Date Author Title

MS SQL SERVER

2008-12-15Toby KohlenbergNew MS SQL Server vulnerability

MS

2024-10-17/a>Guy BruneauScanning Activity from Subnet 15.184.0.0/16
2024-08-29/a>Xavier MertensLive Patching DLLs with Python
2024-08-14/a>Xavier MertensMultiple Malware Dropped Through MSI Package
2024-06-17/a>Xavier MertensNew NetSupport Campaign Delivered Through MSIX Packages
2024-04-22/a>Jan KoprivaIt appears that the number of industrial devices accessible from the internet has risen by 30 thousand over the past three years
2024-02-09/a>Xavier MertensMSIX With Heavily Obfuscated PowerShell Script
2023-11-18/a>Xavier MertensQuasar RAT Delivered Through Updated SharpLoader
2023-11-15/a>Xavier MertensRedline Dropped Through MSIX Package
2023-08-16/a>Yee Ching TokA Gentle Reminder: The Evolving Nature of Digital Scams
2023-08-10/a>Bojan ZdrnjaSome things never change ? such as SQL Authentication ?encryption?
2023-06-19/a>Xavier MertensMalware Delivered Through .inf File
2023-02-26/a>Didier Stevensoledump & MSI Files
2022-09-23/a>Xavier MertensKids Like Cookies, Malware Too!
2022-06-12/a>Didier StevensQuickie: Follina, RTF & Explorer Preview Pane
2022-05-31/a>Xavier MertensFirst Exploitation of Follina Seen in the Wild
2022-05-30/a>Xavier MertensNew Microsoft Office Attack Vector via "ms-msdt" Protocol Scheme (CVE-2022-30190)
2022-05-14/a>Didier StevensQuick Analysis Of Phishing MSG
2022-04-14/a>Johannes UllrichAn Update on CVE-2022-26809 - MSRPC Vulnerabliity - PATCH NOW
2022-03-18/a>Johannes UllrichScans for Movable Type Vulnerability (CVE-2021-20837)
2022-01-31/a>Xavier MertensBe careful with RPMSG files
2022-01-09/a>Didier StevensExtracting Cobalt Strike Beacons from MSBuild Scripts
2021-12-16/a>Brad DuncanHow the "Contact Forms" campaign tricks people
2021-10-03/a>Didier StevensVideo: CVE-2021-40444 Maldocs: Extracting URLs
2021-07-02/a>Xavier MertensKaseya VSA Users Hit by Ransomware
2021-05-14/a>Xavier Mertens"Open" Access to Industrial Systems Interface is Also Far From Zero
2021-05-12/a>Jan KoprivaNumber of industrial control systems on the internet is lower then in 2020...but still far from zero
2021-05-08/a>Guy BruneauWho is Probing the Internet for Research Purposes?
2021-04-28/a>Xavier MertensDeeper Analyzis of my Last Malicious PowerPoint Add-On
2021-04-13/a>Richard PorterMicrosoft April 2021 Patch Tuesday
2021-02-26/a>Guy BruneauPretending to be an Outlook Version Update
2020-10-12/a>Didier StevensNested .MSGs: Turtles All The Way Down
2020-10-11/a>Didier StevensAnalyzing MSG Files With plugin_msg_summary
2020-09-29/a>Xavier MertensManaging Remote Access for Partners & Contractors
2020-08-22/a>Guy BruneauRemote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2019-11-18/a>Johannes UllrichSMS and 2FA: Another Reason to Move away from It.
