http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2012-10-07 15:18:19 - stevejoblard : RT @securityshell: 64bit Mac OS-X kernel rootkit http://tco/oRWE0SqFhttp://www.secuobs.com/twitter/news/348893.shtmlhttp://www.secuobs.com/twitter/news/348893.shtml Secuobs.com : 2012-10-07 15:18:19 - stevejoblard - RT @opexxx: rubilyn-001targz - Mac OS X rootkit http://tco/h9pZPvUJhttp://www.secuobs.com/twitter/news/348892.shtmlhttp://www.secuobs.com/twitter/news/348892.shtml Secuobs.com : 2012-09-28 23:51:33 - stevejoblard - RT @hiddenillusion: Apple Mac OS X Lion Arbitrary Code Execution bug triggered by USB device insertion http://tco/GdSSuUhNhttp://www.secuobs.com/twitter/news/346867.shtmlhttp://www.secuobs.com/twitter/news/346867.shtml Secuobs.com : 2012-09-13 20:24:58 - stevejoblard - RT @instructables: Apple iOS Serial/USB Cable for Kernel Debugging http://tco/NJFUKcDYhttp://www.secuobs.com/twitter/news/343596.shtmlhttp://www.secuobs.com/twitter/news/343596.shtml Secuobs.com : 2012-09-06 21:34:28 - stevejoblard - RT @EvilFingers: Java Zero-Day - First Outbreak: A few days ago I talked about the existence of a new java zero-day flaw CVE-201 htt http://www.secuobs.com/twitter/news/341582.shtmlhttp://www.secuobs.com/twitter/news/341582.shtml Secuobs.com : 2012-06-09 18:25:41 - stevejoblard - RT @Myst3rie: Tool for decompiling python bytecode https://tco/zKGK20FC #sstichttp://www.secuobs.com/twitter/news/326404.shtmlhttp://www.secuobs.com/twitter/news/326404.shtml Secuobs.com : 2012-06-09 18:25:41 - stevejoblard - RT @slashdot: MD5crypt Password Scrambler Is No Longer Considered Safe http://tco/jjpkNC8whttp://www.secuobs.com/twitter/news/326403.shtmlhttp://www.secuobs.com/twitter/news/326403.shtml Secuobs.com : 2012-04-24 09:19:53 - stevejoblard - New Flashback Variant Continues Java Attack, Installs Without Password http://tco/1iK0Li6Vhttp://www.secuobs.com/twitter/news/314983.shtmlhttp://www.secuobs.com/twitter/news/314983.shtml Secuobs.com : 2012-04-21 19:03:55 - stevejoblard - RT @gkeizer: Oops wrong count means Flashback botnet still huge, controls 650K Macs http://tco/zt1xQaFdhttp://www.secuobs.com/twitter/news/314491.shtmlhttp://www.secuobs.com/twitter/news/314491.shtml Secuobs.com : 2012-04-20 22:25:32 - stevejoblard - @noarfromspace @b_sharov @codelancer In reverse order, the dns lookup list used by my FlashBack sample After that, it quitshttp://www.secuobs.com/twitter/news/314289.shtmlhttp://www.secuobs.com/twitter/news/314289.shtml Secuobs.com : 2012-04-20 22:25:32 - stevejoblard - DNS Redirection Protects Against Flashback Malware, Leads to False Infection Rates http://tco/r13STpu9http://www.secuobs.com/twitter/news/314288.shtmlhttp://www.secuobs.com/twitter/news/314288.shtml Secuobs.com : 2012-04-20 22:25:32 - stevejoblard - @b_sharov @codelancer But what I also wanted to show is that sinkholes from Kaspersky are masked by my provider's DNS pointing to localhosthttp://www.secuobs.com/twitter/news/314287.shtmlhttp://www.secuobs.com/twitter/news/314287.shtml Secuobs.com : 2012-04-14 20:07:01 - stevejoblard - RT @lysol_mr: 'Flashback' Mac malware: One more reason to switch to Linux: Given the vast numbers of Macs that are apparently http:/ http://www.secuobs.com/twitter/news/312546.shtmlhttp://www.secuobs.com/twitter/news/312546.shtml Secuobs.com : 2012-04-13 15:35:18 - stevejoblard - @mikko hey Mikko, they also deactivate Java That must be that part which takes megabytes :http://www.secuobs.com/twitter/news/312237.shtmlhttp://www.secuobs.com/twitter/news/312237.shtml Secuobs.com : 2012-04-13 04:47:32 - stevejoblard - RT @cdespinosa: Install Java for OS X 2012-003, available now Removes Flashback malwarehttp://www.secuobs.com/twitter/news/312072.shtmlhttp://www.secuobs.com/twitter/news/312072.shtml Secuobs.com : 2012-04-13 04:47:32 - stevejoblard - RT @slashdot: Apple Updates Java To Include Flashback Removal http://tco/mwsQKoF3http://www.secuobs.com/twitter/news/312071.shtmlhttp://www.secuobs.com/twitter/news/312071.shtml Secuobs.com : 2012-04-13 04:47:32 - stevejoblard - RT @rmogull: The java update disables the web plugin for all browsers… not just Safari If activated, re-disables after 35 days without http://www.secuobs.com/twitter/news/312070.shtmlhttp://www.secuobs.com/twitter/news/312070.shtml Secuobs.com : 2012-04-08 20:34:50 - stevejoblard - RT @devallois: Is that really suspicious Collecting Mac UUIDs with their corresponding IP address, even to infiltrate a botnet http:// http://www.secuobs.com/twitter/news/310516.shtmlhttp://www.secuobs.com/twitter/news/310516.shtml Secuobs.com : 2012-04-06 13:08:01 - stevejoblard - @b_sharov Boris, is that true Labs are infecting hourly their virtual boxes to test if FB payload