voir aussi beRoot : https://github.com/AlessandroZ/BeRoot

Et donc Krack attack pour WPA2

Comment donner des ordres à un téléphone avec des sons inaudbles (>20kHz): "ok google ..., siri,..., cortnana,..."
Les possibilités sont vastes :
(1) Visiting a malicious website.
The device can open a malicious
website, which can launch a drive-by-download attack or
exploit a device with 0-day vulnerabilities.
(2) Spying.
An adversary can make the victim device initiate
outgoing video/phone calls, therefore getting access to the
image/sound of device surroundings.
(3) Injecting fake information.
An adversary may instruct the vic-
tim device to send fake text messages and emails, to publish
fake online posts, to add fake events to a calendar, etc.
(4) Denial of service.
An adversary may inject commands to turn
on the airplane mode, disconnecting all wireless communi-
cations.
(5) Concealing attacks.
The screen display and voice feedback
may expose the attacks. The adversary may decrease the
odds by dimming the screen and lowering the volume

;-)

liste d'article sur gdf, elf, buffer overflows...

les correctifs de sécurité apportés aux différentes version de Firefox