2017-04-11から1日間の記事一覧

Travel Routers, NAS Devices Among Easily Hacked IoT Devices | Threatpost | The first stop for security news

こっちも。

Cisco's Talos Intelligence Group Blog: From Box to Backdoor: Discovering Just How Insecure an ICS Device is in Only 2 Weeks

「Moxa Americas, Inc. was cooperative with us throughout the disclosure process of the discovered vulnerabilities by providing us the source code of their BusyBox implementation, covered under GPL2. Moxa has released the appropriate fixes …

BAE Systems Threat Research Blog: APT10 - Operation Cloud Hopper

おっと。 APT10 (MenuPass Group): New Tools, Global Campaign Latest Manifestation of Longstanding Threat Threat Research Blog | FireEye Inc

Tools Used by Lamberts APT Found in Vault 7 Dumps | Threatpost | The first stop for security news

Vault7関連 ShadowBrokers Dump More Equation Group Hacks, Auction File Password | Threatpost | The first stop for security news Unraveling the Lamberts Toolkit - Securelist ShadowBrokers fails to collect 1M bitcoins releases stolen informat…

Project Zero: Notes on Windows Uniscribe Fuzzing

「It is a fascinating but dire realization that even for such a well known class of bug hunting targets as font parsing implementations, it is still possible to discover new attack vectors dating back to the previous century, having remain…