tuesday
2013-09-10/a>	Swa Frantzen	Adobe September 2013 Black Tuesday Overview
2013-09-10/a>	Swa Frantzen	Microsoft September 2013 Black Tuesday Overview
2013-08-28/a>	Bojan Zdrnja	MS13-056 (false positive)? alerts
2013-08-13/a>	Swa Frantzen	Microsoft August 2013 Black Tuesday Overview
2013-08-13/a>	Swa Frantzen	Microsoft security advisories: RDP and MD5 deprecation in Microsoft root certificates
2013-07-09/a>	Swa Frantzen	Microsoft July 2013 Black Tuesday Overview
2013-07-09/a>	Swa Frantzen	Adobe July 2013 Black Tuesday Overview
2013-07-06/a>	Guy Bruneau	Microsoft July Patch Pre-Announcement
2013-06-11/a>	Swa Frantzen	vmware security advisory VMSA-2013-0008
2013-06-11/a>	Swa Frantzen	Microsoft June 2013 Black Tuesday Overview
2013-06-11/a>	Swa Frantzen	Adobe June 2013 Black Tuesday Overview
2013-06-11/a>	Swa Frantzen	Other Microsoft Black Tuesday News
2013-05-14/a>	Swa Frantzen	Microsoft May 2013 Black Tuesday Overview
2013-05-14/a>	Swa Frantzen	Firefox & Thunderbird released
2013-05-14/a>	Swa Frantzen	Adobe May 2013 Black Tuesday Overview
2013-05-14/a>	Swa Frantzen	Microsoft Security Advisory 2846338
2013-05-09/a>	John Bambenek	Adobe Releases 0-day Security Advisory for Coldfusion, Exploit Code Available. Advisory here: http://www.adobe.com/support/security/advisories/apsa13-03.html
2013-05-04/a>	Kevin Shortt	The Zero-Day Pendulum Swings
2013-04-09/a>	Swa Frantzen	Microsoft April 2013 Black Tuesday Overview
2013-04-09/a>	Swa Frantzen	Adobe April 2013 Black Tuesday Overview
2013-04-04/a>	Johannes Ullrich	Microsoft April Patch Tuesday Advance Notification
2013-03-12/a>	Swa Frantzen	Microsoft March 2013 Black Tuesday Overview
2013-03-12/a>	Swa Frantzen	Adobe March 2013 Black Tueday
2013-02-14/a>	Adam Swanger	ISC Monthly Threat Update - February 2013 http://isc.sans.edu/podcastdetail.html?id=3121
2013-02-12/a>	Swa Frantzen	Adobe Feb 2013 Black Tuesday patches
2013-02-12/a>	Adam Swanger	Microsoft February 2013 Black Tuesday Update - Overview
2013-02-08/a>	Johannes Ullrich	Microsoft February Patch Tuesday Advance Notification
2013-02-07/a>	John Bambenek	Adobe Releases Patches for 0-day Vulnerability in Flash Player for Windows and Mac, Upgrade now: http://www.adobe.com/support/security/bulletins/apsb13-04.html
2013-01-22/a>	Richard Porter	Using Metasploit for Patch Sanity Checks
2013-01-14/a>	Richard Porter	Microsoft Out of Cycle Patch: IE http://technet.microsoft.com/en-us/security/bulletin/ms13-jan
2013-01-14/a>	Richard Porter	January 2013 Microsoft Out of Cycle Patch
2013-01-13/a>	Stephen Hall	Java 0-Day patched as Java 7 U 11 released
2013-01-12/a>	Stephen Hall	Java 0-day impact to Java 6 (and beyond?)
