jetlib.sec » Tags » omg

Feeds

133444 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

3 items tagged "omg"

Related tags: pdf specification [+], pdf [+], omg wtf [+], julia wolf tags [+], chaos communication congress [+], wrap up [+], way [+], video [+], ted [+], stuxnet [+], mac [+], enterprise media [+], cyber criminals [+], credit card fraud [+], audio [+]

• May 09, 2012
• 21:36

  [Video] OMG WTF PDF

   » ‎ SecDocs
  Authors: Julia Wolf
  Tags: PDF
  Event: Chaos Communication Congress 27th (27C3) 2010
  Abstract: Ambiguities in the PDF specification means that no two PDF parsers will see a file in the same way. This leads to many opportunities for exploit obfuscation. PDFs are currently the greatest vector for drive-by (malware installing) attacks and targeted attacks on business and government. A/V technology is extraordinarily poor at detecting these. The PDF format itself is so diverse and vague, that an A/V would need to be 100% bug-compatible with the parser in the vulnerable PDF reader. You can also do cool tricks like make a single PDF file that displays completely differently in several different readers.

  Tags:  video omg pdf julia-wolf-tags chaos-communication-congress omg-wtf pdf-specification  

• 21:36

  [Audio] OMG WTF PDF

   » ‎ SecDocs
  Authors: Julia Wolf
  Tags: PDF
  Event: Chaos Communication Congress 27th (27C3) 2010
  Abstract: Ambiguities in the PDF specification means that no two PDF parsers will see a file in the same way. This leads to many opportunities for exploit obfuscation. PDFs are currently the greatest vector for drive-by (malware installing) attacks and targeted attacks on business and government. A/V technology is extraordinarily poor at detecting these. The PDF format itself is so diverse and vague, that an A/V would need to be 100% bug-compatible with the parser in the vulnerable PDF reader. You can also do cool tricks like make a single PDF file that displays completely differently in several different readers.

  Tags:  omg audio pdf julia-wolf-tags chaos-communication-congress pdf-specification omg-wtf  

• October 15, 2011
• 7:08

  Weekly "That's Interesting" Wrap-Up 21 Oct 2011

   » ‎ Carnal0wnage
  TEDxRotterdam - Mikko Hypponen - safe internet will lead the future
  
  
  http://youtu.be/WQgeUHlTThc
  
  Similar to his other TED talk but worth the 20min. Its good up to "fixing things". Not sure I agree with his "fixes". I do agree with a more unified way to fight/arrest/ cyber criminals, but bottom line its still way too easy to break into stuff and still to easy to conduct Credit Card fraud. We need to adress some of that as well.
  
  Also, I think plenty of people would disagree that anything Mac is "safe" because of market share.
  
  
  

  OMG OMG OMG Stuxnet Part 2 or the parent of stuxnet or whatever
  http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf

  
  
  

  Samples:
  http://contagiodump.blogspot.com/2011/10/duqu-rat-trojan-precursor-to-next.html

  
  
  

  Volatility Memory Forensics Federal Trojan aka R2D2
  
  http://www.evild3ad.com/?p=1136
  

  

  Tags:  omg way stuxnet ted mac credit-card-fraud cyber-criminals enterprise-media wrap-up