changed What's about your stats thenhttp://www.secuobs.com/twitter/news/309938.shtmlhttp://www.secuobs.com/twitter/news/309938.shtml Secuobs.com : 2012-04-03 20:29:15 - stevejoblard - New Flashback Variant Takes Advantage of Unpatched Java Vulnerability http://tco/IjwvEbKUhttp://www.secuobs.com/twitter/news/309044.shtmlhttp://www.secuobs.com/twitter/news/309044.shtml Secuobs.com : 2012-03-21 10:09:56 - stevejoblard - Tibet Malware Takes Advantage of Java Vulnerability to Harvest Information on Macs: http://tco/ynesafdIhttp://www.secuobs.com/twitter/news/305321.shtmlhttp://www.secuobs.com/twitter/news/305321.shtml Secuobs.com : 2012-03-08 03:38:11 - stevejoblard - RT @hackerfantastic: GitHub mail alerting users to potential compromise of accounts via SSH keys http://tco/Pm9SYNd6http://www.secuobs.com/twitter/news/301084.shtmlhttp://www.secuobs.com/twitter/news/301084.shtml Secuobs.com : 2012-03-08 03:38:11 - stevejoblard - RT @hackerfantastic: A security vulnerability recently discovered made it possible for an attacker to add new SSH keys to arbitrary GitH http://www.secuobs.com/twitter/news/301083.shtmlhttp://www.secuobs.com/twitter/news/301083.shtml Secuobs.com : 2012-01-17 01:21:41 - stevejoblard - RT @xanda: RT @malc0de: Perl script to monitor pastebin in near real time and alert/email on keywords of interest - http://tco/iRke4mNYhttp://www.secuobs.com/twitter/news/284440.shtmlhttp://www.secuobs.com/twitter/news/284440.shtml Secuobs.com : 2012-01-08 21:26:54 - stevejoblard - RT @StevenBlanchard: I've solved the bugged Java mystery on my Mac Turns out it was my anti-virus causing issues with the runtimes on boothttp://www.secuobs.com/twitter/news/281772.shtmlhttp://www.secuobs.com/twitter/news/281772.shtml Secuobs.com : 2012-01-02 19:39:26 - stevejoblard - RT @seanhn: God dammit Python Why do people insist on writing recursive algorithms in a language with no tail-call optimisation Good l http://www.secuobs.com/twitter/news/279925.shtmlhttp://www.secuobs.com/twitter/news/279925.shtml Secuobs.com : 2011-12-30 19:38:06 - stevejoblard - RT @Blackmond_: Weevely is a PHP backdoor that simulate telnet-like connection Polymorphic PHP Code and more stuff like NIDS evasion - http://www.secuobs.com/twitter/news/279361.shtmlhttp://www.secuobs.com/twitter/news/279361.shtml Secuobs.com : 2011-12-28 07:16:40 - stevejoblard - RT @badeip: #iOS kernelcache encrypt/decrypt utility: https://tco/kaORPeoD Released in celebration of the @pod2g #untetherhttp://www.secuobs.com/twitter/news/278718.shtmlhttp://www.secuobs.com/twitter/news/278718.shtml Secuobs.com : 2011-12-27 20:09:08 - stevejoblard - RT @macguruu: Mac News Apple Updates Anti-Malware Tools To Address PDF Trojan: Apple Updates Anti-Malware Tools To http://tco/MyrUh http://www.secuobs.com/twitter/news/278575.shtmlhttp://www.secuobs.com/twitter/news/278575.shtml Secuobs.com : 2011-12-21 19:47:43 - stevejoblard - RT @chris_kirsch: Metasploit Tutorial: An introduction to Metasploit Community http://tco/Yz5Xnwi7http://www.secuobs.com/twitter/news/277260.shtmlhttp://www.secuobs.com/twitter/news/277260.shtml Secuobs.com : 2011-11-27 20:32:57 - stevejoblard - RT @cBekrar: Don't blame #FinFisher for installing Gov trojans via an iTunes 0day, blame Apple for not fixing this public flaw during 3 http://www.secuobs.com/twitter/news/269482.shtmlhttp://www.secuobs.com/twitter/news/269482.shtml Secuobs.com : 2011-11-27 20:32:57 - stevejoblard - RT @memset_blog: Syscall Hijacking: OpenBSD: Hi,in this post I show you how to hijack the system calls in the latest OpenBSD ker htt http://www.secuobs.com/twitter/news/269481.shtmlhttp://www.secuobs.com/twitter/news/269481.shtml Secuobs.com : 2011-11-16 01:22:56 - stevejoblard - RT @Redscan_Ltd: DNS Changer Lives: Despite federal prosecutors recent success against the infrastructure of DNS Changer and the htt http://www.secuobs.com/twitter/news/266132.shtmlhttp://www.secuobs.com/twitter/news/266132.shtml Secuobs.com : 2011-11-11 00:49:28 - stevejoblard - FBI Shuts Down DNSChanger Ring: http://tco/krfXWENf via @IntegoSecurityhttp://www.secuobs.com/twitter/news/264957.shtmlhttp://www.secuobs.com/twitter/news/264957.shtml Secuobs.com : 2011-11-10 00:24:29 - stevejoblard - RT @Bendihossan: Apple removed the Sophos Anti-Malware app from the Mac App Store because it used a kernel driver needed http://tco/2Se http://www.secuobs.com/twitter/news/264382.shtmlhttp://www.secuobs.com/twitter/news/264382.shtml Secuobs.com : 2011-11-10 00:24:29 - stevejoblard - RT @GPGTools: Finally, we have released a new GPGTools Installer for OS X Lion and it contains a compatible version of GPGMail See: htt http://www.secuobs.com/twitter/news/264381.shtmlhttp://www.secuobs.com/twitter/news/264381.shtml