Tweetovi
- Tweetovi, trenutna stranica.
- Tweetovi i odgovori
- Medijski sadržaj
Blokirali ste korisnika/cu @AirbusSecLab
Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @AirbusSecLab
-
Multiple vulnerabilities: auth bypasses, path traversal and obfuscated password storage in Siemens SiNVR Video Management Solution. https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf …. No fix available yet ("Siemens recommends specific countermeasures until fixes are available.").
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Finally fixed ! Unauthenticated remote command exec and arbitrary file access on CA Autonomic Sysload (CVE-2019-19518)https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca20191210-01-security-notice-for-ca-automic-sysload.html …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
We have two internship positions open for 2020: in Toulouse https://ag.wd3.myworkdayjobs.com/External/job/Toulouse-Area/Stage-de-fin-d-tudes-au-sein-de-l-quipe-d-valuation-d-Airbus--Blagnac_JR10011170 … and in Paris (Issy-les-Moulineaux) https://ag.wd3.myworkdayjobs.com/External/job/Paris-Area/Stage-de-fin-d-tudes-au-sein-de-l-quipe-d-valuation-d-Airbus--h-f---Issy-les-Moulineaux_JR10011167 …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Airbus Security Lab proslijedio/la je Tweet
Alex Matrosov (@matrosov) & Alexandre Gazet will deliver 3-days hands-on training on Hunting UEFI Firmware Implants at@hardwear_io Berlin 2020.
22nd - 24th Jan | Germany
More info & register
http://bit.ly/2NmELat
#Hardware#Security#Firmware cc:@AirbusSecLabpic.twitter.com/Z2yEuRBlqX
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Another RCE found by the team has been fixed by Xerox + backdoor accounts restrictions in AltaLink printers: https://securitydocs.business.xerox.com/wp-content/uploads/2019/10/cert_Security_Mini_Bulletin_XRX19AI_for_AltaLinkB80xx-C80xx-1.pdf …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Monday at
#BlackHoodie in#Hacklu,@BincatLady will present BinCAT’s noveltieshttps://www.blackhoodie.re/HackLu_schedule/ …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Airbus Security Lab proslijedio/la je Tweet
The final preparations are underway at
@brucon#BruCON0x0B#ICS_Village here in Ghent. Airbus Cyber Innovation's@AirbusSecLab &@AirbusintheUK delivering a multi-level ICS challenge. Come visit us in the village! (We're the good looking ones... :) )pic.twitter.com/x49Pu7wrBf
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Airbus Security Lab proslijedio/la je Tweet
@AirbusintheUK@AirbusSecLab@brucon hosting their ICS challengepic.twitter.com/sd6zXlsV2K
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Airbus Security Lab proslijedio/la je Tweet
Lenovo recently patched EC code execution bug LEN-27764 (CVE-2019-6171) which we present with Alex Gazet at
@BlackHatEvents in Vegas. It was reported in the end of April and has coverage across all the main enterprise Thinkpad lines (found on P50 & T540). https://support.lenovo.com/us/en/product_security/len-27764 …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Slides for our
#BHUSA2019 talk "Breaking Through Another Side: Bypassing Firmware Security Boundaries from Embedded Controller" by Alex Gazet and@matrosov at https://airbus-seclab.github.io/embedded_controller/BH2019-Slides-Breaking_Through_Another_Side_Bypassing_Firmware_Security_Boundaries_from_Embedded_Controller-matrosov-gazet.pdf …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
If you're at
#BHUSA2019, don't forget to go see Alex Gazet's and@matrosov 's talk on laptop embedded controllers and BootGuard at 9:45am today: https://www.blackhat.com/us-19/briefings/schedule/#breaking-through-another-side-bypassing-firmware-security-boundaries-from-embedded-controller-15902 … If you miss it, we'll publish the slides after the talk.Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Bulletins for Xerox WorkCentre 3655/3655i/58XX/58XXi/59XX/59XXi/6655/6655i/72XX/72XXi/78XX/78XXi/7970/7970i/EC7836/EC7856 and Phaser 6700/7800: https://securitydocs.business.xerox.com/wp-content/uploads/2019/06/cert_Security_Mini_Bulletin_XRX19I_ConnectKey_EC78xx.pdf … https://securitydocs.business.xerox.com/wp-content/uploads/2019/06/cert_Security_Mini_Bulletin_XRX19J_for_P6700.pdf … https://securitydocs.business.xerox.com/wp-content/uploads/2019/06/cert_Security_Mini_Bulletin_XRX19K_for_P7800.pdf …
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Anaïs and Stéphane are presenting Gustave, an embedded OS kernel fuzzer today at SSTIC. Check out the tool in the GitHub repo: https://github.com/airbus-seclab/gustave …
#sstic#sstic2019Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Une partie de l'équipe sera présente au
@sstic, n'hésitez pas à venir nous voir pour discuter :)https://twitter.com/AirbusSecLab/status/1135545283906088960 …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
We have two open positions for senior security evaluators in Paris!https://www.airbus.com/careers/search-and-apply/search-for-vacancies/job-detail.html?uuid=15504 …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
ret-sync now supports Ghidra: sync it with your favorite debugger ! https://github.com/bootleg/ret-sync …
@GHIDRA_RE@Ghidra_tips Current windows build: https://dev.azure.com/bootlegdev/ret-sync-release/_build/results?buildId=33 … (click "Artifacts" to dl)Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Xerox fixed more models: AltaLink B80xx/C80xx and WorkCenter 6400 (https://securitydocs.business.xerox.com/wp-content/uploads/2019/05/cert_Security_Mini_Bulletin_XRX19E.pdf … and https://securitydocs.business.xerox.com/wp-content/uploads/2019/05/cert_Security_Mini_Bulletin_XRX19G.pdf …). Expect more fixes in the coming weeks.
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Airbus Security Lab proslijedio/la je Tweet
Our REsearch ”Breaking Through Another Side: Bypassing Firmware Security Boundaries from Embedded Controller” with Alexandre Gazet accepted for
@BlackHatEvents! Tons of interesting stuff: Lenovo BIOS Guard bypass, gaining persistence on EC (blindspot for any type of AV) and morePrikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
NVD fixed the CVSS scores: 9.8 for v3, 10.0 for v2.
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Airbus Security Lab proslijedio/la je Tweet
Say hi to "timeliner", a rewrite of the venerable mactime enhanced with a complete expression engine: no more fights with grep|awk|perl|sort! If you use list_mft, regrippy or tsk, enjoy: https://github.com/airbus-cert/timeliner … Did I tell you we are hiring btw?
#dfir#forensics#golangHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.