Date Author Title

MS OFFICE

2016-01-24Didier StevensObfuscated MIME Files

MS

2024-10-17/a>Guy BruneauScanning Activity from Subnet 15.184.0.0/16
2024-08-29/a>Xavier MertensLive Patching DLLs with Python
2024-08-14/a>Xavier MertensMultiple Malware Dropped Through MSI Package
2024-06-17/a>Xavier MertensNew NetSupport Campaign Delivered Through MSIX Packages
2024-04-22/a>Jan KoprivaIt appears that the number of industrial devices accessible from the internet has risen by 30 thousand over the past three years
2024-02-09/a>Xavier MertensMSIX With Heavily Obfuscated PowerShell Script
2023-11-18/a>Xavier MertensQuasar RAT Delivered Through Updated SharpLoader
2023-11-15/a>Xavier MertensRedline Dropped Through MSIX Package
2023-08-16/a>Yee Ching TokA Gentle Reminder: The Evolving Nature of Digital Scams
2023-08-10/a>Bojan ZdrnjaSome things never change ? such as SQL Authentication ?encryption?
2023-06-19/a>Xavier MertensMalware Delivered Through .inf File
2023-02-26/a>Didier Stevensoledump & MSI Files
2022-09-23/a>Xavier MertensKids Like Cookies, Malware Too!
2022-06-12/a>Didier StevensQuickie: Follina, RTF & Explorer Preview Pane
2022-05-31/a>Xavier MertensFirst Exploitation of Follina Seen in the Wild
2022-05-30/a>Xavier MertensNew Microsoft Office Attack Vector via "ms-msdt" Protocol Scheme (CVE-2022-30190)
2022-05-14/a>Didier StevensQuick Analysis Of Phishing MSG
2022-04-14/a>Johannes UllrichAn Update on CVE-2022-26809 - MSRPC Vulnerabliity - PATCH NOW
2022-03-18/a>Johannes UllrichScans for Movable Type Vulnerability (CVE-2021-20837)
2022-01-31/a>Xavier MertensBe careful with RPMSG files
2022-01-09/a>Didier StevensExtracting Cobalt Strike Beacons from MSBuild Scripts
2021-12-16/a>Brad DuncanHow the "Contact Forms" campaign tricks people
2021-10-03/a>Didier StevensVideo: CVE-2021-40444 Maldocs: Extracting URLs
2021-07-02/a>Xavier MertensKaseya VSA Users Hit by Ransomware
2021-05-14/a>Xavier Mertens"Open" Access to Industrial Systems Interface is Also Far From Zero
2021-05-12/a>Jan KoprivaNumber of industrial control systems on the internet is lower then in 2020...but still far from zero
2021-05-08/a>Guy BruneauWho is Probing the Internet for Research Purposes?
2021-04-28/a>Xavier MertensDeeper Analyzis of my Last Malicious PowerPoint Add-On
2021-04-13/a>Richard PorterMicrosoft April 2021 Patch Tuesday
2021-02-26/a>Guy BruneauPretending to be an Outlook Version Update
2020-10-12/a>Didier StevensNested .MSGs: Turtles All The Way Down
2020-10-11/a>Didier StevensAnalyzing MSG Files With plugin_msg_summary
2020-09-29/a>Xavier MertensManaging Remote Access for Partners & Contractors
2020-08-22/a>Guy BruneauRemote Desktop (TCP/3389) and Telnet (TCP/23), What might they have in Common?
2019-11-18/a>Johannes UllrichSMS and 2FA: Another Reason to Move away from It.