Secuobs.com : 2011-11-07 14:06:55 - stevejoblard - RT @drspringfield: Who puts font parsing in the kernel Bad idea When I hard it was PDF-Kernel, I knew it was fontshttp://www.secuobs.com/twitter/news/263582.shtmlhttp://www.secuobs.com/twitter/news/263582.shtml Secuobs.com : 2011-10-28 19:31:04 - stevejoblard - @andreasdotorg You can't scan the filesystem on iOS devices from an iOS app But you can download files by USB to scan on a Pc #jbtoolshttp://www.secuobs.com/twitter/news/260957.shtmlhttp://www.secuobs.com/twitter/news/260957.shtml Secuobs.com : 2011-10-26 14:56:03 - stevejoblard - RT @i0n1c: Too bad: I just realized that Apple fixed the internal overflow in _MALLOC inside iOS5 That kills about a million heap overf http://www.secuobs.com/twitter/news/260172.shtmlhttp://www.secuobs.com/twitter/news/260172.shtml Secuobs.com : 2011-10-25 01:27:46 - stevejoblard - RT @slashdot: Bug Opens Chrome to Easy Remote Code Execution http://tco/VbiQixyPhttp://www.secuobs.com/twitter/news/259645.shtmlhttp://www.secuobs.com/twitter/news/259645.shtml Secuobs.com : 2011-10-25 01:27:46 - stevejoblard - Seeking a SQL Expert Requests Optimizationshttp://tco/pF61au3hhttp://www.secuobs.com/twitter/news/259644.shtmlhttp://www.secuobs.com/twitter/news/259644.shtml Secuobs.com : 2011-10-21 10:45:07 - stevejoblard - RT @OHHerpMonkey: Putting everything on the cloud is a great idea for the monkey on the move #cloudmonkeyhttp://www.secuobs.com/twitter/news/258868.shtmlhttp://www.secuobs.com/twitter/news/258868.shtml Secuobs.com : 2011-10-20 11:38:00 - stevejoblard - What's about the Mac OS X Java http://tco/xMn8DQWW and the fix: http://tco/I9EqaAX6http://www.secuobs.com/twitter/news/258496.shtmlhttp://www.secuobs.com/twitter/news/258496.shtml Secuobs.com : 2011-09-24 05:38:51 - stevejoblard - Mac PDF Trojan Horse Surfaces; Threat is Low: http://tco/fCg8mHwK via @IntegoSecurityhttp://www.secuobs.com/twitter/news/250753.shtmlhttp://www.secuobs.com/twitter/news/250753.shtml Secuobs.com : 2011-08-18 15:43:52 - stevejoblard - RT @geeknizer: Android, iPhone Keylogger using Accelerometer Data http://tco/yeoB6Wshttp://www.secuobs.com/twitter/news/239459.shtmlhttp://www.secuobs.com/twitter/news/239459.shtml Secuobs.com : 2011-08-18 15:43:52 - stevejoblard - RT @georgevhulme: Dropbox cloud was a haven for data thieves, researchers say - Computerworld http://tco/rhtqto7 - #shockedEtchttp://www.secuobs.com/twitter/news/239458.shtmlhttp://www.secuobs.com/twitter/news/239458.shtml Secuobs.com : 2011-08-07 02:27:16 - stevejoblard - @kernelpool @djrbliss yes, you're right No os x PUB kernel exploit 0days rulezhttp://www.secuobs.com/twitter/news/235748.shtmlhttp://www.secuobs.com/twitter/news/235748.shtml Secuobs.com : 2011-08-04 23:46:00 - stevejoblard - RT @taviso: Here's the paper to accompany my Blackhat talk, if you're evaluating or deploying Sophos you might want to check it out http http://www.secuobs.com/twitter/news/235040.shtmlhttp://www.secuobs.com/twitter/news/235040.shtml Secuobs.com : 2011-08-03 00:58:26 - stevejoblard - RT @avivra: RT @ryanaraine: zero-day vulnerability in millions of wordpress themes http://tco/kGB9MpLhttp://www.secuobs.com/twitter/news/234198.shtmlhttp://www.secuobs.com/twitter/news/234198.shtml Secuobs.com : 2011-07-10 08:59:38 - stevejoblard - @i0n1c Because some of them are already working on variants Kernel exploits are so rarehttp://www.secuobs.com/twitter/news/226085.shtmlhttp://www.secuobs.com/twitter/news/226085.shtml Secuobs.com : 2011-07-06 16:19:57 - stevejoblard - RT @p4ppy: iOS 433 + http://tco/Hfszoyb = iDevice untethered jailbreak and remote rootkit injection in open wifi areas o/http://www.secuobs.com/twitter/news/224938.shtmlhttp://www.secuobs.com/twitter/news/224938.shtml Secuobs.com : 2011-06-16 17:42:15 - stevejoblard - RT @securls: AWStats Totals 114 Remote Command Execution: This Metasploit module exploits an arbitrary command execution vul http:// http://www.secuobs.com/twitter/news/218138.shtmlhttp://www.secuobs.com/twitter/news/218138.shtml Secuobs.com : 2011-06-13 18:58:31 - stevejoblard - Amac Keylogger Professional, a commercial application uses logKext from fsb software, a free KeyLogger for Mac $12997 #failhttp://www.secuobs.com/twitter/news/216954.shtmlhttp://www.secuobs.com/twitter/news/216954.shtml Secuobs.com : 2011-06-12 13:28:10 - stevejoblard - RT @CoveringWeb: JailbreakMe 30 Coming Soon To Jailbreak iPad 2 Using PDF Exploit By Comex http://bitly/mp7S4s RThttp://www.secuobs.com/twitter/news/216690.shtmlhttp://www.secuobs.com/twitter/news/216690.shtml Secuobs.com : 2011-05-26 23:07:58 - stevejoblard - RT @martinbowling: Amazon launches Mac Download Store