Get Started for FREE
Sign up with Facebook Sign up with X
I don't have a Facebook or a X account
 Your new post is loading...
Your new post is loading...
Scoop.it!
Firefox and Tor just received a patch to fix a 0-day exploit that is being used in the wild to strip away your anonymity.
Learn more / En savoir plus / Mehr erfahren:
http://www.scoop.it/t/securite-pc-et-internet/?tag=TOR
No comment yet.
Sign up to comment
Scoop.it!
Information security bods at Trustwave have found a zero-day exploit affecting all versions of Microsoft's OS Windows, all the way from Windows 2000 up to a fully patched version of Windows 10 including all server editions.
Gust MEES's insight:
Information security bods at Trustwave have found a zero-day exploit affecting all versions of Microsoft's OS Windows, all the way from Windows 2000 up to a fully patched version of Windows 10 including all server editions.
Scoop.it!
Might put out patch in update, might chuck it out sooner. The bug (CVE-2014-6352) can be triggered by sending a specially crafted Microsoft Office files to intended targets before tricking them into opening the booby-trapped files. "Currently, attacks using PowerPoint files are known to exist, but all Office file types can be used to carry out this attack," Jonathan Leopando, a technical communications staffer at Trend Micro, warns in a blog post.
Gust MEES's insight:
The bug (CVE-2014-6352) can be triggered by sending a specially crafted Microsoft Office files to intended targets before tricking them into opening the booby-trapped files. "Currently, attacks using PowerPoint files are known to exist, but all Office file types can be used to carry out this attack," Jonathan Leopando, a technical communications staffer at Trend Micro, warns in a blog post.
Scoop.it!
Versions du document
14 février 2013: Publication intitiale
Description / Résumé
Une faille extrêmement critique a été détectée dans Adobe Reader et Acrobat. Découverte par les spécialistes au travers d’un document piégé sur Internet, elle est actuellement exploitée activement par des fraudeurs et représente pour cette raison un risque pour l’utilisateur.
Gust MEES's insight:
===> BEWARE of the MALWARE!!! <===
Scoop.it!
Adobe today pushed out an emergency update that fixes at least two zero-day vulnerabilitiesin its ubiquitous Flash Player software — flaws that attackers are already exploiting to break into systems. Interestingly, Adobe warns that one of the exploits in use is designed to drop malware on both Windows and Mac OS X systems.
Gust MEES's insight:
Critical Flash Player Update Fixes 2 Zero-Days
Scoop.it!
10 janvier 2013: Publication intitiale
Description / Résumé
Une vulnérabilité extrêmement critique a été découverte dans le plugin Java pour votre navigateur. L'exploitation réussie de cette vulnérabilité autorise l'attaquant à prendre le contrôle de la machine victime.
La vulnérabilité a été introduite dans des kits d'exploitation communs, la rendant ainsi très répandue et de ce fait dangereuse. Le simple fait d'aller sur une page infectée peut mettre votre ordinateur en danger. Il est donc important d'éviter de cliquer sur des liens dans les e-mails.
Faites aussi attention aux publicités des sites légitimes qui pourraient être piégées.
Gust MEES's insight:
===> Be AWARE of the MALWARE! <===
Scoop.it!
Cette vulnérabilité critique touche les versions 6, 7 et 8 du navigateur de Microsoft et permet une prise à contrôle à distance du poste infecté.
Scoop.it!
A Georgian security researcher is due to present details of an unpatched vulnerability in Google's Chrome browser at the Malcon security conference in India over the weekend.
Years ago the circumstances of Ucha Gobejishvili's presentation would hardly have raised an eyebrow but that was before Google began offering up to $60,000 in bug bounties for the low-down on most serious, remotely exploitable bugs in its Chrome web browser software.
Gobejishvili has apparently forgone potential financial rewards by leaving Google in the dark before unwrapping a remotely exploitable hole in the Chrome web browser, which reportedly involves a critical vulnerability in a Chrome DLL. More details are due to emerge at a presentation by Gobejishvili at the International Malware Conference (MalCon) in New Delhi on Saturday (24 November).
Read more: http://www.theregister.co.uk/2012/11/23/mystery_chrome_0_day/
Scoop.it!
The gang behind that recent Java zero day attacks apparently hasn't packed up for the season. A researcher examining one of the servers used to launch attacks on vulnerable Java installations said ...
