http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2012-10-05 13:59:56 - cesarcer : RT @estemf: 5 new security advisories published at http://tco/YlAJn8gY affecting Sybase ASE, IBM DB2 and Oracle EMhttp://www.secuobs.com/twitter/news/348449.shtmlhttp://www.secuobs.com/twitter/news/348449.shtml Secuobs.com : 2012-10-04 09:27:02 - cesarcer - RT @dangoodin001: DDoS attacks on major US banks are no Stuxnet—here's why: http://tco/1DCE7KMmhttp://www.secuobs.com/twitter/news/348163.shtmlhttp://www.secuobs.com/twitter/news/348163.shtml Secuobs.com : 2012-09-28 23:34:24 - cesarcer - RT @i0n1c: If there is ever a 0-day regulation in europe it must be ensured that sweden is not allowed to pay with IKEA kitchenshttp://www.secuobs.com/twitter/news/346864.shtmlhttp://www.secuobs.com/twitter/news/346864.shtml Secuobs.com : 2012-09-27 18:18:03 - cesarcer - RT @VUPEN: We found a Win7 0day that transforms almost any IE vuln into a sophisticated ASLR/DEP bypass without using any Leak/ROP/Plugi http://www.secuobs.com/twitter/news/346451.shtmlhttp://www.secuobs.com/twitter/news/346451.shtml Secuobs.com : 2012-09-18 21:28:13 - cesarcer - RT @holesec: “@fjserna: IE 0day and EMET in one of the main spanish newspapers http://tco/iu2OFYbh Cool for the EMET mention not the http://www.secuobs.com/twitter/news/344911.shtmlhttp://www.secuobs.com/twitter/news/344911.shtml Secuobs.com : 2012-09-17 23:12:09 - cesarcer - @ryanaraine big cash could be needed for the 0days the rest it's just software and shouldn't be more expensive than regular softwarehttp://www.secuobs.com/twitter/news/344630.shtmlhttp://www.secuobs.com/twitter/news/344630.shtml Secuobs.com : 2012-09-17 23:12:09 - cesarcer - RT @VUPEN: IE 0day in the wild targets IE 8-7 on XP while the flaw exists in = IE9 on all Win AntiVirus are useless as usual with a http://www.secuobs.com/twitter/news/344629.shtmlhttp://www.secuobs.com/twitter/news/344629.shtml Secuobs.com : 2012-09-15 13:48:57 - cesarcer - @RolfRolles ir 0days are solely to hack then we could say knives are solely to cut, then the question could be what do you hack or cuthttp://www.secuobs.com/twitter/news/344165.shtmlhttp://www.secuobs.com/twitter/news/344165.shtml Secuobs.com : 2012-09-15 03:38:46 - cesarcer - Being against 0days because gov use them for surveillance is like being against knives because people use them to stabhttp://www.secuobs.com/twitter/news/344081.shtmlhttp://www.secuobs.com/twitter/news/344081.shtml Secuobs.com : 2012-09-07 20:11:47 - cesarcer - RT @8dot8: #Charlas8dot8 Explotación Fácil de Vulnerabilidades en Kernel de Windows por @cesarcer Argentinahttp://www.secuobs.com/twitter/news/342042.shtmlhttp://www.secuobs.com/twitter/news/342042.shtml Secuobs.com : 2012-09-06 20:51:50 - cesarcer - umm how I disable Java in my smart TV, blue-ray player, toaster etc etc #1TrillonDevicesRunJavahttp://www.secuobs.com/twitter/news/341529.shtmlhttp://www.secuobs.com/twitter/news/341529.shtml Secuobs.com : 2012-09-06 20:51:50 - cesarcer - New Attack Uses SSL/TLS Information Leak to Hijack HTTPS Sessions http://tco/1cJP4e2h great work by @julianor and Thai Duonghttp://www.secuobs.com/twitter/news/341528.shtmlhttp://www.secuobs.com/twitter/news/341528.shtml Secuobs.com : 2012-09-06 20:51:50 - cesarcer - RT @ekoparty: En la #ekoparty: New Attack Uses SSL/TLS Information Leak to Hijack HTTPS Sessions via @threatpost por @julianor y @ http://www.secuobs.com/twitter/news/341527.shtmlhttp://www.secuobs.com/twitter/news/341527.shtml Secuobs.com : 2012-08-10 11:12:45 - cesarcer - so it was a Gauss module which played AC/DC Thunderstruck I bet that's the mystery payload try to decrypt it using Angus Young as a keyhttp://www.secuobs.com/twitter/news/339404.shtmlhttp://www.secuobs.com/twitter/news/339404.shtml Secuobs.com : 2012-08-09 10:27:06 - cesarcer - @hdmoore @cBekrar it doesn't help much defense if exploits are modified, sometimes just changing a bit in payload make some defense uselesshttp://www.secuobs.com/twitter/news/339181.shtmlhttp://www.secuobs.com/twitter/news/339181.shtml Secuobs.com : 2012-08-09 10:27:06 - cesarcer - Impressions from Black Hat, Defcon, BSidesLV and IOAsis http://tco/YO9ZOKeOhttp://www.secuobs.com/twitter/news/339180.shtmlhttp://www.secuobs.com/twitter/news/339180.shtml Secuobs.com : 2012-08-02 10:52:44 - cesarcer - @mkolsek it's related with certificates handled by some ActiveX component, don't have time to check if it could work without disablinghttp://www.secuobs.com/twitter/news/337616.shtmlhttp://www.secuobs.com/twitter/news/337616.shtml Secuobs.com : 2012-08-02 10:52:44 - cesarcer - @mkolsek ActiveX was already properly installed, it was more a problem with ActiveX own functionalityhttp://www.secuobs.com/twitter/news/337615.shtmlhttp://www.secuobs.com/twitter/news/337615.shtml Secuobs.com : 2012-07-21 11:03:29 - cesarcer - RT @thegrugq: #BarCon is brought to you by IOActive, w/ support from COSEINC, Sensepost 0day ok, technically, on http://www.secuobs.com/twitter/news/335196.shtmlhttp://www.secuobs.com/twitter/news/335196.shtml Secuobs.com : 2012-07-20 15:20:14 - cesarcer - RT @thegrugq: There are more speaking slots at BlackHat than attendee slots at #BarCon ergo, going to #BarCon is more elite than speakin http://www.secuobs.com/twitter/news/334982.shtmlhttp://www.secuobs.com/twitter/news/334982.shtml Secuobs.com : 2012-07-16 03:45:02 - cesarcer - RT @ryanaraine: Tired of being everyone's IT guy Relief on a USB stick http://tco/QeHUvLxf new project by ex-zdi guys @pedramamini an http://www.secuobs.com/twitter/news/333421.shtmlhttp://www.secuobs.com/twitter/news/333421.shtml Secuobs.com : 2012-07-11 08:23:29 - cesarcer - RT @reversemode: After reading the news I can confirm that flame used stuxnet to break Microsoft's MD5 algorithm through a backdoored ch http://www.secuobs.com/twitter/news/332752.shtmlhttp://www.secuobs.com/twitter/news/332752.shtml Secuobs.com : 2012-07-07 16:38:50 - cesarcer - RT @BlackHatEvents New video promoting the Digital Intelligence Gathering Using Maltego training class by @Paterva at #BlackHathttp://www.secuobs.com/twitter/news/332300.shtmlhttp://www.secuobs.com/twitter/news/332300.shtml Secuobs.com : 2012-06-26 19:13:20 - cesarcer - RT @Hfuhs GameOver: A Web PenTest Learning Platform - http://tco/wtLdjGzbhttp://www.secuobs.com/twitter/news/330386.shtmlhttp://www.secuobs.com/twitter/news/330386.shtml