Chercher :
Newsletter :  


Revues :
- Presse
- Presse FR
- Vidéos
- Twitter
- Secuobs





Sommaires :
- Tendances
- Failles
- Virus
- Concours
- Reportages
- Acteurs
- Outils
- Breves
- Infrastructures
- Livres
- Tutoriels
- Interviews
- Podcasts
- Communiques
- USBsploit
- Commentaires


Revue Presse:
- Tous
- Francophone
- Par mot clé
- Par site
- Le tagwall


Top bi-hebdo:
- Ensemble
- Articles
- Revue
- Videos
- Twitter
- Auteurs


Articles :
- Par mot clé
- Par auteur
- Par organisme
- Le tagwall


Videos :
- Toutes
- Par mot clé
- Par site
- Le tagwall


Twitter :
- Tous
- Par mot clé
- Par compte
- Le tagwall


Commentaires :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS/XML :
- Articles
- Commentaires
- Revue
- Revue FR
- Videos
- Twitter


RSS SecuObs :
- sécurité
- exploit
- windows
- attaque
- outil
- microsoft


RSS Revue :
- security
- microsoft
- windows
- hacker
- attack
- network


RSS Videos :
- curit
- security
- biomet
- metasploit
- biometric
- cking


RSS Twitter :
- security
- linux
- botnet
- attack
- metasploit
- cisco


RSS Comments :
- Breves
- Virus
- Failles
- Outils
- Tutoriels
- Tendances
- Acteurs
- Reportages
- Infrastructures
- Interviews
- Concours
- Livres
- Communiques


RSS OPML :
- Français
- International











Revue de presse francophone :
- Piratage des grandes entreprises le maillon faible reste l'humain et les PME de leur écosystème
- Jean-Noel De Galzain, Dominique Meurisse et François Lacas, WALLIX Wallix AdminBastion est la solution agile et pragmatique de Privileged Access Management
- 6 au 8 octobre Mobility For Business
- Baromètre Infoblox Nouveau record de menaces DNS au deuxième trimestre
- Quantum Corp. prend en charge le client LAN distribué Xsan dans la bêta publique du prochain système d'exploitation d'Apple, OS X El Capitan
- Symantec En 2014, la variante du ransomware, le cryptolocker a fait 45 fois plus de victimes qu'en 2013
- Pour la sixième année consécutive VMware se place parmi les Leaders du tout dernier Magic Quadrant dédié aux infrastructures de virtualisation de serveurs x86
- Les pare-feu sans fil Dell SonicWALL TZ sont disponibles
- Imperva reconnu Leader par le cabinet Forrester Research
- Vigilance - WordPress Free Counter Cross Site Scripting, analysé le 27 05 2015
- Vigilance - WordPress Hide Login Cross Site Request Forgery, analysé le 27 05 2015
- Streaming illégal et enfants attention aux publicités pornographique
- Vigilance - WordPress NextScripts Cross Site Scripting, analysé le 27 05 2015
- Vigilance - WordPress ThemeMakers obtention d'information, analysé le 27 05 2015
- Vigilance - WordPress gotmls Cross Site Scripting, analysé le 27 05 2015

Dernier articles de SecuObs :
- Renaud Bidou (Deny All): "L'innovation dans le domaine des WAFs s'oriente vers plus de bon sens et d'intelligence, plus de flexibilité et plus d'ergonomie"
- Mises à jour en perspective pour le système Vigik
- Les russes ont-ils pwn le système AEGIS ?
- Le ministère de l'intérieur censure une conférence au Canada
- Saut d'air gap, audit de firmware et (in)sécurité mobile au programme de Cansecwest 2014
- GCHQ: Le JTRIG torpille Anonymous qui torpille le JTRIG (ou pas)
- #FIC2014: Entrée en territoire inconnu
- Le Sénat investit dans les monnaies virtuelles
- #LPM2013: Un nouvel espoir ?
- L'ANSSI durcit le ton

Revue de presse internationale :
- Pinball Table Gets New Lease of Life With Arduino
- Gaping hole in Android lets hackers break in with just your phone number
- HP TippingPoint Protects Against Zero-Day Microsoft Internet Explorer Vulnerabilities
- This Friday, July 31 is the deadline to submit your candidacy
- HPR1822 Some tips on using ImageMagick
- Angler Exploit Kit Used to Find and Infect PoS Systems
- The Best of Boston Hackers at Artisan s Asylum
- Ca Federal tribunal targeted in cyberattack
- A public marketplace for hackers what could possibly go wrong
- PA Married Montco Business Owners Steal 124K by Using Personal Information From Victims Police
- Free software and services your start-up can use
- Ca File breach at electronic spy agency prompts mandatory privacy training
- UK Cambridgeshire Community Services NHS Trust undertaking was it really necessary
- Children s National Medical Center faces suit for hack of up to 18,000 patients data
- Accountant faced with data loss sues computer firm

