http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com ESRT @ChrisJohnRiley @r_netsec - 0day Full disclosure: American Express http://www.secuobs.com/twitter/news/255054.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#11120 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#11120 ESRT @RonGula - Very interesting article on CloudFlare and the Honeynet Project http://www.secuobs.com/twitter/news/253960.shtml http://www.secuobs.com/news/comments26012007-big-brother-awards-2006.shtml#11092 http://www.secuobs.com/news/comments26012007-big-brother-awards-2006.shtml#11092 ESRT @grecs @elinormills - Caller ID spoofing and automated credit card phone systems -- Privacy FAIL http://www.secuobs.com/twitter/news/240360.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#10602 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#10602 Stealing ATM PINs with thermal cameras http://www.secuobs.com/revue/news/323571.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#10543 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#10543 ESRT @vcuinfosec - Pwnie recipients were announced at Blackhat earlier today http://www.secuobs.com/twitter/news/235052.shtml http://www.secuobs.com/news/comments26012007-big-brother-awards-2006.shtml#10396 http://www.secuobs.com/news/comments26012007-big-brother-awards-2006.shtml#10396 ESRT @ITVulnerability - Turn Your Webcam Into a Credit Card Reader http://www.secuobs.com/twitter/news/231677.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#10279 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#10279 500k in bitcoins stolen But that s not the scary part. http://www.secuobs.com/revue/news/311636.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#9934 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#9934 ESRT @Hfuhs - PANBuster Cardholder Data Discovery Tool - Scan for unencrypted credit card numbers on your systems - PCI DSS http://www.secuobs.com/twitter/news/214533.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#9844 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#9844 Page-integrated encryption for protecting credit cards on the web http://www.secuobs.com/revue/news/301317.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#9485 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#9485 ESRT @hannibals @CoreSecurity - Pick an Access Point, Any AP: Assessing MiTM Threats Over WiFi - Core Security Blog http://www.secuobs.com/twitter/news/190980.shtml http://www.secuobs.com/news/comments16022010-core_impact_pro_support_metasploit.shtml#9277 http://www.secuobs.com/news/comments16022010-core_impact_pro_support_metasploit.shtml#9277 ESRT @ericfreyss - Ouverture du challenge SSTIC 2011 http://www.secuobs.com/twitter/news/187216.shtml http://www.secuobs.com/news/comments15102007-sstic2008.shtml#9179 http://www.secuobs.com/news/comments15102007-sstic2008.shtml#9179 RSA breach leaks data for hacking SecurID tokens http://www.secuobs.com/revue/news/292485.shtml http://www.secuobs.com/news/comments27112003rsa.html#9150 http://www.secuobs.com/news/comments27112003rsa.html#9150 ESRT @emiliengirault - Programme du SSTIC 2011 http://www.secuobs.com/twitter/news/173596.shtml http://www.secuobs.com/news/comments15102007-sstic2008.shtml#8887 http://www.secuobs.com/news/comments15102007-sstic2008.shtml#8887 Visa New Tools Could Spot Additional 1.5b dollars In Fraud http://www.secuobs.com/revue/news/276462.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#8561 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#8561 Why GSM-Based ATM Skimmers Rule http://www.secuobs.com/revue/news/271264.shtml http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#8331 http://www.secuobs.com/news/comments122032010-threatmetrix_anonymous_data_fraud.shtml#8331 ESRT @tricaud @commonism - carniwwwhore - a webif for the dionaea honeypots postgres db http://www.secuobs.com/twitter/news/146836.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#8181 http://www.secuobs.com/news/comments26032007-ghh.shtml#8181 ESRT @darkoperator - HoneyPoint: Honeypot for Windows, Linux or Mac http://www.secuobs.com/twitter/news/143472.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#8046 http://www.secuobs.com/news/comments26032007-ghh.shtml#8046 ZeuS Now Bypasses Two-Factor Authentication http://www.secuobs.com/revue/news/252805.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#7546 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#7546 listener 2.0.0 - This program listens for sound If it detects any, it starts recording automatically http://www.secuobs.com/news/comments26012007-big-brother-awards-2006.shtml#6982 http://www.secuobs.com/news/comments26012007-big-brother-awards-2006.shtml#6982 ESRT @Hacker breaks into ATMs, dispenses cash remotely http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6880 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6880 First embedded Linux OS to be accepted for EAL4+ certification http://www.secuobs.com/news/comments19112008-integrity178B_eal6_nsa_igs.shtml#6733 http://www.secuobs.com/news/comments19112008-integrity178B_eal6_nsa_igs.shtml#6733 ESRT @SecurityStream - ATM hack presentation ditched after legal threats http://www.secuobs.com/twitter/news/111576.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6676 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6676 Researcher to Release Hacker Footprint Tool http://www.secuobs.com/revue/news/234226.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6536 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6536 ESRT @sbrabez - SSTIC 2010 papers and slides http://www.secuobs.com/twitter/news/103311.shtml http://www.secuobs.com/news/comments15102007-sstic2008.shtml#6452 http://www.secuobs.com/news/comments15102007-sstic2008.shtml#6452 ESRT @TimelessP @MBenLakhoua - Visa website vulnerable to XSS http://www.secuobs.com/twitter/news/123093.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6271 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6271 Hackers penetrate Carder forum http://www.secuobs.com/revue/news/223700.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6234 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6234 a link out to a banking fraud case study http://www.secuobs.com/revue/news/223329.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6223 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6223 Hacker develops multi-platform rootkit for ATMs http://www.secuobs.com/revue/news/219342.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6078 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#6078 ESRT @winsec - IronKey launches secure online banking USB stick http://www.secuobs.com/twitter/news/88001.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#5958 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#5958 Challenge SSTIC 2010 http://communaute.sstic.org/ChallengeSSTIC2010 http://www.secuobs.com/news/comments15102007-sstic2008.shtml#5881 http://www.secuobs.com/news/comments15102007-sstic2008.shtml#5881 Binary Analysis Tool - a modular framework that assists with auditing the contents of compiled software http://www.secuobs.com/revue/news/213385.shtml http://www.secuobs.com/news/comments26012006-gpl_v3.shtml#5833 http://www.secuobs.com/news/comments26012006-gpl_v3.shtml#5833 ESRT @devilok - Visa's Keylogger Alert http://www.secuobs.com/twitter/news/78496.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#5609 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#5609 ESRT @halvarflake - Russia Arrests Alleged Mastermind of RBS WorldPay Hack http://www.secuobs.com/twitter/news/76052.shtml http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#5499 http://www.secuobs.com/news/comments22032010-threatmetrix_anonymous_data_fraud.shtml#5499 The Beginning of the End of Data Retention http://www.secuobs.com/revue/news/200478.shtml http://www.secuobs.com/news/comments05052006-cnil_data_retention.shtml#5370 http://www.secuobs.com/news/comments05052006-cnil_data_retention.shtml#5370 BITSTALKER - Accurately and effectively monitoring BitTorrent traffic http://www.secuobs.com/revue/news/199617.shtml http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#5320 http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#5320 ESRT @qualys - Core Security Technologies Completes Integration with Qualysguard PCI Connect http://www.secuobs.com/twitter/news/70252.shtml http://www.secuobs.com/news/comments16022010-core_impact_pro_support_metasploit.shtml#5286 http://www.secuobs.com/news/comments16022010-core_impact_pro_support_metasploit.shtml#5286 P2P Network Users Allow Access To Private Info http://www.secuobs.com/revue/news/189643.shtml http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#4930 http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#4930 BlackBerry Spyware Package Shown at Shmoocon http://www.secuobs.com/revue/news/189444.shtml http://www.secuobs.com/news/comments07112006-blackberry-bluetooth.shtml#4925 http://www.secuobs.com/news/comments07112006-blackberry-bluetooth.shtml#4925 ESRT @singe @moxie__ - GoogleSharing Firefox Extension, a free low-overhead anonymity system for Google http://www.secuobs.com/twitter/news/57754.shtml http://www.secuobs.com/news/comments23012006-google_fbi.shtml#4623 http://www.secuobs.com/news/comments23012006-google_fbi.shtml#4623 What does Detica detect? http://www.secuobs.com/revue/news/169698.shtml http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#4043 http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#4043 ESRT @DarkReading New Glastopf Honeypot Mimics The Web Vulnerabilities Attackers Want To Exploit http://www.secuobs.com/twitter/news/33781.