Secuobs.com : 2012-06-20 21:18:30 - cesarcer - @ryanaraine I remember being attacked twice with Yahoo email 0days long time agohttp://www.secuobs.com/twitter/news/328938.shtmlhttp://www.secuobs.com/twitter/news/328938.shtml Secuobs.com : 2012-06-20 03:37:47 - cesarcer - RT @BlackHatEvents The #BlackHat USA 2012 briefings feature 36 Tools, 17 zero-days, and 49 live onstage demos Register now-17 0dayshttp://www.secuobs.com/twitter/news/328765.shtmlhttp://www.secuobs.com/twitter/news/328765.shtml Secuobs.com : 2012-06-16 16:35:36 - cesarcer - Spear phishing attacks targeting US defense contractors, universities and security companies http://tco/JyzDRlbg by @reversemodehttp://www.secuobs.com/twitter/news/328145.shtmlhttp://www.secuobs.com/twitter/news/328145.shtml Secuobs.com : 2012-06-16 16:35:36 - cesarcer - RT @BillBrenner70: New spear phishing campaign targets universities, government contractors and security companies http://tco/skqhdsxu http://www.secuobs.com/twitter/news/328144.shtmlhttp://www.secuobs.com/twitter/news/328144.shtml Secuobs.com : 2012-06-16 16:35:36 - cesarcer - RT @SecureSun: Spear phishing attacks targeting US defense contractors, universities sec companies http://tco/lcx1SCVo by @revers http://www.secuobs.com/twitter/news/328143.shtmlhttp://www.secuobs.com/twitter/news/328143.shtml Secuobs.com : 2012-06-10 10:38:14 - cesarcer - RT @nicowaisman: I wonder with this new MD5 collision technique we could change the USCYBERCOM mission statement ; http://tco/b7mRY9yf http://www.secuobs.com/twitter/news/326512.shtmlhttp://www.secuobs.com/twitter/news/326512.shtml Secuobs.com : 2012-06-08 08:33:58 - cesarcer - RT @ryanaraine Flame attackers had Windows 'god mode' cheat code better than 0day http://tco/TWQz7fIMhttp://www.secuobs.com/twitter/news/326038.shtmlhttp://www.secuobs.com/twitter/news/326038.shtml Secuobs.com : 2012-05-25 18:18:43 - cesarcer - @briankrebs DDoS attack I guess if you acknowledge it then it's worse better to ignore ithttp://www.secuobs.com/twitter/news/323309.shtmlhttp://www.secuobs.com/twitter/news/323309.shtml Secuobs.com : 2012-05-22 07:19:04 - cesarcer - RT @jeremiahg Google Chrome overtakes Internet Explorer as the Web’s most used browserhttp://www.secuobs.com/twitter/news/322173.shtmlhttp://www.secuobs.com/twitter/news/322173.shtml Secuobs.com : 2012-03-09 23:14:16 - cesarcer - Chrome Owned by Exploits in Hacker Contests, But Google’s $1M Purse Still Safe http://tco/3EDuzSjv -Google should buy Vupen serviceshttp://www.secuobs.com/twitter/news/301832.shtmlhttp://www.secuobs.com/twitter/news/301832.shtml Secuobs.com : 2012-03-09 23:14:16 - cesarcer - RT @hannibals: I'm releasing Heappie A tool to graphically represent heap sprays and calculate intersections http://tco/vV6lDpIr htt http://www.secuobs.com/twitter/news/301831.shtmlhttp://www.secuobs.com/twitter/news/301831.shtml Secuobs.com : 2012-03-09 02:40:54 - cesarcer - RT @ryanaraine Pwn2Own 2012: IE 9 hacked with two 0day vulnerabilities My story here http://tco/0jR2SGKb -good marketing move by Vupenhttp://www.secuobs.com/twitter/news/301502.shtmlhttp://www.secuobs.com/twitter/news/301502.shtml Secuobs.com : 2012-02-29 19:12:15 - cesarcer - RT @cBekrar: 0days ready for #pwn2own, I ask vendors to not waste time in trying to release a last minute patch, we'll update our codes http://www.secuobs.com/twitter/news/298763.shtmlhttp://www.secuobs.com/twitter/news/298763.shtml Secuobs.com : 2012-02-28 16:22:25 - cesarcer - RT @dangoodin001: Google offers a jaw-dropping $1 million in prizes to hackers who successfully exploit its Chrome browser: http://tco/ http://www.secuobs.com/twitter/news/298254.shtmlhttp://www.secuobs.com/twitter/news/298254.shtml Secuobs.com : 2012-02-22 23:17:27 - cesarcer - Disclosure Clouded By Obscurity http://tco/uZXZ8wen -another page in responsible disclosure debatehttp://www.secuobs.com/twitter/news/296439.shtmlhttp://www.secuobs.com/twitter/news/296439.shtml Secuobs.com : 2012-02-16 21:16:41 - cesarcer - RT @santaragolabs: Put the shoddy code online of my SSL Traffic Analysis for GMaps poc: http://tco/jQ4AooSv Warranty not included :http://www.secuobs.com/twitter/news/294794.shtmlhttp://www.secuobs.com/twitter/news/294794.shtml Secuobs.com : 2012-02-16 06:20:22 - cesarcer - RT @briankrebs Oracle slipped in some Valentine's Day love too, with a patch that plugs 14 security holes in Java http://tco/RvVRYNt6http://www.secuobs.com/twitter/news/294578.shtmlhttp://www.secuobs.com/twitter/news/294578.shtml Secuobs.com : 2012-02-14 19:45:57 - cesarcer - @fjserna it seems there is still a lot of fish in Windows kernel but @kernelpool is fishing all of them :http://www.secuobs.com/twitter/news/293902.shtmlhttp://www.secuobs.com/twitter/news/293902.shtml Secuobs.com : 2012-02-09 18:50:41 - cesarcer - Don't miss this I can still see your actions on Google Maps over SSL http://tco/a7xnAtV2 excellent blog post by Vincent Berghttp://www.secuobs.com/twitter/news/292467.shtmlhttp://www.secuobs.com/twitter/news/292467.shtml Secuobs.com : 2012-02-09 18:50:41 - cesarcer - Shodan: 1,054 web cameras http://tco/WT8TEqJG Nicehttp://www.secuobs.com/twitter/news/292466.shtmlhttp://www.secuobs.com/twitter/news/292466.shtml Secuobs.com : 2012-02-09 05:11:47 - cesarcer - RT @dangoodin001 Critics slam SSL authority Trustwave for minting MITM certificate used to impersonate legitimate sites http://tco/UyhaFLnzhttp://www.secuobs.com/twitter/news/292312.shtmlhttp://www.secuobs.com/twitter/news/292312.shtml Secuobs.com : 2012-02-08 22:07:54 - cesarcer - I can still see your actions on Google Maps over SSL http://tco/a7xnAtV2 excellent blog post by Vincent Berghttp://www.secuobs.com/twitter/news/292138.shtmlhttp://www.secuobs.com/twitter/news/292138.shtml Secuobs.com : 2012-01-25 23:48:33 - cesarcer - RT @IOActive: Don't miss Robert Zigweid's presentation: Security in the Cloud TONIGHT at OWASP LA Website for more info: https://tco/X http://www.secuobs.com/twitter/news/287623.shtmlhttp://www.secuobs.com/twitter/news/287623.shtml Secuobs.com : 2012-01-23 20:16:45 - cesarcer - RT @DarkOperator Ryan Naraine on the Koobface Expose and SCADA 0-Day Disclosures http://tco/vkRwtftohttp://www.secuobs.com/twitter/news/286697.shtmlhttp://www.secuobs.com/twitter/news/286697.shtml Secuobs.com : 2012-01-19 21:03:42 - cesarcer - RT @EChavarro: “@aramosf: Microsoft