http://jmp/jyWkpphttp://www.secuobs.com/twitter/news/211002.shtmlhttp://www.secuobs.com/twitter/news/211002.shtml Secuobs.com : 2011-05-26 13:52:51 - stevejoblard - RT @securls: AWStats Totals 114 Remote Command Execution: This Metasploit module exploits an arbitrary command execution vul http:// http://www.secuobs.com/twitter/news/210832.shtmlhttp://www.secuobs.com/twitter/news/210832.shtml Secuobs.com : 2011-05-02 19:38:14 - stevejoblard - MACDefender Rogue Anti-Malware Program Attacks Macs via SEO Poisoning: http://tco/m4T8dKg via @IntegoSecurityhttp://www.secuobs.com/twitter/news/201508.shtmlhttp://www.secuobs.com/twitter/news/201508.shtml Secuobs.com : 2011-03-22 20:18:44 - stevejoblard - RT @djrbliss: A fun OS X kernel bug in HFS+ Advisory: http://googl/YhZ33 Exploit: http://googl/xgfNDhttp://www.secuobs.com/twitter/news/187428.shtmlhttp://www.secuobs.com/twitter/news/187428.shtml Secuobs.com : 2011-03-18 20:57:15 - stevejoblard - RT @simonstl: via @jonathanstark: Why Nitro JavaScript Engine Isn't Available http://bitly/dSkfEU Sounds like Safari itself has ma http://www.secuobs.com/twitter/news/186248.shtmlhttp://www.secuobs.com/twitter/news/186248.shtml Secuobs.com : 2011-03-18 00:48:23 - stevejoblard - RT @threatpost: A VP at Gartner Research authored a piece on whether AV software is needed on OS X and Linux desktops the answer is yes http://www.secuobs.com/twitter/news/185903.shtmlhttp://www.secuobs.com/twitter/news/185903.shtml Secuobs.com : 2011-02-16 08:05:47 - stevejoblard - Oracle just fixes big remote holes in Java What's about Apple's Java Malware are coming Steve #Mac #malwarehttp://www.secuobs.com/twitter/news/174559.shtmlhttp://www.secuobs.com/twitter/news/174559.shtml Secuobs.com : 2011-02-14 21:24:37 - stevejoblard - RT @windknown: I will be at Cansecwest this year and share my rootkit source for latest Mac OShttp://www.secuobs.com/twitter/news/173709.shtmlhttp://www.secuobs.com/twitter/news/173709.shtml Secuobs.com : 2011-02-14 21:24:37 - stevejoblard - RT @windknown: Analyzing some kernel extensions for mac osx, hope to find some bad code @@http://www.secuobs.com/twitter/news/173708.shtmlhttp://www.secuobs.com/twitter/news/173708.shtml Secuobs.com : 2011-02-14 12:18:48 - stevejoblard - @djtrend OSX/Rsplug is a dns changer for Machttp://www.secuobs.com/twitter/news/173599.shtmlhttp://www.secuobs.com/twitter/news/173599.shtml Secuobs.com : 2011-02-13 21:38:52 - stevejoblard - RT @AshMCairo: @strredwolf Also it's a myth that there are NO Linux viruses Just not many people bother writing them Same goes for Machttp://www.secuobs.com/twitter/news/173454.shtmlhttp://www.secuobs.com/twitter/news/173454.shtml Secuobs.com : 2011-02-12 01:35:54 - stevejoblard - RT @jeromesegura: RT @lennyzeltser: How to analyze suspicious PDF files using PDF Stream Dumper: http://googl/UhOAS - good readhttp://www.secuobs.com/twitter/news/173048.shtmlhttp://www.secuobs.com/twitter/news/173048.shtml Secuobs.com : 2011-02-11 16:12:48 - stevejoblard - RT @THEdarknet: Mallory – Transparent TCP UDP Proxy: Mallory is a transparent TCP and UDP proxy It can be used to get at thos http http://www.secuobs.com/twitter/news/172937.shtmlhttp://www.secuobs.com/twitter/news/172937.shtml Secuobs.com : 2011-02-10 22:39:08 - stevejoblard - The hidden password @ rootkitcom, http://dazzlepodcom/rootkit/ is 123456http://www.secuobs.com/twitter/news/172698.shtmlhttp://www.secuobs.com/twitter/news/172698.shtml Secuobs.com : 2011-02-10 22:39:08 - stevejoblard - The 123456 password was used by 1028 fellow hackers on rootkitcom Mine was only one char long Faster to log inhttp://www.secuobs.com/twitter/news/172697.shtmlhttp://www.secuobs.com/twitter/news/172697.shtml Secuobs.com : 2011-02-09 02:23:13 - stevejoblard - RT @ncaproni: IIS Backdoor http://feedlycom/k/hGz2ykhttp://www.secuobs.com/twitter/news/171748.shtmlhttp://www.secuobs.com/twitter/news/171748.shtml Secuobs.com : 2011-02-07 15:17:40 - stevejoblard - RT @Ken_Riley: A virus or hacker got into an old email account today and spoof emails got out to some if my contacts How's that happen http://www.secuobs.com/twitter/news/171059.shtmlhttp://www.secuobs.com/twitter/news/171059.shtml Secuobs.com : 2011-02-07 15:17:40 - stevejoblard - RT @comex: So Chrome's sandboxing on OS X relies on Seatbelt Based on the current code, can't any sandboxed process open IOKit user cl http://www.secuobs.com/twitter/news/171058.shtmlhttp://www.secuobs.com/twitter/news/171058.shtml Secuobs.com : 2011-01-30 23:58:01 - stevejoblard - RT @TimoHirvonen: Root privilege escalation was used to attack SourceForgenet Full report: http://sourceforgenet/blog/sourceforge-att http://www.secuobs.com/twitter/news/168368.shtmlhttp://www.secuobs.com/twitter/news/168368.shtml