2019-10-20/a>Guy BruneauScanning Activity for NVMS-9000 Digital Video Recorder
2019-08-28/a>Xavier MertensMalware Samples Compiling Their Next Stage on Premise
2019-04-04/a>Xavier MertensNew Waves of Scans Detected by an Old Rule
2018-10-21/a>Didier StevensMSG Files: Compressed RTF
2018-08-19/a>Didier StevensVideo: Peeking into msg files - revisited
2018-08-11/a>Didier StevensPeeking into msg files - revisited
2018-07-23/a>Didier StevensAnalyzing MSG files
2018-06-12/a>Johannes UllrichMicrosoft June 2018 Patch Tuesday
2018-05-25/a>Xavier MertensAntivirus Evasion? Easy as 1,2,3
2017-10-15/a>Didier StevensPeeking into .msg files
2017-07-24/a>Renato MarinhoUber drivers new threat: the "passenger"
2017-07-16/a>Renato MarinhoSMS Phishing induces victims to photograph its own token card
2017-07-01/a>Rick WannerUsing nmap to scan for MS17-010 (CVE-2017-0143 EternalBlue)
2017-05-13/a>Guy BruneauMicrosoft Released Guidance for WannaCrypt
2017-04-26/a>Johannes UllrichIf there are some unexploited MSSQL Servers With Weak Passwords Left: They got you now (again)
2017-03-31/a>Xavier MertensPro & Con of Outsourcing your SOC
2017-01-10/a>Johannes UllrichJanuary 2017 Microsoft Patch Tuesday
2016-02-23/a>Xavier MertensVMware VMSA-2016-0002
2016-02-13/a>Guy BruneauVMware VMSA-2015-0007.3 has been Re-released
2016-02-09/a>Johannes UllrichMicrosoft February 2016 Patch Tuesday
2016-01-24/a>Didier StevensObfuscated MIME Files
2016-01-12/a>Alex StanfordJanuary 2016 Microsoft Patch Tuesday
2015-12-08/a>Johannes UllrichDecember 2015 Microsoft Patch Tuesday
2015-11-10/a>Johannes UllrichNovember 2015 Microsoft Patch Tuesday
2015-10-13/a>Alex StanfordOctober 2015 Microsoft Patch Tuesday
2015-09-08/a>Lenny ZeltserA Close Look at PayPal Overpayment Scams That Target Craigslist Sellers
2015-09-08/a>Johannes UllrichSeptember 2015 Microsoft Patch Tuesday
2015-08-11/a>Manuel Humberto Santander PelaezAugust 2015 Microsoft Patch Tuesday
2015-07-14/a>Johannes UllrichJuly 2015 Microsoft Patch Tuesday
2015-06-09/a>Johannes UllrichMicrosoft Patch Tuesday Summary for June 2015
2015-05-15/a>Didier StevensAnother Maldoc? I'm Afraid So...
2015-05-12/a>Johannes UllrichMay 2015 Microsoft Patch Tuesday Summary
2015-05-09/a>Didier StevensMalicious Word Document: This Time The Maldoc Is A MIME File
2015-04-28/a>Daniel WesemannScammy Nepal earthquake donation requests
2015-04-15/a>Johannes UllrichMS15-034: HTTP.sys (IIS) DoS And Possible Remote Code Execution. PATCH NOW
2015-04-14/a>Alex StanfordMicrosoft Patch Tuesday - April 2015
2015-03-10/a>Johannes UllrichMicrosoft March Patch Tuesday
2015-02-10/a>Mark BaggettMicrosoft Update Advisory for February 2015
2015-01-13/a>Johannes UllrichMicrosoft Patch Tuesday - January 2015 (Really? Telnet?)
2014-12-09/a>Alex StanfordMicrosoft Patch Tuesday - December 2014
2014-11-18/a>Jim ClausingMicrosoft November out-of-cycle patch MS14-068
2014-11-11/a>Johannes UllrichMicrosoft November 2014 Patch Tuesday
2014-10-14/a>Johannes UllrichMicrosoft October 2014 Patch Tuesday
2014-09-09/a>Alex StanfordMicrosoft Patch Tuesday - September 2014
2014-08-12/a>Alex StanfordMicrosoft Patch Tuesday - August 2014
2014-07-08/a>Alex StanfordMicrosoft Patch Tuesday - July
2014-06-10/a>Alex StanfordMicrosoft Patch Tuesday June 2014
2014-05-13/a>Johannes UllrichMicrosoft May 2014 Patch Tuesday
2014-05-01/a>Johannes UllrichMicrosoft Announces Special Patch for IE 0-day (Win XP included!)