Anti-XSS Library Bypass MS12-007: http://tco/wL4stpqJ”http://www.secuobs.com/twitter/news/285523.shtmlhttp://www.secuobs.com/twitter/news/285523.shtml Secuobs.com : 2012-01-19 21:03:42 - cesarcer - RT @InfiltrateCon: RT @daveaitel: Last day of #infiltrate2012 : Kostya incorporated @cesarcer kernel techniques into the kernel overflo http://www.secuobs.com/twitter/news/285522.shtmlhttp://www.secuobs.com/twitter/news/285522.shtml Secuobs.com : 2012-01-18 23:13:15 - cesarcer - @dlitchfield @DennisF nope AFAIK, they leave the file handle opened which prevents from overwriting DLL after MD5 checkhttp://www.secuobs.com/twitter/news/285211.shtmlhttp://www.secuobs.com/twitter/news/285211.shtml Secuobs.com : 2012-01-18 23:13:15 - cesarcer - RT @ZDNet: Ready-made Microsoft Windows zero-day http://tco/5ShRcKX8http://www.secuobs.com/twitter/news/285210.shtmlhttp://www.secuobs.com/twitter/news/285210.shtml Secuobs.com : 2012-01-18 15:59:01 - cesarcer - Free 0day if you can do second pre-image attacks on MD5 A free Windows Vulnerability for the NSA http://tco/www5QpmNhttp://www.secuobs.com/twitter/news/285085.shtmlhttp://www.secuobs.com/twitter/news/285085.shtml Secuobs.com : 2012-01-16 20:07:54 - cesarcer - RT @djrbliss My SLOB exploitation slides from Infiltrate are online: http://tco/sEgGktNw , expect a whitepaper with more detail soonhttp://www.secuobs.com/twitter/news/284247.shtmlhttp://www.secuobs.com/twitter/news/284247.shtml Secuobs.com : 2012-01-04 08:25:26 - cesarcer - Finishing slides for my #Infiltrate2012 presentation, Windows kernel exploitation should get easier after this :http://www.secuobs.com/twitter/news/280385.shtmlhttp://www.secuobs.com/twitter/news/280385.shtml Secuobs.com : 2011-12-27 19:43:54 - cesarcer - 2012 news: US builds better cyber weapons by reverse engineering technology found in crash landed UFOs, then China steal them from the UShttp://www.secuobs.com/twitter/news/278572.shtmlhttp://www.secuobs.com/twitter/news/278572.shtml Secuobs.com : 2011-12-23 02:16:03 - cesarcer - RT @MarioVilas I love it when a 0day fits in a 140 chars message xDhttp://www.secuobs.com/twitter/news/277734.shtmlhttp://www.secuobs.com/twitter/news/277734.shtml Secuobs.com : 2011-12-09 02:23:33 - cesarcer - @lcamtuf @antisnatchor oops, actually it does work on FF and Chrome, my mistakehttp://www.secuobs.com/twitter/news/273407.shtmlhttp://www.secuobs.com/twitter/news/273407.shtml Secuobs.com : 2011-12-09 02:23:33 - cesarcer - @thegrugq @lcamtuf @antisnatchor have you disabled ActiveX support turn it on and maybe it will workhttp://www.secuobs.com/twitter/news/273406.shtmlhttp://www.secuobs.com/twitter/news/273406.shtml Secuobs.com : 2011-12-09 02:23:33 - cesarcer - RT @r_netsec Flash 0-day - http://tco/uowlokXEhttp://www.secuobs.com/twitter/news/273405.shtmlhttp://www.secuobs.com/twitter/news/273405.shtml Secuobs.com : 2011-12-08 16:05:33 - cesarcer - RT @lcamtuf Funny PoC: http://tco/JsvLW5Bz -seems to only work on IE not on FF nor Chromehttp://www.secuobs.com/twitter/news/273216.shtmlhttp://www.secuobs.com/twitter/news/273216.shtml Secuobs.com : 2011-12-08 16:05:33 - cesarcer - @FreedomCoder has posted Part 3 of his 4-part Automating Social Engineering blog post http://tco/y6NWDXa8http://www.secuobs.com/twitter/news/273215.shtmlhttp://www.secuobs.com/twitter/news/273215.shtml Secuobs.com : 2011-12-07 23:08:41 - cesarcer - @dlitchfield haha, it seems you are back from vacations, don't burn all the 0days :Phttp://www.secuobs.com/twitter/news/272934.shtmlhttp://www.secuobs.com/twitter/news/272934.shtml Secuobs.com : 2011-12-02 17:58:54 - cesarcer - RT @Dinosn: papers - A bit away from Kernel execution http://tco/y7eFaJUmhttp://www.secuobs.com/twitter/news/271141.shtmlhttp://www.secuobs.com/twitter/news/271141.shtml Secuobs.com : 2011-12-01 01:00:15 - cesarcer - RT @amarshall_ASI Public Java Exploit Amps Up Threat Level http://tco/NePN0iFyhttp://www.secuobs.com/twitter/news/270547.shtmlhttp://www.secuobs.com/twitter/news/270547.shtml Secuobs.com : 2011-11-21 20:27:31 - cesarcer - Do you think that looking at Google Maps over SSL is safe well, it's not http://tco/KIfXukbzhttp://www.secuobs.com/twitter/news/267890.shtmlhttp://www.secuobs.com/twitter/news/267890.shtml Secuobs.com : 2011-11-10 17:05:25 - cesarcer - New and cool blog post by @FreedomCoder http://tco/NF3NrIsw Automating Social Engineering: Part Twohttp://www.secuobs.com/twitter/news/264757.shtmlhttp://www.secuobs.com/twitter/news/264757.shtml Secuobs.com : 2011-10-21 05:41:58 - cesarcer - RT @estemf: Advisory for Buffer Overflow in Oracle Database CTXSYSDRVDISPTABLEFUNC_ASOWN function CVE-2011-2301 http://tco/nDIszQe5http://www.secuobs.com/twitter/news/258813.shtmlhttp://www.secuobs.com/twitter/news/258813.shtml Secuobs.com : 2011-10-19 08:39:23 - cesarcer - RT @julianor: Oracle patches Java SSL today http://tco/z3urvCKG Mozilla won't be blocking the plug-in to stop BEAST http://tco/7N8pUdx8http://www.secuobs.com/twitter/news/258092.shtmlhttp://www.secuobs.com/twitter/news/258092.shtml Secuobs.com : 2011-10-15 18:08:51 - cesarcer - RT @jeremiahg: RT @ebellis: Founders of SSL call game over http://tco/JZoOFk4g ironic that the cert on this site it brokenhttp://www.secuobs.com/twitter/news/257214.shtmlhttp://www.secuobs.com/twitter/news/257214.shtml Secuobs.com : 2011-10-14 15:57:21 - cesarcer - Automating Social Engineering http://tco/i8zxPBbS by @FreedomCoderhttp://www.secuobs.com/twitter/news/256953.shtmlhttp://www.secuobs.com/twitter/news/256953.shtml Secuobs.com : 2011-10-12 09:34:23 - cesarcer - RT @julianor: Father of SSL says despite attacks, the security linchpin has lots of life left http://tco/XDavQzEt says BEAST is a Wind http://www.secuobs.com/twitter/news/256256.shtmlhttp://www.secuobs.com/twitter/news/256256.shtml Secuobs.com : 2011-10-08 22:21:55 - cesarcer - RT @jduck1337 Posted: Exploiting Java Memory Corruption Vulnerabilities | Accuvant http://tco/kdu0vuoh -cool stuffhttp://www.secuobs.com/twitter/news/255588.shtmlhttp://www.secuobs.com/twitter/news/255588.shtml Secuobs.com : 2011-10-04 10:03:33 - cesarcer - It's amazing how some security books are just compilation of other people work, please save trees and publish PDFs with link to originalshttp://www.secuobs.com/twitter/news/254122.shtmlhttp://www.secuobs.com/twitter/news/254122.shtml Secuobs.com : 2011-10-04 00:27:32 - cesarcer - RT @julianor 1 read netiferacom/research/ 2 google payment gateway api signature MD5 OR SHA1 filetype:pdf 3 No, don't do ithttp://www.secuobs.com/twitter/news/253984.shtmlhttp://www.secuobs.com/twitter/news/253984.shtml Secuobs.com : 2011-10-01 10:43:29 - cesarcer - Microsoft Anti-Malware Tool Mistakenly Snuffs Google Chrome http://tco/a7mUM2cF - *comment censored* :http://www.secuobs.com/twitter/news/253474.shtmlhttp://www.secuobs.com/twitter/news/253474.shtml Secuobs.com : 2011-09-29 22:57:55 - cesarcer - RT @julianor Not all the vendors lie Good post about BEAST SSL by Sigbjorn from Opera http://tco/eGVnkCPGhttp://www.secuobs.com/twitter/news/252899.shtmlhttp://www.secuobs.com/twitter/news/252899.shtml Secuobs.com : 2011-09-29 22:57:55 - cesarcer - RT @WeldPond Oracle’s Horrible, No-good, Very-bad Java Security Week bitly/q3j9ir #toobigtotesthttp://www.secuobs.com/twitter/news/252898.shtmlhttp://www.secuobs.com/twitter/news/252898.shtml Secuobs.com : 2011-09-29 07:40:24 - cesarcer - RT @IOActive: Join IOActive's @ridpath @freedomcoder online tomorrow at 10am PST to learn about the threat of social engineering http http://www.secuobs.com/twitter/news/252414.shtmlhttp://www.secuobs.com/twitter/news/252414.shtml Secuobs.com : 2011-09-28 09:12:12 - cesarcer - RT @ryanaraine microsoft kills botnet linked to macdefender scareware, sexual exploitation of children http://tco/DA0GCHK9http://www.secuobs.com/twitter/news/252026.shtmlhttp://www.secuobs.com/twitter/news/252026.shtml Secuobs.com : 2011-09-27 16:46:28 - cesarcer - RT @mmdelrio Microsoft Security Advisory: Vulnerability in SSL/TLS could allow information disclosure http://tco/jDKz4jjZhttp://www.secuobs.com/twitter/news/251733.shtmlhttp://www.secuobs.com/twitter/news/251733.shtml Secuobs.com : 2011-09-27 03:24:37 - cesarcer - RT @imelven: http://tco/3aUvL6fH we have opened up the bug for the Rizzo/Duong SSL attack aka BEAST now that details are publichttp://www.secuobs.com/twitter/news/251422.shtmlhttp://www.secuobs.com/twitter/news/251422.shtml Secuobs.com : 2011-09-27 03:24:37 - cesarcer - RT @EdiStrosar Don't be surprised for the BEAST SSL/TLS attack CVE: http://tco/YzUu22Xkhttp://www.secuobs.com/twitter/news/251421.shtmlhttp://www.secuobs.com/twitter/news/251421.shtml Secuobs.com : 2011-09-27 03:24:37 - cesarcer - Automating Social Engineering Webinar http://tco/PIHp5M0Uhttp://www.secuobs.com/twitter/news/251420.shtmlhttp://www.secuobs.com/twitter/news/251420.shtml Secuobs.com : 2011-09-27 03:24:37 - cesarcer - RT @regsecurity World takes notice as SSL-chewing BEAST is unleashed bitly/n1jl5Nhttp://www.secuobs.com/twitter/news/251419.shtmlhttp://www.secuobs.com/twitter/news/251419.shtml Secuobs.com : 2011-09-12 22:40:53 - cesarcer - RT @jeremiahg Linuxcom hacked consider the PWs SSH keys you have used on these sites compromised http://tco/hmuQ9i4http://www.secuobs.com/twitter/news/247254.shtmlhttp://www.secuobs.com/twitter/news/247254.shtml Secuobs.com : 2011-09-07 22:22:59 - cesarcer - on video demo #14 you can see the Windows 0day exploit in action http://tco/kVWf5CY ,funny patch that has the same vuln it tries to fixhttp://www.secuobs.com/twitter/news/245959.shtmlhttp://www.secuobs.com/twitter/news/245959.shtml Secuobs.com : 2011-09-01 03:55:46 - cesarcer - RT @ivanristic: Kernelorg has been hacked see site news http://kernelorg // via Hacker News http://tco/o0BN05Yhttp://www.secuobs.com/twitter/news/243872.shtmlhttp://www.secuobs.com/twitter/news/243872.shtml Secuobs.com : 2011-08-31 22:21:30 - cesarcer - @SpireSec good question, maybe amount of remote 0days if that # is 0 then we can't say secure but it would be a good start #OracleFailhttp://www.secuobs.com/twitter/news/243668.shtmlhttp://www.secuobs.com/twitter/news/243668.shtml Secuobs.com : 2011-08-31 22:21:30 - cesarcer - RT @thaidn: @julianor first public fix by a vendor http://tco/3eD7lQV even though Opera is not vulnerable to our SSL attack in its defa http://www.secuobs.com/twitter/news/243667.shtmlhttp://www.secuobs.com/twitter/news/243667.shtml Secuobs.com : 2011-08-31 22:21:30 - cesarcer - RT @tqbf I'd follow @thaidn and @julianor on Twitter too, if I cared about SSL/TLShttp://www.secuobs.com/twitter/news/243666.shtmlhttp://www.secuobs.com/twitter/news/243666.shtml Secuobs.com : 2011-07-20 11:08:25 - cesarcer - @0xcharlie sell the Windows 7 remote to the botnet guy you can get more than $250k :http://www.secuobs.com/twitter/news/229462.shtmlhttp://www.secuobs.com/twitter/news/229462.shtml Secuobs.com : 2011-07-13 03:39:39 - cesarcer - RT @reversemode awesome RT @j00ru: MS11-056 released A story of a Windows CSRSS Privilege Escalation vulnerability http://tco/gQMwqBEhttp://www.secuobs.com/twitter/news/227072.shtmlhttp://www.secuobs.com/twitter/news/227072.shtml Secuobs.com : 2011-06-29 22:16:38 - cesarcer - @dlitchfield I hope the cage is better protection than PCI compliance :http://www.secuobs.com/twitter/news/222652.shtmlhttp://www.secuobs.com/twitter/news/222652.shtml Secuobs.com : 2011-06-28 23:23:18 - cesarcer - RT @briankrebs McAfee inks $8M deal to scan all domains in the new XXX registry for malware, SQLi, etc http://tco/QirEjp0 -hmmmhttp://www.secuobs.com/twitter/news/222225.shtmlhttp://www.secuobs.com/twitter/news/222225.shtml Secuobs.com : 2011-06-20 19:49:29 - cesarcer - Don't miss this Saturday #BSidesCT http://bitly/itCdk5 specially @RyanOHoro talk: Pen Testing People: Social Engineering Integrationhttp://www.secuobs.com/twitter/news/219283.shtmlhttp://www.secuobs.com/twitter/news/219283.shtml Secuobs.com : 2011-06-15 23:01:40 - cesarcer - RT @parmy How Cisco Is Capitalizing On LulzSec Hackers' Popularity http://tco/aJCRLLNhttp://www.secuobs.com/twitter/news/217841.shtmlhttp://www.secuobs.com/twitter/news/217841.shtml Secuobs.com : 2011-06-15 23:01:40 - cesarcer - RT @ZDNet Kid sells cloud startup to company even younger than he is http://tco/pymxvGLhttp://www.secuobs.com/twitter/news/217840.shtmlhttp://www.secuobs.com/twitter/news/217840.shtml Secuobs.com : 2011-06-14 08:55:52 - cesarcer - RT @toucansystem: RT @hackinthebox: HITB Magazine Issue 006 Out Now - http://newshitborg/content/hitb-magazine-issue-006-out-now #fbhttp://www.secuobs.com/twitter/news/217161.shtmlhttp://www.secuobs.com/twitter/news/217161.shtml Secuobs.com : 2011-06-06 22:35:44 - cesarcer - Don't miss this Saturday #BSidesCT http://bitly/itCdk5 