http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2016-04-26 13:21:36 - Help Net Security : Bitdefender has discovered a significant vulnerability within Facebook which allowed access to any user account through simple social login manipulation The attacker was able to gain access to personal user information, a contacts list for potential malware distribution and payment information allowing purchases to be made in the user s name Attack vector The attack vector in this case social logins are an alternative to traditional authentication This form of access offers users More http://www.secuobs.com/revue/news/604711.shtmlhttp://www.secuobs.com/revue/news/604711.shtml 2016-04-26 00:50:02 - Security Bloggers Network : Over the past few years, technology companies have increasingly moved toward partnering with security researchers to better protect their products, services, and customers Recognizing that vulnerability research is a valuable part of securing the online environment, they have matured programs to work together with researchers in receiving, triaging, and responding to reports Microsoft s focus on coordinating with researchers has developed over time As we launched our first BlueHat Briefing in Read more http://www.secuobs.com/revue/news/604662.shtmlhttp://www.secuobs.com/revue/news/604662.shtml 2016-04-20 18:01:22 - Security Bloggers Network : This post was authored by Aleksandar Nikolic and Jaeson Schultz Talos has recently discovered a vulnerability in Oracle s Outside In Technology Image Export SDK which, when exploited, allows an attacker to overflow the heap, leading to arbitrary code execution The vulnerability lies in the Image Export SDK s parsing of Portable Document Format PDF files While parsing a PDF file which contains an Xref object, values from the Index entry are used to handle the decoded stream A malformed PDF file with many objects specified by the Index entry can lead to a memory overwrite past the ends of the allocated buffer, overwriting adjacent heap chunks The vulnerability is located in sub_B74EB0EE function in libvs_pdfso image base is at 0xB74BF000 A heap structure is being iterated over in 16 byte increments starting at the following code text B74EC5D6 mov eax, esp 0AFCh var_A58 text B74EC5DD shl eax, 4 text B74EC5E0 lea eax, edx eax text B74EC5E3 lea edi, eax 10h 1 text B74EC5E6 mov esp 0AFCh var_A38 , 0 text B74EC5F1 text B74EC5F1 loc_B74EC5F1 text B74EC5F1 cmp word ptr edi-2 , 0 text B74EC5F6 jnz loc_B74EC856 text B74EC5FC cmp esp 0AFCh var_A61 , 0 text B74EC604 jnz loc_B74EC7FA text B74EC60A mov word ptr edi-4 , 1 2 text B74EC610 text B74EC610 loc_B74EC610 text B74EC610 mov edx, esp 0AFCh var_A40 text B74EC617 mov eax, esi text B74EC619 call sub_B74C40A6 text B74EC61E mov edi-0Ch , eax 3 text B74EC621 add esi, esp 0AFCh var_AD4 text B74EC625 cmp esp 0AFCh var_A63 , 0 text B74EC62D jnz loc_B74EC7E5 text B74EC633 mov dword ptr edi-8 , 0 4 text B74EC640 add esp 0AFCh var_A38 , 1 text B74EC648 add edi, 10h 5 text B74EC64B mov eax, esp 0AFCh var_A50 text B74EC652 sub eax, esp 0AFCh var_A58 text B74EC659 cmp esp 0AFCh var_A38 , eax text B74EC660 jnz short loc_B74EC5F1 6 In this code excerpt, initial pointer to the structure being iterated over is derived from eax into edi at 1 At 2 , 3 and 4 depending on the branch taken, different values are written at memory address pointed to by edi with an offset At 5 , edi is incremented and at 6 execution jumps back to the beginning of the loop The number of times the loop is executed is bounded by the number of objects specified in the Index entry An abbreviated version of the crashing test case pourcentsPDF-16 pourcents 1 0 obj Filter FlateDecode Index 40 20 Length 55 Size 6 Type XRef W 0 1 0 stream endstream endobj startxref 116 pourcentspourcentsEOF In this sample PDF file, Size of 6 is specified but Index states that the object stream contains references to 20 objects starting from object number 40 The supplied minimized testcase triggers the vulnerability and results in heap corruption and a function pointer overwrite This function pointer is later dereferenced resulting in a direct program counter control The vulnerability can be triggered by the ixsample program supplied with the SDK Starting program home ea oit_pdf sdk demo ixsample trigger asd Thread debugging using libthread_db enabled Using host libthread_db library usr lib libthread_dbso1 Program received signal SIGSEGV, Segmentation fault ----------------------------------registers----------------------------------- EAX 0x41454145 'EAEA' EBX 0xb7af5b54 -- 0x36b98c ECX 0x1 EDX 0x804eaf0 -- 0x0 ESI 0xbfffd298 -- 0xa 'n' EDI 0x80b6b68 0x080b6b68 EBP 0xb74eec64 Prev ESP 0xbfffd23c -- 0xb78673ce mov edx,DWORD PTR edi 0x10 EIP 0x41454145 'EAEA' EFLAGS 0x10202 carry parity adjust zero sign trap INTERRUPT direction overflow -------------------------------------code------------------------------------- Invalid PC address 0x41454145 ------------------------------------stack------------------------------------- 0000 0xbfffd23c -- 0xb78673ce mov edx,DWORD PTR edi 0x10 0004 0xbfffd240 -- 0xb74eec64 Prev 0008 0xbfffd244 -- 0x0 0012 0xbfffd248 -- 0xbfffd274 -- 0x0 0016 0xbfffd24c -- 0xb74f6998 -- 0x3787c 0020 0xbfffd250 -- 0xbfffd298 -- 0xa 'n' 0024 0xbfffd254 -- 0xbfffdd90 -- 0x0 0028 0xbfffd258 -- 0xb74eec64 Prev ------------------------------------------------------------------------------ Legend code, data, rodata, value Stopped reason SIGSEGV 0x41454145 in gdb On April 19, 2016, Oracle released a patched version of the Image Export SDK which addresses this vulnerability Talos has provided coverage against exploits targeting TALOS-CAN-0086 IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/604257.shtmlhttp://www.secuobs.com/revue/news/604257.shtml 2016-04-13 20:46:50 - TrendLabs Security Intelligence Blog : 13 security bulletins were released in this month s Patch Tuesday addressing vulnerabilities in Internet Explorer, Microsoft Edge, Microsoft Office, and Microsoft XML Core Services, among others Out of these bulletins, six are rated as Critical while seven are tagged as Important Both MS16-037 and MS16-038 which fixed vulnerabilities in Internet Explorer and Edge respectively, could allow Post from Trendlabs Security Intelligence Blog - by Trend Micro April 2016 Patch Tuesday Releases 13 Security Patches Addresses the Badlock Vulnerability http://www.secuobs.com/revue/news/603676.shtmlhttp://www.secuobs.com/revue/news/603676.shtml 2016-04-13 11:43:06 - SecurityTube.Net : Although OSX has had a large gain in popularity, its underlying workings are still unknown to many In this talk we will discuss OSX internals and how they relate to security research Specifically, we will discuss the debugging functionality provided or missing on OSX, how it differs from other platforms, and the resulting state of tools LLDB unwieldy for many security research tasks on modern OSX For this talk we will open source our private OSX Python scriptable debugger as a lightweight, easy-to-use programmatic alternative to the awkwardness of LLDB scripting We will showcase the advantages of a proper scriptable debugger along with features not seen in LLDB, and demonstrate examples for vulnerability research and malware analysis Brandon Edwards and Tyler Bohan work as security researchers for BAE Systems, where they work on vulnerability analysis and mitigation Their backgrounds include reverse-engineering, vulnerability discovery, exploitation, and development For More Information Please Visit - http shmooconorg http://www.secuobs.com/revue/news/603607.shtmlhttp://www.secuobs.com/revue/news/603607.shtml 2016-04-12 23:35:18 - Slashdot Your Rights Online : msm1267 quotes a report from Threatpost Weeks of anxiety and concern over the Badlock vulnerability ended today with an anticlimactic thud Badlock was the security boogeyman since the appearance three weeks ago of a website and logo branding the bug as something serious in Samba, an open source implementation of the server message block SMB protocol that provides file and print services for Windows clients As it turns out, Badlock was hardly the remote code execution monster many anticipated Instead, it's a man-in-the-middle and denial-of-service bug, allowing an attacker to elevate privileges or crash a Windows machine running Samba services SerNet, a German consultancy behind the discovery of Badlock, fueled the hype at the outset with a number of since-deleted tweets that said any marketing boost as a result of its branding and private disclosure of the bug to Microsoft was a bonus for its business For its part, Microsoft refused to join the hype machine and today in MS16-047 issued a security update it rated 'Important' for the Windows Security Account Manager SAM and Local Security Authority Domain Policy LSAD The bulletin patches one vulnerability CVE-2016-0128 , an elevation of privilege bug in both SAM and LSAD that could be exploited in a man-in-the-middle attack, forcing a downgrade of the authentication level of both channels, Microsoft said An attacker could then impersonate an authenticated user IMAGE IMAGE Share on Google Read more of this story at Slashdot http://www.secuobs.com/revue/news/603557.shtmlhttp://www.secuobs.com/revue/news/603557.shtml 2016-04-11 11:17:59 - Web Application Security Blog Acunetix : Europe is currently caught up in a political furore surrounding the leak of the Panama Papers , which basically has leaked the names of those using the offshore tax haven Among the names to surface have included the Icelandic prime minister, who has since resigned and the UK prime minister, who as usual has some protestors Read More The post Panama Papers was the biggest breach in history caused by a simple vulnerability appeared first on Acunetix http://www.secuobs.com/revue/news/603395.shtmlhttp://www.secuobs.com/revue/news/603395.shtml 2016-04-08 19:59:37 - Security Bytes : Vulnerability branding was once a practice that elevated understanding of flaws and potentially led to better remediation, but now serves as little more than marketing for security researchers The post Vulnerability branding becomes another marketing tool appeared first on Security Bytes http://www.secuobs.com/revue/news/603287.shtmlhttp://www.secuobs.com/revue/news/603287.shtml 2016-04-08 18:07:22 - TrendLabs Security Intelligence Blog : Adobe has just released a security update for Adobe Flash to address a vulnerability CVE-2016-1019 that was used in zero day attacks against older versions of Adobe Flash We previously discussed one such attack when we discovered this vulnerability being integrated in Magnitude Exploit Kit In this post, we took a look at the exploit code In the sample we acquired from our Smart Protection Network feedback, we observed that this vulnerability is also present in Mac OS X In addition to being present on the Windows platform, it is interesting to note it is also present on Mac OS X given that fewer exploits target the said OS Post from Trendlabs Security Intelligence Blog - by Trend Micro A Look Into Adobe Flash Player CVE-2016-1019 Zero-Day Vulnerability http://www.secuobs.com/revue/news/603281.shtmlhttp://www.secuobs.com/revue/news/603281.shtml 2016-04-08 15:31:36 - Security Bloggers Network : The vulnerability has recently been discovered in the Magnitude exploit kit http://www.secuobs.com/revue/news/603260.shtmlhttp://www.secuobs.com/revue/news/603260.shtml 2016-04-08 10:38:33 - Security Bloggers Network : In today's threat landscape, Adobe Flash Player unfortunately remains an attractive attack vector for adversaries to exploit and compromise systems Over the past year, Talos has observed several instances where adversaries have identified zero-day vul http://www.secuobs.com/revue/news/603214.shtmlhttp://www.secuobs.com/revue/news/603214.shtml 2016-04-07 22:59:06 - Security Bloggers Network : Cisco Talos vulnerability researcher Piotr Bania recently discovered a vulnerability in the Apple Intel HD 3000 Graphics driver, which we blogged about here In this post we are going to take a deeper dive into this research and look into the details of the vulnerability as well as the KASLR bypass and kernel exploitation that could lead to arbitrary local code execution These techniques could be leveraged by malware authors to bypass software sandbox technologies, which can simply be within the software program browser or application sandbox or at the kernel level In the course of conducting our research, Talos found that Apple OSX computers with Intel HD Graphics 3000 GPU units possess a null pointer dereference vulnerability in version 1000 as presented below IMAGE Typically sending a very basic payload to the graphics driver through IOConnectCallMethod function causes a kernel panic due to null pointer reference at address 0x1aa2f In this case the RDX register points to NULL The instruction itself tries to read data from unavailable memory which causes the kernel to panic At this point this vulnerability seems to be local a denial-of-service attack, however the call instruction at 0x1aa68 looks very promising If we can reach this instruction, that would allow us the ability to escalate this from a local denial-of-service to local code execution So, how can we get there In order to escalate from denial-of-service to local code execution, we first need to check and see whether we can map our data at a NULL page, basically a memory region starting from NULL address NULL page mapping is unavailable on newest Microsoft Windows systems but it is still available on OS X systems however a few conditions needs to be met To map a null page on OSX The binary needs to be 32-bit Then compile with -m32 -Wl,-pagezero_size,0 -O3 With those conditions met we can now map our data at the NULL page basically a memory region starting from null address If the comparison at address 0x1aa54 can be forced to skip the JA jump located at 0x1aa57 we would finally arrive at the 0x1aa68 CALL instruction Since we control the RDI value see 0x1aa2f we also control the EAX value at 0x1aa36 This control over EAX, part of RAX, allows us to fool the comparison condition at 0x11a54 So now we are at address 0x1aa60 which basically allows us to call any pointer written at 0x980, a memory which we control With those controls in place, what s our next step On Intel CPUs released after 2013, these conditions still would not be exploitable because of a feature called SMEP Supervisor Mode Execution Prevention SMEP prevents the execution of code located on a user- mode page at a CPL 0, meaning that a direct call to our shellcode written to the NULL page would result in kernel panic and failed code execution However this feature was not present in the Apple units we researched Stage 1 - Get the Kernel Address -------------------------------- SMEP Supervisor Mode Execution Protection and KASLR Kernel Address Space Layout Randomization have been widely adopted in newer OS and CPU implementations, specifically Windows 8 going forward and Yosemite