[SECHebdo] 03 Septembre 2019

What this episode covers

Nous venons de tourner un nouveau SECHebdo en live sur Youtube. Comme d’habitude, si vous avez raté l’enregistrement, vous pouvez le retrouver sur notre chaîne Youtube (vidéo ci-dessus) ou bien au format podcast audio: Au sommaire de cette émission : (00:01:30) Todo { "options": { "theme": "default" }, "extensions": { "ChapterMarks": { "disabled": false }, "EpisodeInfo": {}, "Playlist": { "disabled": true }, "Transcript": { "disabled": true } }, "podcast": { "feed": "https:\/\/podcasts.comptoirsecu.fr\/podcasts\/SECHebdo\/CSEC.SECHebdo.2019-09-03.m4a" }, "episode": { "media": { "mp3": "https:\/\/podcasts.comptoirsecu.fr\/podcasts\/SECHebdo\/CSEC.SECHebdo.2019-09-03.m4a" }, "coverUrl": "https:\/\/www.comptoirsecu.fr\/\/images\/covers\/2019-09-03-sechebdo-vignette.jpg", "title": "[SECHebdo] 03 Septembre 2019", "subtitle": "BugBounty PlayStore, RetaDup, Eurofins, Vuln Cisco\/CheckPoint\/VPN\/Bloodhound…, Pause-Process, Deepfake vocal, C3\/Merlin, etc.", "description": "Épisode du 03 09 2019 - SECHebdo est une revue de l\u0027actualité cybersécurité réalisée en live sur Youtube, généralement le mardi soir." ,"chaptermarks": [ { "start": "00:01:30", "title": "Todo"} ] } } Notre discord : http://discord.comptoirsecu.fr A bientôt pour d’autres émissions/podcasts! Liste des sources : Une École Suédoise Se Fait Taper Sur Les Doigts Via Le RGPD Facial Recognition Use Triggers GDPR Fine - BankInfoSecurity Le Bug Bounty De Google Contient Maintenant Les Applications Les Plus Téléchargées Google adds all Android apps with +100m installs to its bug bounty program | ZDNet Quand Le Deepfake Sert À La Fraude Au Président Fraudsters deepfake CEO’s voice to trick manager into transferring $243,000 Takedown RETADUP Putting an end to Retadup: A malicious worm that infected hundreds of thousands - Avast Threat Labs Corner vuln Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability Check Point Endpoint Security Initial Client for Windows - Privilege Escalation to SYSTEM Code execution in Bloodhound via malicious AD Object · Issue #267 · BloodHoundAD/BloodHound · GitHub Orange: Attacking SSL VPN - Part 3: The Golden Pulse Secure SSL VPN RCE Chain, with Twitter as Case Study! Bad Packets Report sur Twitter Russians intercepted comms available to the public SwitHak sur Twitter suspicious-sniffers cc19-Evdokimov-Proruha-na-SORM Chaos Constructions 2019 Леонид Евдокимов Проруха на СОРМ - YouTube Vulns VPN Orange us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA Retour conf SANS Copenhague GitHub - besimorhino/Pause-Process: PowerShell script which allows pausing\unpausing Win32/64 exes Nouveau groupe émergeant d’attaquants A newly discovered hacking group is targeting energy and telecoms companies – TechCrunch Detect PDB FTW Definitive Dossier of Devilish Debug Details – Part One: PDB Paths and Malware | FireEye Inc Le monde merveilleux des C(2-3) C3 https://posts.specterops.io/merlin-v0-8-0-released-6883528b370b Eurofins Eurofins reports robust financial performance in H1 2019 despite disruptions from the June cyber-attack- Eurofins Scientific Cisco Forensic Guides Cisco ASA Forensic Investigation Procedures for First Responders Cisco Firepower Threat Defense Forensic Investigation Procedures for First Responders Cisco IOS Software Forensic Investigation Procedures for First Responders Cisco IOS XE Software Forensic Investigation Procedures for First Responders