2014-04-08/a>Richard PorterApril 2014 Microsoft Patches
2014-03-11/a>Johannes UllrichMicrosoft Patch Tuesday March 2014
2014-02-11/a>Johannes UllrichFebruary 2014 Microsoft Patch Tuesday
2014-01-14/a>Johannes UllrichMicrosoft Patch Tuesday January 2014
2013-12-10/a>Johannes UllrichMicrosoft December Patch Tuesday
2013-11-12/a>Johannes UllrichNovember 2013 Microsoft Patch Tuesday
2013-11-09/a>Guy BruneauIE Zero-Day Vulnerability Exploiting msvcrt.dll
2013-11-01/a>Russ McReeSecunia's PSI Country Report - Q3 2013
2013-10-08/a>Johannes UllrichMicrosoft October 2013 Patch Tuesday
2013-10-04/a>Pedro BuenoCSAM: WebHosting BruteForce logs
2013-10-03/a>Johannes UllrichOctober Patch Tuesday Preview (CVE-2013-3893 patch coming!)
2013-10-02/a>John BambenekObamacare related domain registration spike, Government shutdown domain registration beginning
2013-09-19/a>Bojan ZdrnjaArrays in requests, PHP and DedeCMS
2013-09-10/a>Swa FrantzenMicrosoft September 2013 Black Tuesday Overview
2013-09-07/a>Guy BruneauMicrosoft September Patch Pre-Announcement
2013-08-28/a>Bojan ZdrnjaMS13-056 (false positive)? alerts
2013-08-15/a>Johannes UllrichMicrosoft Pulls MS013-061 due to problems with Exchange Server 2013 http://blogs.technet.com/b/exchange/archive/2013/08/14/exchange-2013-security-update-ms13-061-status-update.aspx
2013-08-13/a>Swa FrantzenMicrosoft August 2013 Black Tuesday Overview
2013-07-21/a>Guy BruneauUbuntu Forums Security Breach
2013-07-09/a>Swa FrantzenMicrosoft July 2013 Black Tuesday Overview
2013-06-11/a>Swa FrantzenMicrosoft June 2013 Black Tuesday Overview
2013-06-11/a>Swa FrantzenOther Microsoft Black Tuesday News
2013-05-14/a>Swa FrantzenMicrosoft May 2013 Black Tuesday Overview
2013-05-09/a>Johannes UllrichMicrosoft released a Fix-it for the Internet Explorer 8 Vulnerability http://support.microsoft.com/kb/2847140
2013-04-17/a>John BambenekUPDATEDx1: Boston-Related Malware Campaigns Have Begun - Now with Waco Plant Explosion Fun
2013-04-09/a>Swa FrantzenMicrosoft April 2013 Black Tuesday Overview
2013-03-12/a>Swa FrantzenMicrosoft March 2013 Black Tuesday Overview
2013-03-03/a>Richard PorterUptick in MSSQL Activity
2013-02-12/a>Adam SwangerMicrosoft February 2013 Black Tuesday Update - Overview
2013-01-14/a>Richard PorterJanuary 2013 Microsoft Out of Cycle Patch
2013-01-09/a>Rob VandenBrinkSecurity Update - Cisco Prime LMS (cisco-sa-20130109-lms - remote execution as root vulnerability) - advisory at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms
2013-01-08/a>Richard PorterMicrosoft January 2013 Black Tuesday Update - Overview
2012-12-11/a>John BambenekMicrosoft December 2012 Black Tuesday Update - Overview
2012-11-13/a>Jim ClausingMicrosoft November 2012 Black Tuesday Update - Overview
2012-10-09/a>Johannes UllrichMicrosoft October 2012 Black Tuesday Update - Overview
2012-09-11/a>Adam SwangerMicrosoft September 2012 Black Tuesday Update - Overview
2012-08-22/a>Adrien de BeauprePhishing/spam via SMS
2012-08-14/a>Rick WannerMicrosoft August 2012 Black Tuesday Update - Overview
2012-07-30/a>Guy BruneauEnd of Days for MS-CHAPv2
2012-07-10/a>Swa FrantzenMicrosoft July 2012 Black Tuesday Update - Overview
2012-06-12/a>Swa FrantzenMicrosoft June 2012 Black Tuesday Update - Overview