in OSX With a SMEP KASLR implementations in place this step would require an additional vulnerability to leak the kernel memory address Since SMEP isn t a problem in our tested version of OSX, we will go old school Long ago, way back in the dark ages of 2005 there was a technique used to obtain the kernel address on Windows it was called the SYSENTER_EIP_MSR Scandown technique 2 With a few modifications, keeping in mind that we are on 64-bit OS X system, the same idea can be applied In this example we are reading data from the LSTAR Long System Target-Address Register MSR register which contains the kernel's RIP SYSCALL entry for 64 bit software, as well as scanning backwards to find the kernel OSX signature IMAGE So after we turn this into stage0 payload and send it to the graphics driver we should get a kernel address written to the first 8-bytes of our NULL page IMAGE Success Getting the kernel base address was essential for calculating the API addresses that will be used later in STAGE 2 shellcode Those APIs are essential for escalating the privileges of attacker Now that we have the leaked kernel address calculating the essential API addresses current_proc, _proc_ucred, _posix_cred_get is an easy task There are variety of free MACH-O parsers available out there 3 so we will skip ahead to stage 2 Stage 2 - Execute the Shellcode ------------------------------- Assuming all the needed API addresses are resolved at this point it is now time to force the kernel to execute the final stage of the shellcode This final stage will give our process root privileges and execute a shell This shellcode executes the necessary OSX kernel APIs in order to escalate the privileges IMAGE And the final output - now with root access IMAGE Conclusion Here we ve seen the escalation of a denial-of-service vulnerability into local code execution Mapping the kernel address we were able to walk backwards to the base address and calculate the offset to the needed functions, bypass the KASLR and get root Understanding the techniques to bypass the KASLR and elevate our exploitation is integral in learning how to best mitigate these types of attacks Cisco Talos research, discovery, and responsible disclosure of software vulnerabilities help secure the platforms and software that our customers depend on as well as the entire online community by identifying security issues that otherwise could be exploited by threat actors Uncovering new 0-day vulnerabilities not only helps improve the overall security of the software that our customers use, but it also enables us to directly improve the procedures in our own security development lifecycle, which improves the security of all of the products that Cisco produces Proof-of-Concept The complete proof-of-concept exploit illustrated here is available at the Cisco Talos Vulnerability Development team s code repository https githubcom talos-vulndev advisories tree master TALOS-2016-0088 References 1 - https wwwblackhatcom docs eu-15 materials eu-15-Todesco-Attacking-The-XNU-Kernal-In-El-Capitainpdf 2 - http wwwuninformedorg v 3 a 4 t txt 3 - https githubcom kpwn tpwn blob master lsymm IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/603158.shtmlhttp://www.secuobs.com/revue/news/603158.shtml 2016-04-07 10:35:28 - Web Application Security Blog Acunetix : Scanning web sites and web-based applications for vulnerabilities can take a long time time to complete The following may affect the scan time Web server performance and response time Size of web site Back-end database speed Number of simultaneous connections by the scanner Number of vulnerability checks Acunetix server performance Slow scans can get in Read More The post Tips for faster scans with Acunetix Web Vulnerability Scanner appeared first on Acunetix http://www.secuobs.com/revue/news/603070.shtmlhttp://www.secuobs.com/revue/news/603070.shtml 2016-04-06 10:59:45 - TrendLabs Security Intelligence Blog : On March 10, Adobe has released an emergency out-of-band update to fix a zero-day vulnerability that was being used in targeted attacks The vulnerability was designated as CVE-2016-1010 and was privately reported to Adobe as well To analyze this vulnerability, I examined an earlier version of the Flash Player Flash32_19_0_0_185ocx file on Windows 7 to find the root cause of the vulnerability Post from Trendlabs Security Intelligence Blog - by Trend Micro A Root Cause Analysis of the Recent Flash Zero-Day Vulnerability, CVE-2016-1010 http://www.secuobs.com/revue/news/602982.shtmlhttp://www.secuobs.com/revue/news/602982.shtml 2016-04-06 10:18:26 - Help Net Security : London-based security researcher and bug hunter Jack Whitton has discovered a serious cross-site request forgery flaw affecting Microsoft s authentication system for online services A successful exploitation of the vulnerability could allow attackers to collect users login tokens and use them to impersonate users on Microsoft s services, but the good news is that the Redmond giant took only two days to plug the security hole once they knew about it Microsoft, being a huge company, have More http://www.secuobs.com/revue/news/602975.shtmlhttp://www.secuobs.com/revue/news/602975.shtml 2016-03-31 15:32:54 - Help Net Security : Check Point researchers have identified SideStepper, a vulnerability that can be used to install malicious apps on iPhones and iPads to steal login credentials and sensitive data SideStepper allows an attacker to get around security enhancements in iOS 9 which are supposed to protect users from installing malicious enterprise apps These enhancements require the user to take several steps in device settings to trust an enterprise developer certificate, thereby making it harder to install a More http://www.secuobs.com/revue/news/602548.shtmlhttp://www.secuobs.com/revue/news/602548.shtml 2016-03-30 10:21:47 - Web Application Security Blog Acunetix : Web application security solution recognized as valuable tool for SMB market LONDON, UK March 2016 Acunetix, a global leader in web application security testing, has beaten the competition to win the Best of 2016 award in the IT Security category by German institution Initiative Mittelstand , with Acunetix Online Vulnerability Scanner The award ceremony Read More The post Acunetix wins Best of 2016 award with Acunetix Online Vulnerability Scanner appeared first on Acunetix http://www.secuobs.com/revue/news/602397.shtmlhttp://www.secuobs.com/revue/news/602397.shtml 2016-03-29 23:56:38 - TrendLabs Security Intelligence Blog : On March 18, Google published a security advisory for a critical vulnerability CVE-2015-1805 that applied to rooting apps This bug allows malicious apps to gain root access to all Android phones below kernel version 318 This can greatly affect devices that no longer receive patches, or those with long rollout time Initially, this flaw has been tagged as medium in terms of severity However, a zero-day exploit was found out that showed the vulnerability could still be exploited successfully, compromising the security of the device As such, the level of severity was changed to critical Post from Trendlabs Security Intelligence Blog - by Trend Micro Critical CVE-2015-1805 Vulnerability Allows Permanent Rooting of Most Android Phones http://www.secuobs.com/revue/news/602367.shtmlhttp://www.secuobs.com/revue/news/602367.shtml 2016-03-29 14:25:03 - SecurityTube.Net : We begin by taking a high level view of the vulnerability landscape over the past year, from anonymized data gathered from the edgescan vulnerability management SaaS This data-set provides a snapshot of vulnerabilities in thousands of servers and web applications across the globe From this data, we provide our opinion and insight on why we think some of the trends are present and that traditional static approaches to dynamic problems, is producing diminishing results We ask, what is the ultimate goal, application security or risk Protecting applications or protecting businesses and data We note the trend towards a continual approach to application security and see the benefits of pushing left Rahim Jina Edgescan Director Co-Founder Rahim is a director and co-founder of edgescan , a SaaS-based managed service based in Ireland Rahim is responsible for operational excellence and has extensive experience delivering penetration testing services to a wide range of organizations globally across many industry verticals Prior to this, Rahim was Head of Product Operational Security for Fonality, a VOIP provider based in Los Angeles and was also a senior security consultant for a Big 4 consultancy firm for many years Rahim has been an OWASP contributor and volunteer since 2007 and was part of the Dublin chapter board for a number of years Rahim graduated in 2002 from Trinity College Dublin Ireland , with a Bachelor s degree in Computer Science and in 2006, he completed a Master s in Security Forensic Computing from Dublin City University Ireland For More Information Please Visit - https 2016appseccaliforniaorg http://www.secuobs.com/revue/news/602286.shtmlhttp://www.secuobs.com/revue/news/602286.shtml 2016-03-24 13:51:28 - Security Bloggers Network : There's a critical vulnerability in Windows and Samba and it's got a name and a logo and did I mention it had a name and a logo http://www.secuobs.com/revue/news/601952.shtmlhttp://www.secuobs.com/revue/news/601952.shtml 2016-03-24 11:19:17 - Security Bloggers Network : The severe and previously unknown flaw circumvents Apple's stringent security features to compromise devices http://www.secuobs.com/revue/news/601932.shtmlhttp://www.secuobs.com/revue/news/601932.shtml 2016-03-23 14:11:17 - Security Bloggers Network : Vulnerability discovered by Piotr Bania of Cisco Talos Cisco Talos, in conjunction with Apple s security advisory issued on Mar 22, is disclosing the discovery of a local vulnerability in the communication functionality of the Apple Intel HD3000 Graphics kernel driver This vulnerability was initially discovered by the Talos Vulnerability Research Development Team and reported in accordance with responsible disclosure policies to Apple There is a local privilege escalation vulnerability in the Apple Intel HD3000 Graphics kernel driver TALOS-2016-0088 CVE-2016-1743 which Talos has identified on OS X 1011 Exploitation of this vulnerability requires user interaction, such as executing a malicious executable received via email or downloaded and run on the user's Mac With OS X becoming more common in the workplace this can be especially impactful as the common user accounts often do not have root-level permissions Advisory Summary ---------------- This vulnerability can be triggered by sending specially crafted IOConnectCallMethod request to the Apple Intel HD3000 Graphics driver, the faulting code is in the IOGen575Shared new_texture function IMAGE Successful exploitation can result in an escalated privilege for the attacker, who can then use root-level access for further malicious activity For full details please read the advisory here Cisco Talos research and discovery of programmatic ways to find 0-days helps secure the platforms and software that our customers depend on The disclosure of this and other vulnerabilities helps the entire online community by identifying security issues that otherwise could be exploited by threat actors Uncovering new 0-days not only helps improve the overall security of the software that our customers use, but it also enables us to directly improve the procedures in our own security development lifecycle, which improves the security of all of the products that Cisco produces Related Snort rules 37517, 37518 For the most up to date list, please refer to Defense Center or FireSIGHT Management Center For further zero day or vulnerability reports and information visit http talosintelcom vulnerability-reports Timeline 2016-02-02 - Vendor Disclosure 2016-03-21 - Vulnerability Patched 2016-03-22 - Public Release IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/601840.shtmlhttp://www.secuobs.com/revue/news/601840.shtml 2016-03-22 23:53:37 - Symantec Connect Security Response Billets : CVE-2016-1788 is difficult to exploit, but within the capabilities of nation state attackers Users are advised to update to iOS 93 to reduce the risk of attack IMAGE Read More http://www.secuobs.com/revue/news/601767.shtmlhttp://www.secuobs.com/revue/news/601767.shtml 2016-03-21 16:05:46 - Risk Assessment Ars Technica : Bug can be exploited when iCloud photo is sent over iMessage, Washington Post reports http://www.secuobs.com/revue/news/601619.shtmlhttp://www.secuobs.com/revue/news/601619.shtml 2016-03-14 14:49:56 - SecurityTube.Net : According to Forrester, 53pourcents of IT respondents say their biggest concern about containers is security Containerization is not only prevalent in browsers Google Chrome , desktop applications Adobe Reader X , and mobile operating systems Apple iOS , but is also invading the data center via Docker Docker and other LXC-based containerization solutions provide isolation via Linux control groups cgroups However, containers can still be exploited and even with kernel-level isolation, critical data can be stolen In this presentation, the FlawCheck team will exploit real-world Docker implementations and show what can be done to mitigate the risk For More Information Please Visit - https wwwblackhatcom indexhtml http://www.secuobs.com/revue/news/600985.shtmlhttp://www.secuobs.com/revue/news/600985.shtml 2016-03-11 00:44:52 - TrendLabs Security Intelligence Blog : Following its release of a security update for Acrobat and Reader, Adobe has released another one, this time to address 23 reported vulnerabilities in Flash In its advisory APSB16-08 , Adobe notes that this patch addresses critical vulnerabilities that could allow an attack to gain control of an affected system They further note that one of the vulnerabilities CVE-2016-1010 is being used in limited, targeted attacks Post from Trendlabs Security Intelligence Blog - by Trend Micro Adobe Releases Flash Security Update to Patch Exploited Vulnerability http://www.secuobs.com/revue/news/600778.shtmlhttp://www.secuobs.com/revue/news/600778.shtml 2016-03-07 18:02:29 - Security Bloggers Network : It s usually a good thing when my rstats and infosec worlds collide Unfortunately, this time it s a script that R folk running on OS X can use to see if they are using a version of XQuartz that has a nasty vulnerability in the framework it uses to auto-update If this test comes back with http://www.secuobs.com/revue/news/600386.shtmlhttp://www.secuobs.com/revue/news/600386.shtml 2016-03-03 09:19:20 - SecurityTube.Net : At DeepSec 2015 Mitja Kolsek spoke about a new way of addressing vulnerabilities Software vulnerabilities are likely the biggest problem of information security, fueling a rapidly growing market for 0days , 1days and exploits alike It can be highly intellectually challenging to find a vulnerability and create an exploit for it, and super entertaining to reveal it all