Secuobs.com : 2011-01-28 18:44:21 - stevejoblard - RT @41414141: Seriously @symantec, no less than 4 unauthenticated stack based buffer overflows + 1 command exec via msgsysexe Security http://www.secuobs.com/twitter/news/167644.shtmlhttp://www.secuobs.com/twitter/news/167644.shtml Secuobs.com : 2011-01-28 18:44:21 - stevejoblard - That freebsd bug gives a Kernel Panic on #osx 1066: wwwexploit-dbcom/exploits/16064/Thanks aPpLehttp://www.secuobs.com/twitter/news/167643.shtmlhttp://www.secuobs.com/twitter/news/167643.shtml Secuobs.com : 2011-01-28 18:44:21 - stevejoblard - @xorlgr If wwwexploit-dbcom/exploits/16064 is your old bug, yes I have your code :- And it works on OS X 1066 - Kernel Panichttp://www.secuobs.com/twitter/news/167642.shtmlhttp://www.secuobs.com/twitter/news/167642.shtml Secuobs.com : 2011-01-27 03:29:36 - stevejoblard - RT @i0n1c: Haha LOL OH: You know the iOS 43 ASLR is implemented by patching crashreporter to report random image load addresses on e http://www.secuobs.com/twitter/news/166933.shtmlhttp://www.secuobs.com/twitter/news/166933.shtml Secuobs.com : 2011-01-26 18:46:22 - stevejoblard - Intel to block 0day http://wwwinfoworldcom/d/security-central/intel-developing-security-game-changer-495, WTFhttp://www.secuobs.com/twitter/news/166694.shtmlhttp://www.secuobs.com/twitter/news/166694.shtml Secuobs.com : 2011-01-25 13:28:33 - stevejoblard - RT @rodgerswisdom: Macs are just the intermediary for viruses Your usb drive from a PC goes into a mac and then the mac transfers it to http://www.secuobs.com/twitter/news/166152.shtmlhttp://www.secuobs.com/twitter/news/166152.shtml Secuobs.com : 2011-01-21 22:34:10 - stevejoblard - RT @dragosr: Heads up My Mac is Safe dreamers, 16 pourcents of this botnet is OSX http://googl/ghSpohttp://www.secuobs.com/twitter/news/165048.shtmlhttp://www.secuobs.com/twitter/news/165048.shtml Secuobs.com : 2011-01-20 21:46:59 - stevejoblard - RT @securityshell: Hacking with USB keyboard emulators http://wwwh-onlinecom/security/news/item/Hacking-with-USB-keyboard-emulators-1 http://www.secuobs.com/twitter/news/164583.shtmlhttp://www.secuobs.com/twitter/news/164583.shtml Secuobs.com : 2011-01-16 16:22:30 - stevejoblard - RT @marshray: The OpenBSD IPsec-Stuxnet connection http://extendedsubsetcom/p=43http://www.secuobs.com/twitter/news/163134.shtmlhttp://www.secuobs.com/twitter/news/163134.shtml Secuobs.com : 2011-01-14 10:15:31 - stevejoblard - RT @ChrisJohnRiley: Sudo -g privilege escalation CVE-2011-0010 -- http://wpme/p6I7X-Ee special thanks to @timb_machine for the helphttp://www.secuobs.com/twitter/news/162502.shtmlhttp://www.secuobs.com/twitter/news/162502.shtml Secuobs.com : 2011-01-12 16:40:33 - stevejoblard - RT @xorlgr: I have just been informed of a hilarious/crappy kernel protection bypass on Linux actively used in the wild for more than http://www.secuobs.com/twitter/news/161838.shtmlhttp://www.secuobs.com/twitter/news/161838.shtml Secuobs.com : 2011-01-12 16:40:33 - stevejoblard - RT @dinodaizovi: If you will be at BlackHat DC, check out our Mac Exploit Kitchen workshop last tweet We'll pwn some Mach servers, http://www.secuobs.com/twitter/news/161837.shtmlhttp://www.secuobs.com/twitter/news/161837.shtml Secuobs.com : 2011-01-06 02:44:42 - stevejoblard - RT @kylevanhorn: Oof Spent 2 hours tracing a malware virus A flash codec rewrote the DNS#, redir everything to a spam page #mac #loc http://www.secuobs.com/twitter/news/160066.shtmlhttp://www.secuobs.com/twitter/news/160066.shtml Secuobs.com : 2011-01-04 11:41:42 - stevejoblard - RT @hackerfantastic: Improved teensy++ USB HID keyboard code for pwning Mac OS-X systems during 27c3 - more reliable revised code is her http://www.secuobs.com/twitter/news/159588.shtmlhttp://www.secuobs.com/twitter/news/159588.shtml Secuobs.com : 2011-01-03 04:40:44 - stevejoblard - RT @CiscoSecurity: The Wolf Who Cried PDF - http://bitly/hdnfof Maybe it is time for AV scanners to start looking inside PDFshttp://www.secuobs.com/twitter/news/159219.shtmlhttp://www.secuobs.com/twitter/news/159219.shtml Secuobs.com : 2010-12-19 10:21:47 - stevejoblard - RT @mdowd: Suggestion for OpenBSD webpage: Only one government-installed backdoor in over 10 yearshttp://www.secuobs.com/twitter/news/155251.shtmlhttp://www.secuobs.com/twitter/news/155251.shtml Secuobs.com : 2010-12-17 03:00:41 - stevejoblard - @0xcharlie There's at least this x86_64 os x shellcode here: http://wwwexploit-dbcom/exploits/15618/http://www.secuobs.com/twitter/news/154309.shtmlhttp://www.secuobs.com/twitter/news/154309.shtml Secuobs.com : 2010-12-15 15:01:08 - stevejoblard - Did the FBI Plant Backdoors in OpenBSD: http://blogintegocom/2010/12/15/did-the-fbi-plant-backdoors-in-openbsd/http://www.secuobs.com/twitter/news/153517.shtmlhttp://www.secuobs.com/twitter/news/153517.shtml Secuobs.com : 2010-12-10 16:04:53 - stevejoblard - RT @darkoperator: Half of all botnets hosted in just 50 servers http://bitly/dYAVFchttp://www.secuobs.com/twitter/news/151648.shtmlhttp://www.secuobs.com/twitter/news/151648.shtml Secuobs.com : 2010-12-10 16:04:53 - stevejoblard - RT @adulau: It's now official Java is dead http://fovc/Mhttp://www.secuobs.com/twitter/news/151647.shtmlhttp://www.secuobs.com/twitter/news/151647.shtml Secuobs.com : 2010-12-09 20:48:51 - stevejoblard - RT @Panda_Security: Operation #Payback Is About To Attack Amazoncom http://readbi/dF4vYd via @alleyinsiderhttp://www.secuobs.com/twitter/news/151218.shtmlhttp://www.secuobs.com/twitter/news/151218.shtml Secuobs.com : 2010-12-06 20:30:07 - stevejoblard - RT @xanda: WordPress 0day exploit in all version http://bitly/fAyjsyhttp://www.secuobs.com/twitter/news/149702.shtmlhttp://www.secuobs.com/twitter/news/149702.shtml Secuobs.com : 2010-12-02 14:18:05 - stevejoblard - RT @VUPEN: ProFTPDorg main FTP servers have been compromied and backdoored using a 0day inProFTPD http://bitly/euPHLNhttp://www.secuobs.com/twitter/news/148244.shtmlhttp://www.secuobs.com/twitter/news/148244.shtml Secuobs.com : 2010-11-27 04:10:49 - stevejoblard - RT @jeromesegura: Java: up-to-date and yet vulnerable http://bitly/eIsgushttp://www.secuobs.com/twitter/news/146643.shtmlhttp://www.secuobs.com/twitter/news/146643.shtml Secuobs.com : 2010-11-26 02:22:42 - stevejoblard - RT @darkoperator: Half of all botnets hosted in just 50 servers http://bitly/dYAVFchttp://www.secuobs.com/twitter/news/146357.shtmlhttp://www.secuobs.com/twitter/news/146357.shtml Secuobs.com : 2010-11-20 05:26:19 - stevejoblard - RT @sbiernacki: Ran a virus/malware/spyware scan on my Mac weird, huh last night in an effort to figure out my strange webcam issue http://www.secuobs.com/twitter/news/144394.shtmlhttp://www.secuobs.com/twitter/news/144394.shtml Secuobs.com : 2010-11-16 18:41:12 - stevejoblard - @i0n1c reversing with gdb by instancehttp://www.secuobs.com/twitter/news/142922.shtmlhttp://www.secuobs.com/twitter/news/142922.shtml Secuobs.com : 2010-11-16 10:04:09 - stevejoblard - RT @ithilgore: Almost 2 days till Phrack 67http://www.secuobs.com/twitter/news/142768.shtmlhttp://www.secuobs.com/twitter/news/142768.shtml Secuobs.com : 2010-11-14 17:18:50 - stevejoblard - RT @taetin: Mac Help i got an unknown exe file from my USB probably a virus i dumped it into trash now, can’t empty trash coz the ex http://www.secuobs.com/twitter/news/142243.shtmlhttp://www.secuobs.com/twitter/news/142243.shtml Secuobs.com : 2010-11-12 11:09:47 - stevejoblard - RT @dinodaizovi: Did 1065 updating bootefi really take PGP completely by surprise Did none of the betas update bootefi Did PGP ne http://www.secuobs.com/twitter/news/141657.shtmlhttp://www.secuobs.com/twitter/news/141657.shtml Secuobs.com : 2010-11-12 11:09:47 - stevejoblard - RT @dinodaizovi: How long will PGP prevent their Mac users from updating and applying Apple's mega security updatehttp://www.secuobs.com/twitter/news/141656.shtmlhttp://www.secuobs.com/twitter/news/141656.shtml Secuobs.com : 2010-11-11 21:57:32 - stevejoblard - RT @fr33project: phrack 67 will be released on November 17 http://wwwphrackorg/http://www.secuobs.com/twitter/news/141376.shtmlhttp://www.secuobs.com/twitter/news/141376.shtml Secuobs.com : 2010-11-11 21:57:32 - stevejoblard - RT @_snagg: good news about OSX update is that GPGMail still works in case you were wonderinghttp://www.secuobs.com/twitter/news/141375.shtmlhttp://www.secuobs.com/twitter/news/141375.shtml Secuobs.com : 2010-11-11 21:57:32 - stevejoblard - RT @druidian: @0xcharlie My Apple 0day remains unpatched as well :http://www.secuobs.com/twitter/news/141374.shtmlhttp://www.secuobs.com/twitter/news/141374.shtml Secuobs.com : 2010-10-28 18:56:00 - stevejoblard - RT @kirillcool: A Trojan horse gets nowhere due to scary looking sequence of Java security alerts - http://bitly/c21crR - who's laughin http://www.secuobs.com/twitter/news/136267.shtmlhttp://www.secuobs.com/twitter/news/136267.shtml Secuobs.com : 2010-10-28 02:50:30 - stevejoblard - RT @jeromesegura: Koobface on Linux does 'not' appear to survive a reboot http://bitly/cilLZ6http://www.secuobs.com/twitter/news/135917.shtmlhttp://www.secuobs.com/twitter/news/135917.shtml Secuobs.com : 2010-10-28 02:50:30 - stevejoblard - RT @gianlucaSB: Koobface starts spreading using java: http://owly/30orT cross platform, but so far the applet asks for permission to be http://www.secuobs.com/twitter/news/135916.shtmlhttp://www.secuobs.com/twitter/news/135916.shtml Secuobs.com : 2010-10-28 