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#3561 http://www.secuobs.com/news/comments26032007-ghh.shtml#3561 Web honeypot Update http://www.secuobs.com/revue/news/154168.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#3486 http://www.secuobs.com/news/comments26032007-ghh.shtml#3486 GFI launches beta of WebMonitor 2009 http://www.secuobs.com/revue/news/151142.shtml http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#3381 http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#3381 Computer Associates multiple products - Remote Code Execution http://www.secuobs.com/revue/news/150071.shtml http://www.secuobs.com/news/comments15062006-aol_totalcare.shtml#3348 http://www.secuobs.com/news/comments15062006-aol_totalcare.shtml#3348 MARIONETTE: Client Honeypot for Understanding Web-based Malware Infection http://jwis2009.nsysu.edu.tw/location/paper/MARIONETTE%20Client%20Honeypot%20for%20Investigating%20and%20UnderstandingWeb-based%20Malware%20Infection%20on%20ImplicatedWebsites.pdf http://www.secuobs.com/news/comments26032007-ghh.shtml#2892 http://www.secuobs.com/news/comments26032007-ghh.shtml#2892 WASC Distributed Open Proxy Honeypot Update XSS in User-Agent Field http://www.secuobs.com/revue/news/132170.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#2815 http://www.secuobs.com/news/comments26032007-ghh.shtml#2815 ESRT @selenakyle PayPal/Verisign Sec Key with OpenID for 2-Factor Authentication http://www.secuobs.com/twitter/news/15137.shtml http://www.secuobs.com/news/comments20022007-paypal_cle.shtml#2656 http://www.secuobs.com/news/comments20022007-paypal_cle.shtml#2656 WASC Honeypot Opens Up With Open Source http://www.secuobs.com/revue/news/126077.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#2500 http://www.secuobs.com/news/comments26032007-ghh.shtml#2500 ESRT @waschoneypots WASC Distributed Open Proxy Honeypot Project back online for phase III http://www.secuobs.com/twitter/news/8976.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#2372 http://www.secuobs.com/news/comments26032007-ghh.shtml#2372 Vidéo : OWASP 2009 Google Hacking Project Christian Heinrich http://secuobs.com/videos/news/6837.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#2028 http://www.secuobs.com/news/comments26032007-ghh.shtml#2028 Hardened OS Vendor Builds Secure Virtual Layer For Network Devices http://www.secuobs.com/revue/news/100406.shtml http://www.secuobs.com/news/comments19112008-integrity178B_eal6_nsa_igs.shtml#1572 http://www.secuobs.com/news/comments19112008-integrity178B_eal6_nsa_igs.shtml#1572 Paid Twitter services coming by year's end http://www.secuobs.com/revue/news/98288.shtml http://www.secuobs.com/news/comments20022007-paypal_cle.shtml#1527 http://www.secuobs.com/news/comments20022007-paypal_cle.shtml#1527 Paypal XSS -iframe Injection redirect http://www.secuobs.com/revue/news/95090.shtml http://www.secuobs.com/news/comments20022007-paypal_cle.shtml#1434 http://www.secuobs.com/news/comments20022007-paypal_cle.shtml#1434 Europe funds secure operating system research http://www.secuobs.com/revue/news/88813.shtml http://www.secuobs.com/news/comments19112008-integrity178B_eal6_nsa_igs.shtml#1236 http://www.secuobs.com/news/comments19112008-integrity178B_eal6_nsa_igs.shtml#1236 Free Full-featured GFI LANguard for 5 IP http://www.secuobs.com/revue/news/85306.shtml http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#1128 http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#1128 Imperva Video Phone Journals: Google Hacking http://www.secuobs.com/revue/news/80903.shtml http://www.secuobs.com/news/comments26032007-ghh.shtml#974 http://www.secuobs.com/news/comments26032007-ghh.shtml#974 Forescout CounterACT disables Peer-to-Peer program sharing to protect against Cyber theft http://www.secuobs.com/revue/news/66856.shtml http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#629 http://www.secuobs.com/news/comments01122008-gfi_languard_scanner_p2p.shtml#629 j'utilise un certificat Rapid SSL depuis 2 ans et j'en suis content cependant je vous conseille le Rapid SSL PRO avec la réémission gratuite si vous êtes un peu étourdi avec les mots de passe ;) http://www.secuobs.com/news/comments21012008-secuobs_ssl247.shtml#212 http://www.secuobs.com/news/comments21012008-secuobs_ssl247.shtml#212 Merci pour ce lien, je ne connaissais pas ce prestataire! Ils ont une gamme très large et les prix des RapidSSL et QuickSSL sont tout à fait raisonnables avec un niveau de support en français (ca change...)très bon! http://www.secuobs.com/news/comments21012008-secuobs_ssl247.shtml#211 http://www.secuobs.com/news/comments21012008-secuobs_ssl247.shtml#211