SANS Internet Storm Center

Heartbleed CRL Activity Spike Found, (Wed, Apr 16th)

Wed, 04/16/2014 - 7:40pm

It looks like, as I had suspected, the CRL activity numbers we have been seeing did not reflect t ...(more)...

WinXP and/or Win2003 hanged systems because of SC Forefront Endpoint Protection faulty update, (Wed, Apr 16th)

Wed, 04/16/2014 - 11:48am

Reader Philipp reported today a bug affecting his remaining Windows XP machines and Windows 2003 ...(more)...

Oracle Critical Patch Update for April 2014, (Wed, Apr 16th)

Wed, 04/16/2014 - 7:07am

Oracle released its quarterly Criticical Patch Update (CPU) yesterday [1]. As usual, the number o ...(more)...

New Feature: Monitoring Certification Revocation Lists, (Wed, Apr 16th)

Tue, 04/15/2014 - 7:01pm

Johannes B. Ullrich, Ph ...(more)...

Looking for malicious traffic in electrical SCADA networks - part 1, (Tue, Apr 15th)

Tue, 04/15/2014 - 3:42pm

When infosec guys are performing intrusion detection, they usually look for attacks like portscan ...(more)...

INFOCon Green: Heartbleed - on the mend, (Mon, Apr 14th)

Mon, 04/14/2014 - 8:25am

We are going back to INFOCon Green today.   Things have stabilized and the INFOCon is use ...(more)...

Reverse Heartbleed Testing, (Sun, Apr 13th)

Sun, 04/13/2014 - 7:01am

I wanted to know if the tools/software I execute regularly are vulnerable to scraping my syste ...(more)...

Interested in a Heartbleed Challenge?, (Sat, Apr 12th)

Sat, 04/12/2014 - 6:29am

CloudFlare lunched a challenge yesterday: Can You Get Private SSL Keys Using Heartbleed?[

Heartbleed Fix Available for Download for Cisco Products, (Fri, Apr 11th)

Fri, 04/11/2014 - 5:42pm

The following Cisco products that were previously identified as vulnerable and have been remed ...(more)...

The Other Side of Heartbleed - Client Vulnerabilities, (Fri, Apr 11th)

Fri, 04/11/2014 - 1:24am

We're getting reports of client applications that are vulnerable to the heartbleed issue.& ...(more)...

How to talk to your kids about "Heartbleed", (Fri, Apr 11th)

Thu, 04/10/2014 - 8:41pm

With more mass-media attention to the heartbleed bug, we are getting more questions from &quot ...(more)...

Brace Yourselves (and your Users / Clients) for Heartbleed SPAM, (Thu, Apr 10th)

Thu, 04/10/2014 - 8:33am

I started getting emails yesterday asking me to change passwords on services I do not have acc ...(more)...