http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com New Google Chrome v4.1.249.1036 released, fixes multiple security vulnerabilities. http://www.secuobs.com/revue/news/203158.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5447 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5447 How your email gets hacked http://www.secuobs.com/revue/news/201561.shtml http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#5405 http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#5405 A vulnerability in Apple Safari, caused by an integer overflow error in ColorSync when processing certains images http://www.secuobs.com/revue/news/201270.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5383 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5383 ESRT @dragosr - Ordered a proxmark3 RFID research tool http://www.secuobs.com/twitter/news/70018.shtml http://www.secuobs.com/news/comments303112008-hack-lu-rfidiot.shtml#5277 http://www.secuobs.com/news/comments303112008-hack-lu-rfidiot.shtml#5277 Opera 10.50 integer overflow http://www.secuobs.com/revue/news/197734.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5274 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5274 Google Gears for Attackers, Data Theft and Backdoor Placement http://www.secuobs.com/revue/news/197795.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5270 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5270 Hacker Report 'High Risk' Flaws in Safari Browser http://www.secuobs.com/revue/news/196714.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5251 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5251 BinNavi 3.0 Feature Preview http://www.secuobs.com/revue/news/196519.shtml http://www.secuobs.com/news/comments117112008-vxclass_isomorphisme_graphique.shtml#5244 http://www.secuobs.com/news/comments117112008-vxclass_isomorphisme_graphique.shtml#5244 Decomposing Memory Dumps via DumpFilter http://www.secuobs.com/revue/news/196208.shtml http://www.secuobs.com/news/comments13112008-windows_memory_live_forensic.shtml#5239 http://www.secuobs.com/news/comments13112008-windows_memory_live_forensic.shtml#5239 Browser history hijack social networks lost anonymity http://www.secuobs.com/revue/news/195334.shtml http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#5196 http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#5196 Mozilla Firefox v3.6 URL Spoofing Vulnerability http://www.secuobs.com/revue/news/195055.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5194 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5194 UPDATE Social Engineer Toolkit v0.4.1 http://www.secuobs.com/revue/news/195042.shtml http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#5191 http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#5191 BLADE Free Blocking Tool to Thwart Drive-By Downloads http://www.secuobs.com/revue/news/194322.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5177 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5177 ESRT @alexandrosilva @ethicalhack3r - Exploit the User with SET - The Social Engineering Toolkit 0.4 http://www.secuobs.com/twitter/news/67392.shtml http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#5162 http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#5162 ESRT @xanda - Firefox 3.6 0day - trying to find more info and more 0day http://www.secuobs.com/twitter/news/66979.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5145 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5145 Classification and Detection of Metamorphic Malware using Value Set Analysis http://www.secuobs.com/revue/news/193565.shtml http://www.secuobs.com/news/comments117112008-vxclass_isomorphisme_graphique.shtml#5144 http://www.secuobs.com/news/comments117112008-vxclass_isomorphisme_graphique.shtml#5144 IBM releases a web activity scripting tool http://www.secuobs.com/revue/news/193386.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5135 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5135 Man in the Browser http://www.secuobs.com/revue/news/193366.shtml http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5134 http://www.secuobs.com/news/comments1114112008-browser_rootkit.shtml#5134 Attack code for Firefox zero-day flaw released http://www.secuobs.com/revue/news/193394.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5131 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5131 Automating AV signature generation http://www.secuobs.com/revue/news/193147.shtml http://www.secuobs.com/news/comments117112008-vxclass_isomorphisme_graphique.shtml#5121 http://www.secuobs.com/news/comments117112008-vxclass_isomorphisme_graphique.shtml#5121 Mozilla patches critical Firefox bugs http://www.secuobs.com/revue/news/193048.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5117 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5117 Chrome Password Manager Cross Origin Weakness http://www.secuobs.com/secumail/btsecumail/msg18521.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5091 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5091 Browser address bar characters into a small feature http://www.secuobs.com/revue/news/191633.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5046 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5046 Chromium Browser Remixed As A Security Dragon http://www.secuobs.com/revue/news/191578.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5040 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5040 ESRT @xanda - Block JavaScript in Google Chrome NoScript’s features in Chrome http://www.secuobs.com/twitter/news/64836.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5023 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5023 Google Chrome Updated for Six Security Flaws http://www.secuobs.com/revue/news/191013.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5011 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5011 Mozilla admits Firefox add-on false alarm http://www.secuobs.com/revue/news/190703.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5001 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#5001 Firefox extension installation process vulnerable to MITM attack http://www.secuobs.com/revue/news/190115.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#4961 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#4961 Mozilla Removes Two Malicious Firefox Add-Ons http://www.secuobs.com/revue/news/189725.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#4935 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#4935 Releases.mozilla.org SSL and Update Fail http://www.secuobs.com/revue/news/188602.shtml http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#4885 http://www.secuobs.com/news/comments1014112008-browser_rootkit.shtml#4885 Interpreter Exploitation Pointer Inference and JIT Spraying http://www.secuobs.com/revue/news/188400.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4858 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4858 Acunetix WVS v6.5 build 20100203 released http://www.secuobs.com/revue/news/188110.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4840 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4840 ESRT @ChrisJohnRiley @dave_rel1k: SET v0.4 released exclusively on BT4 during my ShmooCon talk on Friday http://www.secuobs.com/twitter/news/61652.shtml http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#4835 http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#4835 FireFoxForensics v1.0.3 http://www.secuobs.com/revue/news/188046.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4831 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4831 Automated signature generation for malware http://www.secuobs.com/revue/news/187876.shtml http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4826 http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4826 FireFoxForensics v1.0.2 http://www.secuobs.com/revue/news/187874.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4822 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4822 FireFoxForensics v1.0.1 http://www.secuobs.com/revue/news/187812.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4820 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4820 Browser exploit kit probe highlights need for patching, vigilance http://www.secuobs.com/revue/news/187346.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4799 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4799 From disassembly to isolating important functions in less than four minutes http://www.secuobs.com/revue/news/187212.shtml http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4782 http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4782 FireFoxForensics v1.0.0 http://www.secuobs.com/revue/news/186774.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4751 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4751 Classification of Malware Using Structured Control Flow http://www.secuobs.com/revue/news/186504.shtml http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4745 http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4745 ESRT @dragosr - RFID passport replay attack http://www.secuobs.com/twitter/news/60115.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#4743 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#4743 ESRT @jeremiahg - Chrome anti-ClickJacking X-Frame-Options, Reflective XSS Protection (ie XSSFilter), Origin header http://www.secuobs.com/twitter/news/60079.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4738 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4738 ESRT @jeremiahg - Google is now paying for Chromium high severity 0-days Between $500 and $1337 http://www.secuobs.com/twitter/news/60080.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4737 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4737 Two methodologies for physical penetration testing using social engineering http://www.secuobs.com/revue/news/186325.shtml http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#4734 http://www.secuobs.com/news/comments04112008-reseaux-sociaux-hack-lu.shtml#4734 Panopticlick - Tracking Browsers Without Cookies Or IP Addresses http://www.secuobs.com/revue/news/185965.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4715 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4715 JavaScript Embedded in Homepage Links in Firefox http://www.secuobs.com/revue/news/185940.shtml http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4714 http://www.secuobs.com/news/comments914112008-browser_rootkit.shtml#4714 Quicky Firefox Bookmarklet Backdoor http://www.secuobs.com/revue/news/185565.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4704 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4704 Google patches 13 Chrome bugs, adds extensions to Windows http://www.secuobs.com/revue/news/185252.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4680 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4680 Code coverage and BinNavi http://www.secuobs.com/revue/news/185045.shtml http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4678 http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4678 Opera 10.10 XML parser Denial of Service PoC http://www.secuobs.com/revue/news/184962.