to the bug-hungry crowds preferably along with a logo and a catchy name, courtesy of the marketing department As a result, there s been a lot of innovation and progress on the offensive side of information security, and a corresponding defensive industry is thriving providing quasi-solutions that can be bypassed by any motivated attacker But almost nothing has changed at the core of the problem software vendors still produce critical vulnerabilities, aren t motivated to provide patches, and only a handful of them are capable of responding and delivering a security update when a 0day gets published And then, when a vendor s security update is available, it takes weeks or months before it gets applied throughout a corporate network as the risk of interrupting business processes requires testing and gradual deployment And do we need to mention that exploit kits tend to add exploits just a few days after official patches come out Now, what if vendors didn t have a monopoly on patching their code because any vulnerability researcher could write a patch instead of okay, in addition to writing an exploit And what if admins weren t afraid to apply the patches because patches could be applied instantly without relaunching applications or restarting computer, and could also be instantly un-applied if they turned out to be causing problems The technology for this exists, and will allow vulnerability researchers to not only research a vulnerability but also fix it with just a few well-chosen machine code instructions and monetize their hard work in an unquestionably ethical way In this session, we will take apart a known vulnerability, determine its root cause and create a micropatch for it, which will then get applied to the vulnerable application while the application is running We ll look at the tools needed for this and hopefully turn some of the exploit developers in the audience into patch creatorsSoftware vulnerabilities are likely the biggest problem of information security, fueling a rapidly growing market for 0days , 1days and exploits alike It can be highly intellectually challenging to find a vulnerability and create an exploit for it, and super entertaining to reveal it all to the bug-hungry crowds preferably along with a logo and a catchy name, courtesy of the marketing department As a result, there s been a lot of innovation and progress on the offensive side of information security, and a corresponding defensive industry is thriving providing quasi-solutions that can be bypassed by any motivated attacker But almost nothing has changed at the core of the problem software vendors still produce critical vulnerabilities, aren t motivated to provide patches, and only a handful of them are capable of responding and delivering a security update when a 0day gets published And then, when a vendor s security update is available, it takes weeks or months before it gets applied throughout a corporate network as the risk of interrupting business processes requires testing and gradual deployment And do we need to mention that exploit kits tend to add exploits just a few days after official patches come out Now, what if vendors didn t have a monopoly on patching their code because any vulnerability researcher could write a patch instead of okay, in addition to writing an exploit And what if admins weren t afraid to apply the patches because patches could be applied instantly without relaunching applications or restarting computer, and could also be instantly un-applied if they turned out to be causing problems The technology for this exists, and will allow vulnerability researchers to not only research a vulnerability but also fix it with just a few well-chosen machine code instructions and monetize their hard work in an unquestionably ethical way In this session, we will take apart a known vulnerability, determine its root cause and create a micropatch for it, which will then get applied to the vulnerable application while the application is running We ll look at the tools needed for this and hopefully turn some of the exploit developers in the audience into patch creators For More Information Please Visit - https deepsecnet http://www.secuobs.com/revue/news/599992.shtmlhttp://www.secuobs.com/revue/news/599992.shtml 2016-03-03 09:19:20 - SecurityTube.Net : At DeepSec 2015 James Bamford discussed the Athens Affair, the subject of a recent investigation by him in The Intercept In 2004, the NSA and CIA worked secretly with the Greek government to subvert Vodafone and other telecom companies in order to conduct widespread eavesdropping during the 2004 Athens Summer Olympics The NSA agreed, however, to remove the spyware once the games were over But rather than remove it, they instead secretly turned it on the top members of the Greek government and members of the Greek public, including journalists When the covert operation was accidentally discovered, however, a Vodafone engineer involved was found dead, either by suicide or murder, and the death was officially connected to the bugging operation I will show how the operation was pulled off, buy recruiting an inside person, then subverting the company s lawful intercept program, and transferring the data back to NSA headquarters at Fort Meade The episode demonstrates the enormous vulnerability of widespread lawful intercept programs, and government backdoors in general, and also how the NSA often uses a bait and switch in its operations promising to help find terrorists, but really spying on the host government and local population instead James Bamford is a columnist for Foreign Policy Magazine, a contributor to Wired magazine, a documentary producer for PBS, and a bestselling author He is widely noted for his writing about the United States intelligence agencies, especially the highly secretive National Security Agency The New York Times has called him the nation's premier journalist on the subject of the National Security Agency And in a lengthy profile, The New Yorker referred to him as the NSA's chief chronicler His most recent book, The Shadow Factory The Ultra-Secret NSA From 9 11 to The Eavesdropping on America, became a New York Times bestseller and was named by The Washington Post as one of The Best Books of the Year It is the third in a trilogy by Mr Bamford on the NSA, following The Puzzle Palace 1982 and Body of Secrets 2001 , also New York Times bestsellers For More Information Please Visit - https deepsecnet http://www.secuobs.com/revue/news/599991.shtmlhttp://www.secuobs.com/revue/news/599991.shtml 2016-03-03 00:08:45 - TrendLabs Security Intelligence Blog : A new and important vulnerability has been discovered that affects HTTPS and other services that rely on SSL TLS implementations This flaw is in the SSLv2 protocol, and affects all implementations Researchers refer to this attack as DROWN - short for Decrypting RSA using Obsolete and Weakened eNcryption This attack allows attackers to read or steal information sent via the secure connection No attacks in the wild are currently known http://www.secuobs.com/revue/news/599963.shtmlhttp://www.secuobs.com/revue/news/599963.shtml 2016-03-02 17:06:07 - Symantec Connect Security Response Billets : New SSL TLS vulnerability CVE-2016-0800 could allow attackers to obtain encryption keys IMAGE Read More http://www.secuobs.com/revue/news/599920.shtmlhttp://www.secuobs.com/revue/news/599920.shtml 2016-02-29 10:48:39 - Help Net Security : At the RSA Conference in San Francisco, PhishLabs exposed the murky evolution of a thriving, sophisticated phishing underworld Their report is based on more than one million confirmed malicious phishing sites residing on more than 130,000 unique domains, and the movement of more than 90 threat actor groups and organizations actively deploying spear phishing Key findings Spear phishing remains the primary initial attack vector used by APT actors However, 22 percent of spear phishing attacks More http://www.secuobs.com/revue/news/599622.shtmlhttp://www.secuobs.com/revue/news/599622.shtml 2016-02-26 20:56:45 - Office of Inadequate Security : James Denvil and Paul Otto of Hogan Lovells write The FTC wants companies to listen More precisely, the FTC wants http://www.secuobs.com/revue/news/599518.shtmlhttp://www.secuobs.com/revue/news/599518.shtml 2016-02-25 15:06:32 - Risk Assessment Ars Technica : Anonymous requests only required a VIN to control a car remotely http://www.secuobs.com/revue/news/599360.shtmlhttp://www.secuobs.com/revue/news/599360.shtml 2016-02-25 11:41:23 - SecurityTube.Net : We are happy to announce Mr Leif Nixon leifnixon as a presenter to this years 4SICS The presentation given by Mr Nixon is entitled Responsible Disclosure may be Irresponsible and will be on the problems related to discover, disclose, and publicly discuss vulnerabilities in critical software components Mr Nixon will discuss a recent campaign to find and call attention to some of the most scary insecure systems on the Swedish part of the Internet what he found, how it was reported in media and what the reactions have been Leif Nixon, founder and owner of Nixon Security, has more than 10 years experience from IT security in Linux-centric environments He regularly coordinates response to complex, multi-national incidents, and has a wide network of contacts in industry, academia and law enforcement He is a regular contributor to industrial and academic IT security conferences For More Information Please Visit - https 4sicsse http://www.secuobs.com/revue/news/599341.shtmlhttp://www.secuobs.com/revue/news/599341.shtml 2016-02-22 22:44:19 - Security Bloggers Network : It's a really bad one http://www.secuobs.com/revue/news/599034.shtmlhttp://www.secuobs.com/revue/news/599034.shtml 2016-02-22 22:08:17 - Security Bloggers Network : Last week, Fermin Serna from Google posted a report of a critical vulnerability in the glibc library used in very fundamental level in almost all Linux systems The vulnerability CVE-2015-7547 is in the getaddrinfo function and can be used to gain Remote Code Execution A malicious DNS server provides an overlong, specially formatted answer to http://www.secuobs.com/revue/news/599026.shtmlhttp://www.secuobs.com/revue/news/599026.shtml 2016-02-19 09:59:47 - Global Security Mag Online : Barracuda lance Barracuda Vulnerability Manager, un service Cloud qui pointe du doigt facilement et rapidement les vulnérabilités des sites et applications web Barracuda Vulnerability Manager détecte les vulnérabilités comme celles du top 10 de l'OWASP, notamment l'injection de code SQL et attaques XSS sur les éléments dynamiques, à l'aide d'une simple fonctionnalité pointer-cliquer, ce qui en fait l'un des outils les plus simples à disposition pour détecter les vulnérabilités des applications web - Produits http://www.secuobs.com/revue/news/598774.shtmlhttp://www.secuobs.com/revue/news/598774.shtml 2016-02-19 04:47:41 - Security Bloggers Network : Ubuntu, Red Hat, and a number of other leading open source solutions providers have patched a critical vulnerability in the GNU C Library that has been around for years David Bisson reports http://www.secuobs.com/revue/news/598748.shtmlhttp://www.secuobs.com/revue/news/598748.shtml 2016-02-18 21:56:47 - TrendLabs Security Intelligence Blog : Earlier this week, the maintainers of the GNU C Library known as glibc, an open-source software library widely used in Linux systems announced that they had released a fix for a vulnerability introduced in 2008 that allowed a buffer overflow to take place This could be used by an attacker to run malicious code on a Linux system http://www.secuobs.com/revue/news/598719.shtmlhttp://www.secuobs.com/revue/news/598719.shtml 2016-02-17 20:10:00 - Security Bloggers Network : A critical vulnerability has been discovered in the Linux GNU C Library glibc that could potentially allow attackers to execute code on servers and gain remote control of Linux machines, applications and devices Researchers at Google and Red Hat uncovered the flaw independently and collaborated to deliver a patch, which has been made available Google Read More The post Google, Red Hat Release Patch for Critical glibc Vulnerability CVE-2015-7547 appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/598573.shtmlhttp://www.secuobs.com/revue/news/598573.shtml 2016-02-17 15:23:22 - LinuxSecurity.com Latest News : LinuxSecuritycom Glibc, the GNU C library at the core of last year's GHOST vulnerability, is vulnerable to another critical flaw affecting nearly all Linux machines, as well as API web services and major web frameworks where the code runs The vulnerability, discovered independently by researchers at Google and Red Hat, has been patched http://www.secuobs.com/revue/news/598541.shtmlhttp://www.secuobs.com/revue/news/598541.shtml 2016-02-08 11:32:21 - Web Application Security Blog Acunetix : Malwarebytes found to have four vulnerabilities Malwarebytes, a free anti-malware tool with 250 million users, has been exposed as having four vulnerabilities The main one described involves the software fetching signature updates via unencrypted HTTP, which could allow an attacker to set up a man-in-the-middle attack The vulnerabilities are the latest found in a number of Read More The post In the headlines Malwarebytes, eBay vulnerability, NASA hack, Waitrose website holes and more appeared first on Acunetix http://www.secuobs.com/revue/news/597635.shtmlhttp://www.secuobs.com/revue/news/597635.shtml 2016-02-05 23:28:07 - Security Bloggers Network : Vulnerabilities Discovered by Yves Younan of Cisco Talos Talos is releasing an advisory for four vulnerabilities that have been found within the Libgraphite library, which is used for font processing in Linux, Firefox, OpenOffice, and other major applications The most severe vulnerability results from an out-of-bounds read which the attacker can use to achieve arbitrary code execution A second vulnerability is an exploitable heap overflow Finally, the last two vulnerabilities result in denial of service situations To exploit these vulnerabilities, an attacker simply needs the user to run a Graphite-enabled application that renders a page using a specially crafted font that triggers one of these vulnerabilities Since Mozilla Firefox 11 and later versions directly support Graphite, the attacker could easily compromise a server and then serve the specially crafted font when the user renders a page from the server since Graphite supports both local and server-based fonts In this post, we will discuss the following vulnerabilities CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 Overview -------- Graphite is a package that can be used to create smart fonts capable of displaying writing systems with various complex behaviors Basically Graphite s smart fonts are just TrueType Fonts TTF with added extensions The issues that Talos identified include the following An exploitable denial of service vulnerability exists in the font handling of Libgraphite A specially crafted font can cause an out-of-bounds read potentially resulting in an information leak or denial of service A specially crafted font can cause a buffer overflow resulting in potential code execution An exploitable NULL pointer dereference exists in the bidirectional font handling functionality of Libgraphite A specially crafted font can cause a NULL pointer dereference resulting in a crash In each of the situations an attacker can provide a malicious font to trigger the specified vulnerability Out-of-Bounds Read Details -------------------------- If a malicious font is provided, an out of bounds read can occur while interpreting the opcodes in a font The problem occurs when executing the various opcodes in the function directrun in the file directmachinecpp At line 85, the interpreter for the opcodes will be executed by performing a goto instruction goto ip If the opcode in particular is a cntxt_item, then ip variable will be advanced by iskip bytes to find the next opcode and continue interpreting the opcodes This is done at line 369 of opcodesh ip iskip However there are no checks to ensure that ip remains within the bounds of the memory allocated for the memory to be interpreted the program variable In the case of s specially crafted malicious font, the value of iskip can be manipulated to cause an out-of-bound read when the program performs a jump to ip This memory is memory that was previously allocated for data This is a serious vulnerability because the out of bounds read causes the TTF virtual machine to execute code under control of the attacker In an environment like a browser, javascript can place arbitrary bytecode in memory Joshua jduck Drake showed how to use the TTF virtual machine to create generic memory read write primitives in his pwn2own java exploit last year Heap Overflow Details --------------------- If a malicious font is provided then an arbitrary length buffer overflow can occur when handling context items In Codecpp at lines 158-161, memory is allocated for _code and _data to be the expected maximum size of the code and data loaded from the bytecode However, the actual size read from the file can be larger than the expected size 158 _code static_cast malloc bytecode_end - bytecode_begin 159 sizeof instr 160 _data static_cast malloc bytecode_end - bytecode_begin 161 sizeof byte At line 181 the function decload is called with pointers to the beginning and end of the bytecode This function, at lines 230-240, will then load opcodes from the bytecode until the end of the bytecode is reached It will call emitopcode at line 238 with the current value of the bytecode that is being handled 230 while bc bc 237 238 if emit_opcode opc, bc 239 return false 240 If the opcode being handled by emitopcode refers to a context item CNTXTITEM Then the load function will be called recursively at line 500, with a new bytecodeend that is specified by the bytecode in instrskip if load bc, bc instr_skip The size checks to ensure that data isn t read from outside of the buffer, occur in the validateopcode function at line 548 where it is checked that the new opcode being read will be less than _maxbytecode which contains the value of bytecodeend However, when recursively handling multiple CNTXTITEMs, this means that while data is being copied to _data, it can be read past the new bytecodeend that is specified by the recursive call to load, this will terminate the loop once it reaches there, but in the meantime more data can be read than specified by instrskip, because when validateopcode is called, the current value of bytecode will still be lower than the end of the bytecode Doing this multiple times, results in the same memory being handled multiple times and allowing data to become larger than bytecode allowing an out-of-bounds write The same can occur with the code buffer A proposed fix is to ensure that when returning from a CNTXTITEM, the current value of bytecode minus the begin value of bytecode is larger or equal to datasize and instrcount A similar check to what is performed via an assert at lines 210 and 211 Denial of Service Details ------------------------- The first denial of service issue results from a NULL pointer deference When the font is loaded via grmakefile_face, the function readFeats will be called at line 190 in the file FeatureMapcpp in the function SillMap readFace if m_FeatureMapreadFeats face return false At line 110, in the function readFeats, mnumFeats will be assigned the value 0 This results in a return from the readFeats function at line 115 However the return will return the value true This results in none of the variables in mFeatureMap being initialized even though the font will load without any errors being returned If the function grmakeseg is later called on this font, the call to SillMap cloneFeatures will fail at line 241 because it tries to dereference mFeatureMapmdefaultFeatures, which is set to 0 return new Features m_FeatureMapm_defaultFeatures A similar error can occur at line 103 in the same function if the constructor for Table fails The second denial of service issue results from an out of bounds read that can not only cause a DoS, but it can also cause a leak of information When reading an invalid font where the local table size is set to 0, an out of bounds read will occur At line 187 in GlyphCachecpp, the function Loader is defined which loads a number of tables from the font, including the loca table At line 206 it will then call the function TtfUtil LocaLookup with arguments that provide the number of glyphs, the loca table and its size if TtfUtil LocaLookup numglyphsgraphics-1, _loca, _locasize , _head sizet -1 At line 1164 in this function in file TtfUtilcpp , the loca table will be accessed using the number of glyphs return be peek pLongTable nGlyphId A size check is performed at line 1161, but since the size is set to 0, this will always pass if nGlyphId 2 - 1 This will read out of the bounds of the table by an arbitrary 16-byte number, which will cause a denial of service and could potentially lead to an information leak Known Vulnerable Versions -------------------------- Libgraphite 2-124Firefox 31 Conclusion ---------- Finding and disclosing zero-day vulnerabilities responsibly helps improve the overall security of the devices and software people use on a day-to-day basis Talos is committed to this effort via developing programmatic ways to identify problems or flaws that could be otherwise exploited by malicious attackers These developments help secure the platforms and software customers use and also help provide insight into how Cisco can improve its own processes to develop better products In addition, Talos has released rules that detect attempts to exploit these vulnerabilities to protect our customers Please note that additional rules may be released at a future date and current rules are subject to change pending additional vulnerability information For the most current rule information, please refer to your Defense Center, FireSIGHT Management Center or Snortorg Snort Rules 36216,36213, 36217 36225-36228 36385-88 For further zero day or vulnerability reports and information visit http talosintelcom vulnerability-reports IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/597529.shtmlhttp://www.secuobs.com/revue/news/597529.shtml 2016-02-03 10:04:20 - dev random : The post SANS ISC Diary Automating Vulnerability Scans has been first published on dev random The following diary was published on iscsansorg Automating Vulnerability Scans The post SANS ISC Diary Automating Vulnerability Scans has been first published on dev random http://www.secuobs.com/revue/news/597202.shtmlhttp://www.secuobs.com/revue/news/597202.shtml 2016-02-02 16:26:09 - Help Net Security : Check Point researchers have discovered a severe vulnerability in eBay's online sales platform, which allows criminals to distribute malware and run phishing campaigns This vulnerability allows a http://www.secuobs.com/revue/news/597154.shtmlhttp://www.secuobs.com/revue/news/597154.shtml 2016-02-02 07:18:22 - SecurityTube.Net : This presentation is on why RedTeam engagements should be part of every vulnerability management program This will give a walk through of several aspects of a network and how an attacker is going to take advantage of mistakes and use the network against you It will also look at several things admins can do to start to help identify an attacker on the network For More Information Please Visit - https wwwsaintconorg http://www.secuobs.com/revue/news/597093.shtmlhttp://www.secuobs.com/revue/news/597093.shtml 2016-02-01 17:47:03 - Kellep Charles Information Security Blog Space : InfoSec Jobs Vulnerability Management Consultant http://www.secuobs.com/revue/news/597047.shtmlhttp://www.secuobs.com/revue/news/597047.shtml 2016-02-01 15:25:47 - Information Security Today Essential Information for Managing the Security of a Modern Evolving En : The vulnerability assessment of an organization's applications and data is critical given the increasing number of automated and targeted attacks Businesses must proactively identify potential vulnerabilities to prevent breaches This article discusses two highly-effective ways to identify vulnerabilities vulnerability scanning and penetration testing http://www.secuobs.com/revue/news/597038.shtmlhttp://www.secuobs.com/revue/news/597038.shtml 2016-02-01 12:04:55 - SecurityTube.Net : BSides Charleston, SC 2015 Track 1 - Session 2 Software Vulnerability Discovery and Exploitation During Red Team Assessments Speaker Ryan Wincey For More Information Please Visit - http wwwbsidescharlestoncom http://www.secuobs.com/revue/news/597021.shtmlhttp://www.secuobs.com/revue/news/597021.shtml 2016-01-27 19:42:19 - Darknet The Darkside : http://www.secuobs.com/revue/news/596675.shtmlhttp://www.secuobs.com/revue/news/596675.shtml 2016-01-27 10:20:25 - SecurityTube.Net : Gustavo is a Phd student working in computer security Specifically, his topic is vulnerability discovery using Machine Learning In the past, he participated in some security related internships in France Grenoble, INRIA , Spain Madrid, IMDEA Software and the US Pittsburgh, Carnegie Mellon University, CyLab Grieco also worked for a small startup in San Francisco researching and developing a Machine Learning technique to detect website selling counterfeit stuff Gihub accounts Personal https githubcom neuromancer Academic https githubcom gaa-cifasis Gustavo also work developing some security related software VDiscover Symbolic Exploit Assistant abandoned BARF some small contributions Getting started with vulnerability discovery using Machine Learning With sustained growth of software complexity, finding security vulnerabilities in operating systems has become an important necessity Very well known vulnerability detection techniques like static analysis, symbolic execution or fuzzing can be very costly to be used in a large amount of test cases In this workshop, we present an approach that uses Machine Learning to train and predict if a test case shows patterns associated with a vulnerable behavior It only requires a lightweight analysis to extract data, is fully automatic and adaptive to be trained using different vulnerability detection techniques Additionally, it works directly on test cases without source code In this presentation, we will explain our predictive approach to vulnerability discovery and we will show how our open-source tool, VDiscover performs such analysis on a large amount of test cases For More Information Please Visit - http defcamp http://www.secuobs.com/revue/news/596607.shtmlhttp://www.secuobs.com/revue/news/596607.shtml 2016-01-18 08:01:35 - Security Bloggers Network : Recently, I introduced a three-part series on how to build a successful vulnerability management program The first installment examined Stage 1, the vulnerability scanning process My next article investigates Stages 2 asset discovery and inventory and 3 vulnerability detection , which occur primarily using the organization s technology of choice for vulnerability scanning In this case, the Read More The post Vulnerability Management Program Best Practices Part 2 appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/595825.shtmlhttp://www.secuobs.com/revue/news/595825.shtml 2016-01-13 11:37:01 - Web Application Security Blog Acunetix : Web application security provider extends its services to the UK public sector LONDON, 13 January 2016 Acunetix, the pioneer in automated web application security software, is pleased to announce its inclusion in the UK Government s latest G-Cloud procurement framework, G-Cloud 7 Acunetix will offer their Online Vulnerability Scanner as Software-as-a-Service SaaS , through the Digital Read More The post Acunetix Vulnerability Scanner Added to UK Government s G-Cloud 7 appeared first on Acunetix http://www.secuobs.com/revue/news/595530.shtmlhttp://www.secuobs.com/revue/news/595530.shtml 2016-01-08 16:51:42 - Risk Assessment Ars Technica : First major automaker aside from Tesla to issue guidelines promising not to sue researchers http://www.secuobs.com/revue/news/595201.shtmlhttp://www.secuobs.com/revue/news/595201.shtml 2016-01-07 15:47:39 - Security Bloggers Network : By Larry W Cashdollar, Akamai SIRT A few weeks ago I noticed a tweet from someone I have been following off and on for a few weeks The tweet highlighted an exposed administration panel in a software product called Delegate http://www.secuobs.com/revue/news/595103.shtmlhttp://www.secuobs.com/revue/news/595103.shtml 2016-01-07 12:32:25 - Web Application Security Blog Acunetix : A high-severity Cross-site scripting XSS vulnerability has been fixed in WordPress new 441 release that is now available for download In addition to the XSS vulnerability reported by security researcher Crtc4L , the release includes 51 other non-security bug-fixes WordPress sites configured to receive automatic updates should be updated within 24 hours automatically, otherwise, ensure that Read More The post WordPress 441 security release patches XSS vulnerability appeared first on Acunetix http://www.secuobs.com/revue/news/595077.shtmlhttp://www.secuobs.com/revue/news/595077.shtml 2016-01-06 16:20:44 - LinuxSecurity.com Latest News : LinuxSecuritycom Researchers have revealed a severe vulnerability in Silent Circle's Blackphone which could allow attackers to take control of the device's functions http://www.secuobs.com/revue/news/594985.shtmlhttp://www.secuobs.com/revue/news/594985.shtml 2016-01-05 21:45:20 - Security Bloggers Network : The home security system fails open, tricking it into thinking everything is fine http://www.secuobs.com/revue/news/594895.shtmlhttp://www.secuobs.com/revue/news/594895.shtml 2015-12-29 16:17:29 - Security Bloggers Network : Vulnerability As per the Symantec, Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability Attackers can exploit this issue by enticing an unsuspecting user to view a Go on to the site to read the full article http://www.secuobs.com/revue/news/594408.shtmlhttp://www.secuobs.com/revue/news/594408.shtml 2015-12-28 21:14:36 - Symantec Connect Security Response Billets : Adobe has patched a Flash zero-day vulnerability that may have already been exploited in limited targeted campaigns IMAGE Read More http://www.secuobs.com/revue/news/594323.shtmlhttp://www.secuobs.com/revue/news/594323.shtml 2015-12-23 06:06:02 - Office of Inadequate Security : As noted in an update to my first post, Salted Hash learned that this incident potentially impacted over 186,000 children http://www.secuobs.com/revue/news/594015.shtmlhttp://www.secuobs.com/revue/news/594015.shtml 2015-12-17 17:18:43 - MSI State of Security : A vulnerability has been discovered in the GRUB2 boot loader that affects versions dating back to 2009 GRUB2 is the default boot loader for a variety of popular Linux distributions including Ubuntu, Red Hat and Debian The vulnerability can be Continue reading The post GRUB2 Authentication Bypass Vulnerability appeared first on MSI State of Security http://www.secuobs.com/revue/news/593511.shtmlhttp://www.secuobs.com/revue/news/593511.shtml 2015-12-17 16:24:40 - LinuxSecurity.com Latest News : LinuxSecuritycom Pressing the backspace key 28 times can bypass the Grub2 bootloader's password protection and allow a hacker to install malware on a locked-down Linux system http://www.secuobs.com/revue/news/593504.shtmlhttp://www.secuobs.com/revue/news/593504.shtml 2015-12-16 17:21:17 - Security Bloggers Network : By AJ Shipley Looking Glass and Cyveillance have joined forces to deliver the most advanced and comprehensive threat intelligence driven solutions Today, AJ Shipley, Looking Glass Vice President of Product Management, discusses how Looking Glass and Cyveillance solutions can help protect an organization from DNS threats, such as the FireStorm vulnerability A recent discovery by BugSec The post FireStorm Mitigating the Vulnerability That Can Completely Bypass Firewalls and Exfiltrate Data appeared first on Cyveillance Blog - The Cyber Intelligence Blog http://www.secuobs.com/revue/news/593393.shtmlhttp://www.secuobs.com/revue/news/593393.shtml 2015-12-15 17:07:12 - Security Bloggers Network : The Joomla team released a new version of Joomla CMS yesterday to patch a serious and easy to exploit remote code execution vulnerability that affected pretty much all versions of the platform up to 345 As soon as the patch was released, we were a http://www.secuobs.com/revue/news/593227.shtmlhttp://www.secuobs.com/revue/news/593227.shtml 2015-12-15 05:37:15 - Security Bloggers Network : If your doctor walks into the exam room for your annual physical and listens to your heart, takes a quick look at your throat, and then gives a clean bill of health without asking many questions, a quick interaction might make you feel good if you re not worried about your health However, if you haven t Read More The post Testing Scan Credentials for More Accurate Vulnerability Assessment appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/593145.shtmlhttp://www.secuobs.com/revue/news/593145.shtml 2015-12-14 18:59:31 - Security Bloggers Network : The Joomla security team have just released a new version of Joomla to patch a critical remote command execution vulnerability that affects all versions from 15 to 34 This is a serious vulnerability that can be easily exploited and is already in the http://www.secuobs.com/revue/news/593105.shtmlhttp://www.secuobs.com/revue/news/593105.shtml 2015-12-14 18:57:49 - Risk Assessment Ars Technica : Wave of attacks grows Researchers advise sites to install just-released patch http://www.secuobs.com/revue/news/593100.shtmlhttp://www.secuobs.com/revue/news/593100.shtml 2015-12-10 06:57:48 - SecurityTube.Net : DEF CON 23 - IoT Village - K Reid Wrightman - Vulnerability Inheritance in PLCs For More Information Please Visit - https wwwdefconorg html defcon-23 dc-23-indexhtml http://www.secuobs.com/revue/news/592701.shtmlhttp://www.secuobs.com/revue/news/592701.shtml 2015-12-04 16:25:35 - LinuxSecurity.com Latest News : LinuxSecuritycom At EFF we put security and privacy first This means working hard at keeping our members and site visitors safe, as well as the people who use the software we develop We also dedicate staff time to advising security researchers, maintaining resources like our Coders' Rights Project, and helping groups like Facebook improve their bug reporting policies http://www.secuobs.com/revue/news/592128.shtmlhttp://www.secuobs.com/revue/news/592128.shtml 2015-12-04 11:21:08 - Security Bloggers Network : The EFF has launched a bug disclosure program for projects including Let's Encrypt and HTTPS Everywhere http://www.secuobs.com/revue/news/592094.shtmlhttp://www.secuobs.com/revue/news/592094.shtml 2015-12-04 10:41:54 - Help Net Security : Four out of five applications written in PHP, Classic ASP and ColdFusion that were assessed by Veracode failed at least one of the OWASP Top 10 Given the volume of PHP applications developed for the http://www.secuobs.com/revue/news/592092.shtmlhttp://www.secuobs.com/revue/news/592092.shtml 2015-12-04 01:54:56 - Security Bloggers Network : On November 6th, 2015 security researchers of FoxGlove Security released zero-day exploits for WebSphere, WebLogic, JBoss, Jenkins, and OpenNMS, facilitating in some cases Remote Code Execution attacks on application servers using these technologies The popularity http://www.secuobs.com/revue/news/592049.shtmlhttp://www.secuobs.com/revue/news/592049.shtml 2015-12-03 18:26:24 - TrendLabs Security Intelligence Blog : A total of 61 million devices smart phones, routers, smart TVs are currently at risk to remote code execution attacks due to vulnerabilities that have been fixed since 2012 The vulnerability exists in the Portable SDK for UPnP Devices, also called libupnp This particular library is used to implement media playback DLNA or NAT traversal UPnP IGD Apps on a smartphone can use these features to play media files or connect to other devices within a user's home network http://www.secuobs.com/revue/news/591999.shtmlhttp://www.secuobs.com/revue/news/591999.shtml 2015-12-03 08:45:04 - Reverse Engineering : submitted by chubbymaggie link comment http://www.secuobs.com/revue/news/591936.shtmlhttp://www.secuobs.com/revue/news/591936.shtml 2015-12-03 08:06:35 - Reverse Engineering : submitted by chubbymaggie link comment http://www.secuobs.com/revue/news/591934.shtmlhttp://www.secuobs.com/revue/news/591934.shtml 2015-12-02 03:49:59 - Reverse Engineering : submitted by oscardagrach link comment http://www.secuobs.com/revue/news/591790.shtmlhttp://www.secuobs.com/revue/news/591790.shtml 2015-12-01 18:54:56 - Slashdot Your Rights Online : tsu doh nimh writes The US Department of Homeland Security DHS has been quietly launching stealthy cyber attacks against a range of private US companies -- mostly banks and energy firms These digital intrusion attempts, commissioned in advance by the private sector targets themselves, are part of a little-known program at DHS designed to help 'critical infrastructure' companies shore up their computer and network defenses against real-world adversaries And it's all free of charge well, on the US taxpayer's dime Brian Krebs examines some of the pros and cons, and the story has some interesting feedback from some banks and others who have apparently taken DHS up on its offer IMAGE IMAGE Share on Google Read more of this story at Slashdot http://www.secuobs.com/revue/news/591744.shtmlhttp://www.secuobs.com/revue/news/591744.shtml 2015-12-01 02:25:07 - Office of Inadequate Security : If you use Private Internet Access, you should have a notification in your inbox Here s the text of the email they http://www.secuobs.com/revue/news/591623.shtmlhttp://www.secuobs.com/revue/news/591623.shtml 2015-11-30 19:02:47 - Security Bloggers Network : Researchers have identified a serious vulnerability affecting VPN providers with port-forwarding services that allows an attacker to obtain the real IP address of a user's computer David Bisson reports http://www.secuobs.com/revue/news/591581.shtmlhttp://www.secuobs.com/revue/news/591581.shtml 2015-11-30 15:16:52 - Global Security Mag Online : Flexera Software annonce la disponibilité de sa solution Vulnerability Intelligence Manager 2016 Cette dernière version fournit aux équipes responsables de la sécurité IT des analyses de vulnérabilité vérifiées, précises et complètes et ce de manière globale Parmi les nouvelles fonctionnalités de Vulnerability Intelligence Manager 2016, figure l'information sur les soupçons de vulnérabilité ne satisfaisant pas les critères de validation de Secunia Research et qui ne sont donc pas classées comme ayant un - Produits http://www.secuobs.com/revue/news/591552.shtmlhttp://www.secuobs.com/revue/news/591552.shtml 2015-11-23 22:00:13 - Security Bloggers Network : A security researcher has alleged that United Airlines waited close to six months to patch a serious vulnerability submitted to its bug bounty program David Bisson reports http://www.secuobs.com/revue/news/590968.shtmlhttp://www.secuobs.com/revue/news/590968.shtml 2015-11-23 17:54:55 - Security Bloggers Network : Within three hours of being reported, a serious cross-site scripting XSS vulnerability on LinkedIn's website has been fixed by its security team Read more in my article on the Hot for Security blog http://www.secuobs.com/revue/news/590936.shtmlhttp://www.secuobs.com/revue/news/590936.shtml 2015-11-20 11:21:06 - Security Bloggers Network : The persistent XSS flaw allowed hackers to spread XSS worms through the LinkedIn help forums http://www.secuobs.com/revue/news/590678.shtmlhttp://www.secuobs.com/revue/news/590678.shtml 2015-11-20 09:56:27 - Help Net Security : Data trends show that the global threat and Vulnerability Management VM market is expected to grow from US 53 billion in 2015 to 86 billion in 2020, according to ABI Research Each day, organ http://www.secuobs.com/revue/news/590668.shtmlhttp://www.secuobs.com/revue/news/590668.shtml 2015-11-18 13:52:54 - SecurityTube.Net : This presentation is on why RedTeam engagements should be part of every vulnerability management program This will give a walk through of several aspects of a network and how an attacker is going to take advantage of mistakes and use the network against you It will also look at several things admins can do to start to help identify an attacker on the network For More Information Please Visit - https wwwsaintconorg http://www.secuobs.com/revue/news/590430.shtmlhttp://www.secuobs.com/revue/news/590430.shtml 2015-11-17 17:48:20 - Security Bloggers Network : This week I wrote a blog post over at AlienVault entitled, Internal Scanning for PCI Compliance Not Sexy but Necessary Many of us who work in security started our careers doing some kind of vulnerability chasing It s our version of firefighting Look for a vulnerability, patch it, and repeat As our environments grow, the fervor with http://www.secuobs.com/revue/news/590319.shtmlhttp://www.secuobs.com/revue/news/590319.shtml 2015-11-12 14:27:35 - Office of Inadequate Security : There s a new claim in the Comcast breach first reported by Steve Ragan Darren Pauli reports that a hacker claiming http://www.secuobs.com/revue/news/589879.shtmlhttp://www.secuobs.com/revue/news/589879.shtml 2015-11-12 14:16:00 - Reverse Engineering : submitted by galapag0 link comment http://www.secuobs.com/revue/news/589878.shtmlhttp://www.secuobs.com/revue/news/589878.shtml 2015-11-11 22:12:13 - Security Bloggers Network : Sometimes just a few lines of access logs can tell a whole story Many ongoing attacks against WordPress and Joomla sites use a collection of known vulnerabilities in many different plugins, themes and components This helps hackers maximize the number of sites they can compromise Google Dorks Do you ever think about how hackers find Read More The post Distributed Vulnerability Search Told via Access Logs appeared first on Sucuri Blog http://www.secuobs.com/revue/news/589820.shtmlhttp://www.secuobs.com/revue/news/589820.shtml 2015-11-07 09:17:11 - Rob Fuller's broadcasted articles on Inoreader : By breenmachine What The most underrated, underhyped vulnerability of 2015 has recently come to my attention, and I m about to bring it to yours No one gave it a fancy name, there were no press releases, nobody called Mandiant to come put out the fires In fact, even though proof of concept code was released Continue reading What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common This Vulnerability http://www.secuobs.com/revue/news/589370.shtmlhttp://www.secuobs.com/revue/news/589370.shtml 2015-11-03 08:43:08 - Help Net Security : A study conducted by Forrester Consulting assessed IT decision makers' satisfaction with their current vulnerability management platforms and the challenges companies face in securing their cloud envi http://www.secuobs.com/revue/news/588833.shtmlhttp://www.secuobs.com/revue/news/588833.shtml 2015-11-02 18:31:27 - Security Bloggers Network : An extremely serious vulnerability in Xen hypervisor software that would have allowed an attacker to escape their virtual machine and take over a host computer went undiscovered for seven years http://www.secuobs.com/revue/news/588791.shtmlhttp://www.secuobs.com/revue/news/588791.shtml 2015-11-01 18:45:33 - TrendLabs Security Intelligence Blog : A vulnerability known as Wormhole that reportedly affected the software development kit SDK , Moplus by Baidu is making waves due to the severity of the impact once successfully exploited The said vulnerability was discovered by WooYunog, a vulnerability reporting platform in China However, as our investigation on this security bug unfolded, we found out that http://www.secuobs.com/revue/news/588652.shtmlhttp://www.secuobs.com/revue/news/588652.shtml 2015-10-29 20:26:06 - Security Bloggers Network : Have you ever wanted to run security tests on your WordPress website to see if it could be easily hacked WPScan is a black box vulnerability scanner for WordPress sponsored by Sucuri and maintained by the WPScan Team, available free for Linux and Mac http://www.secuobs.com/revue/news/588460.shtmlhttp://www.secuobs.com/revue/news/588460.shtml 2015-10-26 10:48:53 - Help Net Security : With an increasingly fast-paced threat landscape threatening even the most complex network security infrastructures, vulnerability management has become essential Many vendors are offering cloud-b http://www.secuobs.com/revue/news/587937.shtmlhttp://www.secuobs.com/revue/news/587937.shtml 2015-10-23 12:43:28 - Acunetix Web Application Security Blog : A high-severity SQL injection vulnerability has been identified in versions 32 through to 344 of Joomla The popular Content Management System CMS , second only to WordPress with a staggering 66pourcents CMS marketshare as of October 23, 2015, based on a W3Techs trend reports runs on an estimated 28 million sites according to a survey carried out by Read More The post New Joomla SQL Injection vulnerability gives attackers full control of your website appeared first on Acunetix http://www.secuobs.com/revue/news/587739.shtmlhttp://www.secuobs.com/revue/news/587739.shtml 2015-10-22 21:09:26 - Security Bloggers Network : The Joomla team just released a new Joomla version 345 to fix some serious security vulnerabilities The most critical one is a remote and unauthenticated SQL injection on the com_contenthistory module included by default that allows for a full t http://www.secuobs.com/revue/news/587673.shtmlhttp://www.secuobs.com/revue/news/587673.shtml 2015-10-22 09:04:26 - Security Bloggers Network : By default it is very easy to guess a WordPress username Is this WordPress username disclosure a vulnerability or not Many software vendors such as Microsoft and Cisco had similar issues in the past and they fixed it Yet in the WordPress ecosystem this is not considered as a vulnerability The post WordPress Username Disclosure, Vulnerability or Not appeared first on WP White Security Related posts 1 How to Protect your WordPress from Mass WordPress Brute Force Attacks 2 Hide WordPress Usernames to Improve WordPress Security 3 Should You Change Your WordPress Login Page URL http://www.secuobs.com/revue/news/587592.shtmlhttp://www.secuobs.com/revue/news/587592.shtml 2015-10-21 21:33:08 - Darknet The Darkside : http://www.secuobs.com/revue/news/587552.shtmlhttp://www.secuobs.com/revue/news/587552.shtml 2015-10-20 07:08:08 - Security Bloggers Network : Hacking cars has made big headlines in recent months Back in July of this year, security researchers Charlie Miller and Chris Valasek won the attention of the information security community and beyond when they successfully hacked a Jeep Cherokee s computer via its Uconnect infotainment system The duo was able to rewrite the automobile s firmware, tamper Read More The post Attacking Automobiles Inside a Connected Car s Points of Vulnerability appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/587302.shtmlhttp://www.secuobs.com/revue/news/587302.shtml 2015-10-19 10:02:09 - Symantec Connect Symantec Security Response Billets : Adobe has issued an emergency patch for a new Flash Player vulnerability CVE-2015-7645 exploited by attackers behind the Operation Pawn Storm campaign Read More http://www.secuobs.com/revue/news/587145.shtmlhttp://www.secuobs.com/revue/news/587145.shtml 2015-10-16 23:27:00 - Security Bloggers Network : Just three days after Trend Micro had notified Adobe of a 0-day vulnerability in their Flash player, Adobe addressed the flaw with a patch APSB15-27 provides fixes for three vulnerabilities, and one of them, CVE-2015-7645, is currently being used in a http://www.secuobs.com/revue/news/587053.shtmlhttp://www.secuobs.com/revue/news/587053.shtml 2015-10-16 20:58:47 - OpenDNS Blog : The window of time between vulnerability discovery and its subsequent patch can be a quiet, calm process of orchestrating patches across organizations or a mad rush to plug a hole that s actively being exploited in the wild It all depends on how vulnerabilities are disclosed and how quickly vendors act to fix the problem Accordingly, The post Full Disclosure Infosec Industry Still Fighting Over Vulnerability Reporting appeared first on OpenDNS Blog http://www.secuobs.com/revue/news/587032.shtmlhttp://www.secuobs.com/revue/news/587032.shtml 2015-10-15 13:00:25 - Security Bloggers Network : University of Cambridge researchers find that the Android ecosystem is a market for lemons, with 87pourcents of devices unpatched against at least one known critical vulnerability http://www.secuobs.com/revue/news/586842.shtmlhttp://www.secuobs.com/revue/news/586842.shtml 2015-10-12 10:17:14 - Acunetix Web Application Security Blog : Acunetix Vulnerability Scan results can now be imported into the FortiWeb Web Application Firewall WAF LONDON, 12th October 2015 Acunetix, a market leader in web application security technology, today announced that Acunetix web vulnerability scan results can now be imported into the new FortiWeb 4000E and 3000E Web Application Firewalls WAFs to automatically configure Read More The post Fortinet uses Acunetix to offer immediate Vulnerability detection appeared first on Acunetix http://www.secuobs.com/revue/news/586392.shtmlhttp://www.secuobs.com/revue/news/586392.shtml 2015-10-08 10:12:55 - Acunetix Web Application Security Blog : Acunetix Online Vulnerability Scanner OVS has been updated to provide better web and perimeter security, while providing an improved indication of the security of your assets Through this update, Acunetix OVS users can easily identify their long forgotten assets, rest assured that their servers are being constantly checked for the latest vulnerabilities The following is Read More The post Acunetix OVS updated to allow better Vulnerability Management appeared first on Acunetix http://www.secuobs.com/revue/news/586044.shtmlhttp://www.secuobs.com/revue/news/586044.shtml 2015-10-07 13:51:31 - Security Bloggers Network : Chinese networking telecommunications equipment and services company Huawei has patched a vulnerability in its MBB Mobile Broadband product E3272s that if exploited could lead to denial-of-service attacks and remote arbitrary code execution According to a security bulletin released by the company, An attacker could send a malicious packet to the Common Gateway Interface CGI of Read More The post Remote DoS Vulnerability Patched in Huawei 4G USB Modem appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/585942.shtmlhttp://www.secuobs.com/revue/news/585942.shtml 2015-10-06 10:13:51 - Acunetix Web Application Security Blog : Australian department store David Jones victim of hack Australian department store giant David Jones has informed customers through a notice on their site, that they were recently hacked However, they also assured account holders that no financial data had been breached and that there was no need to take any action The Australian Federal Police Read More The post In the headlines David Jones and T-Mobile hack, remote code execution bugs, WinRAR vulnerability, and more appeared first on Acunetix http://www.secuobs.com/revue/news/585760.shtmlhttp://www.secuobs.com/revue/news/585760.shtml 2015-10-06 04:55:59 - Security Bloggers Network : samuraiAsTech Consulting is proud to announce the release of our new whitepaper describing two successful approaches to software security remediation We ve worked with our customers to correct defects in applications great and small, and we want to help you put Continue reading The post New Whitepaper Two Approaches to Source Code Security Vulnerability Remediation appeared first on AsTech Consulting http://www.secuobs.com/revue/news/585747.shtmlhttp://www.secuobs.com/revue/news/585747.shtml 2015-10-05 13:00:45 - SecurityTube.Net : This discussion covers all the necessary pieces for creating and distributing remediation plans, tracking remediation, and creating meaningful metrics for demonstrating success in vulnerability management Current vulnerability management programs often stop at vulnerability identification scan all the things and most organizations struggle to poise risk information in a way that is heard, understood, prioritized, and acted upon Jesika has been an active member of the infosec community since the late 90's She is currently a Sr Security Consultant for Rapid7 in Enterprise Deployments She spent several years in the trenches at various organizations building out vulnerability management programs, leading her to quickly realize there is a huge gap between vulnerability assessment and vulnerability management, and that those giving remediation advice don't have enough insight into the realities of corporate structure to help make sense of it all She's now bringing back her experiences working ÛÏdeep cover Û to help security managers and assessors alike gain traction with remediation efforts For More Information Please Visit - http wwwderbyconcom http wwwirongeekcom iphp page videos derbycon5 mainlist http://www.secuobs.com/revue/news/585671.shtmlhttp://www.secuobs.com/revue/news/585671.shtml 2015-10-01 02:58:26 - Symantec Connect Security Response Billets : A new remote code execution vulnerability affecting the compression utility is less dangerous than first believed IMAGE Read More http://www.secuobs.com/revue/news/585282.shtmlhttp://www.secuobs.com/revue/news/585282.shtml 2015-09-30 20:18:15 - Darknet The Darkside : http://www.secuobs.com/revue/news/585251.shtmlhttp://www.secuobs.com/revue/news/585251.shtml 2015-09-30 19:02:50 - Security Bloggers Network : An expert says that the popular compression tool WinRAR contains a significant vulnerability that exposes it to an attack The post Significant WinRAR vulnerability identified appeared first on We Live Security http://www.secuobs.com/revue/news/585237.shtmlhttp://www.secuobs.com/revue/news/585237.shtml 2015-09-30 12:38:16 - Security Bloggers Network : A severe security flaw discovered in the WinRAR suite could allow hackers to compromise user systems http://www.secuobs.com/revue/news/585162.shtmlhttp://www.secuobs.com/revue/news/585162.shtml 2015-09-29 06:51:35 - SecurityTube.Net : Media reports about Zero Days, bug bounties, and branded vulnerabilities usually focus on the publication of a vulnerability report Vulnerability disclosure policies recently hit the mainstream with public kerfuffles between Google and Microsoft over the timing a few vulnerability announcements However, public reports largely ignore the process of coordination and disclosure that precedes a publication event For the past 26 years at the CERT Coordination Center, we have been helping connect security researchers and vendors in the interest of improving the security of the Internet and providing users and administrators with the information they need to secure their systems In this talk I ll describe the process of coordinating vulnerability disclosures, why it s hard, and some of the pitfalls and hidden complexities we have encountered This will be a behind-the-scenes look at a process that doesn t receive much attention yet is of critical importance to internet security For More information Please Visit - http rvaseccom http://www.secuobs.com/revue/news/584966.shtmlhttp://www.secuobs.com/revue/news/584966.shtml 2015-09-28 12:26:42 - SecurityTube.Net : Jake Williams In this talk, Jake will teach you how to discover vulnerabilities like a rock star using DLL side loading This technique ab uses the way Windows searches for DLLs to load into a program The behavior is nearly laughable and introduces serious risks, especially when developers don't understand filesystem permissions Attackers know this and use it for privilege escalation and stealthy persistence It is being seen in a number of APT compromises and antivirus software has abysmal detection rates For More Information Please Visit - http wwwsecuritybsidescom w page 92419092 BSidesAugustapourcents202015 http wwwirongeekcom iphp page videos bsidesaugusta2015 mainlist http://www.secuobs.com/revue/news/584865.shtmlhttp://www.secuobs.com/revue/news/584865.shtml 2015-09-28 06:58:25 - Security Bloggers Network : In September of 2013, I wrote an article for The State of Security that examines the topic of vulnerability scoring I argue that an unbounded vulnerability scoring system that is, a scoring system without any delineated limits can be valuable at the right level of a business s process, and I conclude that rankings, categories, and more sophisticated Read More The post Prioritizing Risk A Conversation on Vulnerability Scoring appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/584827.shtmlhttp://www.secuobs.com/revue/news/584827.shtml 2015-09-25 09:37:20 - Help Net Security : HackerOne released a new tool designed to help organizations improve the way they respond to reports about vulnerabilities in their software The Vulnerability Coordination Maturity Model VCMM wa http://www.secuobs.com/revue/news/584647.shtmlhttp://www.secuobs.com/revue/news/584647.shtml 2015-09-24 23:10:20 - Security Bloggers Network : By Michael Perry and Val Vask In the aftermath of Cisco s announcement that several discontinued Integrated Service Routers ISRs have been compromised, Cyveillance recommends a thorough screening of networking infrastructure and policy The impacted models 1841, 2811, and 3825 are what Cisco calls branch routers These routers are specifically responsible for addressing the The post SYNful Knock What the Cisco Router Vulnerability Means for Your Business appeared first on Cyveillance Blog - The Cyber Intelligence Blog http://www.secuobs.com/revue/news/584623.shtmlhttp://www.secuobs.com/revue/news/584623.shtml 2015-09-24 19:31:16 - Security Bloggers Network : Penetration Testing and Vulnerability Scanning A HIPAA Q A Although there is no regulation that explicitly requires vulnerability scanning and penetration testing, assessing the vulnerabilities of your network and IT assets is essential for understanding the risks posed to your organization In this week s Q A, HIPAA Chat host Steve Spearman spoke with Mike Pearson, information security expert, about the differences between penetration testing and vulnerability scanning and how these techniques can facilitate HIPAA compliance The post Penetration Testing and Vulnerability Scanning A HIPAA Q A appeared first on Health Security Solutions http://www.secuobs.com/revue/news/584609.shtmlhttp://www.secuobs.com/revue/news/584609.shtml 2015-09-19 04:16:58 - Security Bloggers Network : FortiGuard Labs disclosed a heap overflow vulnerability earlier this week in Windows Journal, a notetaking application developed by Microsoft that is included in Windows XP Tablet PC Edition, Windows Vista, Windows 7, Windows 8, and Windows 10 http://www.secuobs.com/revue/news/584023.shtmlhttp://www.secuobs.com/revue/news/584023.shtml 2015-09-18 11:19:27 - Help Net Security : Mozilla has patched a critical vulnerability CVE-2015-4499 in its popular open source bug-tracking Bugzilla software - a vulnerability that can be exploited by attackers to gain access to informatio http://www.secuobs.com/revue/news/583920.shtmlhttp://www.secuobs.com/revue/news/583920.shtml 2015-09-17 17:43:26 - Symantec Connect Security Response Billets : Apple users advised to update iOS and Mac OS X as successful exploit requires no user interaction IMAGE Read More http://www.secuobs.com/revue/news/583862.shtmlhttp://www.secuobs.com/revue/news/583862.shtml 2015-09-17 17:15:32 - Security Bloggers Network : Recently, an alarming vulnerability has cropped up on iOS devices This security loophole allows an attacker to overwrite arbitrary files on a targeted device and, when used in combination with other procedures, install a signed app that devices will trust without presenting a warning notification to users In a recent article published on Threatpost, it s IMAGE http://www.secuobs.com/revue/news/583855.shtmlhttp://www.secuobs.com/revue/news/583855.shtml 2015-09-17 16:00:41 - Security Bloggers Network : Introduction This article explains how to get a reverse shell by