2013-01-10/a>	Adam Swanger	ISC Monthly Threat Update New Format
2013-01-08/a>	Richard Porter	Microsoft January 2013 Black Tuesday Update - Overview
2013-01-04/a>	Daniel Wesemann	Patch pre-notification from Adobe and Microsoft
2013-01-02/a>	Russ McRee	EMET 3.5: The Value of Looking Through an Attacker's Eyes
2012-12-11/a>	John Bambenek	Microsoft December 2012 Black Tuesday Update - Overview
2012-11-26/a>	John Bambenek	Online Shopping for the Holidays? Tips, News and a Fair Warning
2012-11-13/a>	Jim Clausing	Microsoft November 2012 Black Tuesday Update - Overview
2012-10-09/a>	Johannes Ullrich	Microsoft October 2012 Black Tuesday Update - Overview
2012-10-04/a>	Johannes Ullrich	Microsoft October Patch Pre-Announcement
2012-09-17/a>	Rob VandenBrink	IE Zero Day is "For Real"
2012-09-11/a>	Adam Swanger	Microsoft September 2012 Black Tuesday Update - Overview
2012-09-01/a>	Russ McRee	Blackhole targeting Java vulnerability via fake Microsoft Services Agreement email phish
2012-08-14/a>	Rick Wanner	Microsoft August 2012 Black Tuesday Update - Overview
2012-08-04/a>	Kevin Liston	Vendors: More Patch-Release Options Please
2012-07-10/a>	Swa Frantzen	Microsoft July 2012 Black Tuesday Update - Overview
2012-07-10/a>	Swa Frantzen	Microsoft revoking trust in Microsoft certificates - SA 2728973
2012-07-10/a>	Swa Frantzen	Microsoft fix-it to disable gadgets - SA 2719662
2012-07-05/a>	Adrien de Beaupre	Microsoft advanced notification for July 2012 patch Tuesday
2012-06-12/a>	Swa Frantzen	Adobe June 2012 Black Tuesday patches
2012-06-12/a>	Swa Frantzen	Microsoft June 2012 Black Tuesday Update - Overview
2012-06-12/a>	Swa Frantzen	Java 7u5 and 6u33 released
2012-06-01/a>	Johannes Ullrich	What Does "IPv6 Day" mean to you?
2012-05-23/a>	Mark Baggett	Problems with MS12-035 affecting XP, SBS and Windows 2003?
2012-05-08/a>	Adam Swanger	Microsoft May 2012 Black Tuesday Update - Overview
2012-04-15/a>	Rick Wanner	.Net update affects printing from some applications
2012-04-10/a>	Swa Frantzen	Microsoft April 2012 Black Tuesday Update - Overview
2012-04-10/a>	Swa Frantzen	Adobe April 2012 Black Tuesday Update
2012-04-06/a>	Johannes Ullrich	Microsoft April Patch Tuesday Pre-Announcement (6 Patches): http://technet.microsoft.com/en-us/security/bulletin/ms12-apr
2012-03-13/a>	Lenny Zeltser	March 2012 Microsoft Black Tuesday
2012-02-14/a>	Johannes Ullrich	February 2012 Microsoft Black Tuesday
2012-01-10/a>	Adrien de Beaupre	January 2012 Microsoft Black Tuesday Summary
2012-01-10/a>	Adrien de Beaupre	Adobe January 2012 Black Tuesday overview
2012-01-06/a>	Guy Bruneau	January 2012 Patch Tuesday Pre-release
2011-12-29/a>	Richard Porter	ASP.Net Vulnerability
2011-12-25/a>	Deborah Hale	Merry Christmas, Happy Holidays
2011-12-21/a>	Chris Mohan	The off switch
2011-12-13/a>	Johannes Ullrich	December 2011 Microsoft Black Tuesday Summary
2011-12-08/a>	Adrien de Beaupre	Newest Adobe Flash 11.1.102.55 and Previous 0 Day Exploit
2011-12-08/a>	Adrien de Beaupre	Microsoft Security Bulletin Advance Notification for December 2011
2011-11-16/a>	Jason Lam	Potential 0-day on Bind 9
2011-11-08/a>	Swa Frantzen	Microsoft November 2011 Black Tuesday Overview
2011-11-08/a>	Swa Frantzen	Abobe November 2011 Black Tuesday Overview