specially @RyanOHoro talk: Pen Testing People: Social Engineering Integrationhttp://www.secuobs.com/twitter/news/214511.shtmlhttp://www.secuobs.com/twitter/news/214511.shtml Secuobs.com : 2011-06-03 02:39:59 - cesarcer - Sony Pictures and Sony BMG sites compromised http://bitly/lKhoWm it seems the free pentest continues #Sonypainhttp://www.secuobs.com/twitter/news/213327.shtmlhttp://www.secuobs.com/twitter/news/213327.shtml Secuobs.com : 2011-05-25 10:16:51 - cesarcer - RT @endrazine: RT @mikkohypponen Phishing works much better on Phones than on PCs http://bitly/mew1crhttp://www.secuobs.com/twitter/news/210230.shtmlhttp://www.secuobs.com/twitter/news/210230.shtml Secuobs.com : 2011-05-25 00:51:04 - cesarcer - Sony continues having a free pentest http://onmsnbccom/j5nPJv but I'm sure they are regretting not having paid for ithttp://www.secuobs.com/twitter/news/210003.shtmlhttp://www.secuobs.com/twitter/news/210003.shtml Secuobs.com : 2011-05-24 10:20:32 - cesarcer - @arothackerasi @dlitchfield that's kind of acknowledging that SQL Security model is not good, then you only have regular users and sysadminshttp://www.secuobs.com/twitter/news/209723.shtmlhttp://www.secuobs.com/twitter/news/209723.shtml Secuobs.com : 2011-05-18 16:59:28 - cesarcer - When you have to install Adobe, IBM, Oracle, etc server software you realize why MS is the best #crappyinstallershttp://www.secuobs.com/twitter/news/207810.shtmlhttp://www.secuobs.com/twitter/news/207810.shtml Secuobs.com : 2011-04-29 16:07:04 - cesarcer - Original Amazon EC2 apologies email: 10 days credit http://bitly/kDMMYr , 10 years credit wouldn't be enough for this big failhttp://www.secuobs.com/twitter/news/200760.shtmlhttp://www.secuobs.com/twitter/news/200760.shtml Secuobs.com : 2011-04-28 15:13:39 - cesarcer - RT @Beaker Amazon opens up about cloud security breach I'm sorry, what http://tinyurlcom/5w2tvcr -#cloudfailhttp://www.secuobs.com/twitter/news/200256.shtmlhttp://www.secuobs.com/twitter/news/200256.shtml Secuobs.com : 2011-04-24 21:02:30 - cesarcer - Did I mention I will show a Windows 2008 0day elevation of privs exploit #Infiltrate2011http://www.secuobs.com/twitter/news/198891.shtmlhttp://www.secuobs.com/twitter/news/198891.shtml Secuobs.com : 2011-04-11 21:45:22 - cesarcer - RT @TheHackersNews Barracuda Networks Hacking via SQL Injection : Barracuda Networks Hacking via SQL Injection http://googl/fb/K38No -upshttp://www.secuobs.com/twitter/news/194255.shtmlhttp://www.secuobs.com/twitter/news/194255.shtml Secuobs.com : 2011-04-09 05:36:30 - cesarcer - Did I mention I will show a Windows 2008 0day elevation of privs exploit #Infiltrate2011http://www.secuobs.com/twitter/news/193754.shtmlhttp://www.secuobs.com/twitter/news/193754.shtml Secuobs.com : 2011-04-09 05:36:30 - cesarcer - @msuiche both, actually it's a vuln introduced by SQL Server that allows elevation from Network Service to Local Systemhttp://www.secuobs.com/twitter/news/193753.shtmlhttp://www.secuobs.com/twitter/news/193753.shtml Secuobs.com : 2011-04-04 17:54:52 - cesarcer - EMC Acquires NetWitness http://bitly/eqBiuf - maybe now RSA can startusing NetWitness products so it won't be hacked againhttp://www.secuobs.com/twitter/news/192217.shtmlhttp://www.secuobs.com/twitter/news/192217.shtml Secuobs.com : 2011-03-31 22:25:08 - cesarcer - RT @threatpost: #Tpost: #Samsung keylogger situation the result of a false positive from one commercial antimalware suite nothing else http://www.secuobs.com/twitter/news/191016.shtmlhttp://www.secuobs.com/twitter/news/191016.shtml Secuobs.com : 2011-03-30 20:22:51 - cesarcer - RT @mikkohypponen: More on the Samsung keylogger scandal http://bitly/ejbmTm Samsung installed it to monitor the performance and find http://www.secuobs.com/twitter/news/190392.shtmlhttp://www.secuobs.com/twitter/news/190392.shtml Secuobs.com : 2011-03-28 05:17:28 - cesarcer - RT @dragosr MySQL and Sun hacked through SQL injection sigh, oracle security deterioration field effect http://tco/RlQdHJAhttp://www.secuobs.com/twitter/news/189422.shtmlhttp://www.secuobs.com/twitter/news/189422.shtml Secuobs.com : 2011-03-15 19:19:16 - cesarcer - RT @dinodaizovi: The best java vulns are pure logic and grant applets full privs This is a nice example: http://tco/0IRTfQH Probably http://www.secuobs.com/twitter/news/184941.shtmlhttp://www.secuobs.com/twitter/news/184941.shtml Secuobs.com : 2011-03-15 00:33:58 - cesarcer - RT @ryanaraine adobe flash player 0day exploit embedded in ms excel spreadsheets http://zdnet/f9HgoYhttp://www.secuobs.com/twitter/news/184585.shtmlhttp://www.secuobs.com/twitter/news/184585.shtml Secuobs.com : 2011-03-08 01:16:51 - cesarcer - RT @jonoberheide How I almost won Pwn2Own via XSS :-P http://jonoberheideorg/blog/2011/03/07/how-i-almost-won-pwn2own-via-xss/http://www.secuobs.com/twitter/news/181733.shtmlhttp://www.secuobs.com/twitter/news/181733.shtml Secuobs.com : 2011-03-04 01:45:25 - cesarcer - RT @0xcharlie The best way for a vendor to not get popped at pwn2own is to privately pay 50k per exploit to all signed up before contesthttp://www.secuobs.com/twitter/news/180429.shtmlhttp://www.secuobs.com/twitter/news/180429.shtml Secuobs.com : 2011-02-28 16:10:54 - cesarcer - RT @helpnetsecurity The 150,000 that got their GMail accounts reset are now learning about the serious downside of the cloudhttp://www.secuobs.com/twitter/news/178998.shtmlhttp://www.secuobs.com/twitter/news/178998.shtml Secuobs.com : 2011-02-25 19:18:53 - cesarcer - @achillean is Shodan planing to discover MS SQL Servers and Oracle database servershttp://www.secuobs.com/twitter/news/178235.shtmlhttp://www.secuobs.com/twitter/news/178235.shtml Secuobs.com : 2011-02-21 19:50:04 - cesarcer - RT @petefinnigan Blogging about Oracles Database Firewall - http://d3cco/MmldFQhttp://www.secuobs.com/twitter/news/176522.shtmlhttp://www.secuobs.com/twitter/news/176522.shtml Secuobs.com : 2011-02-17 00:01:46 - cesarcer - Oracle is selling a Database Firewall http://bitly/gcX01r why not just do the database server more secure Oracle customers you are so nicehttp://www.secuobs.com/twitter/news/174918.shtmlhttp://www.secuobs.com/twitter/news/174918.shtml Secuobs.com : 2011-02-15 04:44:37 - cesarcer - RT @taviso: If you're naive and rich enough to pay even $100k for an adobe 0day, you should mail me, I could afford to buy adobe in a