2019-10-20/a>Guy BruneauScanning Activity for NVMS-9000 Digital Video Recorder
2019-08-28/a>Xavier MertensMalware Samples Compiling Their Next Stage on Premise
2019-04-04/a>Xavier MertensNew Waves of Scans Detected by an Old Rule
2018-10-21/a>Didier StevensMSG Files: Compressed RTF
2018-08-19/a>Didier StevensVideo: Peeking into msg files - revisited
2018-08-11/a>Didier StevensPeeking into msg files - revisited
2018-07-23/a>Didier StevensAnalyzing MSG files
2018-06-12/a>Johannes UllrichMicrosoft June 2018 Patch Tuesday
2018-05-25/a>Xavier MertensAntivirus Evasion? Easy as 1,2,3
2017-10-15/a>Didier StevensPeeking into .msg files
2017-07-24/a>Renato MarinhoUber drivers new threat: the "passenger"
2017-07-16/a>Renato MarinhoSMS Phishing induces victims to photograph its own token card
2017-07-01/a>Rick WannerUsing nmap to scan for MS17-010 (CVE-2017-0143 EternalBlue)
2017-05-13/a>Guy BruneauMicrosoft Released Guidance for WannaCrypt
2017-04-26/a>Johannes UllrichIf there are some unexploited MSSQL Servers With Weak Passwords Left: They got you now (again)
2017-03-31/a>Xavier MertensPro & Con of Outsourcing your SOC
2017-01-10/a>Johannes UllrichJanuary 2017 Microsoft Patch Tuesday
2016-02-23/a>Xavier MertensVMware VMSA-2016-0002
2016-02-13/a>Guy BruneauVMware VMSA-2015-0007.3 has been Re-released
2016-02-09/a>Johannes UllrichMicrosoft February 2016 Patch Tuesday
2016-01-24/a>Didier StevensObfuscated MIME Files
2016-01-12/a>Alex StanfordJanuary 2016 Microsoft Patch Tuesday
2015-12-08/a>Johannes UllrichDecember 2015 Microsoft Patch Tuesday
2015-11-10/a>Johannes UllrichNovember 2015 Microsoft Patch Tuesday
2015-10-13/a>Alex StanfordOctober 2015 Microsoft Patch Tuesday
2015-09-08/a>Lenny ZeltserA Close Look at PayPal Overpayment Scams That Target Craigslist Sellers
2015-09-08/a>Johannes UllrichSeptember 2015 Microsoft Patch Tuesday
2015-08-11/a>Manuel Humberto Santander PelaezAugust 2015 Microsoft Patch Tuesday
2015-07-14/a>Johannes UllrichJuly 2015 Microsoft Patch Tuesday
2015-06-09/a>Johannes UllrichMicrosoft Patch Tuesday Summary for June 2015
2015-05-15/a>Didier StevensAnother Maldoc? I'm Afraid So...
2015-05-12/a>Johannes UllrichMay 2015 Microsoft Patch Tuesday Summary
2015-05-09/a>Didier StevensMalicious Word Document: This Time The Maldoc Is A MIME File
2015-04-28/a>Daniel WesemannScammy Nepal earthquake donation requests
2015-04-15/a>Johannes UllrichMS15-034: HTTP.sys (IIS) DoS And Possible Remote Code Execution. PATCH NOW
2015-04-14/a>Alex StanfordMicrosoft Patch Tuesday - April 2015
2015-03-10/a>Johannes UllrichMicrosoft March Patch Tuesday
2015-02-10/a>Mark BaggettMicrosoft Update Advisory for February 2015
2015-01-13/a>Johannes UllrichMicrosoft Patch Tuesday - January 2015 (Really? Telnet?)
2014-12-09/a>Alex StanfordMicrosoft Patch Tuesday - December 2014
2014-11-18/a>Jim ClausingMicrosoft November out-of-cycle patch MS14-068
2014-11-11/a>Johannes UllrichMicrosoft November 2014 Patch Tuesday
2014-10-14/a>Johannes UllrichMicrosoft October 2014 Patch Tuesday
2014-09-09/a>Alex StanfordMicrosoft Patch Tuesday - September 2014
2014-08-12/a>Alex StanfordMicrosoft Patch Tuesday - August 2014
2014-07-08/a>Alex StanfordMicrosoft Patch Tuesday - July
2014-06-10/a>Alex StanfordMicrosoft Patch Tuesday June 2014
2014-05-13/a>Johannes UllrichMicrosoft May 2014 Patch Tuesday
2014-05-01/a>Johannes UllrichMicrosoft Announces Special Patch for IE 0-day (Win XP included!)
