Security Research & Defense

News

Postings are provided "AS IS" with no warranties, and confers no rights.

Get alerts when we update our blog!


Translate this Post

Blogroll

• Microsoft Security Response Center
• The Security Development Lifecycle
• Microsoft Malware Protection Center Blog
• Michael Howard's Weblog
• Microsoft Corporate Privacy Group
• MSRC Ecosystem Strategy (EcoStrat) Team

Report a Vulnerability to Microsoft

• Report a Vulnerability to Microsoft

Tags

• .NET Framework
• ActiveX
• ATL
• Attack
• Attack Surface Reduction
• Attack Vector
• authentication bypass
• AutoPlay
• AutoRun
• CanSecWest
• classid
• clsid
• COM
• Defense-in-depth
• DEP
• detection
• disassembly
• dns
• Exploitability
• exploitation
• full-disclosure
• gdiplus
• GS
• HTML
• ICMP
• IDA
• IGMP
• IIS
• Internet Explorer (IE)
• iobjectsafety
• ISA
• ISATAP
• kernel
• Killbit
• MD5 hash collisions
• Microsoft Office
• Mitigations
• MS08-001
• MS08-067
• MS09-008
• MS09-032
• MS09-034
• MS09-035
• MS09-050
• MS09-051
• MS09-054
• MS09-056
• MS09-061
• MS09-062
• MSHTML
• msmq
• msvidctl
• multicast group
• netmon
• netsh
• network
• network capture
• network protocol
• NTLM
• Open XML
• OWA
• phoenix bit
• ProbeForRead
• ProbeForWrite
• protocol handlers
• quartz.dll
• rating
• registry
• Risk Asessment
• RPC
• safe for initialization
• safe for scripting
• search
• Security Bulletin
• Security Development Lifecycle (SDL)
• Security Science
• Security Tools
• Security Update
• security zones
• signing
• SMB
• SMB2
• SPN
• spoofing
• SQL
• SQL Injection
• timing attack
• tools
• uninitialized variable
• Visual Studio
• win32k.sys
• Windows Media components
• Windows Media Player
• WINS
• Workarounds
• WPAD
• X.509
• XBAP
• XSS
• XSS Filter

Recent Posts

• Announcing the release of the Enhanced Mitigation Evaluation Toolkit
• Assessing the risk of the October security bulletins
• MS09-056: Addressing the X.509 CryptoAPI ASN.1 security vulnerabilities
• MS09-051: A note on the affected platforms
• MS09-050: Exploit timeline for the SMB2 RCE vulnerability

Archives

• October 2009 (8)
• September 2009 (7)
• August 2009 (4)
• July 2009 (10)
• June 2009 (9)
• May 2009 (5)
• April 2009 (11)
• March 2009 (8)
• February 2009 (3)
• January 2009 (3)
• December 2008 (7)
• November 2008 (1)
• October 2008 (8)
• September 2008 (2)
• August 2008 (6)
• July 2008 (5)
• June 2008 (5)
• May 2008 (2)
• April 2008 (3)
• March 2008 (2)
• February 2008 (4)
• January 2008 (5)
• December 2007 (3)

Browse by Tags