02:50:30 - stevejoblard - RT @navidrockni: New Java-Based Malware Targets Mac OS X, But Threat Level Disputed http://tco/fZwGJUFhttp://www.secuobs.com/twitter/news/135915.shtmlhttp://www.secuobs.com/twitter/news/135915.shtml Secuobs.com : 2010-10-28 02:50:30 - stevejoblard - RT @garytijuana: New Java-Based Malware Targets Mac OS X, But Threat Level Disputed: Security alert dialog box generated by malware h http://www.secuobs.com/twitter/news/135914.shtmlhttp://www.secuobs.com/twitter/news/135914.shtml Secuobs.com : 2010-10-28 02:50:30 - stevejoblard - RT @bknabe: RT @TechZader: New Java trojan attacks OS X via social networks sites http://bitly/9ExOgz Intego says flawed Tweeks c http://www.secuobs.com/twitter/news/135913.shtmlhttp://www.secuobs.com/twitter/news/135913.shtml Secuobs.com : 2010-10-28 02:50:30 - stevejoblard - RT @jeromesegura: Koobface Trojan Botches Facebook Attack On Mac Users - wish I had a Mac to try to repro what I did on Ubuntuhttp://www.secuobs.com/twitter/news/135912.shtmlhttp://www.secuobs.com/twitter/news/135912.shtml Secuobs.com : 2010-10-28 02:50:30 - stevejoblard - RT @chriswb: And so the invasion starts; Java based malware targets Mac OS X - http://macrumors/d6yrIShttp://www.secuobs.com/twitter/news/135911.shtmlhttp://www.secuobs.com/twitter/news/135911.shtml Secuobs.com : 2010-10-26 19:06:12 - stevejoblard - RT @hubert3: The iPhone passcode bypass vulnerability also allows full USB access More significant than browsing address book makin http://www.secuobs.com/twitter/news/135227.shtmlhttp://www.secuobs.com/twitter/news/135227.shtml Secuobs.com : 2010-10-26 05:50:04 - stevejoblard - RT @wildeep: Another Satisfied Customer: Removed the spyware DNS Changer 11 from his Mac Safari now goes where it's told, and doesn' http://www.secuobs.com/twitter/news/135025.shtmlhttp://www.secuobs.com/twitter/news/135025.shtml Secuobs.com : 2010-10-25 00:00:00 - stevejoblard - RT @CatalepsicFox: New malware MacOS I know there is two that Apple patch up Is there a recent one My mac is crashing especially Mail http://www.secuobs.com/twitter/news/134697.shtmlhttp://www.secuobs.com/twitter/news/134697.shtml Secuobs.com : 2010-10-21 22:38:03 - stevejoblard - RT @SecuObs: ESRT @HenkvanRoest - Apple Updates OS X Java Quicker Than Usual http://bitly/9WcW1mhttp://www.secuobs.com/twitter/news/133772.shtmlhttp://www.secuobs.com/twitter/news/133772.shtml Secuobs.com : 2010-10-19 11:45:32 - stevejoblard - RT @MarioVilas: OpenRCE Anti Reverse Engineering Techniques Database http://bitly/an0pPnhttp://www.secuobs.com/twitter/news/132619.shtmlhttp://www.secuobs.com/twitter/news/132619.shtml Secuobs.com : 2010-09-21 19:03:40 - stevejoblard - RT @safety: We've identified and are patching a XSS attack; as always, please message @safety if you have info regarding such an exploithttp://www.secuobs.com/twitter/news/123932.shtmlhttp://www.secuobs.com/twitter/news/123932.shtml Secuobs.com : 2010-09-21 02:24:15 - stevejoblard - RT @ethicalhack3r: RT @MBenLakhoua: Visa website vulnerable to XSS http://bitly/b06Ogf // #failhttp://www.secuobs.com/twitter/news/123351.shtmlhttp://www.secuobs.com/twitter/news/123351.shtml Secuobs.com : 2010-09-21 02:24:15 - stevejoblard - RT @esizkur: CVE-2010-0405: awesome BZ2_decompress had an integer overflowhttp://www.secuobs.com/twitter/news/123350.shtmlhttp://www.secuobs.com/twitter/news/123350.shtml Secuobs.com : 2010-09-18 08:59:41 - stevejoblard - RT @tferris: Adobe Flashplayer 101 0day currently being exploited in the wild http://adobecom/support/security/advisories/apsa10-03htmlhttp://www.secuobs.com/twitter/news/122192.shtmlhttp://www.secuobs.com/twitter/news/122192.shtml Secuobs.com : 2010-09-17 23:01:30 - stevejoblard - RT @patrikrunald: Another Adobe Flash vulnerability announced This one affects Windows, Macs, Linux, Solaris *and* Android http://bit http://www.secuobs.com/twitter/news/121712.shtmlhttp://www.secuobs.com/twitter/news/121712.shtml Secuobs.com : 2010-09-17 23:01:30 - stevejoblard - RT @ibmkhd: Is your Mac hacked by a Rootkit: Viruses and trojans are getting into the systems through many holes these days – http:/ http://www.secuobs.com/twitter/news/121711.shtmlhttp://www.secuobs.com/twitter/news/121711.shtml Secuobs.com : 2010-09-17 23:01:30 - stevejoblard - RT @pedramamini: Impressive, StuxNet malware utilizes 4 zero-day to spread Two of which remain unpatched: http://jmp/ciwazkhttp://www.secuobs.com/twitter/news/121710.shtmlhttp://www.secuobs.com/twitter/news/121710.shtml Secuobs.com : 2010-09-17 23:01:30 - stevejoblard - Where can I read a great documentation on mac os x 64 bits memory scheme Kernel vs userland memory sharinghttp://www.secuobs.com/twitter/news/121709.shtmlhttp://www.secuobs.com/twitter/news/121709.shtml