monthhttp://www.secuobs.com/twitter/news/173955.shtmlhttp://www.secuobs.com/twitter/news/173955.shtml Secuobs.com : 2011-02-02 05:55:28 - cesarcer - RT @daveaitel Stackoverflow's WISC Windows, IIS, SQL Server, C# Architecture http://dlvrit/FbQjYhttp://www.secuobs.com/twitter/news/169300.shtmlhttp://www.secuobs.com/twitter/news/169300.shtml Secuobs.com : 2011-01-20 12:24:49 - cesarcer - RT @antic0de: Insomnia is looking for someone to join team here in Auckland Requires web app skills, 0day research skills, or nunchuku/ http://www.secuobs.com/twitter/news/164442.shtmlhttp://www.secuobs.com/twitter/news/164442.shtml Secuobs.com : 2011-01-14 09:30:13 - cesarcer - RT @securityninja Google pays record bounty for Chrome bug http://tinyurlcom/6eo5mpwhttp://www.secuobs.com/twitter/news/162492.shtmlhttp://www.secuobs.com/twitter/news/162492.shtml Secuobs.com : 2011-01-14 09:30:13 - cesarcer - @fjserna if you can write to kernel then game over you can know kernel object addresses from user land and write anywhere to elev privshttp://www.secuobs.com/twitter/news/162491.shtmlhttp://www.secuobs.com/twitter/news/162491.shtml Secuobs.com : 2011-01-14 09:30:13 - cesarcer - @fjserna cool, let me see the exploit, let's trade, what do you want a IIS 7 remote 0day would be fine ;http://www.secuobs.com/twitter/news/162490.shtmlhttp://www.secuobs.com/twitter/news/162490.shtml Secuobs.com : 2011-01-12 16:34:42 - cesarcer - @thezdi is the date when the vuln was reported to vendor correct did you report it 9 months after CanSecWest or I'm missing somethinghttp://www.secuobs.com/twitter/news/161829.shtmlhttp://www.secuobs.com/twitter/news/161829.shtml Secuobs.com : 2011-01-12 16:34:42 - cesarcer - @thezdi I see, now I wonder if the Pwn2Own competition has the desired effects like MS sitting on a remote vuln for 10 monthshttp://www.secuobs.com/twitter/news/161828.shtmlhttp://www.secuobs.com/twitter/news/161828.shtml Secuobs.com : 2010-12-18 01:45:41 - cesarcer - @chemaalonso IE9+Boca #fail me quedo con FF o Chrome y River :http://www.secuobs.com/twitter/news/154837.shtmlhttp://www.secuobs.com/twitter/news/154837.shtml Secuobs.com : 2010-12-16 09:12:11 - cesarcer - @LeandroRandazzo parece que ese exploit siempre es recordado en alguna frase, alquien menciono tambien tener hambre al usarlo en pentests :http://www.secuobs.com/twitter/news/153918.shtmlhttp://www.secuobs.com/twitter/news/153918.shtml Secuobs.com : 2010-12-09 04:45:28 - cesarcer - RT @ryanaraine Would anyone like some IE 0day http://bitly/g3kTaB via @jduck1337http://www.secuobs.com/twitter/news/150893.shtmlhttp://www.secuobs.com/twitter/news/150893.shtml Secuobs.com : 2010-12-09 04:45:28 - cesarcer - 2011 predictions:1-More 0daysmaybe a new nasty worm2-More leaks3-More lobby against publishing 0days and exploitsmaybe criminalizationhttp://www.secuobs.com/twitter/news/150892.shtmlhttp://www.secuobs.com/twitter/news/150892.shtml Secuobs.com : 2010-11-30 20:22:02 - cesarcer - RT @VUPEN Ouch we discovered another unpatched IE8 vulnerability which also allows ASLR/DEP bypass This one is for Gov agencieshttp://www.secuobs.com/twitter/news/147486.shtmlhttp://www.secuobs.com/twitter/news/147486.shtml Secuobs.com : 2010-11-26 02:03:45 - cesarcer - Windows Task Scheduler Privilege Escalation 0day http://bitly/i1Szxx -simple but nicehttp://www.secuobs.com/twitter/news/146343.shtmlhttp://www.secuobs.com/twitter/news/146343.shtml Secuobs.com : 2010-11-26 02:03:45 - cesarcer - Another nice Windows 0day http://usersvoljanet/database/Bypass_UACpdf via @EdiStrosarhttp://www.secuobs.com/twitter/news/146342.shtmlhttp://www.secuobs.com/twitter/news/146342.shtml Secuobs.com : 2010-11-26 02:03:45 - cesarcer - @_paperino it's a privilege escalation vulnerability not just UAC bypassinghttp://www.secuobs.com/twitter/news/146341.shtmlhttp://www.secuobs.com/twitter/news/146341.shtml Secuobs.com : 2010-11-17 21:42:20 - cesarcer - RT @bsdaemon Phrack #67 released: Dynamic Program Analysis And Software Exploitation by BSDaemon : - congratshttp://www.secuobs.com/twitter/news/143395.shtmlhttp://www.secuobs.com/twitter/news/143395.shtml Secuobs.com : 2010-11-16 18:15:49 - cesarcer - RT @mubix Cracking passwords on Amazon's EC2/GPU already http://bitly/cAEnH9 - and it's FASThttp://www.secuobs.com/twitter/news/142915.shtmlhttp://www.secuobs.com/twitter/news/142915.shtml Secuobs.com : 2010-11-11 05:55:16 - cesarcer - RT @securityninja: From 2008 to November 2010 Chrome experienced a 1,154 pourcents increase in discovered vulnerabilities http://tinyurlcom/38 http://www.secuobs.com/twitter/news/141070.shtmlhttp://www.secuobs.com/twitter/news/141070.shtml Secuobs.com : 2010-11-11 05:55:16 - cesarcer - RT @reversemode: RT @websenselabs: Blog - Amnesty International Hong Kong Website Injected With Latest Internet Explorer 0-day http://bi http://www.secuobs.com/twitter/news/141069.shtmlhttp://www.secuobs.com/twitter/news/141069.shtml Secuobs.com : 2010-11-05 23:11:13 - cesarcer - Historias de 0days, Disclosures y otras yerbas - ekoparty Security Conference 6th edition http://bitly/cqcGfQ videohttp://www.secuobs.com/twitter/news/139499.shtmlhttp://www.secuobs.com/twitter/news/139499.shtml Secuobs.com : 2010-11-04 20:29:32 - cesarcer - So many 0days lately, this means they are becoming easier to find and cheaperhttp://www.secuobs.com/twitter/news/138947.shtmlhttp://www.secuobs.com/twitter/news/138947.shtml Secuobs.com : 2010-11-01 23:16:03 - cesarcer - RT @mikkohypponen Remember the Sony rootkit http://bitly/cq1xPjhttp://www.secuobs.com/twitter/news/137628.shtmlhttp://www.secuobs.com/twitter/news/137628.shtml Secuobs.com : 2010-10-19 11:28:55 - cesarcer - RT @daveaitel Reverse Engineering Is Hard http://listsimmunityseccom/pipermail/dailydave/2010-October/006231html #stuxnethttp://www.secuobs.com/twitter/news/132618.shtmlhttp://www.secuobs.com/twitter/news/132618.shtml Secuobs.com : 2010-10-14 11:58:07 - cesarcer - RT @aazubel: http://wwwampliasecuritycom/research/aspx_po_chotext_attackrb , a MS10-070 ASPX Padding Oracle attack implemented in rubyhttp://www.secuobs.com/twitter/news/131187.shtmlhttp://www.secuobs.com/twitter/news/131187.shtml Secuobs.com : 2010-10-06 21:48:11 - cesarcer - RT @paulfroberts RT @threatpost: Threatpost publishes Beyond DEFCON: 15 Must-See Hacking Conferences http://bitly/dfTVAYhttp://www.secuobs.com/twitter/news/129027.shtmlhttp://www.secuobs.com/twitter/news/129027.shtml