In a blog post, Romang, a Luxemborg-based IT security advisor at ZATAZ.com, said he discovered the exploit when analyzing a batch of files hosted on one of the servers used by the Nitro gang to distribute attacks that exploited the Java vulnerability.
Read more:
Scoop.it!
Microsoft today delivered six security updates to patch 11 vulnerabilities in Windows, Internet Explorer, Office and several other products, including one bug that attackers are already exploiting.
Scoop.it!
Someone has released exploit code for the ASP.NET hashdos vulnerability.
Scoop.it!
Deux failles zero-day trouvées dans Flash Player d'Adobe - Sécurité - Les dernières failles de sécurité du Flash Player d'Adobe ont...
Scoop.it!
An Italian security researcher has disclosed details about several zero-day vulnerabilities in supervisory control and data acquisition products from several vendors.
|
Scoop.it!
Nutzer des Tor-Browsers werden mit Javascript angegriffen
Learn more / En savoir plus / Mehr erfahren:
http://www.scoop.it/t/securite-pc-et-internet/?tag=TOR
Gust MEES's insight:
Nutzer des Tor-Browsers werden mit Javascript angegriffen
Learn more / En savoir plus / Mehr erfahren:
http://www.scoop.it/t/securite-pc-et-internet/?tag=TOR
Scoop.it!
Utilisée par des entreprises comme Peugeot, Citibank ou Honda, la plate-forme de gestion de sites web Joomla est victime d’une faille zero day. Patchée aujoud’hui.
Gust MEES's insight:
Utilisée par des entreprises comme Peugeot, Citibank ou Honda, la plate-forme de gestion de sites web Joomla est victime d’une faille zero day. Patchée aujoud’hui.
Scoop.it!
Ohne vorherige Meldung an Microsoft hat ein Sicherheitsforscher Details einer Schwachstelle im Kernel aller gängigen Windows-Versionen mitsamt Exploit-Code veröffentlicht.
Gust MEES's insight:
Tavis Ormandy ist bereits dafür bekannt, "volle Offenlegung" zu favorisieren und dies auch zu praktizieren – zumindest, wenn es nicht um Google-Software geht.
Scoop.it!
Fresh vulnerabilities, which are being exploited in the wild, have been detected for Adobes PDF Reader and Flash Player.
Gust MEES's insight:
According to researchers from FireEye, there is a PDF zero-day which is being exploited in the wild, with the company's researchers having observed successful exploitation on the Adobe PDF Reader versions 9.5.3, 10.1.5, and 11.0.1.
Scoop.it!
A critical zero-day remote-access vulnerability in an industrial control system that is widely used in hospitals, military installations, manufacturing plants and other critical locations has been discovered and demonstrated by noted researchers Billy Rios and Terry McCorkle at the latest Kaspersky Security Analyst Summit, Wired reported.
Gust MEES's insight:
A critical zero-day remote-access vulnerability in an industrial control system that is widely used in hospitals, military installations, manufacturing plants and other critical locations has been discovered and demonstrated by noted researchers Billy Rios and Terry McCorkle at the latest Kaspersky Security Analyst Summit, Wired reported.
Scoop.it!
The hackers who maintain Blackhole and Nuclear Pack – competing crimeware products that are made to be stitched into hacked sites and use browser flaws to foist malware — say they’ve added a brand new exploit that attacks a previously unknown and currently unpatched security hole in Java.
Gust MEES's insight:
===> Be AWARE of the MALWARE! <===
Scoop.it!
The vulnerability is selling for up to $50K on the black market, security researchers say, and has been included in a package of banking Trojans called the Blackhole Exploit Kit, which is the most ...
Read more:
Scoop.it!
The ZeroAccess rootkit is quickly becoming one of the most widespread malware threats. SophosLabs' James Wyke takes a look at how ZeroAccess works and what its ultimate goal is.
Scoop.it!
The exploit was triggered against a use-after-free vulnerability in the open-source browser and successfully evaded DEP and ALSR, two anti-exploit mit...
Scoop.it!
Learn critical information about a warning of a highly dangerous memory corruption zero-day vulnerability from a clearinghouse Secunia. This weakness could be targeted by attackers.
Scoop.it!
Attackers are taking advantage of the latest zero-day vulnerability in Adobe's Reader software sending malicious attachments to specific targets.
|
Learn more / En savoir plus / Mehr erfahren:
http://www.scoop.it/t/securite-pc-et-internet/?tag=TOR