2011-11-08/a>	Swa Frantzen	Apple Black Tuesday
2011-11-03/a>	Guy Bruneau	November 2011 Patch Tuesday Pre-release
2011-10-11/a>	Swa Frantzen	Microsoft Black Tuesday Overview October 2011
2011-09-13/a>	Swa Frantzen	Microsoft September 2011 Black Tuesday
2011-09-13/a>	Swa Frantzen	Adobe September 2011 Black Tuesday overview
2011-09-09/a>	Johannes Ullrich	Early Patch Tuesday Today: Microsoft September 2011 Patches
2011-09-08/a>	Mark Hofman	Microsoft has released their advanced notification for patch Tuesday. 15 Vulnerabilities to be addressed. more here --> http://blogs.technet.com/b/msrc/archive/2011/09/08/advanced-notification-for-the-september-2011-bulletin-release.aspx
2011-08-09/a>	Swa Frantzen	Microsoft August 2011 Black Tuesday Overview
2011-08-09/a>	Swa Frantzen	Adobe August 2011 Black Tuesday Overview
2011-07-12/a>	Swa Frantzen	Microsoft July 2011 Black Tuesday Overview
2011-07-10/a>	Raul Siles	Jailbreakme Takes Advantage of 0-day PDF Vuln in Apple iOS Devices
2011-06-14/a>	Swa Frantzen	Adobe releases patches
2011-06-14/a>	Swa Frantzen	Microsoft June 2011 Black Tuesday Overview
2011-05-10/a>	Swa Frantzen	May 2011 Microsoft Black Tuesday Overview
2011-05-06/a>	Richard Porter	Unpatched Exploit: Skype for MAC
2011-04-11/a>	Jim Clausing	April 2011 Microsoft Black Tuesday Summary
2011-04-08/a>	Johannes Ullrich	Dark Black Tuesday Coming Up: 17 Microsoft Bulletins
2011-03-08/a>	Jim Clausing	March 2011 Microsoft Black Tuesday Summary
2011-02-08/a>	Joel Esler	Feburary 2011 Microsoft Black Tuesday Summary
2011-01-11/a>	Kevin Shortt	January 2011 Microsoft Black Tuesday Summary
2011-01-11/a>	Kevin Shortt	Spam Cannons on Holiday
2011-01-08/a>	Guy Bruneau	January 2011 Patch Tuesday Pre-release
2010-12-23/a>	Mark Hofman	IE 0 Day, just in time for Christmas
2010-12-22/a>	John Bambenek	IIS 7.5 0-Day DoS (processing FTP requests)
2010-12-20/a>	Guy Bruneau	Patch Issues with Outlook 2007
2010-12-14/a>	Manuel Humberto Santander Pelaez	December 2010 Microsoft Black Tuesday Summary
2010-11-24/a>	Bojan Zdrnja	Privilege escalation 0-day in almost all Windows versions
2010-11-09/a>	Johannes Ullrich	November 2010 Microsoft Black Tuesday Summary
2010-11-01/a>	Manuel Humberto Santander Pelaez	CVE-2010-3654 exploit in the wild
2010-10-28/a>	Manuel Humberto Santander Pelaez	CVE-2010-3654 - New dangerous 0-day authplay library adobe products vulnerability
2010-10-26/a>	Pedro Bueno	Firefox news
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote Access Tools
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Tunnels - to Split or not to Split?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - VPN Architectures – SSL or IPSec?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Access – Are things getting too easy, or too hard?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - VPN and Remote Access Tools
2010-10-12/a>	Adrien de Beaupre	October 2010 Microsoft Black Tuesday Summary
2010-10-11/a>	Adrien de Beaupre	OT: Happy Thanksgiving Day Canada
2010-10-08/a>	Rick Wanner	Patch Tuesday Pre-release -- 16 updates
2010-09-14/a>	Adrien de Beaupre	September 2010 Microsoft Black Tuesday Summary
2010-08-10/a>	Jim Clausing	August 2010 Micrsoft Black Tuesday Summary
2010-08-07/a>	Stephen Hall	Countdown to Tuesday...