Secuobs.com : 2010-09-29 04:28:40 - cesarcer - RT @aazubel http://bitly/9FvmJh, a padding oracle attack implemented in javascripthttp://www.secuobs.com/twitter/news/126683.shtmlhttp://www.secuobs.com/twitter/news/126683.shtml Secuobs.com : 2010-09-25 02:09:18 - cesarcer - @magicmac2000 being famous it's a nice side effect but it's not all about that, I can start publishing MS 0days anonymously if you wish ;http://www.secuobs.com/twitter/news/125519.shtmlhttp://www.secuobs.com/twitter/news/125519.shtml Secuobs.com : 2010-09-25 02:09:18 - cesarcer - RT @magicmac2000: I was speaking specifically of those researchers who release 0days claiming that they are helping the world by doing http://www.secuobs.com/twitter/news/125518.shtmlhttp://www.secuobs.com/twitter/news/125518.shtml Secuobs.com : 2010-09-22 21:54:19 - cesarcer - Everytime I hear Oracle BS I would like to be able to release Oracle remote 0day, but I can't :' someday somedayhttp://www.secuobs.com/twitter/news/124562.shtmlhttp://www.secuobs.com/twitter/news/124562.shtml Secuobs.com : 2010-09-22 21:54:19 - cesarcer - @famato that would be cool, It's nice to hear about a conference not afraid about publishing 0days :http://www.secuobs.com/twitter/news/124561.shtmlhttp://www.secuobs.com/twitter/news/124561.shtml Secuobs.com : 2010-09-21 18:49:38 - cesarcer - someone just released a twitter worm exploiting a XSS when doing mouse over a tweet, dangerous I bet twitter will go down soonhttp://www.secuobs.com/twitter/news/123925.shtmlhttp://www.secuobs.com/twitter/news/123925.shtml Secuobs.com : 2010-09-21 18:49:38 - cesarcer - this #twitterworm + IE or FF or PDF or Flash or etc 0day would be uglyhttp://www.secuobs.com/twitter/news/123924.shtmlhttp://www.secuobs.com/twitter/news/123924.shtml Secuobs.com : 2010-09-21 18:49:38 - cesarcer - RT @lostinsecurity Well, at least this is a very good example for non-beleivers on how a simple XSS can severely affect a business:http://www.secuobs.com/twitter/news/123923.shtmlhttp://www.secuobs.com/twitter/news/123923.shtml Secuobs.com : 2010-09-20 21:27:16 - cesarcer - weird times, APT, 0days every week, etc are we going to see any changes in security from software vendors or just more BShttp://www.secuobs.com/twitter/news/123238.shtmlhttp://www.secuobs.com/twitter/news/123238.shtml Secuobs.com : 2010-09-18 08:01:30 - cesarcer - twitter should fix this XSS http://bitly/b00I5F nowhttp://www.secuobs.com/twitter/news/122173.shtmlhttp://www.secuobs.com/twitter/news/122173.shtml Secuobs.com : 2010-09-18 08:01:30 - cesarcer - RT @mckt_ I've just had my Twitter account compromised by XSS http://bitly/bvnkDBhttp://www.secuobs.com/twitter/news/122172.shtmlhttp://www.secuobs.com/twitter/news/122172.shtml Secuobs.com : 2010-09-18 08:01:30 - cesarcer - soon it will be possible to remote root some IIS, net padding oracle attack + token kidnapping exploits #ekopartyhttp://www.secuobs.com/twitter/news/122171.shtmlhttp://www.secuobs.com/twitter/news/122171.shtml Secuobs.com : 2010-09-18 08:01:30 - cesarcer - RT @BillGates #ekoparty was awesome I specially liked @julianor and @thaidn 0dayhttp://www.secuobs.com/twitter/news/122170.shtmlhttp://www.secuobs.com/twitter/news/122170.shtml Secuobs.com : 2010-07-16 17:10:30 - cesarcer - RT @bsdaemon rpcttdb vulnerability released affects AIX, HP-UX and Solaris all versions, CVE-2010-0083http://www.secuobs.com/twitter/news/114950.shtmlhttp://www.secuobs.com/twitter/news/114950.shtml Secuobs.com : 2010-07-14 06:57:48 - cesarcer - http://bitly/b7Wgp9 July MS Security bulletin, next month they will be fixing a couple of vulns I will be releasing at BH and Defconhttp://www.secuobs.com/twitter/news/114024.shtmlhttp://www.secuobs.com/twitter/news/114024.shtml Secuobs.com : 2010-07-09 22:57:51 - cesarcer - Cisco Live 2010 attendee list hacked http://bitly/duGaL8http://www.secuobs.com/twitter/news/112825.shtmlhttp://www.secuobs.com/twitter/news/112825.shtml Secuobs.com : 2010-07-03 01:52:37 - cesarcer - RT @HITBSecConf #HITB2010AMS - Devine Aumaitre - Subverting Windows 7 Kernel with DMA Attacks http://bitly/cXSR2Chttp://www.secuobs.com/twitter/news/110603.shtmlhttp://www.secuobs.com/twitter/news/110603.shtml Secuobs.com : 2010-07-02 14:29:47 - cesarcer - RT @HITBSecConf HITB Magazine Issue 003 out now - http://bitly/d13jRB - Please RThttp://www.secuobs.com/twitter/news/110368.shtmlhttp://www.secuobs.com/twitter/news/110368.shtml Secuobs.com : 2010-07-02 00:44:48 - cesarcer - @nicowaisman umm I have to speak at Defcon at noon, it will be difficult to go to play :http://www.secuobs.com/twitter/news/110028.shtmlhttp://www.secuobs.com/twitter/news/110028.shtml Secuobs.com : 2010-06-30 20:09:27 - cesarcer - RT @HITBSecConf: Reminder: The official hash tag for HITBSecConf2010 - Amsterdam is #HITB2010AMS - Come see your tweets fly around our o http://www.secuobs.com/twitter/news/109398.shtmlhttp://www.secuobs.com/twitter/news/109398.shtml Secuobs.com : 2010-06-25 08:51:22 - cesarcer - RT @samj: The Web Application Firewall has denied your transaction due to a violation of policy - you'd better not have lost my ti http://www.secuobs.com/twitter/news/107504.shtmlhttp://www.secuobs.com/twitter/news/107504.shtml Secuobs.com : 2010-06-25 08:51:22 - cesarcer - RT @jeremiahg Persistent XSS on Twittercom http://isgd/d22kS - XSS just can't be stamped out // nasty bug, twitter is so easy to hackhttp://www.secuobs.com/twitter/news/107503.shtmlhttp://www.secuobs.com/twitter/news/107503.shtml Secuobs.com : 2010-06-23 22:40:37 - cesarcer - RT @nicowaisman Seems @famato will be speaking at defcon Felicitaciones loco http://bitly/9zZZb9http://www.secuobs.com/twitter/news/106967.shtmlhttp://www.secuobs.com/twitter/news/106967.shtml Secuobs.com : 2010-06-18 08:47:16 - cesarcer - RT @ToolsWatch HOT HOT PDF Dissector v110 JUST released http://wwwzynamicscom/dissectorhtml /via @sagar38 //cool toolhttp://www.secuobs.com/twitter/news/105216.shtmlhttp://www.secuobs.com/twitter/news/105216.shtml Secuobs.com : 2010-06-15 17:42:47 - cesarcer - RT @cfragoso Dave Aitel: As of June 2010, average 0-day creation time finding, writing, porting, documenting takes 451 hours- #FIRST2010http://www.secuobs.com/twitter/news/103906.shtmlhttp://www.secuobs.com/twitter/news/103906.shtml Secuobs.com : 2010-06-12 00:27:34 - cesarcer - RT @JohnOttman: Mass SQL