Rule Release for today - June 8th, 2010

Here we are again, Microsoft Tuesday for June 2010. A number of issues this month and rules to provide coverage for attack detection. Main advisory numbers for IDS/IPS coverage are MS10-033, MS10-034, MS10-035, MS10-038, MS10-039 and MS10-041. Check out the advisory and changelog

Single Threaded Data Processing Pipelines and the Intel Architecture

Or, No Performance for you, go home now. Today's blog post is a guest appearance by our Benevolent Dictator and Glorious Leader, Marty Roesch. We asked Marty for his thoughts on threading, performance and processing network data. Here's what we got: Executive Summary

Rule release for today, Tuesday May 25th, 2010

A maintenance release, new rules in web-client, web-misc, backdoor, oracle, policy and specific-threats rule sets and an extensive set of rule updates. Check it out: http://www.snort.org/vrt/advisories/2010/05/25/vrt-rules-2010-05-25.html/

Rule release for today, Tuesday May 18th, 2010

Changes to web-client, web-misc, backdoor, smtp and specific-threats rule sets. Check here: http://www.snort.org/vrt/advisories/2010/05/18/vrt-rules-2010-05-18.html for change logs etc..

Vulnerability Report - May 2010

Rule release for today, Tuesday May 11th, 2010

Microsoft Tuesday folks, just two advisories today and two rules to cover them. Read all about it here: http://www.snort.org/vrt/advisories/2010/05/11/vrt-rules-2010-05-11.html Enjoy.

Rule release for today, Thursday April 15th, 2010

Maintenance release, a few new rules and modifications to existing ones. Check here for details.

April 2010 Vulnerability Report

Rule release for today, Tuesday April 13th, 2010

Microsoft Tuesday and Adobe Quarterly Patch. Details available here. Microsoft Security Advisory (MS10-019): The Microsoft CAB Subject Interface Package (SIP) implementation contains a programming error that may allow a remote attacker to bypass the authentication mechanism. Mi