2010-07-13/a>	Jim Clausing	July 2010 Microsoft Black Tuesday Summary
2010-06-08/a>	Manuel Humberto Santander Pelaez	June 2010 Microsoft Black Tuesday Summary
2010-06-03/a>	Guy Bruneau	Microsoft Patch Tuesday June 2010 Pre-Release
2010-05-11/a>	Scott Fendley	May 2010 Microsoft Patches
2010-05-08/a>	Guy Bruneau	Microsoft Patch Tuesday May 2010 Pre-Release
2010-04-13/a>	Johannes Ullrich	Microsoft April 2010 Patch Tuesday
2010-04-08/a>	Guy Bruneau	Microsoft Patch Tuesday April 2010 Pre-Release
2010-03-09/a>	John Bambenek	March 2010 - Microsoft Patch Tuesday Diary
2010-03-01/a>	Mark Hofman	IE 0-day using .hlp files
2010-02-09/a>	Adrien de Beaupre	When is a 0day not a 0day? Samba symlink bad default config
2010-02-09/a>	Johannes Ullrich	February 2010 Black Tuesday Overview
2010-02-04/a>	Johannes Ullrich	Microsoft Patch Tuesday Pre-Release
2010-01-21/a>	Johannes Ullrich	Microsoft January Out of Band Patch
2010-01-14/a>	Bojan Zdrnja	0-day vulnerability in Internet Explorer 6, 7 and 8
2010-01-12/a>	Johannes Ullrich	Microsoft Security Bulletin: January 2010
2010-01-12/a>	Johannes Ullrich	Pre-Announced Adobe Reader and Acrobat Patch Found!
2010-01-07/a>	Daniel Wesemann	Static analysis of malicious PDFs
2010-01-07/a>	Daniel Wesemann	Static analysis of malicous PDFs (Part #2)
2009-12-27/a>	Patrick Nolan	Pressure increasing for Microsoft to patch IIS 0 day
2009-12-15/a>	Johannes Ullrich	Adobe 0-day in the wild - again
2009-12-08/a>	Deborah Hale	December 2009 Black Tuesday Overview
2009-11-22/a>	Marcus Sachs	IE6 and IE7 0-Day Reported
2009-11-10/a>	Swa Frantzen	Microsoft November Black Tuesday Overview
2009-10-13/a>	Johannes Ullrich	Microsoft October 2009 Black Tuesday Overview
2009-09-08/a>	Adrien de Beaupre	Microsoft Security Advisory 975191 Revised
2009-09-08/a>	Guy Bruneau	Microsoft September 2009 Black Tuesday Overview
2009-09-04/a>	Adrien de Beaupre	Vulnerabilities (plural) in MS IIS FTP Service 5.0, 5.1. 6.0, 7.0
2009-08-31/a>	Pedro Bueno	Microsoft IIS 5/6 FTP 0Day released
2009-08-11/a>	Swa Frantzen	Microsoft August 2009 Black Tuesday Overview
2009-07-22/a>	Bojan Zdrnja	YA0D (Yet Another 0-Day) in Adobe Flash player
2009-07-17/a>	Bojan Zdrnja	A new fascinating Linux kernel vulnerability
2009-07-14/a>	Swa Frantzen	Microsoft July Black Tuesday Overview
2009-07-14/a>	Swa Frantzen	Oracle Black Tuesday
2009-07-06/a>	Stephen Hall	0-day in Microsoft DirectShow (msvidctl.dll) used in drive-by attacks
2009-07-03/a>	Adrien de Beaupre	Happy 4th of July!
2009-06-09/a>	Swa Frantzen	Adobe June Black Tuesday upgrades
2009-06-09/a>	Swa Frantzen	Microsoft June Black Tuesday Overview
2009-05-12/a>	Swa Frantzen	MSFT's version of responsible disclosure
2009-05-12/a>	Swa Frantzen	May Black Tuesday Overview
2009-04-29/a>	Jason Lam	Two Adobe 0-day vulnerabilities
2009-04-14/a>	Swa Frantzen	April Black Tuesday Overview
2009-03-18/a>	Adrien de Beaupre	Adobe Security Bulletin Adobe Reader and Acrobat
2009-03-10/a>	Swa Frantzen	March black Tuesday overview
2009-02-25/a>	Andre Ludwig	Adobe Acrobat pdf 0-day exploit, No JavaScript needed!