injection attack requires database activity monitoring for proper defense of sensitive data http://bitly/aEUsCwhttp://www.secuobs.com/twitter/news/102720.shtmlhttp://www.secuobs.com/twitter/news/102720.shtml Secuobs.com : 2010-06-09 08:42:48 - cesarcer - RT @helpnetsecurity IBM launches new security solutions http://bitly/a0uRNH -the tools suck or/and they don't use them internallyhttp://www.secuobs.com/twitter/news/101606.shtmlhttp://www.secuobs.com/twitter/news/101606.shtml Secuobs.com : 2010-06-03 22:12:41 - cesarcer - @0xcharlie well if you can inject SQL in an app that controls nuclear reactor or weapons thenhttp://www.secuobs.com/twitter/news/99724.shtmlhttp://www.secuobs.com/twitter/news/99724.shtml Secuobs.com : 2010-05-22 03:08:51 - cesarcer - But when your database is Unbreakable, maybe you don't need a database firewall, eh nice @AdrianLane quote about new Oracle acquisitionhttp://www.secuobs.com/twitter/news/95622.shtmlhttp://www.secuobs.com/twitter/news/95622.shtml Secuobs.com : 2010-05-22 03:08:51 - cesarcer - RT @dragosr Ruh-roh Heads-up if you got an infected usb key at AusCERT http://bitly/bgi49Nhttp://www.secuobs.com/twitter/news/95621.shtmlhttp://www.secuobs.com/twitter/news/95621.shtml Secuobs.com : 2010-05-22 03:08:51 - cesarcer - RT @securityninja RT @slashdot: How To Go Broke Selling Zero-Day Exploits http://bitly/9RPRm7http://www.secuobs.com/twitter/news/95620.shtmlhttp://www.secuobs.com/twitter/news/95620.shtml Secuobs.com : 2010-05-07 13:54:34 - cesarcer - @reversemode nice, very cool another example on how a XSS can lead to complete system compromisehttp://www.secuobs.com/twitter/news/90601.shtmlhttp://www.secuobs.com/twitter/news/90601.shtml Secuobs.com : 2010-05-07 13:54:34 - cesarcer - RT @EdiStrosar From XSS to arbitrary code execution: http://bitly/bGASBM via @reversemodehttp://www.secuobs.com/twitter/news/90600.shtmlhttp://www.secuobs.com/twitter/news/90600.shtml Secuobs.com : 2010-05-04 05:41:38 - cesarcer - @simubucks thanks, I don't know if I'm going to defcon, I would like to go but too many days in Vegas is not healthy :http://www.secuobs.com/twitter/news/89664.shtmlhttp://www.secuobs.com/twitter/news/89664.shtml Secuobs.com : 2010-04-30 16:01:38 - cesarcer - @MarioVilas looks cool, it can be easily turned out to build a data theft botnet , OpenDLB open data leak botnethttp://www.secuobs.com/twitter/news/88787.shtmlhttp://www.secuobs.com/twitter/news/88787.shtml Secuobs.com : 2010-04-28 03:03:26 - cesarcer - RT @michael_howard HITB eZine #2 avail http://wwwhackintheboxorg/misc/HITB-Ezine-Issue-002pdfhttp://www.secuobs.com/twitter/news/87742.shtmlhttp://www.secuobs.com/twitter/news/87742.shtml Secuobs.com : 2010-04-17 04:58:03 - cesarcer - RT @kpoulsen FBI ❤s cloud computing http://bitly/aqtVEfhttp://www.secuobs.com/twitter/news/84235.shtmlhttp://www.secuobs.com/twitter/news/84235.shtml Secuobs.com : 2010-04-15 17:19:14 - cesarcer - RT @ryanaraine full disclosure works, again sun fixes @taviso's java bug http://javasuncom/javase/6/webnotes/6u20htmlhttp://www.secuobs.com/twitter/news/83512.shtmlhttp://www.secuobs.com/twitter/news/83512.shtml Secuobs.com : 2010-04-14 23:12:36 - cesarcer - RT @RSnake Gotta love Chrome: http://hackersorg/blog/20100414/chrome-phishing/http://www.secuobs.com/twitter/news/83077.shtmlhttp://www.secuobs.com/twitter/news/83077.shtml Secuobs.com : 2010-04-14 06:33:52 - cesarcer - Apache compromised by XSS attack http://bitly/cjJ01S , still thinking XSS is not dangerous it ishttp://www.secuobs.com/twitter/news/82757.shtmlhttp://www.secuobs.com/twitter/news/82757.shtml Secuobs.com : 2010-04-13 12:08:59 - cesarcer - RT @ryanaraine cansecwest presentations posted http://dragoscom/csw10/http://www.secuobs.com/twitter/news/82468.shtmlhttp://www.secuobs.com/twitter/news/82468.shtml Secuobs.com : 2010-04-09 23:38:25 - cesarcer - RT @reversemode: JAVA Flaw:Not boring due to an undocumented-hidden command-line parameter -XXaltjvm Arbitrary dll execution on every s http://www.secuobs.com/twitter/news/81492.shtmlhttp://www.secuobs.com/twitter/news/81492.shtml Secuobs.com : 2010-04-09 23:38:25 - cesarcer - RT @kpoulsen Forbes writer re-brands spurious BGP announcements as offensive cyber weapons http://bitly/afsCHxhttp://www.secuobs.com/twitter/news/81491.shtmlhttp://www.secuobs.com/twitter/news/81491.shtml Secuobs.com : 2010-04-07 16:52:16 - cesarcer - SHADOWS IN THE CLOUD: Investigating Cyber Espionage 20 http://bitly/cfjOpb -full report on cyber espionagehttp://www.secuobs.com/twitter/news/80778.shtmlhttp://www.secuobs.com/twitter/news/80778.shtml Secuobs.com : 2010-04-07 01:42:59 - cesarcer - It seems in order to be a Oracle software engineer you must master how to introduce flaws in software, Oracle SDL everhttp://www.secuobs.com/twitter/news/80535.shtmlhttp://www.secuobs.com/twitter/news/80535.shtml Secuobs.com : 2010-04-02 16:57:16 - cesarcer - RT @jdallman Microsoft SDLv5 Microsoft updated their SDL process guidance paper with new requirements recommends http://isgd/bagvPhttp://www.secuobs.com/twitter/news/79427.shtmlhttp://www.secuobs.com/twitter/news/79427.shtml Secuobs.com : 2010-03-25 07:21:21 - cesarcer - RT @WeldPond: MITM SSL box for govt Just needs CA signed fake website cert I like the idea of a plugin that warns on Cert changes htt http://www.secuobs.com/twitter/news/76692.shtmlhttp://www.secuobs.com/twitter/news/76692.shtml Secuobs.com : 2010-03-24 02:50:27 - cesarcer - @nicowaisman it seems that selling 0days is now illegalhttp://www.secuobs.com/twitter/news/76251.shtmlhttp://www.secuobs.com/twitter/news/76251.shtml Secuobs.com : 2010-03-12 05:22:47 - cesarcer - RT @matalaz: I will be releasing a 0day remote preauthentication in Oracle Financials R12 next week at rootedcon conference http://un http://www.secuobs.com/twitter/news/72817.shtmlhttp://www.secuobs.com/twitter/news/72817.shtml Secuobs.com : 2010-03-10 05:02:11 - cesarcer - RT @ryanaraine oh boy, new ie 0day under attack http://threatpostcom/en_us/3tE -at least IE8 is not vulnerable :http://www.secuobs.com/twitter/news/71956.shtmlhttp://www.secuobs.com/twitter/news/71956.shtml Secuobs.com : 2010-02-27 00:13:55 - cesarcer - RT @mprodeus IE 0day for free http://isecpl/vulnerabilities10html -F1 to arbitrary code execution seems scaryhttp://www.secuobs.com/twitter/news/68983.shtmlhttp://www.secuobs.com/twitter/news/68983.shtml