Secuobs.com : 2010-09-17 23:01:30 - stevejoblard - RT @aradpop: Flash 0day CVE-2010-2884: wrong object passed to nextname;probably jumped to 0x0Eright after fuzz-little effort in expl http://www.secuobs.com/twitter/news/121708.shtmlhttp://www.secuobs.com/twitter/news/121708.shtml Secuobs.com : 2010-09-17 23:01:30 - stevejoblard - RT @kernelpool: Looks like the Linux x64 compat mode stack pointer underflow CVE-2010-3081 has been known for a while: http://bitly/d http://www.secuobs.com/twitter/news/121707.shtmlhttp://www.secuobs.com/twitter/news/121707.shtml Secuobs.com : 2010-09-17 23:01:30 - stevejoblard - RT @xme: RT @helpnetsecurity: BruCON planning halted by malware-infected aiport website - http://bitly/dtG0VW - Scary ;-http://www.secuobs.com/twitter/news/121706.shtmlhttp://www.secuobs.com/twitter/news/121706.shtml Secuobs.com : 2010-07-08 23:17:32 - stevejoblard - RT @madpowah: RT @jonoberheide: rm -rf ~/cache; ln -s /etc/shadow ~/cache; ssh localhost trigger pam_motd by re-logging in and you'll http://www.secuobs.com/twitter/news/112404.shtmlhttp://www.secuobs.com/twitter/news/112404.shtml Secuobs.com : 2010-06-25 09:14:43 - stevejoblard - Got this in a phishing e-mail: hxxp://twittercom/account/not_my_account/A twitter 0day http://www.secuobs.com/twitter/news/107524.shtmlhttp://www.secuobs.com/twitter/news/107524.shtml Secuobs.com : 2010-05-28 23:51:20 - stevejoblard - @Colourboxonline it's a kernel panic error A bug, not a mac virus ;http://www.secuobs.com/twitter/news/98158.shtmlhttp://www.secuobs.com/twitter/news/98158.shtml Secuobs.com : 2010-04-20 17:29:51 - stevejoblard - RT @briankrebs: Mozilla disables insecure Java plugin in Firefox http://bitly/93a61Thttp://www.secuobs.com/twitter/news/85240.shtmlhttp://www.secuobs.com/twitter/news/85240.shtml Secuobs.com : 2010-04-17 05:31:29 - stevejoblard - RT @0xcharlie: Noooo RT @dinodaizovi: Want to win a Mac at PWN2OWN next year Take the Mac Hacking Class @_snagg @dinodaizovi: http:/ http://www.secuobs.com/twitter/news/84257.shtmlhttp://www.secuobs.com/twitter/news/84257.shtml Secuobs.com : 2010-04-17 05:31:29 - stevejoblard - Zeus botnet exploits unpatched PDF flaw http://shares/mtIJ2http://www.secuobs.com/twitter/news/84256.shtmlhttp://www.secuobs.com/twitter/news/84256.shtml Secuobs.com : 2010-04-17 05:31:29 - stevejoblard - @i0n1c Any chance to get a buffer overflow with your huge password length ;-http://www.secuobs.com/twitter/news/84255.shtmlhttp://www.secuobs.com/twitter/news/84255.shtml Secuobs.com : 2010-04-17 05:31:29 - stevejoblard - Caller ID spoofing soon to be illegal: http://bitly/9IUVKg via @hdmoorehttp://www.secuobs.com/twitter/news/84254.shtmlhttp://www.secuobs.com/twitter/news/84254.shtml Secuobs.com : 2010-04-13 12:47:07 - stevejoblard - man stackshot, great tool /System/Library/LaunchDaemons/comapplestackshotplist#osx #mac #debughttp://www.secuobs.com/twitter/news/82481.shtmlhttp://www.secuobs.com/twitter/news/82481.shtml Secuobs.com : 2010-04-07 02:36:32 - stevejoblard - @Noeldickson this is a kernel panic screen, even if a virus payload can do it, I don't think you got a virushttp://www.secuobs.com/twitter/news/80552.shtmlhttp://www.secuobs.com/twitter/news/80552.shtml Secuobs.com : 2010-04-01 06:24:09 - stevejoblard - @DidierStevens Did you ever think to test your pdf exec on os x/previewhttp://www.secuobs.com/twitter/news/78799.shtmlhttp://www.secuobs.com/twitter/news/78799.shtml Secuobs.com : 2010-03-31 12:00:20 - stevejoblard - A new nmap module scans for a vulnerability in Mac OS X 1062 AFP file sharing http://bitly/9aOViAhttp://www.secuobs.com/twitter/news/78461.shtmlhttp://www.secuobs.com/twitter/news/78461.shtml Secuobs.com : 2010-03-28 01:13:46 - stevejoblard - Nice try man: http://frontedpastebinca/1818664Please don't execute this sploit, just have a look at the shellcodeshttp://www.secuobs.com/twitter/news/77532.shtmlhttp://www.secuobs.com/twitter/news/77532.shtml Secuobs.com : 2010-03-28 01:13:46 - stevejoblard - A CVE-2010-0188 exploit kills Acrobat on Mac OS X Maybe the Shellcode provided in the POC doesn't target OS X Pay attention mac usershttp://www.secuobs.com/twitter/news/77531.shtmlhttp://www.secuobs.com/twitter/news/77531.shtml Secuobs.com : 2010-03-28 01:13:46 - stevejoblard - CanSecWest: the French pull off a nice proof of concepthttp://blogsparetologiccom/malwarediarieshttp://www.secuobs.com/twitter/news/77530.shtmlhttp://www.secuobs.com/twitter/news/77530.shtml Secuobs.com : 2010-03-28 01:13:46 - stevejoblard - Charlie Miller’s one man show at CanSecWest http://bitly/ap3bsN via @jeromesegurahttp://www.secuobs.com/twitter/news/77529.shtmlhttp://www.secuobs.com/twitter/news/77529.shtml