2009-02-10/a>	Swa Frantzen	February Black Tuesday Overview
2009-01-13/a>	Johannes Ullrich	January Black Tuesday Overview
2008-12-12/a>	Johannes Ullrich	MSIE 0-day Spreading Via SQL Injection
2008-12-12/a>	Kevin Liston	IE7 0day expanded to include IE6 and IE8(beta)
2008-12-10/a>	Bojan Zdrnja	0-day exploit for Internet Explorer in the wild
2008-12-09/a>	Swa Frantzen	December Black Tuesday Overview
2008-11-11/a>	Swa Frantzen	November Black Tuesday Overview
2008-11-02/a>	Adrien de Beaupre	Daylight saving time
2008-10-14/a>	Swa Frantzen	October Black Tuesday Overview
2008-09-09/a>	Swa Frantzen	September 2008 Black Tuesday Overview
2008-08-12/a>	Stephen Hall	August 2008 Black Tuesday Overview
2008-07-08/a>	Swa Frantzen	July 2008 black tuesday overview
2008-06-10/a>	Swa Frantzen	June 2008 Black Tuesday Overview
2008-05-13/a>	Swa Frantzen	May 2008 black tuesday overview
2008-04-08/a>	Swa Frantzen	April 2008 - Black Tuesday Overview
2008-03-11/a>	Swa Frantzen	March Black Tuesday Overview
2008-02-12/a>	Swa Frantzen	February Black Tuesday Overview
2008-01-08/a>	Swa Frantzen	January Black Tuesday overview
2007-12-11/a>	Swa Frantzen	December black tuesday overview
2007-11-13/a>	Swa Frantzen	november black tuesday overview
2007-10-09/a>	Swa Frantzen	October Black Tuesday overview
2007-09-11/a>	Swa Frantzen	September microsoft patch overview
2007-08-14/a>	Swa Frantzen	August 'Black Tuesday' overview
2007-07-10/a>	Swa Frantzen	July 'Black Tuesday' overview
2007-06-12/a>	Johannes Ullrich	June 2007, Microsoft Patch Tuesday Overview.
2007-05-08/a>	Swa Frantzen	May 2007, Black Tuesday patch overview
2007-04-10/a>	Swa Frantzen	Microsoft black Tuesday patches - April 2007
2007-04-03/a>	Swa Frantzen	* Microsoft out of cycle patch
2007-02-13/a>	Swa Frantzen	Microsoft Black Tuesday patches - February 2007
2007-01-09/a>	Swa Frantzen	Microsoft Patches - January 2007 - overview
2006-12-12/a>	Swa Frantzen	Microsoft Black Tuesday - December 2006 overview
2006-12-12/a>	Robert Danford	MS06-078: 2 Windows Media Format Vulnerabilities (CVE-2006-4702, CVE-2006-6134)
2006-11-29/a>	Toby Kohlenberg	Week of Oracle bugs cancelled
2006-11-14/a>	Swa Frantzen	Microsoft Black Tuesday Overview
2006-10-09/a>	Swa Frantzen	Microsoft black tuesday - October 2006 STATUS
2006-09-28/a>	Swa Frantzen	Powerpoint, yet another new vulnerability
2006-09-28/a>	Swa Frantzen	MSIE: One patched, one pops up again (setslice)
2006-09-22/a>	Swa Frantzen	Yellow: MSIE VML exploit spreading
2006-09-19/a>	Swa Frantzen	Yet another MSIE 0-day: VML
2006-09-15/a>	Swa Frantzen	MSIE DirectAnimation ActiveX 0-day update
2006-09-12/a>	Swa Frantzen	Microsoft security patches for September 2006
19
2023-07-12/a>	Brad Duncan	Loader activity for Formbook "QM18"
2022-06-09/a>	Brad Duncan	TA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt)
2022-01-12/a>	Johannes Ullrich	A Quick CVE-2022-21907 FAQ
2022-01-02/a>	Guy Bruneau	Exchange Server - Email Trapped in Transport Queues
2021-09-16/a>	Jan Kopriva	Phishing 101: why depend on one suspicious message subject when you can use many?
