«
Expand/Collapse
49 items tagged "protection"
Related tags:
emc [+],
denial of service [+],
vulnerability [+],
panda [+],
global protection [+],
global [+],
sophos [+],
endpoint [+],
unfiltered [+],
symantec [+],
server versions [+],
server version [+],
server [+],
proofpoint [+],
oracle data [+],
oracle [+],
memory protection [+],
information disclosure [+],
data server [+],
configuration file [+],
arbitrary code execution [+],
usa [+],
sparc versions [+],
space layout [+],
security [+],
rop [+],
randomization [+],
protection laws [+],
potential security vulnerability [+],
plus [+],
new security architecture [+],
linux x86 [+],
linux distributions [+],
linux [+],
hacks [+],
data protection [+],
bypassing [+],
aslr [+],
armor protection [+],
data [+],
web protection [+],
voltage protection [+],
voltage [+],
virtual pc [+],
virtual [+],
tutorial [+],
threat environment [+],
survey respondents [+],
survey [+],
setdlldirectory [+],
service vulnerability [+],
secure browsing [+],
safer use [+],
research [+],
protection mechanisms [+],
protection law [+],
protection circuits [+],
protection chief [+],
protection authority [+],
privilege escalation vulnerability [+],
power [+],
poc [+],
pinhead [+],
pc hypervisor [+],
password protection [+],
password [+],
p fet [+],
null pointer [+],
news [+],
new threat [+],
mobile os [+],
misc [+],
minimal power [+],
memory [+],
master key [+],
man in the middle attack [+],
malware [+],
malicious users [+],
mac os x [+],
mac os [+],
mac [+],
local privilege escalation [+],
leaked [+],
laws [+],
landscape report [+],
jon [+],
irish data [+],
irish [+],
ios [+],
intel [+],
information disclosure vulnerability [+],
hdcp [+],
google [+],
fragmented [+],
feature functionality [+],
facebook [+],
european data protection [+],
european [+],
europe [+],
eu commission [+],
enterprise products [+],
enterprise product [+],
enterprise [+],
dmitry sklyarov [+],
digital content protection [+],
data breaches [+],
congress [+],
compliance problem [+],
code execution [+],
classic [+],
browsing [+],
brings [+],
blue smoke [+],
binary [+],
b trojan [+],
attackers [+],
arbitrary code [+],
apple [+],
anti malware [+],
ambitious [+],
afroman [+],
abu dhabi [+]
-
-
12:22
»
Packet Storm Security Advisories
Team SHATTER Security Advisory - Oracle Data Server versions 10gR1, 10gR2 (10.2.0.5 and previous patchsets) and 11gR1 (11.1.0.7 and previous patchsets) suffer from incomplete protection of locked accounts.
-
12:22
»
Packet Storm Security Recent Files
Team SHATTER Security Advisory - Oracle Data Server versions 10gR1, 10gR2 (10.2.0.5 and previous patchsets) and 11gR1 (11.1.0.7 and previous patchsets) suffer from incomplete protection of locked accounts.
-
12:22
»
Packet Storm Security Misc. Files
Team SHATTER Security Advisory - Oracle Data Server versions 10gR1, 10gR2 (10.2.0.5 and previous patchsets) and 11gR1 (11.1.0.7 and previous patchsets) suffer from incomplete protection of locked accounts.
-
5:12
»
Packet Storm Security Advisories
EMC Data Protection Advisor (DPA) contains vulnerabilities that can potentially be exploited by malicious users to cause denial of service.
-
-
15:45
»
Packet Storm Security Recent Files
Most modern day Operating Systems include some form of memory protection such as DEP and ASLR. This article focuses on ASLR, its implementation, limitations and finally various techniques which can be used to circumvent the protection.
-
15:45
»
Packet Storm Security Misc. Files
Most modern day Operating Systems include some form of memory protection such as DEP and ASLR. This article focuses on ASLR, its implementation, limitations and finally various techniques which can be used to circumvent the protection.
-
-
21:41
»
SecDocs
Authors:
Andrey Belenko Dmitry Sklyarov Tags:
forensic iPhone Event:
Black Hat Abu Dhabi 2011 Abstract: iOS 5 is the latest and most advanced mobile OS from Apple. Besides tweaking UI and UX, Apple has made some changes to Data Protection mechanisms that were introduced in iOS 4. Those changes provide better security for users, but they also impose additional hurdles for mobile phone forensic process. This talk will provide detailed discussion of iOS Data Protection, focusing on both technical description of defenses and on circumventing certain protections to provide forensic access to the data stored on the iOS devices. iOS versions from iOS 3 (iPhoneOS 3) to iOS 5 will be covered.
