Archive: October 2014

Android/Emmental: adding cheese in emmental holes

by Axelle Apvrille | October 30, 2014 | Category: Security Research

This is a follow up post on Operation Emmental. If you are not aware of Emmental, please read this white paper, and our previous blog post. I wouldn't deserve to sign my posts as 'the Crypto Girl' if I didn't mention crypto in Android's Emmental mal...

The Best Kept Secret at Fortinet

by Karin Shopen | October 30, 2014 | Category: Industry Trends & News

Just take a look at the latest news headlines and you’ll get a strong picture of just how pervasive and, in many ways, elusive the world of cyber security has become. Each week it seems there are reports of new, more insidious attacks. So the idea of...

Inside BlackHat Europe 2014

by Axelle Apvrille | October 29, 2014 | Category: Security Research

The conference started with Adi Shamir's keynote. As it was covered at length by rootshell, I won't be discussing it in this post - apart from the fact that I was really happy to listen to such a brilliant mind like Adi Shamir. I also appreciated his...

Discovering Fortinet: FortiPlanner WLAN Planning Tool

by Chris Dawson | October 28, 2014 | Category: Industry Trends & News

Fortinet has a broad portfolio of security hardware, but a lesser known bit of freeware from the company recently caught my eye. I just recently began working with Fortinet and have been familiarizing myself with their hardware and software. I’ve kn...

Security Digest: October 24th

by Michael Perna | October 24, 2014 | Category: Industry Trends & News

0wning Emmental

by Axelle Apvrille | October 21, 2014 | Category: Security Research

A long time ago, I posted a video showing how to control Zitmo (the mobile component of ZeuS). It turns out you can (nearly) do exactly the same with Emmental. If you are not aware of Operation Emmental, please jump to this excellent white paper. So...

The Pressure is on for IT Decision Makers to Deliver on Security

by Chris Dawson | October 20, 2014 | Category: Industry Trends & News

A recent Lightspeed GMI/Fortinet found that IT decision makers are under increasing pressure from the boardroom to secure the enterprise. The pressure, along with a host of new security threats, means they have some real challenges ahead. The 2014 F...

Security Digest: October 17th

by Michael Perna | October 17, 2014 | Category: Industry Trends & News

Poodle FAQ

by Ruchna Nigam | October 16, 2014 | Category: Industry Trends & News

What is POODLE? POODLE (Padding Oracle On Downloaded Legacy Encryption) is a vulnerability present in the SSL version 3.0 (SSLv3) protocol mainly due to the way CBC encryption scheme is implemented by it. SSL (Secure Sockets Layer) is a cryptograph...

Security Digest: October 10th

by Michael Perna | October 10, 2014 | Category: Industry Trends & News

Android Packers Talk at Hacktivity

by Axelle Apvrille | October 09, 2014 | Category: Security Research

If you have any interest in Android packers, or how to reverse mobile malware that use such packers, please don't miss Ruchna's upcoming talk at Hacktivity . Android Packers: Separating from the Pack - 11. October 2014. 11:20 - 12:05 If you feel li...

A Few Words About Evasion Techniques

by Chris Dawson | October 09, 2014 | Category: Industry Trends & News

Hackers have been using evasion techniques for years to get malicious payloads past firewalls. Make sure your firewall is set up out of the box to detect these attacks. So-called evasion techniques have been part of the hacker’s toolkit for years. E...

Tinba Turns 64

by Raul Alvarez | October 06, 2014 | Category: Security Research

A few months ago, Tinba’s source code was leaked in the wild. It is now inevitable that a different and enhanced version of it is out there. Tinba, also known as Tiny Banker, made its debut a couple of years ago. Though it is small, it is capable of...