2021-06-26/a>	Guy Bruneau	CVE-2019-9670: Zimbra Collaboration Suite XXE vulnerability
2020-12-18/a>	Jan Kopriva	A slightly optimistic tale of how patching went for CVE-2019-19781
2020-07-21/a>	Jan Kopriva	Couple of interesting Covid-19 related stats
2020-04-29/a>	Johannes Ullrich	Privacy Preserving Protocols to Trace Covid19 Exposure
2020-04-17/a>	Xavier Mertens	Weaponized RTF Document Generator & Mailer in PowerShell
2020-04-03/a>	Xavier Mertens	Obfuscated with a Simple 0x0A
2020-03-28/a>	Didier Stevens	Covid19 Domain Classifier
2020-03-27/a>	Johannes Ullrich	Help us classify Covid19 related domains https://isc.sans.edu/covidclassifier.html (login required)
2020-03-24/a>	Russ McRee	Another Critical COVID-19 Shortage: Digital Security
2020-03-19/a>	Xavier Mertens	COVID-19 Themed Multistage Malware
2020-01-13/a>	Didier Stevens	Citrix ADC Exploits: Overview of Observed Payloads
2020-01-11/a>	Johannes Ullrich	Citrix ADC Exploits are Public and Heavily Used. Attempts to Install Backdoor
2020-01-07/a>	Johannes Ullrich	A Quick Update on Scanning for CVE-2019-19781 (Citrix ADC / Gateway Vulnerability)
2019-06-19/a>	Johannes Ullrich	Critical Actively Exploited WebLogic Flaw Patched CVE-2019-2729
2019-05-22/a>	Johannes Ullrich	An Update on the Microsoft Windows RDP "Bluekeep" Vulnerability (CVE-2019-0708) [now with pcaps]
2019-04-28/a>	Johannes Ullrich	Update about Weblogic CVE-2019-2725 (Exploits Used in the Wild, Patch Status)
2017-08-24/a>	Bojan Zdrnja	Free Bitcoins? Why not?
2016-05-16/a>	Rick Wanner	An oldie but a goodie - 419 Death Scam
2014-06-12/a>	Johannes Ullrich	Metasploit now includes module to exploit CVE-2014-0195 (OpenSSL DTLS Fragment Vuln.)
2012-05-16/a>	Johannes Ullrich	Reserved IP Address Space Reminder
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote Access Tools
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Tunnels - to Split or not to Split?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - VPN Architectures – SSL or IPSec?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Access – Are things getting too easy, or too hard?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - VPN and Remote Access Tools
2010-07-26/a>	Guy Bruneau	SophosLabs Released Free Tool to Validate Microsoft Shortcut
2010-07-20/a>	Manuel Humberto Santander Pelaez	LNK vulnerability now with Metasploit module implementing the WebDAV method
REMOTE
2024-06-17/a>	Xavier Mertens	New NetSupport Campaign Delivered Through MSIX Packages
2022-10-07/a>	Xavier Mertens	Critical Fortinet Vulnerability Ahead
2021-05-14/a>	Xavier Mertens	"Open" Access to Industrial Systems Interface is Also Far From Zero
2021-02-13/a>	Guy Bruneau	vSphere Replication updates address a command injection vulnerability (CVE-2021-21976) - https://www.vmware.com/security/advisories/VMSA-2021-0001.html
2020-09-29/a>	Xavier Mertens	Managing Remote Access for Partners & Contractors
2020-08-22/a>	Guy Bruneau	Remote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2019-09-24/a>	Xavier Mertens	Huge Amount of remotewebaccess.com Sites Found in Certificate Transparency Logs
2017-11-25/a>	Guy Bruneau	Exim Remote Code Exploit
2015-10-12/a>	Guy Bruneau	Critical Vulnerability in Multiple Cisco Products - Apache Struts 2 Command Execution http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2
2013-09-18/a>	Rob VandenBrink	Cisco DCNM Update Released
2013-02-16/a>	Lorna Hutcheson	Fedora RedHat Vulnerabilty Released
2012-08-22/a>	Adrien de Beaupre	Apple Remote Desktop update fixes no encryption issue
2012-03-16/a>	Russ McRee	MS12-020 RDP vulnerabilities: Patch, Mitigate, Detect
2011-11-28/a>	Tom Liston	A Puzzlement...
