-
A vulnerability has been identified in IEC 61850 system configurator – CVE-2018-4858
When a lot of cyber security Guru focusing the nuclear power and critical facilities. It looks they also requires to includes the power substation. From techincal point of view, control central will be hardening both console and network environment. But how about the configuration console for substation? Does it allow install the configuration software (IEC…
-
20th Jul 2018 – Win32/Emotet return again!
Strange! A Trojan (Win32/Emotet) found on 2014. It looks that similar of cyber attack comes again. Published Jul 23, 2014 (Trojan:Win32/Emotet) – https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan:Win32/Emotet This threat can steal your personal information, including your banking user names and passwords. It is usually installed when you open a spam email attachment or click on a malicious link in…
-
Defending the Power Grid From Hackers – Jul 2018
Cyber defense facilities today are very strong and effecive to fight against different of cyber attacks. Even though stealer deploy DNS steal technique to exfiltrate the data from a firm. Anti cyber technology have their way to quarantine and deny such activities. Perhaps you said the IoT devices attack that wreaked hovac worldwide. It is…
-
If you are the cisco SD WAN /iWan customer, you should stay alert! 18th Jul 2018 (Cisco security advisories)
Intelligent WAN (iWAN) is a Cisco SD-WAN product that was built from an existing Cisco product (also called iWAN). How do you deploy Cisco SD-WAN? • Cloud-based management and vAnalytics dashboard • Virtual or physical secure routers for on-premise or cloud • In-house IT or managed service with service providers or system integrators • Capital…
-
Cisco Security Advisories and Alerts published on Wed 18th Jul 2018.
Cisco Policy Suite for Mobile is a carrier-grade policy, charging, and subscriber data management solution. It helps service providers rapidly create and bring services to market, deliver a positive user experience, and optimize network resources. It also generates monetization opportunities across 3G, 4G, and LTE access networks as well as IP Multimedia Subsystem (IMS) service…
-
Jul 2018 – What’s up involving LabCorp Cyber Security incident ?
Headline News said a global laboratory company suspect encounter cyber attack this month (Jul 2018). LabCorp a leading global life sciences company, aim to provides diagnostic, drug development and technology-enabled solutions for more than 115 million patient encounters per year. As of today, we did not heard any official announce the details. However the news on…
-
Have you heard CVE-20170-5645? Oracle critical patch update advisory – July 2018.
Background Java programming language sometimes look like a accomplice. The Java Sandbox, which attempts to enforce a privilege model that permits safe execution of untrusted code, and is most famously used to permit the automatic execution of Java Applets in a browser. Vulnerability details Apache Log4j is a Java-based logging utility. Log4j is one of…
-
July 2018 – SAP Security Patch Day
According to Panorama Consulting, the average implementation costs for SAP and Oracle both increased while competitor implementation costs decreased. But regarding to cyber security, all the products do not have differences. Yes, it is do the patch management and update. SAP Security Patch Day – July 2018 SAP businessobjects business intelligence suite : CVE-2018-2432,CVE-2018-2427 and…
-
9th Jul 2018 – Total 329 ethereum tokens vulnerable for integer overflow
More ethereum tokens now involves into a bug and causes jeopardize the reputation. So called integer overflow, a design limitation allows the owner of the contract to set the balance of an arbitrary user to any value. Reference resource (Hyperlink) – see below: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md The status last week (9th July 2018) shown that there are…
-
Node.js hits arbitrary command injection (CVE-2018-13797)
Node.js framework become popular today. Node.js can build the application on ethereum (cryptocurrency). Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js’ package ecosystem, npm, is the largest ecosystem of open source libraries in the world. Meanwhile, npm is…