2012-06-12/a>Swa FrantzenMicrosoft Security Advisory 2719615 - MSXML - CVE-2012-1889
2012-05-08/a>Adam SwangerMicrosoft May 2012 Black Tuesday Update - Overview
2012-05-05/a>Tony CarothersVulnerability Exploit for Snow Leopard
2012-04-27/a>Mark HofmanMicrosoft has added MSSQL 2008 R2 SP1 to the list of affected software for MS12-027 (Thanks Ryan). More info here --> http://technet.microsoft.com/security/bulletin/ms12-027
2012-04-26/a>Richard PorterPacketstorm Security and Metasploit have Exploit code for MS12-027
2012-04-10/a>Swa FrantzenWindows Vista RIP
2012-04-10/a>Swa FrantzenMicrosoft April 2012 Black Tuesday Update - Overview
2012-03-13/a>Lenny ZeltserMarch 2012 Microsoft Black Tuesday
2012-02-14/a>Johannes UllrichFebruary 2012 Microsoft Black Tuesday
2012-01-10/a>Adrien de BeaupreJanuary 2012 Microsoft Black Tuesday Summary
2012-01-06/a>Guy BruneauJanuary 2012 Patch Tuesday Pre-release
2011-12-13/a>Johannes UllrichDecember 2011 Microsoft Black Tuesday Summary
2011-11-08/a>Swa FrantzenMicrosoft November 2011 Black Tuesday Overview
2011-11-03/a>Guy BruneauNovember 2011 Patch Tuesday Pre-release
2011-10-11/a>Swa FrantzenMicrosoft Black Tuesday Overview October 2011
2011-10-11/a>Swa FrantzenMicrosoft Security Intelligence Report (SIR) - Volume 11
2011-09-30/a>Tony CarothersMicrosoft Security Essentials Mis-identifes Chrome
2011-09-13/a>Swa FrantzenMicrosoft September 2011 Black Tuesday
2011-09-13/a>Swa FrantzenMore DigiNotar intermediate certificates blocklisted at Microsoft
2011-09-09/a>Johannes UllrichEarly Patch Tuesday Today: Microsoft September 2011 Patches
2011-08-11/a>Johannes UllrichAs part of this weeks patch tuesday, microsoft also re-release MS11-043 to address stability issues.
2011-08-09/a>Swa FrantzenMicrosoft August 2011 Black Tuesday Overview
2011-07-19/a>Richard PorterSMS Phishing at the SANSFire 2011 Handler Dinner
2011-07-12/a>Swa FrantzenMicrosoft July 2011 Black Tuesday Overview
2011-06-14/a>Swa FrantzenMicrosoft June 2011 Black Tuesday Overview
2011-05-10/a>Swa FrantzenMay 2011 Microsoft Black Tuesday Overview
2011-04-15/a>Kevin ListonMS11-020 (KB2508429) Upgrading from Critical to PATCH NOW
2011-04-11/a>Jim ClausingApril 2011 Microsoft Black Tuesday Summary
2011-03-08/a>Jim ClausingMarch 2011 Microsoft Black Tuesday Summary
2011-02-08/a>Joel EslerFeburary 2011 Microsoft Black Tuesday Summary
2011-01-11/a>Kevin ShorttJanuary 2011 Microsoft Black Tuesday Summary
2011-01-08/a>Guy BruneauJanuary 2011 Patch Tuesday Pre-release
2011-01-05/a>Johannes UllrichCurrently Unpatched Windows / Internet Explorer Vulnerabilities
2010-12-23/a>Mark HofmanOlder AV Scam Active again.
2010-12-15/a>Manuel Humberto Santander PelaezHP StorageWorks P2000 G3 MSA hardcoded user
2010-12-14/a>Manuel Humberto Santander PelaezDecember 2010 Microsoft Black Tuesday Summary
2010-12-01/a>Deborah HaleA Gentle Reminder - It is that time of year again
2010-11-09/a>Johannes UllrichNovember 2010 Microsoft Black Tuesday Summary
2010-10-12/a>Adrien de BeaupreOctober 2010 Microsoft Black Tuesday Summary
2010-10-08/a>Rick WannerPatch Tuesday Pre-release -- 16 updates
2010-09-30/a>Pedro BuenoMS OOB .NET patch is now also available via Windows Update.