2011-11-19/a>	Pedro Bueno	Dragon Research Group (DRG) announced the white paper entitled "VNC: Threats and Countermeasures" : https://dragonresearchgroup.org/insight/vnc-tac.html
2011-08-11/a>	Guy Bruneau	BlackBerry Enterprise Server Critical Update
2010-12-19/a>	Raul Siles	Intel's new processors have a remote kill switch (Anti-Theft 3.0)
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote Access Tools
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Tunnels - to Split or not to Split?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Access – Are things getting too easy, or too hard?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - VPN and Remote Access Tools
2010-05-12/a>	Rob VandenBrink	Adobe Shockwave Update
2010-03-15/a>	Adrien de Beaupre	Spamassassin Milter Plugin Remote Root Attack
2010-03-10/a>	Rob VandenBrink	Microsoft Security Advisory 981374 - Remote Code Execution Vulnerability for IE6 and IE7
2010-02-02/a>	Guy Bruneau	Cisco Secure Desktop Remote XSS Vulnerability
2009-11-14/a>	Adrien de Beaupre	Microsoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released
2009-11-12/a>	Rob VandenBrink	Windows 7 / Windows Server 2008 Remote SMB Exploit
2008-05-06/a>	Marcus Sachs	Industrial Control Systems Vulnerability
2008-03-13/a>	Jason Lam	Remote File Include spoof!?
2006-11-20/a>	Joel Esler	MS06-070 Remote Exploit
USER
2024-10-16/a>	Johannes Ullrich	The Top 10 Not So Common SSH Usernames and Passwords
2024-02-28/a>	Johannes Ullrich	Exploit Attempts for Unknown Password Reset Vulnerability
2024-01-24/a>	Johannes Ullrich	How Bad User Interfaces Make Security Tools Harmful
2024-01-08/a>	Jesse La Grew	What is that User Agent?
2023-09-05/a>	Jesse La Grew	Common usernames submitted to honeypots
2021-09-24/a>	Xavier Mertens	Keep an Eye on Your Users Mobile Devices (Simple Inventory)
2021-04-24/a>	Guy Bruneau	Base64 Hashes Used in Web Scanning
2021-03-02/a>	Russ McRee	Adversary Simulation with Sim
2019-07-25/a>	Rob VandenBrink	When Users Attack! Users (and Admins) Thwarting Security Controls
2019-07-05/a>	Didier Stevens	A "Stream O" Maldoc
2019-07-01/a>	Didier Stevens	Maldoc: Payloads in User Forms
2018-05-27/a>	Guy Bruneau	Capture and Analysis of User Agents
2018-01-01/a>	Didier Stevens	What is new?
2014-04-05/a>	Jim Clausing	Those strange e-mails with URLs in them can lead to Android malware
2013-01-15/a>	Rob VandenBrink	When Disabling IE6 (or Java, or whatever) is not an Option...
2012-07-14/a>	Tony Carothers	User Awareness and Education
2012-04-05/a>	Johannes Ullrich	Evil hides everywhere: Web Application Exploits in Headers
2011-08-26/a>	Daniel Wesemann	User Agent 007
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Tunnels - to Split or not to Split?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Access – Are things getting too easy, or too hard?
2009-05-28/a>	Jim Clausing	More new volatility plugins
2008-09-18/a>	Bojan Zdrnja	Monitoring HTTP User-Agent fields
VPN
2024-01-16/a>	Johannes Ullrich	Scans for Ivanti Connect "Secure" VPN Vulnerability (CVE-2023-46805, CVE-2024-21887)
2023-09-18/a>	Johannes Ullrich	Internet Wide Multi VPN Search From Single /24 Network
2023-09-07/a>	Johannes Ullrich	Fleezeware/Scareware Advertised via Facebook Tags; Available in Apple App Store
2023-06-21/a>	Yee Ching Tok	Analyzing a YouTube Sponsorship Phishing Mail and Malware Targeting Content Creators
2021-09-21/a>	Johannes Ullrich	A First Look at Apple's iOS 15 "Private Relay" feature.