2014-04-08/a>Richard PorterApril 2014 Microsoft Patches
2014-03-11/a>Johannes UllrichMicrosoft Patch Tuesday March 2014
2014-02-11/a>Johannes UllrichFebruary 2014 Microsoft Patch Tuesday
2014-01-14/a>Johannes UllrichMicrosoft Patch Tuesday January 2014
2013-12-10/a>Johannes UllrichMicrosoft December Patch Tuesday
2013-11-12/a>Johannes UllrichNovember 2013 Microsoft Patch Tuesday
2013-11-09/a>Guy BruneauIE Zero-Day Vulnerability Exploiting msvcrt.dll
2013-11-01/a>Russ McReeSecunia's PSI Country Report - Q3 2013
2013-10-08/a>Johannes UllrichMicrosoft October 2013 Patch Tuesday
2013-10-04/a>Pedro BuenoCSAM: WebHosting BruteForce logs
2013-10-03/a>Johannes UllrichOctober Patch Tuesday Preview (CVE-2013-3893 patch coming!)
2013-10-02/a>John BambenekObamacare related domain registration spike, Government shutdown domain registration beginning
2013-09-19/a>Bojan ZdrnjaArrays in requests, PHP and DedeCMS
2013-09-10/a>Swa FrantzenMicrosoft September 2013 Black Tuesday Overview
2013-09-07/a>Guy BruneauMicrosoft September Patch Pre-Announcement
2013-08-28/a>Bojan ZdrnjaMS13-056 (false positive)? alerts
2013-08-15/a>Johannes UllrichMicrosoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx
2013-08-13/a>Swa FrantzenMicrosoft August 2013 Black Tuesday Overview
2013-07-21/a>Guy BruneauUbuntu Forums Security Breach
2013-07-09/a>Swa FrantzenMicrosoft July 2013 Black Tuesday Overview
2013-06-11/a>Swa FrantzenMicrosoft June 2013 Black Tuesday Overview
2013-06-11/a>Swa FrantzenOther Microsoft Black Tuesday News
2013-05-14/a>Swa FrantzenMicrosoft May 2013 Black Tuesday Overview
2013-05-09/a>Johannes UllrichMicrosoft released a Fix-it for the Internet Explorer 8 Vulnerability http://support.microsoft.com/kb/2847140
2013-04-17/a>John BambenekUPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun
2013-04-09/a>Swa FrantzenMicrosoft April 2013 Black Tuesday Overview
2013-03-12/a>Swa FrantzenMicrosoft March 2013 Black Tuesday Overview
2013-03-03/a>Richard PorterUptick in MSSQL Activity
2013-02-12/a>Adam SwangerMicrosoft February 2013 Black Tuesday Update - Overview
2013-01-14/a>Richard PorterJanuary 2013 Microsoft Out of Cycle Patch
2013-01-09/a>Rob VandenBrinkSecurity Update - Cisco Prime LMS (cisco-sa-20130109-lms - remote execution as root vulnerability) - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms
2013-01-08/a>Richard PorterMicrosoft January 2013 Black Tuesday Update - Overview
2012-12-11/a>John BambenekMicrosoft December 2012 Black Tuesday Update - Overview
2012-11-13/a>Jim ClausingMicrosoft November 2012 Black Tuesday Update - Overview
2012-10-09/a>Johannes UllrichMicrosoft October 2012 Black Tuesday Update - Overview
2012-09-11/a>Adam SwangerMicrosoft September 2012 Black Tuesday Update - Overview
2012-08-22/a>Adrien de BeauprePhishing/spam via SMS
2012-08-14/a>Rick WannerMicrosoft August 2012 Black Tuesday Update - Overview
