Zerosquare (./2463) :
Ou alors, c'est la NSA y est allé un peu plus fort que d'habitude en sabotage.
Researchers have developed a new exploit that shows how even Address Space Layout Randomization (ASLR) on an x86-64 server cannot stop the PHP2Shell vulnerability. VulnCheck, which made it available to only the company’s Initial Access Intelligence customers, also warned that threat actors are using AI to find even more ways to attack.
The team told us that it’s a “significant advance” because up until now, ASLR has been a major barrier to exploiting PHP2Shell on real-world servers. They don't expect that to hold, though. “Adversaries are clearly spending time (and tokens) on this bug,” Spencer McIntyre, director of exploit development at VulnCheck, told The Register.
The PHP2Shell mess grew even bigger on Thursday amid reports of attackers abusing the security flaws days before they were disclosed and UK government websites proactively going dark.
Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case — AI-assisted follow-up finds a backdoor and hardcoded keys in other ‘secure’ USB products (updated)Cette industrie est une mauvaise blague, franchement...
Tom's Hardware
Security researcher Xusheng Li found that a Lenovo ThinkPlus FU100 fingerprint USB stick, sold as an AES-256-encrypted device for data security, ended up being just a plain SD card internally, HackingPassion reports. The fingerprint reader only enabled the USB connection, and nothing on the card was actually encrypted. An AI-assisted follow-up last week discovered what Li calls backdoor accounts on another maker’s drive, as well as hardcoded keys in other supposedly secure USB storage products.
(...)
The same research also turned up a different flaw in Lenovo’s TSD303 external SSD. Its data actually was encrypted, but the drive sent the correct password back over USB in plain text for the software to compare, making it easy to capture.
Research published on sshhole.com by Özgün Kültekin of Wakefield explains how an unusually long password can turn a failed password check into a successful login. Alpine confirms that exploitation needs one connection, a reachable SSH port, and a known account name when the required conditions exist.
The target account must have * in its password field, while another local account must contain a $5$ or $6$ password hash. Password authentication must also remain enabled. This means adding a password to one account can expose other accounts that were created without passwords.
Lionel Debroux (./2476) :Comment ça, éventuellement ?
Mouais, clé (éventuellement portée par des choses du type YubiKey) + mot de passe est en effet plus sûr...