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4675 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4675 Apple Safari Stylesheet Redirection vulnerability http://www.secuobs.com/revue/news/185028.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4674 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4674 Firefox 36 XML parser Memory Corruption PoC DoS http://www.secuobs.com/revue/news/184893.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4666 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4666 Getting Started with Savarin, a free online malware classification service http://www.secuobs.com/revue/news/183599.shtml http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4604 http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4604 BinNavi 3.0 Preview - Improved Differential Debugging http://www.secuobs.com/revue/news/183591.shtml http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4602 http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4602 OAuth and OAuth WRAP defeating the password anti-pattern http://www.secuobs.com/revue/news/183249.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4580 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4580 Cross Site Identification (CSID) attack. Description and demonstration. http://www.secuobs.com/secumail/btsecumail/msg18169.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4471 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4471 firefoxsessionstoreextractor v1.0.2 http://www.secuobs.com/revue/news/180672.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4441 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4441 Savarin -- a free online malware classification service http://www.secuobs.com/revue/news/179084.shtml http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4381 http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#4381 Firefox security and stability update for version 3.5.7 and 3.0.17 available for download http://www.secuobs.com/revue/news/178644.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4365 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4365 Video : MiTM Javascript Keylogger, Social Engineering Toolkit and More - @Hak5 http://www.secuobs.com/revue/news/178686.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4364 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4364 RFID emulator http://www.secuobs.com/revue/news/177680.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#4322 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#4322 Google Chrome WebKit - MSWord Scripting Object Payload Execution Bug and Random CLSID Stringency http://www.secuobs.com/revue/news/176084.shtml http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4261 http://www.secuobs.com/news/comments814112008-browser_rootkit.shtml#4261 ESRT @rtls - Rfiddler: Weapon of Mass RFID Tag Destruction, modded Nerf gun a Nerf N-Strike Recon CS-6 http://www.secuobs.com/twitter/news/49660.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#4230 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#4230 FRHACK 01 Free DVDs and Videos available http://www.secuobs.com/revue/news/174282.shtml http://www.secuobs.com/news/comments26082005-wth05.shtml#4198 http://www.secuobs.com/news/comments26082005-wth05.shtml#4198 Mozilla Firefox Location Bar Spoofing Vulnerability http://www.secuobs.com/revue/news/174050.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4190 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4190 Mozilla Patches 7 Firefox Flaws, Bugs http://www.secuobs.com/revue/news/172803.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4157 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4157 ESRT @jaysonstreet @rfidiot : RFIDIOt 1.0b-beta, support for latest libnfc devices http://www.secuobs.com/twitter/news/46836.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#4111 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#4111 Groundspeed v1.0.1 in the wild http://www.secuobs.com/revue/news/171136.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4097 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4097 Why Chrome has No NoScript http://www.secuobs.com/revue/news/170626.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4078 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4078 ESRT @singe - Trying out SRWare's Iron for Linux, It's Chrome, but with the privacy invasion removed http://www.secuobs.com/twitter/news/45897.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4076 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4076 Coming soon -- FBConTroller version 3.0 http://www.secuobs.com/revue/news/170364.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4067 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4067 Mozilla Firefox, spoofing and race conditions related to JavaScript http://www.secuobs.com/revue/news/169476.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4037 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#4037 Standardized Filesystem Access from JavaScript http://www.secuobs.com/revue/news/167500.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#3965 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#3965 ESRT @ChrisJohnRiley @rfidiot : new RFIDIOt release posted ver 1.0a Focus on Mifare and started integrating libnfc http://www.secuobs.com/twitter/news/42403.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3930 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3930 Opera patches 'extremely severe' security hole http://www.secuobs.com/revue/news/164299.