2012-07-30/a>Guy BruneauEnd of Days for MS-CHAPv2
2012-07-10/a>Swa FrantzenMicrosoft July 2012 Black Tuesday Update - Overview
2012-06-12/a>Swa FrantzenMicrosoft June 2012 Black Tuesday Update - Overview
2012-06-12/a>Swa FrantzenMicrosoft Security Advisory 2719615 - MSXML - CVE-2012-1889
2012-05-08/a>Adam SwangerMicrosoft May 2012 Black Tuesday Update - Overview
2012-05-05/a>Tony CarothersVulnerability Exploit for Snow Leopard
2012-04-27/a>Mark HofmanMicrosoft has added MSSQL 2008 R2 SP1 to the list of affected software for MS12-027 (Thanks Ryan). More info here --> http://technet.microsoft.com/security/bulletin/ms12-027
2012-04-26/a>Richard PorterPacketstorm Security and Metasploit have Exploit code for MS12-027
2012-04-10/a>Swa FrantzenWindows Vista RIP
2012-04-10/a>Swa FrantzenMicrosoft April 2012 Black Tuesday Update - Overview
2012-03-13/a>Lenny ZeltserMarch 2012 Microsoft Black Tuesday
2012-02-14/a>Johannes UllrichFebruary 2012 Microsoft Black Tuesday
2012-01-10/a>Adrien de BeaupreJanuary 2012 Microsoft Black Tuesday Summary
2012-01-06/a>Guy BruneauJanuary 2012 Patch Tuesday Pre-release
2011-12-13/a>Johannes UllrichDecember 2011 Microsoft Black Tuesday Summary
2011-11-08/a>Swa FrantzenMicrosoft November 2011 Black Tuesday Overview
2011-11-03/a>Guy BruneauNovember 2011 Patch Tuesday Pre-release
2011-10-11/a>Swa FrantzenMicrosoft Black Tuesday Overview October 2011
2011-10-11/a>Swa FrantzenMicrosoft Security Intelligence Report (SIR) - Volume 11
2011-09-30/a>Tony CarothersMicrosoft Security Essentials Mis-identifes Chrome
2011-09-13/a>Swa FrantzenMicrosoft September 2011 Black Tuesday
2011-09-13/a>Swa FrantzenMore DigiNotar intermediate certificates blocklisted at Microsoft
2011-09-09/a>Johannes UllrichEarly Patch Tuesday Today: Microsoft September 2011 Patches
2011-08-11/a>Johannes UllrichAs part of this weeks patch tuesday, microsoft also re-release MS11-043 to address stability issues.
2011-08-09/a>Swa FrantzenMicrosoft August 2011 Black Tuesday Overview
2011-07-19/a>Richard PorterSMS Phishing at the SANSFire 2011 Handler Dinner
2011-07-12/a>Swa FrantzenMicrosoft July 2011 Black Tuesday Overview
2011-06-14/a>Swa FrantzenMicrosoft June 2011 Black Tuesday Overview
2011-05-10/a>Swa FrantzenMay 2011 Microsoft Black Tuesday Overview
2011-04-15/a>Kevin ListonMS11-020 (KB2508429) Upgrading from Critical to PATCH NOW
2011-04-11/a>Jim ClausingApril 2011 Microsoft Black Tuesday Summary
2011-03-08/a>Jim ClausingMarch 2011 Microsoft Black Tuesday Summary
2011-02-08/a>Joel EslerFeburary 2011 Microsoft Black Tuesday Summary
2011-01-11/a>Kevin ShorttJanuary 2011 Microsoft Black Tuesday Summary
2011-01-08/a>Guy BruneauJanuary 2011 Patch Tuesday Pre-release
2011-01-05/a>Johannes UllrichCurrently Unpatched Windows / Internet Explorer Vulnerabilities
2010-12-23/a>Mark HofmanOlder AV Scam Active again.
