Date Author Title

VNC SCREEN SHARING FIREWALL MACOS

2026-08-17Johannes UllrichApple Screen Sharing Security

VNC

2026-08-17/a>Johannes UllrichApple Screen Sharing Security
2022-11-02/a>Brad DuncanWho put the "Dark" in DarkVNC?
2022-08-24/a>Brad DuncanMonster Libra (TA551/Shathak) --> IcedID (Bokbot) --> Cobalt Strike & DarkVNC
2022-08-12/a>Brad DuncanMonster Libra (TA551/Shathak) pushes IcedID (Bokbot) with Dark VNC and Cobalt Strike
2022-07-27/a>Brad DuncanIcedID (Bokbot) with Dark VNC and Cobalt Strike
2022-04-20/a>Brad Duncan"aa" distribution Qakbot (Qbot) infection with DarkVNC traffic
2022-03-16/a>Brad DuncanQakbot infection with Cobalt Strike and VNC activity
2021-12-16/a>Brad DuncanHow the "Contact Forms" campaign tricks people
2021-05-14/a>Xavier Mertens"Open" Access to Industrial Systems Interface is Also Far From Zero
2013-10-12/a>Richard PorterReported Spike in tcp/5901 and tcp/5900
2011-11-19/a>Pedro BuenoDragon Research Group (DRG) announced the white paper entitled "VNC: Threats and Countermeasures" : https://dragonresearchgroup.org/insight/vnc-tac.html
2009-10-03/a>Daniel WesemannCyber Security Awareness Month - Day 3 - Port 5900 - VNC

SCREEN

2026-08-17/a>Johannes UllrichApple Screen Sharing Security
2025-02-14/a>Xavier MertensFake BSOD Delivered by Malicious Python Script
2024-11-05/a>Xavier MertensPython RAT with a Nice Screensharing Feature
2023-02-09/a>Xavier MertensA Backdoor with Smart Screenshot Capability
2021-04-02/a>Xavier MertensC2 Activity: Sandboxes or Real Victims?
2018-05-19/a>Xavier MertensMalicious Powershell Targeting UK Bank Customers
2010-11-04/a>Johannes UllrichMicrosoft Smart Screen False Positivies
2010-02-11/a>Johannes UllrichMS10-015 may cause Windows XP to blue screen
2010-02-02/a>Johannes UllrichNew IPv6 Screencast Videos: http://isc.sans.org/ipv6videos (Today: blocking and detecting IPv6 in Linux)
2009-12-02/a>Rob VandenBrinkMicrosoft Black Screen of Death - Fact of Fiction?

SHARING

2026-08-17/a>Johannes UllrichApple Screen Sharing Security
2025-07-16/a>Xavier MertensMore Free File Sharing Services Abuse
2025-04-15/a>Xavier MertensOnline Services Again Abused to Exfiltrate Data
2024-07-23/a>Johannes UllrichNew Exploit Variation Against D-Link NAS Devices (CVE-2024-3273)
2022-03-24/a>Xavier MertensMalware Delivered Through Free Sharing Tool
2017-11-25/a>Guy BruneauBenefits associated with the use of Open Source Software
2017-11-17/a>Xavier MertensTop-100 Malicious IP STIX Feed
2017-06-01/a>Xavier MertensSharing Private Data with Webcast Invitations
2015-12-24/a>Xavier MertensUnity Makes Strength
2014-02-28/a>Daniel WesemannOversharing
2012-12-20/a>Daniel WesemannWhite House strategy on security information sharing and safeguarding
2011-01-12/a>Richard PorterYet Another Data Broker? AOL Lifestream.
2010-11-19/a>Jason LamExchanging and sharing of assessment results

FIREWALL

2026-08-17/a>Johannes UllrichApple Screen Sharing Security
2026-03-31/a>Xavier MertensApplication Control Bypass for Data Exfiltration
2025-02-06/a>Johannes UllrichMy Very Personal Guidance and Strategies to Protect Network Edge Devices
2021-02-15/a>Johannes UllrichSecuring and Optimizing Networks: Using pfSense Traffic Shaper Limiters to Combat Bufferbloat
2021-02-13/a>Guy BruneauUsing Logstash to Parse IPtables Firewall Logs
2020-09-17/a>Xavier MertensSuspicious Endpoint Containment with OSSEC
2019-11-22/a>Xavier MertensAbusing Web Filters Misconfiguration for Reconnaissance
2019-03-05/a>Rob VandenBrinkPowershell, Active Directory and the Windows Host Firewall
2019-01-22/a>Xavier MertensDNS Firewalling with MISP
2018-12-19/a>Xavier MertensRestricting PowerShell Capabilities with NetSh
2018-09-22/a>Didier StevensSuspicious DNS Requests ... Issued by a Firewall
2017-08-23/a>Xavier MertensMalicious script dropping an executable signed by Avast?
2015-02-23/a>Richard PorterSubscribing to the DShield Top 20 on a Palo Alto Networks Firewall
2013-10-18/a>Rob VandenBrinkCSAM - Why am I seeing DNS Requests to IANA.ORG in my Firewall Logs?
2013-07-27/a>Scott FendleyDefending Against Web Server Denial of Service Attacks
2013-07-20/a>Manuel Humberto Santander PelaezDo you have rogue Internet gateways in your network? Check it with nmap
2013-04-25/a>Adam SwangerGuest Diary: Dylan Johnson - A week in the life of some Perimeter Firewalls
2013-03-13/a>Johannes UllrichIPv6 Focus Month: Kaspersky Firewall IPv6 Vulnerability
2013-03-08/a>Johannes UllrichIPv6 Focus Month: Filtering ICMPv6 at the Border
2013-03-05/a>Mark HofmanIPv6 Focus Month: Device Defaults
2012-05-17/a>Johannes UllrichDo Firewalls make sense?
2012-05-08/a>Bojan ZdrnjaWindows Firewall Bypass Vulnerability and NetBIOS NS
2011-07-15/a>Deborah HaleWhat's in a Firewall?
2010-11-08/a>Manuel Humberto Santander PelaezNetwork Security Perimeter: How to choose the correct firewall and IPS for your environment?
2010-06-14/a>Manuel Humberto Santander PelaezAnother way to get protection for application-level attacks
2010-03-10/a>Rob VandenBrinkWhat's My Firewall Telling Me? (Part 4)
2010-03-05/a>Kyle HaugsnessWhat is your firewall log telling you - responses
2010-03-03/a>Daniel WesemannWhat is your firewall log telling you - Part #2
2010-02-23/a>Mark HofmanWhat is your firewall telling you and what is TCP249?
2009-10-30/a>Rob VandenBrinkNew version of NIST 800-41, Firewalls and Firewall Policy Guidelines
2009-01-12/a>William SaluskyWeb Application Firewalls (WAF) - Have you deployed WAF technology?
2008-11-20/a>Jason LamLarge quantity SQL Injection mitigation

