[SECHebdo] 13 janvier 2021

What this episode covers

Nous venons de tourner un nouveau SECHebdo en live sur Youtube. Comme d’habitude, si vous avez raté l’enregistrement, vous pouvez le retrouver sur notre chaîne Youtube (vidéo ci-dessus) ou bien au format podcast audio: Au sommaire de cette émission : (00:01:30) Todo { "options": { "theme": "default" }, "extensions": { "ChapterMarks": { "disabled": false }, "EpisodeInfo": {}, "Playlist": { "disabled": true }, "Transcript": { "disabled": true } }, "podcast": { "feed": "https:\/\/podcasts.comptoirsecu.fr\/podcasts\/SECHebdo\/CSEC.SECHebdo.2021-01-13.m4a" }, "episode": { "media": { "mp3": "https:\/\/podcasts.comptoirsecu.fr\/podcasts\/SECHebdo\/CSEC.SECHebdo.2021-01-13.m4a" }, "coverUrl": "https:\/\/www.comptoirsecu.fr\/\/images\/covers\/2021-01-13-sechebdo-vignette.jpg", "title": "[SECHebdo] 13 janvier 2021", "subtitle": "Typo 3, Laravel, Vaccin COVID-19 par le prisme IT, adieu Red Forest, SolarWinds, Cadeaux CTF, etc.", "description": "Épisode du 13 01 2021 - SECHebdo est une revue de l\u0027actualité cybersécurité réalisée en live sur Youtube, généralement le mercredi soir." ,"chaptermarks": [ { "start": "00:01:30", "title": "Todo"} ] } } Notre discord : http://discord.comptoirsecu.fr A bientôt pour d’autres émissions/podcasts! Liste des sources : Article sur Typo3 & Laravel Typo3: leak to Remote code execution. | Synacktiv Laravel <= v8.4.2 debug mode: Remote code execution Outils redir web, BloodHound custom queries, et MindMaps 1u.ms SecurityTips/MindMaps at master · hackerscrolls/SecurityTips · GitHub GitHub - hausec/Bloodhound-Custom-Queries: Custom Query list for the Bloodhound GUI based off my cheatsheet Le vaccin vu par un Reverseur Reverse Engineering the source code of the BioNTech/Pfizer SARS-CoV-2 Vaccine - Articles Administration, la fin des red forests Enhanced Security Admin Environment (ESAE) architecture mainstream retirement | Microsoft Docs Rapidly modernize your security infrastructure | Microsoft Docs SolarWinds Highly Evasive Attacker Leverages SolarWinds Supply Chain to CompromiseMultiple Global Victims With SUNBURST Backdoor | FireEye Inc SUNBURST Additional Technical Details | FireEye Inc Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers - Microsoft Security Solorigate Resource Center – updated December 31st, 2020 – Microsoft Security Response Center Sunburst backdoor – code overlaps with Kazuar | Securelist SUNSPOT Malware: A Technical Analysis | CrowdStrike New Findings From Our Investigation of SUNBURST - Orange Matter Patch Tuesday Microsoft Patch Tuesday by Morphus Labs