exploiting MS15-100 MS15-100 is a remote code execution vulnerability in the Windows Media Center Application This vulnerability is Go on to the site to read the full article http://www.secuobs.com/revue/news/583838.shtmlhttp://www.secuobs.com/revue/news/583838.shtml 2015-09-17 16:00:41 - Security Bloggers Network : A security expert has found a vulnerability on iOS devices that allows malware to be installed via AirDrop The post iOS AirDrop vulnerability allows for malware installation on Apple devices appeared first on We Live Security http://www.secuobs.com/revue/news/583837.shtmlhttp://www.secuobs.com/revue/news/583837.shtml 2015-09-16 19:36:56 - Ars Technica Risk Assessment : Proof-of-concept exploit installs malicious app on nearby iPhones http://www.secuobs.com/revue/news/583746.shtmlhttp://www.secuobs.com/revue/news/583746.shtml 2015-09-14 17:25:36 - LinuxSecurity.com Latest News : LinuxSecuritycom A spat between two security companies shows just how sensitive reporting software vulnerabilities can be, particularly when it involves a popular product The kerfuffle between FireEye and ERNW, a consultancy in Germany, started after an ERNW researcher found five software flaws in FireEye's Malware Protection System MPS earlier this year http://www.secuobs.com/revue/news/583439.shtmlhttp://www.secuobs.com/revue/news/583439.shtml 2015-09-11 09:45:00 - Help Net Security : Vulnerability management VM solution providers have always held their own in the global network security domain VM technologies scan network endpoints such as desktops and mobile devices against a http://www.secuobs.com/revue/news/583079.shtmlhttp://www.secuobs.com/revue/news/583079.shtml 2015-09-10 15:03:55 - LinuxSecurity.com Latest News : LinuxSecuritycom After more than a year of legal wrangling, the federal government has agreed to hand over its policy on vulnerability use and disclosure The government had said that the policy was classified and too sensitive to release, but relented late last week and sent the document to the EFF, albeit a heavily redacted version http://www.secuobs.com/revue/news/582981.shtmlhttp://www.secuobs.com/revue/news/582981.shtml 2015-09-10 14:39:16 - Security Bloggers Network : A security researcher alleges Yahoo won t patch a hole he found in Messenger that attackers could exploit to produce a buffer overflow condition Researcher Julien Ahrens has published a blog post in which he outlines the details of the vulnerability he discovered and the subsequent interactions he had with Yahoo s bug bounty program, which is Read More The post Researcher Yahoo Messenger Refuses to Patch Emoticons Buffer Overflow Vulnerability appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/582969.shtmlhttp://www.secuobs.com/revue/news/582969.shtml 2015-09-10 13:53:56 - Darknet The Darkside : http://www.secuobs.com/revue/news/582961.shtmlhttp://www.secuobs.com/revue/news/582961.shtml 2015-09-08 23:39:46 - Security Bloggers Network : I get different people approaching me all the time regarding this question how do you disclose security vulnerabilities In this post I ll share my thoughts on the subject First of all, you should probably stay away from researching vulnerabilities on-line, wihtout permission Your hat will quickly turn to shades of grey, and suddenly black before you Continue reading I found a security vulnerability, how do I disclose it http://www.secuobs.com/revue/news/582757.shtmlhttp://www.secuobs.com/revue/news/582757.shtml 2015-09-07 04:50:35 - TrendLabs Security Intelligence Blog : Our investigation on the iOS Quicksand vulnerability designated with CVE-2015-5749 leads us to the conclusion that this security gap, despite its serious risks to confidential data, is difficult to exploit due to its required specific conditions For instance, the MDM product must support and use the push configuration feature this feature normally allows a device administrator http://www.secuobs.com/revue/news/582567.shtmlhttp://www.secuobs.com/revue/news/582567.shtml 2015-09-04 14:14:47 - Security Bloggers Network : Cisco has patched a remote file overwrite vulnerability in its Integrated Management Controller IMC Supervisor and UCS Director products On Thursday, Cisco issued an advisory that explains how a vulnerability in JavaServer Pages JSP input validation routines of both the IMC Supervisor and UCS Director products could be exploited by a remote, unauthenticated attacker to Read More The post Remote File Overwrite Vulnerability Patched by Cisco in IMC Supervisor, UCS Director appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/582440.shtmlhttp://www.secuobs.com/revue/news/582440.shtml 2015-09-03 16:37:45 - Help Net Security : Bitdefender researchers have located a stored XSS vulnerability in PayPal that leaves the e-payment service open for hackers to upload maliciously crafted files, capable of performing attacks on regis http://www.secuobs.com/revue/news/582340.shtmlhttp://www.secuobs.com/revue/news/582340.shtml 2015-09-01 04:41:13 - Ars Technica Risk Assessment : Good luck getting this one patched quickly and effectively http://www.secuobs.com/revue/news/581976.shtmlhttp://www.secuobs.com/revue/news/581976.shtml 2015-08-29 01:47:54 - Security Bloggers Network : An XSS hole could apparently have allowed a crook to pop up a realistic PayPal pay page and steal the victim's card data Paul Ducklin takes a look http://www.secuobs.com/revue/news/581802.shtmlhttp://www.secuobs.com/revue/news/581802.shtml 2015-08-28 20:40:32 - Security Bloggers Network : IMAGE Each week, the PhishLabs team posts The Week in Cybercrime TWIC to recap noteworthy cybercrime articles and reports open source http://www.secuobs.com/revue/news/581778.shtmlhttp://www.secuobs.com/revue/news/581778.shtml 2015-08-28 17:58:40 - MSI State of Security : Earlier this week, ICS-CERT announced that a new vulnerability was discovered in ICS products made by Endress Hauser The vulnerability affects the DTM library used by Endress Hauser HART-based field devices in the FDT DTM Frame Application If a specially crafted packet manages Continue reading The post Recently Discovered ICS Vulnerability appeared first on MSI State of Security http://www.secuobs.com/revue/news/581764.shtmlhttp://www.secuobs.com/revue/news/581764.shtml 2015-08-28 16:15:58 - Security Bloggers Network : A vulnerability which could divert traffic to launch cyberattacks has been mitigated two weeks after public disclosure http://www.secuobs.com/revue/news/581745.shtmlhttp://www.secuobs.com/revue/news/581745.shtml 2015-08-28 15:29:40 - Security Bloggers Network : The temporary move is meant to forestall potential attacks that could expose server IP addresses http://www.secuobs.com/revue/news/581737.shtmlhttp://www.secuobs.com/revue/news/581737.shtml 2015-08-28 13:59:13 - Security Bloggers Network : The XXE security flaw could result in user information leaks and theft http://www.secuobs.com/revue/news/581728.shtmlhttp://www.secuobs.com/revue/news/581728.shtml 2015-08-28 10:44:51 - Help Net Security : An arbitrary code execution in the JetAudio Basic v813 and JetVideo media players for Windows allows potential attackers to craft a malicious asf file that could compromise a user s PC, warns Bit http://www.secuobs.com/revue/news/581698.shtmlhttp://www.secuobs.com/revue/news/581698.shtml 2015-08-25 18:02:08 - Ars Technica Risk Assessment : Good luck getting this one patched quickly and effectively http://www.secuobs.com/revue/news/581336.shtmlhttp://www.secuobs.com/revue/news/581336.shtml 2015-08-25 06:19:12 - Security Bloggers Network : Previously my colleague Wayne talked about an interesting document exploit targeting CVE-2015-1641 In this post, we will talk about who might be behind the attack We start our correlation with the analysis of the exploit payload - a remote adminis http://www.secuobs.com/revue/news/581224.shtmlhttp://www.secuobs.com/revue/news/581224.shtml 2015-08-21 15:59:53 - Security Bloggers Network : Details have emerged concerning a severe iOS flaw which impacts mobile device management solutions http://www.secuobs.com/revue/news/580959.shtmlhttp://www.secuobs.com/revue/news/580959.shtml 2015-08-19 15:35:09 - Security Bloggers Network : This is interesting First, it integrates with corporate directories such as Active Directory and social media sites like LinkedIn to map the connections between employees, as well as important outside contacts Bell calls this the real org chart H http://www.secuobs.com/revue/news/580699.shtmlhttp://www.secuobs.com/revue/news/580699.shtml 2015-08-19 13:32:01 - Security Bloggers Network : A major security vulnerability study into modern cars has finally been released, two years after it was originally intended to be published The post Car security vulnerability study finally sees light of day appeared first on We Live Security http://www.secuobs.com/revue/news/580685.shtmlhttp://www.secuobs.com/revue/news/580685.shtml 2015-08-19 02:57:52 - Symantec Connect Security Response Billets : Symantec advises users to use Windows Update or the Microsoft Download Center to protect against CVE-2015-2502 IMAGE Read More http://www.secuobs.com/revue/news/580636.shtmlhttp://www.secuobs.com/revue/news/580636.shtml 2015-08-18 00:21:33 - Security Bloggers Network : Only days after Apple released OS X 10105, fixing a host of security flaws, a further serious and as yet unpatched vulnerability has been made public, by an Italian teenager Read more in my article on the Intego Mac Security blog http://www.secuobs.com/revue/news/580488.shtmlhttp://www.secuobs.com/revue/news/580488.shtml 2015-08-17 18:48:39 - Symantec Connect Security Response Billets : Symantec confirms existence of flaw, which requires victim to voluntarily run an application for exploit IMAGE Read More http://www.secuobs.com/revue/news/580459.shtmlhttp://www.secuobs.com/revue/news/580459.shtml 2015-08-17 15:37:02 - TrendLabs Security Intelligence Blog : The hits keep on coming for Android s mediaserver component We have discovered yet another Android mediaserver vulnerability, which can be exploited to perform attacks involving arbitrary code execution With this new vulnerability, an attacker would be able to run their code with the same permissions that the mediaserver program already has as part of its http://www.secuobs.com/revue/news/580437.shtmlhttp://www.secuobs.com/revue/news/580437.shtml 2015-08-16 02:37:27 - Reverse Engineering : submitted by laginimaineb link comment http://www.secuobs.com/revue/news/580349.shtmlhttp://www.secuobs.com/revue/news/580349.shtml 2015-08-15 23:44:27 - SecurityTube.Net : Allan Friedman Good information security policy requires addressing a myriad of complicated, inter-related issues, while still adhering to the Hippocratic principle of 'First, Do No Harm' Rather than new regulation, one approach is to bring those that understand the issues and have a stake in the game together to find common ground This talk will present the US Department of Commerce's new initiative on vulnerability research disclosure, and explain the multistakeholder process that builds on community experience to build trust between security researchers and software and system vendors The goals are to identify and promote common principles and best practices that all parties agree will promote We'll translate DC buzzwords, and ask for your feedback on how we can make this process better For More Information Please Visit - http bsideslvcom http wwwirongeekcom iphp page videos bsideslasvegas2015 mainlist http://www.secuobs.com/revue/news/580316.shtmlhttp://www.secuobs.com/revue/news/580316.shtml 2015-08-14 16:57:08 - TrendLabs Security Intelligence Blog : Earlier this week Oracle s CSO released a blog post that talked about why people should stop looking for vulnerabilities in their software products Needless to say, this did not go down well with the security community and the post was soon taken down with a statement from the company adding that the post does not reflect our http://www.secuobs.com/revue/news/580199.shtmlhttp://www.secuobs.com/revue/news/580199.shtml 2015-08-13 15:04:50 - Security Bloggers Network : Facebook has awarded researchers 100,000 for a tool designed to detect problems in C http://www.secuobs.com/revue/news/580087.shtmlhttp://www.secuobs.com/revue/news/580087.shtml 2015-08-13 10:58:18 - Help Net Security : Elastica discovered an injection vulnerability in Salesforce which opened the door for attackers to use a trusted Salesforce application as a platform to conduct phishing attacks to steal end-users' l http://www.secuobs.com/revue/news/580051.shtmlhttp://www.secuobs.com/revue/news/580051.shtml 2015-08-12 10:20:08 - Security Bloggers Network : The revelation of CVE-2015-0096 which is a continuation of CVE-2010-2568, was believed to have been patched by MS10-046, however was not completely and we see this with MS15-018 The post Stuxnet USB Attack Vector Vulnerability Still Prevalent with CVE http://www.secuobs.com/revue/news/579943.shtmlhttp://www.secuobs.com/revue/news/579943.shtml 2015-08-11 22:20:02 - Security Bloggers Network : Security Risk Dangerous Exploitation level Easy DREAD Score 6 10 Vulnerability Persistent XSS Patched Version 424 Last week the WordPress team released a patch that fixed 6 security vulnerabilities Of the six, you ll find one that we identified a few months back Vulnerability Disclosure Timeline May 6th, 2015 Initial report to WordPress security team May Read More The post Persistent XSS Vulnerability in WordPress Explained appeared first on Sucuri Blog http://www.secuobs.com/revue/news/579907.shtmlhttp://www.secuobs.com/revue/news/579907.shtml 2015-08-11 13:49:41 - Security Bloggers Network : Security researchers have uncovered a zero-day deserialization vulnerability that allows for arbitrary code execution in 55pourcents of Android devices For their presentation at USENIX WOOT 15, researchers Or Peles and Roee Hay at IBM Security explain that their vulnerability CVE-2015-3825 can be exploited in the context of many apps and can be used to effect Read More The post Zero-Day Deserialization Vulnerability Affects 55pourcents of Android Devices appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/579831.shtmlhttp://www.secuobs.com/revue/news/579831.shtml 2015-08-11 13:49:41 - Security Bloggers Network : The hackers have ramped up their efforts with new vulnerabilities, new range and new targets http://www.secuobs.com/revue/news/579830.shtmlhttp://www.secuobs.com/revue/news/579830.shtml 2015-08-11 10:05:26 - Security Bloggers Network : Here we go again IBM security researchers find a serious flaw in Android, that could be exploited by malicious hackers to steal information from users http://www.secuobs.com/revue/news/579808.shtmlhttp://www.secuobs.com/revue/news/579808.shtml 2015-08-07 19:35:15 - Symantec Connect Security Response Billets : Symantec advises users to update their browser immediately IMAGE Read More http://www.secuobs.com/revue/news/579603.shtmlhttp://www.secuobs.com/revue/news/579603.shtml 2015-08-07 