2010-12-15/a>Manuel Humberto Santander PelaezHP StorageWorks P2000 G3 MSA hardcoded user
2010-12-14/a>Manuel Humberto Santander PelaezDecember 2010 Microsoft Black Tuesday Summary
2010-12-01/a>Deborah HaleA Gentle Reminder - It is that time of year again
2010-11-09/a>Johannes UllrichNovember 2010 Microsoft Black Tuesday Summary
2010-10-12/a>Adrien de BeaupreOctober 2010 Microsoft Black Tuesday Summary
2010-10-08/a>Rick WannerPatch Tuesday Pre-release -- 16 updates
2010-09-30/a>Pedro BuenoMS OOB .NET patch is now also available via Windows Update.
2010-09-14/a>Adrien de BeaupreSeptember 2010 Microsoft Black Tuesday Summary
2010-08-29/a>Swa FrantzenDLL hijacking - what are you doing ?
2010-08-22/a>Manuel Humberto Santander PelaezSCADA: A big challenge for information security professionals
2010-08-10/a>Jim ClausingAugust 2010 Micrsoft Black Tuesday Summary
2010-07-26/a>Guy BruneauSophosLabs Released Free Tool to Validate Microsoft Shortcut
2010-07-13/a>Jim ClausingJuly 2010 Microsoft Black Tuesday Summary
2010-07-08/a>Kyle HaugsnessNew poll on MSRC
2010-06-08/a>Manuel Humberto Santander PelaezJune 2010 Microsoft Black Tuesday Summary
2010-05-11/a>Scott FendleyMay 2010 Microsoft Patches
2010-04-22/a>Guy BruneauMS10-025 Security Update has been Pulled
2010-04-16/a>G. N. WhiteMS10-021: Encountering A Failed WinXP Update
2010-04-13/a>Johannes UllrichMicrosoft April 2010 Patch Tuesday
2010-03-29/a>Pedro BuenoMicrosoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix.
2010-03-09/a>John BambenekMarch 2010 - Microsoft Patch Tuesday Diary
2010-03-03/a>Mark HofmanMS10-015 re-released
2010-03-01/a>Mark HofmanAS/NZ "Online Offensive - Fight fraud online" week March 1-7
2010-02-19/a>Mark HofmanMS10-015 may cause Windows XP to blue screen (but only if you have malware on it)
2010-02-11/a>Deborah HaleCritical Update for AD RMS
2010-02-09/a>Johannes UllrichFebruary 2010 Black Tuesday Overview
2010-01-21/a>Johannes UllrichMicrosoft January Out of Band Patch
2010-01-13/a>Johannes UllrichSMS Donations Advertised via Twitter
2010-01-12/a>Johannes UllrichMicrosoft Security Bulletin: January 2010
2009-12-08/a>Deborah HaleDecember 2009 Black Tuesday Overview
2009-11-10/a>Swa FrantzenMicrosoft November Black Tuesday Overview
2009-10-14/a>Johannes UllrichOdd Apache/MSIE issue with downloads from ISC
2009-10-13/a>Johannes UllrichMicrosoft October 2009 Black Tuesday Overview
2009-09-08/a>Guy BruneauMicrosoft September 2009 Black Tuesday Overview
2009-08-18/a>Bojan ZdrnjaMS09-039 exploit in the wild?
2009-08-11/a>Swa FrantzenMicrosoft August 2009 Black Tuesday Overview
2009-07-14/a>Swa FrantzenMicrosoft July Black Tuesday Overview
2009-07-06/a>Stephen Hall0-day in Microsoft DirectShow (msvidctl.dll) used in drive-by attacks
2009-06-09/a>Swa FrantzenMicrosoft June Black Tuesday Overview
2009-05-20/a>Pedro BuenoCyber Warfare and Kylin thoughts
2009-05-12/a>Swa FrantzenMay Black Tuesday Overview
2009-05-10/a>Mari NicholsIs your Symantec Antivirus Alerting working correctly?