2021-07-10/a>	Guy Bruneau	Scanning for Microsoft Secure Socket Tunneling Protocol
2020-07-29/a>	Johannes Ullrich	Consumer VPNs: You May Be Fine Without
2020-03-15/a>	Guy Bruneau	VPN Access and Activity Monitoring
2018-09-19/a>	Rob VandenBrink	Certificates Revisited - SSL VPN Certificates 2 Ways
2017-04-02/a>	Guy Bruneau	IPFire - A Household Multipurpose Security Gateway
2015-12-22/a>	Rick Wanner	The other Juniper vulnerability - CVE-2015-7756
2015-02-13/a>	Johannes Ullrich	Microsoft February Patch Failures Continue: KB3023607 vs. Cisco AnyConnect Client
2012-12-06/a>	Johannes Ullrich	How to identify if you are behind a "Transparent Proxy"
2011-06-28/a>	Johannes Ullrich	Deja-Vu: Cisco VPN Windows Client Privilege Escalation
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Tunnels - to Split or not to Split?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - VPN Architectures – SSL or IPSec?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Access – Are things getting too easy, or too hard?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - VPN and Remote Access Tools
2009-12-01/a>	Chris Carboni	Clientless SSL VPN products break web browser domain-based security models
2009-11-17/a>	Guy Bruneau	OpenVPN Fixed OpenSSL Session Renegotiation Issue
ACCESS
2020-09-29/a>	Xavier Mertens	Managing Remote Access for Partners & Contractors
2019-09-24/a>	Xavier Mertens	Huge Amount of remotewebaccess.com Sites Found in Certificate Transparency Logs
2018-06-06/a>	Xavier Mertens	Converting PCAP Web Traffic to Apache Log
2016-07-03/a>	Guy Bruneau	Is Data Privacy part of your Company's Culture?
2014-10-13/a>	Lorna Hutcheson	For or Against: Port Security for Network Access Control
2014-07-28/a>	Guy Bruneau	Management and Control of Mobile Device Security
2014-07-06/a>	Richard Porter	Physical Access, Point of Sale, Vegas
2013-10-16/a>	Adrien de Beaupre	Access denied and blockliss
2013-07-04/a>	Russ McRee	Celebrating 4th of July With a Malware PCAP Visualization
2013-06-20/a>	Guy Bruneau	HP iLO3/iLO4 Remote Unauthorized Access with Single-Sign-On
2013-05-20/a>	Guy Bruneau	Sysinternals Updates for Accesschk, Procdump, RAMMap and Strings http://blogs.technet.com/b/sysinternals/archive/2013/05/17/updates-accesschk-v5-11-procdump-v6-0-rammap-v1-22-strings-v2-51.aspx
2012-12-31/a>	Manuel Humberto Santander Pelaez	How to determine which NAC solutions fits best to your needs
2011-11-22/a>	Pedro Bueno	Updates on ZeroAccess and BlackHole front...
2011-11-19/a>	Pedro Bueno	Dragon Research Group (DRG) announced the white paper entitled "VNC: Threats and Countermeasures" : https://dragonresearchgroup.org/insight/vnc-tac.html
2011-08-24/a>	Rob VandenBrink	Citrix Access Gateway Cross Site Scripting vulnerability and fix ==> http://support.citrix.com/article/CTX129971
2010-11-18/a>	Chris Carboni	Stopping the ZeroAccess Rootkit
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote Access Tools
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - Remote User VPN Access – Are things getting too easy, or too hard?
2010-10-19/a>	Rob VandenBrink	Cyber Security Awareness Month - Day 19 - VPN and Remote Access Tools
2010-08-13/a>	Tom Liston	The Strange Case of Doctor Jekyll and Mr. ED
2010-08-05/a>	Rob VandenBrink	Access Controls for Network Infrastructure
2008-10-09/a>	Bojan Zdrnja	Watch that .htaccess file on your web site
2008-07-07/a>	Scott Fendley	Microsoft Snapshot Viewer Security Advisory

DAY 19 REMOTE USER VPN ACCESS

DAY

19

REMOTE

USER

VPN

ACCESS