Un nouveau ver exploitant la faille SSL de Microsoft aurait \u00e9t\u00e9 vu sur des serveurs d’entreprise. Il n’a pas encore \u00e9t\u00e9 identifi\u00e9<\/p>\n
Il n’aura fallu que quelques jours apr\u00e8s l’annonce d’une faille sur la librairie SSL (Secure sockets layer) de Microsoft pour que survienne un premier ver exploitant la faille.
\nCette derni\u00e8re (cf. notre pr\u00e9c\u00e9dent article) menace plus particuli\u00e8rement le protocole PCT (Protected communications transport).<\/p>\n
Les sp\u00e9cialistes de la s\u00e9curit\u00e9 ont rep\u00e9r\u00e9 ce ver, mais ne l’ont pas encore isol\u00e9. On ne sait donc encore rien sur lui, sauf qu’il existe et qu’il n’a pas encore lanc\u00e9 d’attaque!<\/p>\n
Quelle menace repr\u00e9sente-t-il ? Difficile de r\u00e9pondre. En effet, soit le ver continue de se r\u00e9pandre sans \u00eatre mena\u00e7ant, et les experts ne font qu’alimenter la parano\u00efa ambiante. Soit il repr\u00e9sente une v\u00e9ritable menace, et on ne pourra mesurer le risque encouru que lorsqu’il se sera activ\u00e9!<\/p>\n
La faille a \u00e9t\u00e9 corrig\u00e9e par Microsoft. La mise \u00e0 jour s’impose. Mais la menace demeure, les ‘patchs’ prennent du temps \u00e0 se d\u00e9ployer, et Verisign met plus particuli\u00e8rement en garde les configurations IIS reli\u00e9es \u00e0 Internet.<\/p>\n
Et si les experts en savaient plus qu’ils ne veulent bien le dire ?<\/p>\n
[source – Silicon.fr] Yves Grandmontagne <\/p>\n","protected":false},"excerpt":{"rendered":"
Un nouveau ver exploitant la faille SSL de Microsoft aurait \u00e9t\u00e9 vu sur des serveurs d’entreprise. Il n’a pas encore \u00e9t\u00e9 identifi\u00e9<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_citadela_custom_class":"","footnotes":""},"categories":[15],"tags":[],"class_list":["post-3428","post","type-post","status-publish","format-standard","hentry","category-securite"],"_links":{"self":[{"href":"https:\/\/destinationcyber.com\/index.php?rest_route=\/wp\/v2\/posts\/3428","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/destinationcyber.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/destinationcyber.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/destinationcyber.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/destinationcyber.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3428"}],"version-history":[{"count":0,"href":"https:\/\/destinationcyber.com\/index.php?rest_route=\/wp\/v2\/posts\/3428\/revisions"}],"wp:attachment":[{"href":"https:\/\/destinationcyber.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3428"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/destinationcyber.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3428"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/destinationcyber.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3428"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}