2010-09-14/a>Adrien de BeaupreSeptember 2010 Microsoft Black Tuesday Summary
2010-08-29/a>Swa FrantzenDLL hijacking - what are you doing ?
2010-08-22/a>Manuel Humberto Santander PelaezSCADA: A big challenge for information security professionals
2010-08-10/a>Jim ClausingAugust 2010 Micrsoft Black Tuesday Summary
2010-07-26/a>Guy BruneauSophosLabs Released Free Tool to Validate Microsoft Shortcut
2010-07-13/a>Jim ClausingJuly 2010 Microsoft Black Tuesday Summary
2010-07-08/a>Kyle HaugsnessNew poll on MSRC
2010-06-08/a>Manuel Humberto Santander PelaezJune 2010 Microsoft Black Tuesday Summary
2010-05-11/a>Scott FendleyMay 2010 Microsoft Patches
2010-04-22/a>Guy BruneauMS10-025 Security Update has been Pulled
2010-04-16/a>G. N. WhiteMS10-021: Encountering A Failed WinXP Update
2010-04-13/a>Johannes UllrichMicrosoft April 2010 Patch Tuesday
2010-03-29/a>Pedro BuenoMicrosoft to release out-of-band security bulletin tomorrow for IE6/IE7 with cumulative fix.
2010-03-09/a>John BambenekMarch 2010 - Microsoft Patch Tuesday Diary
2010-03-03/a>Mark HofmanMS10-015 re-released
2010-03-01/a>Mark HofmanAS/NZ "Online Offensive - Fight fraud online" week March 1-7
2010-02-19/a>Mark HofmanMS10-015 may cause Windows XP to blue screen (but only if you have malware on it)
2010-02-11/a>Deborah HaleCritical Update for AD RMS
2010-02-09/a>Johannes UllrichFebruary 2010 Black Tuesday Overview
2010-01-21/a>Johannes UllrichMicrosoft January Out of Band Patch
2010-01-13/a>Johannes UllrichSMS Donations Advertised via Twitter
2010-01-12/a>Johannes UllrichMicrosoft Security Bulletin: January 2010
2009-12-08/a>Deborah HaleDecember 2009 Black Tuesday Overview
2009-11-10/a>Swa FrantzenMicrosoft November Black Tuesday Overview
2009-10-14/a>Johannes UllrichOdd Apache/MSIE issue with downloads from ISC
2009-10-13/a>Johannes UllrichMicrosoft October 2009 Black Tuesday Overview
2009-09-08/a>Guy BruneauMicrosoft September 2009 Black Tuesday Overview
2009-08-18/a>Bojan ZdrnjaMS09-039 exploit in the wild?
2009-08-11/a>Swa FrantzenMicrosoft August 2009 Black Tuesday Overview
2009-07-14/a>Swa FrantzenMicrosoft July Black Tuesday Overview
2009-07-06/a>Stephen Hall0-day in Microsoft DirectShow (msvidctl.dll) used in drive-by attacks
2009-06-09/a>Swa FrantzenMicrosoft June Black Tuesday Overview
2009-05-20/a>Pedro BuenoCyber Warfare and Kylin thoughts
2009-05-12/a>Swa FrantzenMay Black Tuesday Overview
2009-05-10/a>Mari NicholsIs your Symantec Antivirus Alerting working correctly?
2009-04-23/a>Kyle HaugsnessPossible MS09-013 activity
2009-04-14/a>Swa FrantzenApril Black Tuesday Overview
2009-03-10/a>Swa FrantzenMarch black Tuesday overview
2009-02-19/a>Bojan ZdrnjaMS09-002, XML/DOC and initial infection vector
2009-02-17/a>Bojan ZdrnjaMS09-002 exploit in the wild
2009-02-13/a>Andre LudwigThird party information on conficker
2009-02-10/a>Swa FrantzenFebruary Black Tuesday Overview
2009-01-13/a>Johannes UllrichJanuary Black Tuesday Overview
2009-01-12/a>William SaluskyDownadup / Conficker - MS08-067 exploit and Windows domain account lockout
2008-12-15/a>Toby KohlenbergNew MS SQL Server vulnerability
2008-12-12/a>Johannes UllrichMSIE 0-day Spreading Via SQL Injection
2008-12-09/a>Swa FrantzenDecember Black Tuesday Overview
2008-12-09/a>Swa FrantzenContacting us might be hard today
2008-11-29/a>Pedro BuenoPossible Mumbai Scams?