2009-04-23/a>Kyle HaugsnessPossible MS09-013 activity
2009-04-14/a>Swa FrantzenApril Black Tuesday Overview
2009-03-10/a>Swa FrantzenMarch black Tuesday overview
2009-02-19/a>Bojan ZdrnjaMS09-002, XML/DOC and initial infection vector
2009-02-17/a>Bojan ZdrnjaMS09-002 exploit in the wild
2009-02-13/a>Andre LudwigThird party information on conficker
2009-02-10/a>Swa FrantzenFebruary Black Tuesday Overview
2009-01-13/a>Johannes UllrichJanuary Black Tuesday Overview
2009-01-12/a>William SaluskyDownadup / Conficker - MS08-067 exploit and Windows domain account lockout
2008-12-15/a>Toby KohlenbergNew MS SQL Server vulnerability
2008-12-12/a>Johannes UllrichMSIE 0-day Spreading Via SQL Injection
2008-12-09/a>Swa FrantzenDecember Black Tuesday Overview
2008-12-09/a>Swa FrantzenContacting us might be hard today
2008-11-29/a>Pedro BuenoPossible Mumbai Scams?
2008-11-11/a>Swa FrantzenNovember Black Tuesday Overview
2008-10-14/a>Swa FrantzenOctober Black Tuesday Overview
2008-09-09/a>Swa FrantzenSeptember 2008 Black Tuesday Overview
2008-08-22/a>Patrick NolanMS08-051 V2.0 Patch issued August 20, 2008
2008-08-15/a>Jim ClausingAnother MS update that may have escaped notice
2008-08-12/a>Stephen HallAugust 2008 Black Tuesday Overview
2008-07-08/a>Swa FrantzenJuly 2008 black tuesday overview
2008-06-13/a>Johannes UllrichFloods: More of the same (2)
2008-06-10/a>Swa FrantzenJune 2008 Black Tuesday Overview
2008-05-19/a>Maarten Van HorenbeeckText message and telephone aid scams
2008-05-17/a>Lorna HutchesonXP SP3 Issues
2008-05-13/a>Swa FrantzenMay 2008 black tuesday overview
2008-04-22/a>donald smithMaximus root kit downloads via MySpace social engineering trick.
2008-04-10/a>Deborah HaleSymantec Threatcon Level 2
2008-04-08/a>Swa FrantzenApril 2008 - Black Tuesday Overview
2008-03-11/a>Swa FrantzenMarch Black Tuesday Overview
2008-02-12/a>Swa FrantzenFebruary Black Tuesday Overview
2008-01-08/a>Swa FrantzenJanuary Black Tuesday overview
2007-12-11/a>Swa FrantzenDecember black tuesday overview
2007-11-13/a>Swa Frantzennovember black tuesday overview
2007-10-09/a>Swa FrantzenOctober Black Tuesday overview
2007-09-11/a>Swa FrantzenSeptember microsoft patch overview
2007-08-14/a>Swa FrantzenAugust 'Black Tuesday' overview
2007-07-10/a>Swa FrantzenJuly 'Black Tuesday' overview
2007-06-12/a>Johannes UllrichJune 2007, Microsoft Patch Tuesday Overview.
2007-05-08/a>Swa FrantzenMay 2007, Black Tuesday patch overview
2007-04-10/a>Swa FrantzenMicrosoft black Tuesday patches - April 2007
2007-04-03/a>Swa Frantzen* Microsoft out of cycle patch
2007-02-13/a>Swa FrantzenMicrosoft Black Tuesday patches - February 2007
2007-01-09/a>Swa FrantzenMicrosoft Patches - January 2007 - overview
2006-12-12/a>Swa FrantzenMicrosoft Black Tuesday - December 2006 overview
2006-11-14/a>Jim ClausingMS06-071: MSXML Core Services
2006-11-14/a>Swa FrantzenMicrosoft Black Tuesday Overview
2006-10-10/a>Johannes UllrichMS06-056: ASP.NET XSS Information Disclosure Vulnerability (moderate)
2006-10-10/a>Johannes UllrichMS06-061: XSLT/MSXML Buffer Overflow Code Execution Vulnerability (moderate)
2006-10-10/a>Kyle HaugsnessMS06-063: Mailslot DoS (Server service)
2006-10-09/a>Swa FrantzenMicrosoft black tuesday - October 2006 STATUS
2006-10-05/a>Swa FrantzenMS06-053 revisited ?