05:42:49 - TrendLabs Security Intelligence Blog : The BIND implementation of the Domain Name System DNS is a critical part of the infrastructure of the Internet For example, almost all of the 13 root name servers use BIND On July 28 a vulnerability was published in BIND that could be anonymously exploited by an attacker To crash the server, all an attacker would have to http://www.secuobs.com/revue/news/579562.shtmlhttp://www.secuobs.com/revue/news/579562.shtml 2015-08-05 10:15:29 - P1 Security : The number of referenced vulnerabilities in our telecom-specific unique Vulnerability Knowledge Base finally reaches 1000 This is a very Important Milestone A rare case of private vulnerabilities database to reference more than 1000 vulnerabilities - Comes from research performed by P1 La http://www.secuobs.com/revue/news/579360.shtmlhttp://www.secuobs.com/revue/news/579360.shtml 2015-08-05 09:51:21 - Help Net Security : Alert Logic revealed at the Black Hat USA 2015 conference Alert Logic Cloud Insight, a cloud-native vulnerability and configuration management solution designed for customers running on Amazon Web Ser http://www.secuobs.com/revue/news/579358.shtmlhttp://www.secuobs.com/revue/news/579358.shtml 2015-07-31 17:40:40 - Security Bloggers Network : Akamai is aware of a recently disclosed critical vulnerability in BIND CVE-2015-5477 that can be exploited to cause a denial of service How does the attack work An attacker can cause BIND to exit by using a constructed packet http://www.secuobs.com/revue/news/579031.shtmlhttp://www.secuobs.com/revue/news/579031.shtml 2015-07-31 15:50:04 - Security Bloggers Network : Can circuit fingerprinting reveal the true location of Tor websites and services http://www.secuobs.com/revue/news/579018.shtmlhttp://www.secuobs.com/revue/news/579018.shtml 2015-07-31 13:15:26 - Security Bloggers Network : Cisco has patched a vulnerability in the code that handles the reassembly of fragmented IPv4 and IPv6 packets of its IOS XE Software for its ASR 1000 Series Aggregation Services Routers According to an advisory released by Cisco, an unauthenticated, remote attacker could exploit this vulnerability to cause a crash of the Embedded Services Processor Read More The post Cisco Patches Fragmented Packet DoS Vulnerability in ASR 1000 Series appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/578993.shtmlhttp://www.secuobs.com/revue/news/578993.shtml 2015-07-30 15:56:15 - SecurityTube.Net : Media reports about Zero Days, bug bounties, and branded vulnerabilities usually focus on the publication of a vulnerability report Vulnerability disclosure policies recently hit the mainstream with public kerfuffles between Google and Microsoft over the timing a few vulnerability announcements However, public reports largely ignore the process of coordination and disclosure that precedes a publication event For the past 26 years at the CERT Coordination Center, we have been helping connect security researchers and vendors in the interest of improving the security of the Internet and providing users and administrators with the information they need to secure their systems In this talk I ll describe the process of coordinating vulnerability disclosures, why it s hard, and some of the pitfalls and hidden complexities we have encountered This will be a behind-the-scenes look at a process that doesn t receive much attention yet is of critical importance to internet security For More Information Please Visit - http rvaseccom http://www.secuobs.com/revue/news/578871.shtmlhttp://www.secuobs.com/revue/news/578871.shtml 2015-07-30 12:18:16 - Security Bloggers Network : The vulnerability affects every DNS server online which uses the popular BIND protocol software http://www.secuobs.com/revue/news/578843.shtmlhttp://www.secuobs.com/revue/news/578843.shtml 2015-07-29 20:22:55 - Ars Technica Risk Assessment : Malformed video files can be used to crash half of all Android phones http://www.secuobs.com/revue/news/578790.shtmlhttp://www.secuobs.com/revue/news/578790.shtml 2015-07-29 13:53:12 - Security Bloggers Network : Apple has patched an application-side input validation web vulnerability in iTunes and the App Store that allowed attackers to inject malicious code into user invoices The vulnerability received a High severity level and a CVSS rating of 58 It allows for session hijacking, persistent phishing attacks, and other malicious activities Benjamin Kunz Mejri, a researcher Read More The post Apple Patches High Input Validation Vulnerability in iTunes, App Store appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/578711.shtmlhttp://www.secuobs.com/revue/news/578711.shtml 2015-07-29 11:26:39 - TrendLabs Security Intelligence Blog : We have discovered a vulnerability in Android that can render a phone apparently dead silent, unable to make calls, with a lifeless screen This vulnerability is present from Android 43 Jelly Bean up to the current version, Android 511 Lollipop Combined, these versions account for more than half of Android devices in use today No http://www.secuobs.com/revue/news/578699.shtmlhttp://www.secuobs.com/revue/news/578699.shtml 2015-07-29 02:24:21 - SecurityTube.Net : A fluid and effective Vulnerability Management Framework, a core pillar in most Enterprise Security Architectures ESA , remains a continual challenge to most organizations Ask any of the major breach targets of the past several years This talk applies the recent OWASP Application Security Verification Standard ASVS 2014 framework and applies it to Enterprise Vulnerability Management in an attempt to make a clearly complicated yet necessary part of your organization's ESA much more manageable, effective and efficient with feasible recommendations, based on your business' needs Rockie Brockway is the Information Security and Business Risk Director at Black Box Network Services and BSidesCleveland organizer With over two decades in InfoSec Risk, Rockie teams with clients to understand the value and location of business critical data in an effort to further enable organizational innovation and to protect the brand For More Information Please Visit - http wwwsecuritybsidescom w page 33949981 BSidesDetroit http wwwirongeekcom iphp page videos bsidesdetroit2015 mainlist http://www.secuobs.com/revue/news/578667.shtmlhttp://www.secuobs.com/revue/news/578667.shtml 2015-07-28 20:18:37 - LinuxSecurity.com Latest News : LinuxSecuritycom Arbor Networks' Sam Curry talks about disclosure, bounty programs, and vulnerability marketing with CSO, in the first of a series of topical discussions with industry leaders and experts http://www.secuobs.com/revue/news/578625.shtmlhttp://www.secuobs.com/revue/news/578625.shtml 2015-07-28 14:11:04 - Security Bloggers Network : The critical injection vulnerability potentially impacts millions of users http://www.secuobs.com/revue/news/578570.shtmlhttp://www.secuobs.com/revue/news/578570.shtml 2015-07-28 14:11:04 - Security Bloggers Network : The Stagefright vulnerability for Android phones is a bad one It's exploitable via a text message details depend on auto downloading of the particular phone , it runs at an elevated privilege again, the severity depends on the particular phone -- on http://www.secuobs.com/revue/news/578569.shtmlhttp://www.secuobs.com/revue/news/578569.shtml 2015-07-25 05:53:36 - Security Bloggers Network : Honestly, I've considered moving this blog away from Blogger many times, which it's hosted on, but it's constant Wordpress vulnerabilities, like these, that always dissuades me from moving forwardMaybe one day http://www.secuobs.com/revue/news/578345.shtmlhttp://www.secuobs.com/revue/news/578345.shtml 2015-07-24 18:20:43 - Ars Technica Risk Assessment : Uconnect bug can shut down engine and brakes, take over steering http://www.secuobs.com/revue/news/578298.shtmlhttp://www.secuobs.com/revue/news/578298.shtml 2015-07-23 15:40:58 - LinuxSecurity.com Latest News : LinuxSecuritycom Contrast Security's Jeff Williams talks about disclosure, bounty programs, and vulnerability marketing with CSO, in the first of a series of topical discussions with industry leaders and experts http://www.secuobs.com/revue/news/578123.shtmlhttp://www.secuobs.com/revue/news/578123.shtml 2015-07-22 19:26:16 - Security Bloggers Network : Apple fixed a serious vulnerability in the beta of OS X El Capitan, but hasn't issued a patch for OS X Yosemite users Should you be concerned that a security researcher has now published proof-of-concept exploit code Read more in my article on the In http://www.secuobs.com/revue/news/578008.shtmlhttp://www.secuobs.com/revue/news/578008.shtml 2015-07-22 13:11:29 - Security Bloggers Network : The flaw allows attackers to exploit a Mac system for full privilege escalation and take over a machine http://www.secuobs.com/revue/news/577946.shtmlhttp://www.secuobs.com/revue/news/577946.shtml 2015-07-21 18:29:53 - Symantec Connect Security Response Billets : Gravity of threat means Windows users should update operating system immediately IMAGE Read More http://www.secuobs.com/revue/news/577871.shtmlhttp://www.secuobs.com/revue/news/577871.shtml 2015-07-21 12:22:02 - Security Bloggers Network : Google believes the regulations will do little more than harm the bug bounty market and degrade the security industry as a whole http://www.secuobs.com/revue/news/577808.shtmlhttp://www.secuobs.com/revue/news/577808.shtml 2015-07-21 09:56:12 - Help Net Security : Virtualization is undoubtedly a great IT tool that enables organizations to quickly run new instances of servers and workstations, helps isolate environments, and allows for a more efficient use of th http://www.secuobs.com/revue/news/577795.shtmlhttp://www.secuobs.com/revue/news/577795.shtml 2015-07-21 06:24:40 - SecurityTube.Net : Here at Microsoft, our people often find security issues in other vendors' products, fueling the need for a coordinated approach to working with those vendors to get those bugs fixed Microsoft Vulnerability Research MSVR was created to help ensure that our company demonstrates the same management, in the role of a finder, that we'd like to see from other companies and researchers when reporting vulnerabilities MSVR has played an important role working with internal bug hunters to fix many vulnerabilities in top software during the lifetime of this proactive program After you know how we work, you how you can start a vulnerability coordination program at your company too Bio David Seidman is a Senior Security Program Manager Lead on the Microsoft Security Response Center team, where he manages Microsoft's response to normal and high-priority security incidents such as active attacks using an unpatched vulnerability Prior to working at the MSRC, David managed development of Microsoft Office security updates and service packs He holds a Bachelor's degree in Computer Science and a Master's in Cognitive and Neural Systems from Boston University When not putting out fires on the internet, David enjoys triathlon, mountain climbing, Brazilian jiu jitsu and brewing his own beer For More Information Please Visit - http codebluejp http://www.secuobs.com/revue/news/577780.shtmlhttp://www.secuobs.com/revue/news/577780.shtml 2015-07-20 23:52:57 - Ars Technica Risk Assessment : Technical details are public, making it likely bug will be actively exploited http://www.secuobs.com/revue/news/577744.shtmlhttp://www.secuobs.com/revue/news/577744.shtml 2015-07-20 23:18:35 - Security Bloggers Network : Today s VERT Alert addresses one new Out of Band Microsoft Security Bulletin VERT is actively working on coverage for these bulletins in order to meet our 24-hour SLA and expects to ship ASPL-624 on Tuesday, July 21st MS15-078 OpenType Font Driver Vulnerability CVE-2015-2426 MS15-078 Microsoft has released an OOB update to the Adobe Type Read More The post VERT Threat Alert for MS15-078 OpenType Font Driver Vulnerability CVE-2015-2426 appeared first on The State of Security IMAGE http://www.secuobs.com/revue/news/577742.shtmlhttp://www.secuobs.com/revue/news/577742.shtml 2015-07-20 18:17:53 - Security Bloggers Network : Sources say that a critical flaw in all supported versions of Windows will be patched today read more http://www.secuobs.com/revue/news/577706.shtmlhttp://www.secuobs.com/revue/news/577706.shtml 2015-07-20 15:27:26 - LinuxSecurity.com Latest News : LinuxSecuritycom Avecto's Andrew Avanessian talks about disclosure, bounty programs, and vulnerability marketing with CSO, in the first of a series of topical discussions with industry leaders and experts http://www.secuobs.com/revue/news/577668.shtmlhttp://www.secuobs.com/revue/news/577668.shtml 2015-07-19 16:31:48 - Hackaday : We re really happy to see companies getting serious about rewarding white hat hackers The latest example of this is when Jordan Wiens submitted two bugs and was awarded 1,000,000 Sky Miles on United Airlines The bounty is so high because he uncovered a method of remote code execution which United has since patched Unfortunately, United requires bug secrecy so we re not getting any of the gritty details like we have for some of the recently discovered Facebook vulnerabilities That s really too bad because sharing the knowledge about what went wrong helps programmers learn to avoid it in the future But read more http://www.secuobs.com/revue/news/577592.shtmlhttp://www.secuobs.com/revue/news/577592.shtml 2015-07-14 19:28:02 - Help Net Security : After analyzing the leaked data from last week's attack on Hacking Team, Vectra researchers discovered a previously unknown high severity vulnerability in Internet Explorer 11, which impacts a fully p http://www.secuobs.com/revue/news/577052.shtmlhttp://www.secuobs.com/revue/news/577052.shtml 2015-07-14 05:42:52 - Security Bloggers Network : duck-huntI know enough about regular expressions to do my job I m far from a regex guru though, and the more I learn, the more apparent the gaps in my knowledge become Until relatively recently, a specific source of frustration for Continue reading The post Vulnerability Hunting With Regular Expressions appeared first on AsTech Consulting http://www.secuobs.com/revue/news/576947.shtmlhttp://www.secuobs.com/revue/news/576947.shtml 2015-07-14 02:36:59 - Security Bloggers Network : With the leak of Hacking Team's data, the security industry came to learn about multiple new 0day vulnerabilities targeting Flash, Internet Explorer, Android, etc As always, exploit kit authors were quick to incorporate these 0day exploits into the http://www.secuobs.com/revue/news/576943.shtmlhttp://www.secuobs.com/revue/news/576943.shtml 2015-07-13 21:06:05 - Security Bloggers Network : http://www.secuobs.com/revue/news/576923.shtmlhttp://www.secuobs.com/revue/news/576923.shtml 2015-07-13 20:15:23 - Symantec Connect Security Response Billets : Vulnerability is reported to be exploitable by way of drive-by-download on the latest version of Java 18045 IMAGE Read More http://www.secuobs.com/revue/news/576914.shtmlhttp://www.secuobs.com/revue/news/576914.shtml