2008-11-11/a>Swa FrantzenNovember Black Tuesday Overview
2008-10-14/a>Swa FrantzenOctober Black Tuesday Overview
2008-09-09/a>Swa FrantzenSeptember 2008 Black Tuesday Overview
2008-08-22/a>Patrick NolanMS08-051 V2.0 Patch issued August 20, 2008
2008-08-15/a>Jim ClausingAnother MS update that may have escaped notice
2008-08-12/a>Stephen HallAugust 2008 Black Tuesday Overview
2008-07-08/a>Swa FrantzenJuly 2008 black tuesday overview
2008-06-13/a>Johannes UllrichFloods: More of the same (2)
2008-06-10/a>Swa FrantzenJune 2008 Black Tuesday Overview
2008-05-19/a>Maarten Van HorenbeeckText message and telephone aid scams
2008-05-17/a>Lorna HutchesonXP SP3 Issues
2008-05-13/a>Swa FrantzenMay 2008 black tuesday overview
2008-04-22/a>donald smithMaximus root kit downloads via MySpace social engineering trick.
2008-04-10/a>Deborah HaleSymantec Threatcon Level 2
2008-04-08/a>Swa FrantzenApril 2008 - Black Tuesday Overview
2008-03-11/a>Swa FrantzenMarch Black Tuesday Overview
2008-02-12/a>Swa FrantzenFebruary Black Tuesday Overview
2008-01-08/a>Swa FrantzenJanuary Black Tuesday overview
2007-12-11/a>Swa FrantzenDecember black tuesday overview
2007-11-13/a>Swa Frantzennovember black tuesday overview
2007-10-09/a>Swa FrantzenOctober Black Tuesday overview
2007-09-11/a>Swa FrantzenSeptember microsoft patch overview
2007-08-14/a>Swa FrantzenAugust 'Black Tuesday' overview
2007-07-10/a>Swa FrantzenJuly 'Black Tuesday' overview
2007-06-12/a>Johannes UllrichJune 2007, Microsoft Patch Tuesday Overview.
2007-05-08/a>Swa FrantzenMay 2007, Black Tuesday patch overview
2007-04-10/a>Swa FrantzenMicrosoft black Tuesday patches - April 2007
2007-04-03/a>Swa Frantzen* Microsoft out of cycle patch
2007-02-13/a>Swa FrantzenMicrosoft Black Tuesday patches - February 2007
2007-01-09/a>Swa FrantzenMicrosoft Patches - January 2007 - overview
2006-12-12/a>Swa FrantzenMicrosoft Black Tuesday - December 2006 overview
2006-11-14/a>Jim ClausingMS06-071: MSXML Core Services
2006-11-14/a>Swa FrantzenMicrosoft Black Tuesday Overview
2006-10-10/a>Johannes UllrichMS06-056: ASP.NET XSS Information Disclosure Vulnerability (moderate)
2006-10-10/a>Johannes UllrichMS06-061: XSLT/MSXML Buffer Overflow Code Execution Vulnerability (moderate)
2006-10-10/a>Kyle HaugsnessMS06-063: Mailslot DoS (Server service)
2006-10-09/a>Swa FrantzenMicrosoft black tuesday - October 2006 STATUS
2006-10-05/a>Swa FrantzenMS06-053 revisited ?