Annuaire des videos
- FUZZING ON LINE PART THREE
- Official Maltego tutorial 5 Writing your own transforms
- Official Maltego tutorial 6 Integrating with SQL DBs
- Official Maltego tutorial 3 Importing CSVs spreadsheets
- install zeus botnet
- Eloy Magalhaes
- Official Maltego tutorial 1 Google s websites
- Official Maltego tutorial 4 Social Networks
- Blind String SQL Injection
- backdoor linux root from r57 php shell VPS khg crew redc00de
- How To Attaque Pc With Back Track 5 In Arabique
- RSA Todd Schomburg talks about Roundup Ready lines available in 2013
- Nessus Diagnostics Troubleshooting
- Panda Security Vidcast Panda GateDefender Performa Parte 2 de 2
- MultiPyInjector Shellcode Injection

Revue Twitter
- RT @fpalumbo: Cisco consistently leading the way ? buys vCider to boost its distributed cloud vision #CiscoONE
- @mckeay Looks odd... not much to go on (prob some slideshow/vid app under Linux)
- [SuggestedReading] Using the HTML5 Fullscreen API for Phishing Attacks
- RT @BrianHonan: Our problems are not technical but cultural. OWASP top 10 has not changed over the years @joshcorman #RSAC
- RT @mikko: Wow. Apple kernels actually have a function called PE_i_can_has_debugger:
- [Blog Spam] Metasploit and PowerShell payloads
- PinkiePie Strikes Again, Compromises Google Chrome in Pwnium Contest at Hack in the Box: For the second time thi...
- @mikko @fslabs y'all wldn't happen to have lat/long data sets for other botnets, wld you? Doing some research (free/open info rls when done)
- RT @nickhacks: Want to crash a remote host running Snow Leopard? Just use: nmap -P0 -6 --script=targets-ipv6-multicast-mld #wishiwaskidding
- An inexpensive proxy service called is actually a front for #malware distribution -

Mini-Tagwall
Revue de presse : security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone

+ de mots clés pour la revue de presse

Annuaires des videos : curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit

+ de mots clés pour les videos

Revue Twitter : security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall

+ de mots clés pour la revue Twitter

Top bi-hebdo des articles de SecuObs
- [Infratech - release] version 0.6 de Bluetooth Stack Smasher
- [Infratech - vulnérabilité] Nouvelle version 0.8 de Bluetooth Stack Smasher
- Yersinia, un environnement de travail pour les attaques sur le layer 2
- [Ettercap – Partie 2] Ettercap par l'exemple - Man In the Middle et SSL sniffing
- EFIPW récupère automatiquement le mot de passe BIOS EFI des Macbook Pro avec processeurs Intel
- OSSTMM une méthodologie Open Source pour les audits de sécurité
- USBDumper 2 nouvelle version nouvelles fonctions !
- Mises à jour en perspective pour le système Vigik
- [IDS Snort Windows – Partie 2] Installation et configuration
- [Etude de cas IDX-PKI GPL – Partie 2] Installation

Top bi-hebdo de la revue de presse
- Dell dévoile sa nouvelle machine virtuelle AppAssure Replication Target pour Microsoft Azure Marketplace
- NetJapan signe un contrat exclusif pour la France avec Yves Lecomte Sofrad DS
- Secure Cloud de l'ANSSI et label Cloud Confidence une complémentarité pour le meilleur du Cloud
- BT renforce son portefeuille de sécurité avec Darktrace
- Emmanuel Meriot, Darktrace France L'Enterprise Immune System , une nouvelle catégorie de cyber défense
- Christophe Birkeland, Blue Coat Systems La sécurité informatique au sein des environnements industriels 4.0 le savoir est la meilleure protection
- Web Application Firewall Magic Quadrant 2015
- Final Round of DEF CON 23 Speakers
- SENTRYO, lauréat du Prix de l'Innovation 2015 des Assises et de la Mention spéciale Prix du Public
- Le système d'enregistrement et de lecture de Spirent améliore la géolocalisation des véhicules pour des communications entre véhicules

Top bi-hebdo de l'annuaire des videos
- Metasploit ms08 067 netapi exploit upload netcat as backdoor
- SDR based GSM Jammer USRP 2 and GNU Radio Open BTS HD
- Comment Pirater Un Ordinateur Avec Ubuntu Metasploit
- Backtrack 5r3 Armitage Metasploit
- kali linux Collecte d adresses Email avec Metasploit
- Tutoriel Supprimer Cacaoweb Botnet
- Official Maltego tutorial 5 Writing your own transforms
- Comment creer un server botnet!!!!(Réseau de pc zombies)
- Bbkeyswin WPA d une Bbox en 2 min sous Windows
- Official Maltego tutorial 4 Social Networks

Top bi-hebdo de la revue Twitter
- NMAP has been updated with the latest VMware ESX OS detection and correct IEEE/OUI spelling for MAC/ARP addresses Yippee!
- DNSdelve: framework to list, query zones delegated by a registry #infosec #cybercrime bit.ly/mOew7L
- RT @cbrocas: @r00tbsd will give a talk and a workshop at #rmll (July 9th10th) on reverse engineering on open source platform : http ...
- VPN (google): How ATT gets stimulus funds - CNNMoney.com Full
- Is anyone else frustrated by the interface for Python's namedtuple?
- RT @jgrusko: Defcon 20 CTF Quals - PP 200 write-up: (the actual exploit uses a trick to avoid supplying a stack add ...
- Cisco's 2009 Annual Security Report - - (NB: I am emp by Cisco)
- DDing the new version of Linux Mint onto a USB to rebuild my eeePC.
- Newly discovered zero-day exploit bypasses UAC in Windows (bug in win32k.sys)
- The Markle-Daamgard padding is different on mexican MD5, so it can't be made constant time unless you JIT.

Top des articles les plus commentés
- [Metasploit 2.x – Partie 1] Introduction et présentation
- Microsoft !Exploitable un nouvel outil gratuit pour aider les développeurs à évaluer automatiquement les risques
- Webshag, un outil d'audit de serveur web
- Les navigateurs internet, des mini-systèmes d’exploitation hors de contrôle ?
- Yellowsn0w un utilitaire de déblocage SIM pour le firmware 2.2 des Iphone 3G
- CAINE un Live[CD|USB] pour faciliter la recherche légale de preuves numériques de compromission
- Nessus 4.0 placé sous le signe de la performance, de l'unification et de la personnalisation
- [Renforcement des fonctions de sécurité du noyau Linux – Partie 1] Présentation
- [IDS Snort Windows – Partie 1] Introduction aux IDS et à SNORT
- Origami pour forger, analyser et manipuler des fichiers PDF malicieux

The Daily Incite - 6/1/09 - The GriM Reaper

Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]

S'abonner au fil RSS global de la revue de presse



The Daily Incite - 6/1/09 - The GriM Reaper

Par Mike Rothman's blog
Le [2009-06-01] à 19:33:16



Présentation : Today's Daily Incite June 1, 2009 - Volume 4, #26 ---------------------------- Good Morning: They say the Grim Reaper gets us all. Today Dr. Death visited our pals at GM in Detroit. OK, not really Dr. Death, but his main henchman for business - Captain Bankruptcy. It's not like this wasn't expected, and (in my opinion) it will be healthy for the longer term viability for GM. It's hard to be competitive when a multi thousand dollar entitlement albatross what weighing down every car GM sold. Not the kind of demo you want to see... The idea is that bankruptcy will allow GM to sell assets, rewrite contracts (especially with the unions) and restructure to be competitive. As a guy who drives GM cars when I rent, but wouldn't buy one myself - I think the economic situation was one piece of it. They also need to be more nimble and build products that folks want to buy. But the bigger issue here is the concept of periodic renewal. If you remember back to the mid-80's, the concept that GM would go bankrupt was absurd. But then foreign automakers came in and built a better product more efficiently. And 20 years later, GM is on the verge of going away, if they can't change things very quickly. Basically every company must fight to not get stale and doing the same things year after year breeds mildew. It reminds me of when I was doing an internship at Mobil Oil (when Mobil still existed) back in college. I was living at home and taking a bus to a train into New York City. The commute took me about 90 minutes a day and amazingly enough some of the folks doing that same commute did so for 30+ years. These folks were tired and most seemed pretty beaten down to me. It's not hard to imagine that after 30 years of commuting 90 minutes each way, you'd be a bit stale. Now there are a lot of reasons that folks do the same stuff every day, but no one has a reason to let themselves get stale. In our business, where I can tell you the bad guys are anything but stale, complacency and losing vigilance will kill you. So we can take a message from our friends in Detroit. If we aren't undertaking a process of constant renewal, things will get ugly and most of us don't have the option of a Government bail-out. Have a great day. Photo: "Demolition means progress" originally uploaded by churl Technorati: Information Security, CSO, Security Mike, Internet Security The Pragmatic CSO The Pragmatic CSO: Available Now! Read the Intro and Get "5 Tips to be a Better CSO" www.pragmaticcso.com Incite 4 U ========== Better and better every day, every week. Imagine that, an Incite for two weeks in a row and I'll be starting to embrace "social media" more effectively this week, that I think will be a good thing. Stay tuned for that. 1. Obama says cyber-security is important - The big news on Friday was the publishing of the 60 day cyber-security review that took 120 days to complete. I know that counting is hard in Washington DC. But the message was a good one. Byron Acohido did a nice job of summarizing the key points, though every tech book and most of the blogging community wrote something about it. But there is a big difference between words and action. Over the next 120 days, in order to maintain any kind of momentum, there needs to be a clear and defined action plan for how we get to achieve the President's 5-point plan. It's not going to happen by itself, or just because Obama says so. We should all be cautiously optimistic and also prepare a set of talking points for senior management to understand if/how the new initiatives will impact your organization. 2. Metrics on the brain - When times get tough, the tough get counting. Isn't that how the saying goes? In security, counting has always been hard (as I've written about a million times), but we are making steady progress towards understanding what to count and then counting it. Dark Reading covers both how the fine folks at the Center for Internet Security have published their initial consensus-based security metrics work, as well as Project Quant - which is being driven by the Mogull. CIS puts forth 20 interesting metrics (well mostly metrics, some are a bit hard to really quantify) and it's a good start. Remember, some metrics will be operational in nature and some more focused on quantifying our value up the stack. The more substantiation we can have for the security team, the more likely we'll be able to stay around, especially if things remain economically tough. 3. Should we call them VeriSell now? - VeriSign continues to dismantle the house that Stratton built, now selling the MSS business to SecureWorks. Given VeriSign's focus on seemingly selling renewable low-value thingys to mostly smaller companies (like domain names and SSL certs), selling the MSS business makes sense - even if they had to take a $100+MM bath on the transaction. This also gives SecureWorks the leg up as the biggest of the independent MSS providers and they did it for a reasonable price. Of course, now the fun work begins of moving the existing VeriSign business to it's MSS platform to gain the economies of scale, but if you aren't getting bigger in this business - you are getting smaller. 4. Predict this Dave... - It's never too late to poke fun at vendor mumbo-jumbo. Back at RSA, McAfee's Dave DeWalt unveiled a vision called "predictive security," which probably resides in the same bunker as the Holy Grail. I know, I know - I'm objecting to the words again as opposed to the concept of evaluating a crap load of data to figure out what is actually happening out there. But as my Dad the lawyer always tell me, the words are important. Mining data you are gathering from the field is NOT predictive. It's reactive. The concept is that by having this data, you can see patterns emerging and draw conclusions FASTER. But that is not PREDICTING anything, is it? And the astronomy and meteorology analogies are interesting because I wouldn't say weathermen have a great track record of really getting it right. Though I guess "faster reactive security" isn't really a catchy marketing term. 5. Picking that QSA - Chris Hayes provides a good structure to evaluate a QSA in this post. Too many folks don't realize that picking a QSA is just like picking any other kind of service provider, and given the number of these folks that are popping up, it's a very competitive market on the verge of commoditizing. Of course, that means buyer beware must prevail to make sure you are getting adequate value, while minimizing cost. Also make sure anyone you talk to is well aware of the PCI Council's quality initiative (pdf) and challenge them on it. Some folks want a PCI assessor to just give them the rubber stamp, but that is being pretty short sighted. They can and should point out issues that need to be addressed, before the bad guys force the issue.




AddThis Social Bookmark Widget



Les derniers articles du site "Mike Rothman's blog" :

- Security Incite Contracts a Case of Securosis
- The Pope Visits Security Incite Securosis
- The Daily Incite - 12 28 09 - Meyer's Choice
- The Daily Incite - 12 22 09 - Are we there Yeti
- The Daily Incite - 12 17 09 - Changing my Xmas Tune
- The Daily Incite - 12 11 09 - Starbucks Seat Lottery
- The Daily Incite - 12 09 09 - Plunger Tales
- The Daily Incite - 12 07 09 - Happy, Sad, Repeat
- The Daily Incite - 12 03 09 - Not so GRRRRREEEEAAAAATTTTT
- The Daily Incite - 11 30 09 - Giving Thanks




S'abonner au fil RSS global de la revue de presse

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]



Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail




SecuToolBox :

Mini-Tagwall des articles publiés sur SecuObs :

Mini-Tagwall de l'annuaire video :

Mini-Tagwall des articles de la revue de presse :

Mini-Tagwall des Tweets de la revue Twitter :