Date Author Title

KEY MANAGEMENT FAIL

2012-08-21Adrien de BeaupreRuggedCom fails key management 101 on Rugged Operating System (ROS)

KEY

2024-09-17/a>Xavier Mertens23:59, Time to Exfiltrate!
2024-07-24/a>Xavier Mertens"Mouse Logger" Malicious Python Script
2024-03-10/a>Guy BruneauWhat happens when you accidentally leak your AWS API keys? [Guest Diary]
2024-02-08/a>Xavier MertensA Python MP3 Player with Builtin Keylogger Capability
2023-12-23/a>Xavier MertensPython Keylogger Using Mailtrap.io
2022-07-20/a>Xavier MertensMalicious Python Script Behaving Like a Rubber Ducky
2022-04-25/a>Xavier MertensSimple PDF Linking to Malicious Content
2021-06-11/a>Xavier MertensKeeping an Eye on Dangerous Python Modules
2021-03-18/a>Xavier MertensSimple Python Keylogger
2020-08-14/a>Jan KoprivaDefinition of 'overkill' - using 130 MB executable to hide 24 kB malware
2019-02-21/a>Xavier MertensSimple Powershell Keyloggers are Back
2019-02-07/a>Xavier Mertens Phishing Kit with JavaScript Keylogger
2018-11-26/a>Russ McReeViperMonkey: VBA maldoc deobfuscation
2017-08-10/a>Didier StevensMaldoc Analysis with ViperMonkey
2017-01-31/a>Johannes UllrichMalicious Office files using fileless UAC bypass to drop KEYBASE malware
2014-06-11/a>Daniel WesemannGimme your keys!
2013-12-20/a>Daniel Wesemannauthorized key lime pie
2013-09-23/a>Rob VandenBrinkHow do you spell "PSK"?
2013-08-21/a>Alex StanfordPsst. Your Browser Knows All Your Secrets.
2013-06-22/a>Guy Bruneau.biz DNSSEC DNSKEY is Invalid
2012-12-27/a>John BambenekIt's 3pm 2 days after Christmas, do you know where your unmanaged SSH keys are?
2012-08-21/a>Adrien de BeaupreRuggedCom fails key management 101 on Rugged Operating System (ROS)
2012-03-20/a>Johannes UllrichA Reminder: Private Key Security
2011-12-07/a>Lenny ZeltserV8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation
2011-10-01/a>Mark HofmanHot on the heels fo FF, Thunderbird v 7.0.1 and SeaMonkey v 2.4.1 have been updated.
2011-04-29/a>Guy BruneauFirefox, Thunderbird and SeaMonkey Security Updates
2011-03-04/a>Mark HofmanA new version of Seamonkey is available, includes security fixes. More details here http://www.seamonkey-project.org/news#2011-03-02
2010-09-28/a>Daniel WesemannSupporting the economy (in Russia and Ukraine)
2010-06-18/a>Tom ListonIMPORTANT INFORMATION: Distributed SSH Brute Force Attacks
2009-12-16/a>Rob VandenBrinkSeamonkey Update to 2.0.1, find the release notes here ==> http://www.seamonkey-project.org/releases/seamonkey2.0.1
2009-09-04/a>Adrien de BeaupreSeaMonkey Security Update
2009-05-25/a>Jim ClausingNTPD autokey vulnerability
2009-04-10/a>Stephen HallFirefox 3 updates now in Seamonkey
2009-04-09/a>Johannes UllrichConficker update with payload
2008-11-05/a>donald smithIf you missed President Elect Obamas speech have some malware instead
2008-07-14/a>Daniel WesemannObfuscated JavaScript Redux
2008-04-07/a>John BambenekHP USB Keys Shipped with Malware for your Proliant Server

MANAGEMENT

2023-05-24/a>Tom WebbIR Case/Alert Management
2021-12-06/a>Xavier MertensThe Importance of Out-of-Band Networks
2019-09-19/a>Xavier MertensBlocklisting or Whitelisting in the Right Way
2015-07-18/a>Russell EubanksThe Value a "Fresh Set Of Eyes" (FSOE)
2014-01-23/a>Chris MohanLearning from the breaches that happens to others Part 2
2014-01-14/a>Chris MohanSpamming and scanning botnets - is there something I can do to block them from my site?
2013-09-24/a>Tom WebbIDS, NSM, and Log Management with Security Onion 12.04.3
2013-02-25/a>Rob VandenBrinkSilent Traitors - Embedded Devices in your Datacenter
2012-12-27/a>John BambenekIt's 3pm 2 days after Christmas, do you know where your unmanaged SSH keys are?
2012-08-21/a>Adrien de BeaupreRuggedCom fails key management 101 on Rugged Operating System (ROS)
2012-04-23/a>Russ McReeEmergency Operations Centers & Security Incident Management: A Correlation
2011-10-28/a>Russ McReeCritical Control 19: Data Recovery Capability
2010-08-19/a>Rob VandenBrinkChange is Good. Change is Bad. Change is Life.
2009-05-01/a>Adrien de BeaupreIncident Management
2009-03-20/a>donald smithStealthier then a MBR rootkit, more powerful then ring 0 control, it’s the soon to be developed SMM root kit.

FAIL

2023-11-09/a>Guy BruneauRouters Targeted for Gafgyt Botnet [Guest Diary]
2023-04-04/a>Johannes UllrichAnalyzing the efile.com Malware "efail"
2018-05-16/a>Mark HofmanEFAIL, a weakness in openPGP and S\MIME
2018-01-19/a>Jim ClausingFollowup to IPv6 brute force and IPv6 blocking
2018-01-07/a>Guy BruneauSSH Scans by Clients Types
2016-03-06/a>Jim ClausingNovel method for slowing down Locky on Samba server using fail2ban
2012-08-21/a>Adrien de BeaupreRuggedCom fails key management 101 on Rugged Operating System (ROS)
2012-04-30/a>Rob VandenBrinkFCC posts Enquiry Documents on Google Wardriving
2011-07-25/a>Bojan ZdrnjaWhen the FakeAV coder(s) fail