2006-09-30/a>Swa FrantzenYellow: WebViewFolderIcon setslice exploit spreading
2006-09-28/a>Swa FrantzenMSIE: One patched, one pops up again (setslice)
2006-09-22/a>Swa FrantzenYellow: MSIE VML exploit spreading
2006-09-19/a>Swa FrantzenYet another MSIE 0-day: VML
2006-09-15/a>Swa FrantzenMSIE DirectAnimation ActiveX 0-day update
2006-09-12/a>Swa FrantzenMicrosoft security patches for September 2006
2006-08-17/a>Swa FrantzenMicrosoft August 2006 Patches: STATUS

OFFICE

2022-10-27/a>Tom WebbSupersizing your DUO and 365 Integration
2022-05-30/a>Xavier MertensNew Microsoft Office Attack Vector via "ms-msdt" Protocol Scheme (CVE-2022-30190)
2022-04-17/a>Didier StevensVideo: Office Protects You From Malicious ISO Files
2022-04-16/a>Didier StevensOffice Protects You From Malicious ISO Files
2021-12-19/a>Didier StevensOffice 2021: VBA Project Version
2021-11-28/a>Didier StevensVideo: YARA Rules for Office Maldocs
2021-11-23/a>Didier StevensYARA Rule for OOXML Maldocs: Less False Positives
2021-09-08/a>Johannes UllrichMicrosoft Offers Workaround for 0-Day Office Vulnerability (CVE-2021-40444)
2020-12-12/a>Didier StevensOffice 95 Excel 4 Macros
2020-11-08/a>Didier StevensQuick Tip: Extracting all VBA Code from a Maldoc
2020-09-23/a>Xavier MertensMalicious Word Document with Dynamic Content
2020-08-20/a>Rob VandenBrinkOffice 365 Mail Forwarding Rules (and other Mail Rules too)
2020-02-21/a>Xavier MertensQuick Analysis of an Encrypted Compound Document Format
2019-12-28/a>Didier StevensCorrupt Office Documents
2019-12-09/a>Didier Stevens(Lazy) Sunday Maldoc Analysis
2019-04-07/a>Guy BruneauFake Office 365 Payment Information Update
2019-04-01/a>Didier StevensAnalysis of PDFs Created with OpenOffice/LibreOffice
2018-12-13/a>Xavier MertensPhishing Attack Through Non-Delivery Notification
2018-10-10/a>Xavier MertensNew Campaign Using Old Equation Editor Vulnerability
2018-09-04/a>Rob VandenBrinkLet's Trade: You Read My Email, I'll Read Your Password!
2018-05-25/a>Xavier MertensAntivirus Evasion? Easy as 1,2,3
2018-05-01/a>Xavier MertensDiving into a Simple Maldoc Generator
2017-12-16/a>Xavier MertensMicrosoft Office VBA Macro Obfuscation via Metadata
2017-11-15/a>Xavier MertensIf you want something done right, do it yourself!
2017-04-28/a>Xavier MertensAnother Day, Another Obfuscation Technique
2017-01-31/a>Johannes UllrichMalicious Office files using fileless UAC bypass to drop KEYBASE malware
2016-09-30/a>Xavier MertensAnother Day, Another Malicious Behaviour
2016-07-19/a>Didier StevensOffice Maldoc: Let's Focus on the VBA Macros Later...
2016-01-24/a>Didier StevensObfuscated MIME Files
2015-02-20/a>Tom WebbFast analysis of a Tax Scam
2015-02-19/a>Daniel WesemannMacros? Really?!
2014-07-10/a>Rob VandenBrinkCertificate Errors in Office 365 Today
2014-06-22/a>Russ McReeOfficeMalScanner helps identify the source of a compromise
2013-11-05/a>Daniel WesemannTIFF images in MS-Office documents used in targeted attacks
2012-09-14/a>Lenny ZeltserAnalyzing Malicious RTF Files Using OfficeMalScanner's RTFScan
2012-06-04/a>Lenny ZeltserDecoding Common XOR Obfuscation in Malicious Code
2011-01-28/a>Guy BruneauOpenOffice Security Fixes
2010-10-26/a>Pedro BuenoCyber Security Awareness Month - Day 26 - Sharing Office Files
2010-06-05/a>Guy BruneauOpenOffice.org 3.2.1 Fixes Bugs and Vulnerabilities
2010-02-22/a>Rob VandenBrinkMultiple Security Updates for OpenOffice ==> http://www.openoffice.org/security/bulletin.html
2010-01-08/a>Rob VandenBrinkMicrosoft OfficeOnline, Searching for Trust and Malware
2009-07-16/a>Bojan ZdrnjaOWC exploits used in SQL injection attacks
2009-07-13/a>Adrien de BeaupreVulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution