Veille - Merci Franck

Une Veille de Franck transmises en l'état..

Bonne lecture

Tristan

SECURITE

Are you tired of weak or fake zero-day exploits? 60 Sec Security [VIDEO]

http://nakedsecurity.sophos.com/2014/09/27/are-you-tired-of-weak-or-fake-zero-day-exploits-60-sec-security-video/

Laurent Gautier, Ilex International : la gestion des identités et des accès, un levier business pour les métiers

http://www.globalsecuritymag.fr/Laurent-Gautier-Ilex-International,20140927,47729.html

Barbara Goarant, CS Communication & Systèmes : la cybersécurité a besoin de standardisation pour formaliser les échanges entre les différents acteurs

http://www.globalsecuritymag.fr/Barbara-Goarant-CS-Communication,20140927,47733.html

Researchers analyze Dyre sample with new features

http://www.scmagazine.com/experts-discover-new-features-in-dyre-malware/article/373968/

Rackspace to hit GLOBAL CLOUD REBOOT button to flush out Xen security nasty

http://www.theregister.co.uk/2014/09/27/rackspace_hits_global_cloud_reboot_button_on_xen_security_bug/

Latest Firefox and Thunderbird updates plug CRITICAL SSL vuln

http://www.theregister.co.uk/2014/09/25/mozilla_firefox_thunderbird_patch_ssl_vuln/

THE BIGS

Smartphone Security: Android vs. iOShttp://www.sectechno.com/2014/09/27/smartphone-security-android-vs-ios/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Sectechno+%28SecTechno%29

Apple releases iOS 8.0.2 to quell buggy update complaints

http://www.scmagazine.com/ios-802-released-following-complaints-of-bugs/article/373978/

FBI boss: Apple's iPhone, iPad encryption puts people 'ABOVE THE LAW'

http://www.theregister.co.uk/2014/09/25/fbi_boss_slams_google_apple_for_encryption_that_puts_users_above_law/

FAILLE

The shockingly obsolete code of bash

http://blog.erratasec.com/2014/09/the-shockingly-bad-code-of-bash.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SecurityBloggersNetwork+%28Security+Bloggers+Network%29#.VCg2ZFeqJ8E

HP AppDefender and HP WebInspect updates: GNU Bash vulnerability "Shellshock"

http://h30499.www3.hp.com/t5/HP-Security-Products-Blog/HP-AppDefender-and-HP-WebInspect-updates-GNU-Bash-vulnerability/ba-p/6631960?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheSpiLaboratory+%28The+HP+Security+laboratory%29#.VCg5vVeqJ8E

Shellshock Continues to Make Waves with Active IRC bot

http://blog.trendmicro.com/trendlabs-security-intelligence/shellshock-continues-to-make-waves-with-active-irc-bot/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Anti-MalwareBlog+%28Trendlabs+Security+Intelligence+Blog%29

Bashbug Means you Need VIP Even More

http://www.symantec.com/connect/blogs/bashbug-means-you-need-vip-even-more?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+identity-trust-blog+%28Online+Identity+and+Trust%29

Shellshock Updates: BASHLITE C&Cs Seen, Shellshock Exploit Attempts in Brazil

http://blog.trendmicro.com/trendlabs-security-intelligence/shellshock-updates-bashlite-ccs-seen-shellshock-exploit-attempts-in-brazil/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Anti-MalwareBlog+%28Trendlabs+Security+Intelligence+Blog%29

Yes, hackers can now control traffic lights

http://www.katu.com/news/local/Yes-hackers-can-now-control-traffic-lights-277243762.html

Stunned by Shellshock Bash bug? Patch all you can – or be punished

http://www.theregister.co.uk/2014/09/26/ico_shellshock_warning/

Firms BASH Bash bug with new round of Shellshock patches

http://www.theregister.co.uk/2014/09/28/bash_shellshock_bug_patches_released_by_red_hat/

Oracle Shellshocked by Bash bug – but Exalogic peeps will have to wait

http://www.theregister.co.uk/2014/09/27/oracle_no_shellshock_patches_yet/

Vulnérabilité exploitable à distance pour Linux, Unix et Mac OS X

http://www.zataz.com/vulnerabilite-exploitable-a-distance-pour-linux-unix-et-mac-os-x/

ATTAQUE

Attackers quick to exploit Bash bug, security industry responds quicker

http://www.scmagazine.com/hackers-have-begun-exploiting-the-shellshock-vulnerability-but-the-industry-has-already-produced-patches/article/373975/

'Mozart' is malware behind Home Depot, DHS report suggests

http://www.scmagazine.com/reports-suggest-home-depot-was-hit-by-the-mozart-malware/article/373976/

Piratage de 56 millions de CB des clients de Home Depot

http://www.zataz.com/piratage-de-56-millions-de-cb-des-clients-de-home-depot/