-
-
11:01
»
Hack a Day
Building your first circuit is empowering, but make sure it’s not too empowering. [Jon] sent in a great tutorial of power protection circuits to make sure you don’t release the mystical blue smoke that make electronics work. There’s an in-depth tutorial of the classic series diode that’s the simplest of all power protection circuits. There’s not much to [...]
-
-
12:31
»
Hack a Day
[Afroman's] latest video shows you how to add reverse voltage protection with minimal power loss. At some point, one of your electronic concoctions will turn out to be very useful. You want to make sure that a battery plugged in the wrong way, or a polarity mistake with your bench PSU doesn’t damage that hardware. [...]
-
-
15:00
»
Sophos security news
Fully integrated patch assessment, comprehensive web protection & filtering and encryption for the new threat environment
-
-
16:01
»
Hack a Day
It’s been a little while since we talked about HDCP around here, but recent developments in the area of digital content protection are proving very interesting. You might remember that the Master Key for HDCP encryption was leaked last year, just a short while after Intel said that the protection had been cracked. While Intel [...]
-
-
15:00
»
Sophos security news
Sophos Endpoint Security & Data Protection Commended for Providing the Greatest Feature-Functionality of Any Endpoint Protection Product on the Market Today
-
-
1:39
»
SecDocs
Authors:
Long Le Tags:
exploiting Event:
Black Hat USA 2010 Abstract: Return-oriented programming (ROP) is one of the buzzing advanced exploitation techniques these days to bypass NX. There are several practical works using ROP techniques for exploitations on Windows, iPhoneOS to bypass DEP and code signing but no any practical ROP work for modern Linux distributions so far. Main issues for ROP exploitations on Linux x86 include ASCII-Armor address protection which maps libc address starting with NULL byte and Address Space Layout Randomization (ASLR). In this presentation we will show how we can extend an old return-into-libc technique to a stage-0 loader that can bypass ASCII-Armor protection and make ROP on Linux x86 become a reality. In addition, by reusing not only codes but also data from the binary itself, we can build any chained ret2libc calls or ROP calls to bypass ASLR protection. A new ROP tool to build and search for ROP instructions will be released in the presentation.
-
1:39
»
SecDocs
Authors:
Long Le Tags:
exploiting Event:
Black Hat USA 2010 Abstract: Return-oriented programming (ROP) is one of the buzzing advanced exploitation techniques these days to bypass NX. There are several practical works using ROP techniques for exploitations on Windows, iPhoneOS to bypass DEP and code signing but no any practical ROP work for modern Linux distributions so far. Main issues for ROP exploitations on Linux x86 include ASCII-Armor address protection which maps libc address starting with NULL byte and Address Space Layout Randomization (ASLR). In this presentation we will show how we can extend an old return-into-libc technique to a stage-0 loader that can bypass ASCII-Armor protection and make ROP on Linux x86 become a reality. In addition, by reusing not only codes but also data from the binary itself, we can build any chained ret2libc calls or ROP calls to bypass ASLR protection. A new ROP tool to build and search for ROP instructions will be released in the presentation.
-
-
23:32
»
Packet Storm Security Advisories
A vulnerability exists in EMC Data Protection Advisor versions prior to 5.8.1 in which sensitive information may be exposed in clear text in the configuration file.
-
23:32
»
Packet Storm Security Recent Files
A vulnerability exists in EMC Data Protection Advisor versions prior to 5.8.1 in which sensitive information may be exposed in clear text in the configuration file.
-
23:32
»
Packet Storm Security Misc. Files
A vulnerability exists in EMC Data Protection Advisor versions prior to 5.8.1 in which sensitive information may be exposed in clear text in the configuration file.
-
-
0:00
»
Sophos security news
Sophos announces the availability of a number of new and enhanced enterprise product lines that together offer complete protection anywhere and on any device.
-
-
10:50
»
Packet Storm Security Recent Files
EMC Data Protection Advisor Collector for Solaris SPARC contains a potential security vulnerability that can be exploited to execute malicious code with elevated privileges on the affected system. EMC Data Protection Advisor Collector for Solaris SPARC versions 5.7 earlier than build 5833 and 5.7.1 earlier than build 5833 are affected.
-
10:50
»
Packet Storm Security Misc. Files
EMC Data Protection Advisor Collector for Solaris SPARC contains a potential security vulnerability that can be exploited to execute malicious code with elevated privileges on the affected system. EMC Data Protection Advisor Collector for Solaris SPARC versions 5.7 earlier than build 5833 and 5.7.1 earlier than build 5833 are affected.
-
-
20:15
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Endpoint Protection.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!