2006-09-30/a>Swa FrantzenYellow: WebViewFolderIcon setslice exploit spreading
2006-09-28/a>Swa FrantzenMSIE: One patched, one pops up again (setslice)
2006-09-22/a>Swa FrantzenYellow: MSIE VML exploit spreading
2006-09-19/a>Swa FrantzenYet another MSIE 0-day: VML
2006-09-15/a>Swa FrantzenMSIE DirectAnimation ActiveX 0-day update
2006-09-12/a>Swa FrantzenMicrosoft security patches for September 2006
2006-08-17/a>Swa FrantzenMicrosoft August 2006 Patches: STATUS

SQL

2023-08-25/a>Xavier MertensPython Malware Using Postgresql for C2 Communications
2023-08-10/a>Bojan ZdrnjaSome things never change ? such as SQL Authentication ?encryption?
2023-07-23/a>Guy BruneauInstall & Configure Filebeat on Raspberry Pi ARM64 to Parse DShield Sensor Logs
2021-06-12/a>Guy BruneauFortinet Targeted for Unpatched SSL VPN Discovery Activity
2020-07-30/a>Johannes UllrichPython Developers: Prepare!!!
2017-08-07/a>Xavier MertensIncrease of phpMyAdmin scans
2017-08-02/a>Bojan ZdrnjaAttacking NoSQL applications (part 2)
2017-04-26/a>Johannes UllrichIf there are some unexploited MSSQL Servers With Weak Passwords Left: They got you now (again)
2016-12-06/a>Bojan ZdrnjaAttacking NoSQL applications
2016-08-11/a>Pasquale StirparoLooking for the insider: Forensic Artifacts on iOS Messaging App
2016-06-03/a>Tom ListonMySQL is YourSQL
2016-04-27/a>Tom WebbKippos Cousin Cowrie
2016-02-15/a>Bojan ZdrnjaExploiting (pretty) blind SQL injections
2013-10-19/a>Johannes UllrichYet Another WHMCS SQL Injection Exploit
2013-07-16/a>Johannes UllrichWhy don't we see more examples of web app attacks via POST?
2013-04-04/a>Johannes UllrichPostgresql Patches Critical Vulnerability
2013-03-03/a>Richard PorterUptick in MSSQL Activity
2013-01-25/a>Johannes UllrichVulnerability Scans via Search Engines (Request for Logs)
2013-01-09/a>Rob VandenBrinkSQL Injection Flaw in Ruby on Rails
2012-12-02/a>Guy BruneauZero Day MySQL Buffer Overflow
2012-10-05/a>Richard PorterReports of a Distributed Injection Scan
2012-09-21/a>Guy BruneauStoring your Collection of Malware Samples with Malwarehouse
2012-07-31/a>Daniel WesemannSQL injection, lilupophilupop-style
2012-06-11/a>Johannes UllrichExploit Available for Trivial MySQL Password Bypass
2011-12-01/a>Mark HofmanSQL Injection Attack happening ATM
2011-06-06/a>Johannes UllrichThe Havij SQL Injection Tool
2011-04-19/a>Bojan ZdrnjaSQL injection: why can’t we learn?