MACOS

2026-08-17/a>Johannes UllrichApple Screen Sharing Security
2026-08-02/a>Brad DuncanAtomic MacOS (AMOS) stealer infection
2026-07-29/a>Johannes UllrichApple Patches Everything (July 2026)
2026-06-30/a>Johannes UllrichJune 2026 Apple Updates
2026-03-25/a>Johannes UllrichApple Patches (almost) everything again. March 2026 edition.
2025-09-15/a>Johannes UllrichApple Updates Everything - iOS/macOS 26 Edition
2025-07-29/a>Johannes UllrichApple Updates Everything: July 2025
2025-05-12/a>Johannes UllrichApple Updates Everything: May 2025 Edition
2025-03-31/a>Johannes UllrichApple Patches Everything: March 31st 2025 Edition
2025-03-11/a>Johannes UllrichApple Fixes Exploited WebKit Vulnerability in iOS, MacOS, visionOS and Safari
2024-12-11/a>Johannes UllrichApple Updates Everything (iOS, iPadOS, macOS, watchOS, tvOS, visionOS)
2024-10-28/a>Johannes UllrichApple Updates Everything
2024-10-07/a>Xavier MertensmacOS Sequoia: System/Network Admins, Hold On!
2024-07-30/a>Johannes UllrichApple Patches Everything. July 2024 Edition
2024-01-22/a>Johannes UllrichApple Updates Everything - New 0 Day in WebKit
2024-01-19/a>Xavier MertensmacOS Python Script Replacing Wallet Applications with Rogue Apps
2023-12-11/a>Johannes UllrichApple Patches Everything
2023-09-26/a>Johannes UllrichApple Releases MacOS Sonoma Including Numerous Security Patches
2023-09-11/a>Johannes UllrichApple fixes 0-Day Vulnerability in Older Operating Systems
2023-09-07/a>Johannes UllrichApple Releases iOS/iPadOS 16.6.1, macOS 13.5.2, watchOS 9.6.2 fixing two zeroday vulnerabilities
2023-08-26/a>Xavier MertensmacOS: Who?s Behind This Network Connection?
2023-06-22/a>Johannes UllrichApple Patches Exploited Vulnerabilities in iOS/iPadOS, macOS, watchOS and Safari
2023-04-07/a>Johannes UllrichApple Patching Two 0-Day Vulnerabilities in iOS and macOS
2023-03-27/a>Johannes UllrichApple Updates Everything (including Studio Display)
2022-07-26/a>Xavier MertensHow is Your macOS Security Posture?
2022-07-20/a>Johannes UllrichApple Patches Everything Day
2022-03-31/a>Johannes UllrichApple Patches Actively Exploited Vulnerability in macOS, iOS and iPadOS,
2022-03-14/a>Johannes UllrichApple Updates Everything: MacOS 12.3, XCode 13.3, tvOS 15.4, watchOS 8.5, iPadOS 15.4 and more
2022-02-10/a>Johannes UllrichiOS/iPadOS and MacOS Update: Single WebKit 0-Day Vulnerability Patched
2022-01-27/a>Johannes UllrichApple Patches Everything
2020-11-20/a>Xavier MertensMalicious Python Code and LittleSnitch Detection
2020-11-09/a>Xavier MertensHow Attackers Brush Up Their Malicious Scripts
2020-09-09/a>Johannes UllrichA First Look at macOS 11 Big Sur Network Traffic (New! Now with more GREASE!)
2018-11-27/a>Xavier MertensMore obfuscated shell scripts: Fake MacOS Flash update
2018-11-04/a>Pasquale StirparoBeyond good ol' LaunchAgent - part 1
2018-10-21/a>Pasquale StirparoBeyond good ol’ LaunchAgent - part 0
2018-06-29/a>Remco VerhoefCrypto community target of MacOS malware
2014-01-24/a>Chris MohanSecurity Update for OS X for CVE-2014-1252 http://support.apple.com/kb/HT6117
2012-05-05/a>Tony CarothersVulnerability Exploit for Snow Leopard
2010-06-15/a>Manuel Humberto Santander PelaezApple releases advisory for Mac OS X - Multiple vulnerabilities discovered