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#3869 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#3869 ESRT @helpnetsecurity Zero-day vulnerabilities in Firefox extensions discovered http://www.secuobs.com/twitter/news/39887.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#3837 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#3837 Inside the Google Chrome OS security mode http://www.secuobs.com/revue/news/163132.shtml http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#3815 http://www.secuobs.com/news/comments714112008-browser_rootkit.shtml#3815 Microsoft finds security hole in Google Chrome Frame http://www.secuobs.com/revue/news/163133.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3814 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3814 Vulnerability in Wikipedia Toolbar for Firefox http://www.secuobs.com/revue/news/162337.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3779 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3779 Microsoft Orders Removal Of Blog About Bing Cashback Flaw http://www.secuobs.com/revue/news/160081.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3713 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3713 Video : Xdoor Ajax based Backdoor http://www.secuobs.com/revue/news/159716.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3706 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3706 ESRT @xme @adulau: More slides added to the hack.lu 2009 archive http://www.secuobs.com/twitter/news/34949.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3613 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3613 ESRT @thierryzoller - Hack.lu 2009 slides http://www.secuobs.com/twitter/news/34100.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3573 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3573 Mozilla Firefox GIF Color Map Parsing Buffer Overflow Vulnerability http://www.secuobs.com/revue/news/155001.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3537 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3537 Mozilla Firefox Floating Point Memory Allocation Vulnerability http://www.secuobs.com/secumail/btsecumail/msg17528.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3530 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3530 PoC : Hijacking Opera's Native Page using malicious RSS payloads http://securethoughts.com/security/rssatomxss/opera10exploit2.atom http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3529 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3529 ESRT @rtls Pramari Launches Free Open-Source RFID Middleware, Rifidi http://www.secuobs.com/twitter/news/33240.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3527 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3527 Using Silverlight to Access WIF secured WCF Services http://www.secuobs.com/revue/news/154819.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3525 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3525 YARA 1.3 released, malware classification tool http://www.secuobs.com/revue/news/154138.shtml http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#3487 http://www.secuobs.com/news/comments17112008-vxclass_isomorphisme_graphique.shtml#3487 Microsoft NET Plug-In Exposes Firefox Users to Malware Attacks http://www.secuobs.com/revue/news/151265.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3382 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3382 PoC memory corruption with Adobe objects loading unloading through an EMBED tag in Firefox http://www.secuobs.com/revue/news/150984.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3368 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3368 Microsoft Internet Explorer security flaw affects Firefox browser, CVE-2009-2529 http://www.secuobs.com/revue/news/150486.shtml http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3361 http://www.secuobs.com/news/comments614112008-browser_rootkit.shtml#3361 Firefox, Memory corruption when loading unloading Adobe objects through EMBED tag http://www.secuobs.com/revue/news/150114.shtml http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3344 http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3344 Video : Adam Laurie: RFIDIOts! How to read and clone an ePassport http://www.secuobs.com/videos/news/9618.shtml http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3216 http://www.secuobs.com/news/comments203112008-hack-lu-rfidiot.shtml#3216 ESRT @tqbf Chris Rohlf on using Ruby and Win32OLE to fuzz COM and ActiveX objects http://www.secuobs.com/twitter/news/26656.shtml http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3214 http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3214 W32 Rustock.F, a quite unknown Rustock.C dropper http://www.secuobs.com/revue/news/145658.shtml http://www.secuobs.com/news/comments05112008-hack-lu-rustock.shtml#3208 http://www.secuobs.com/news/comments05112008-hack-lu-rustock.shtml#3208 Chrome Plugins Chrome Memory Exhaustion DoS Vulnerability http://www.secuobs.com/revue/news/145018.shtml http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3191 http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3191 Video : ESRT @SecurityTube.Net Script Fragmentation A new Web Attack Vector Brucon 2009 http://www.secuobs.com/revue/news/144662.shtml http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3169 http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3169 Mozilla Firefox = 3.0.13 denial of service exploit the pkcs11addmodule vulnerability http://www.secuobs.com/revue/news/142992.shtml http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3089 http://www.secuobs.com/news/comments514112008-browser_rootkit.shtml#3089