2011-04-01/a>John BambenekLizaMoon Mass SQL-Injection Attack Infected at least 500k Websites
2010-12-02/a>Kevin JohnsonSQL Injection: Wordpress 3.0.2 released
2010-08-15/a>Manuel Humberto Santander PelaezObfuscated SQL Injection attacks
2010-05-21/a>Rick WannerMySQL 5.1.47 is now available - http://www.mysql.com/downloads/mysql/
2010-05-16/a>Rick WannerUpcoming MySQL patch fixes several critical vulnerabilites
2009-07-16/a>Bojan ZdrnjaOWC exploits used in SQL injection attacks
2009-05-19/a>Bojan ZdrnjaAdvanced blind SQL injection (with Oracle examples)
2009-05-09/a>Patrick NolanShared SQL Injection Lessons Learned blog item
2009-04-21/a>Bojan ZdrnjaWeb application vulnerabilities
2009-02-11/a>Robert DanfordProFTPd SQL Authentication Vulnerability exploit activity
2008-12-23/a>Patrick NolanMS ACK's Vulnerability in SQL Server which Could Allow Remote Code Execution
2008-12-15/a>Toby KohlenbergNew MS SQL Server vulnerability
2008-12-12/a>Johannes UllrichMSIE 0-day Spreading Via SQL Injection
2008-12-01/a>Jason LamInput filtering and escaping in SQL injection mitigation
2008-11-20/a>Jason LamLarge quantity SQL Injection mitigation
2008-09-29/a>Daniel WesemannASPROX mutant
2008-09-01/a>John BambenekThe Number of Machines Controlled by Botnets Has Jumped 4x in Last 3 Months
2008-08-23/a>Mark HofmanSQL injections - an update
2008-08-08/a>Mark HofmanMore SQL Injections - very active right now
2008-07-24/a>Bojan ZdrnjaWhat's brewing in Danmec's pot?
2008-06-30/a>Marcus SachsMore SQL Injection with Fast Flux hosting
2008-06-24/a>Jason LamSQL Injection mitigation in ASP
2008-06-24/a>Jason LamMicrosoft SQL Injection Prevention Strategy
2008-06-23/a>donald smithPreventing SQL injection
2008-06-13/a>Johannes UllrichSQL Injection: More of the same
2008-05-20/a>Raul SilesList of malicious domains inserted through SQL injection
2008-04-24/a>donald smithHundreds of thousands of SQL injections
2008-04-16/a>Bojan ZdrnjaThe 10.000 web sites infection mystery solved
2008-03-14/a>Kevin Liston2117966.net-- mass iframe injection
2008-01-09/a>Bojan ZdrnjaMass exploits with SQL Injection
2007-02-24/a>Jason LamPrepared Statements and SQL injections

SERVER

2024-04-22/a>Jan KoprivaIt appears that the number of industrial devices accessible from the internet has risen by 30 thousand over the past three years
2022-12-19/a>Xavier MertensHunting for Mastodon Servers
2022-06-17/a>Bojan ZdrnjaCritical vulnerability in Splunk Enterprise?s deployment server functionality
2021-05-22/a>Xavier Mertens"Serverless" Phishing Campaign
2020-05-29/a>Johannes UllrichThe Impact of Researchers on Our Data
2017-09-16/a>Guy BruneauVMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities - https://www.vmware.com/security/advisories/VMSA-2017-0015.html
2015-05-20/a>Brad DuncanLogjam - vulnerabilities in Diffie-Hellman key exchange affect browsers and servers using TLS
2013-07-27/a>Scott FendleyDefending Against Web Server Denial of Service Attacks
2013-03-26/a>Daniel WesemannHow your Webhosting Account is Getting Abused
2011-12-28/a>Daniel WesemannHash collisions vulnerability in web servers
2011-09-04/a>Lorna HutchesonSeveral Sites Defaced
2011-06-30/a>Rob VandenBrinkUpdate for RSA Authentication Manager
2010-10-03/a>Adrien de BeaupreH went down.
2010-09-16/a>Johannes UllrichOpenX Ad-Server Vulnerability
2010-03-24/a>Johannes Ullrich".sys" Directories Delivering Driveby Downloads
2009-11-14/a>Adrien de BeaupreMicrosoft advisory for Windows 7 / Windows Server 2008 R2 Remote SMB DoS Exploit released
2009-11-12/a>Rob VandenBrinkWindows 7 / Windows Server 2008 Remote SMB Exploit
2009-04-07/a>Johannes UllrichSSH scanning from compromised mail servers
2008-12-15/a>Toby KohlenbergNew MS SQL Server vulnerability
2008-05-19/a>Maarten Van HorenbeeckRoute filtering and its impact on the DNS fabric
2006-10-03/a>Swa FrantzenDetecting attacks against servers