Cyber security technical information

Month: October 2018

  • Qualcomm Technologies Security Bulletin – October 2018

    Few years ago, when your friend ask you which is the best smartphone in the world. Seems it is easy to answer. Perhaps the zero day attack and malware wreak havoc today. So it is hard to answer those question in quick! We are now familiar with vulnerability terms especially stack-based buffer overflow, privilege escalation…

  • Apple Releases Multiple Security Updates – 30th Oct 2018

    Apple Releases Multiple Security Updates on product especially IOS 12.1. Are you going to update as soon as possible or observe for a moment then action? Can we say, we are now alive Insane technology world and suffer with vulnerability daily! Safari 12.0.1 https://support.apple.com/en-us/HT209196 iCloud for Windows 7.8 https://support.apple.com/en-us/HT209198 iTunes 12.9.1 https://support.apple.com/en-us/HT209197 watchOS 5.1 https://support.apple.com/en-us/HT209195…

  • A flaw was found in xorg-x11-server – Oct 2018

    A flaw was found in xorg-x11-server. X.Org Server is the free and open-source implementation of the display server for the X Window System. It is very common in computing environment. But IT administrator must stay alert whether your have Linux Desktop install on top of your VM infrastructure. Since a flaw was found in xorg-x11-server…

  • Advantech WebAccess remain vulnerable (8.3.1 & 8.3.2) – Oct 2018

    Advantech WebAccess remain vulnerable (8.3.1 & 8.3.2) When vulnerability allows an attacker to execute “arbitrary code”, it typically means that the hacker can run any command. Although critical facilities especially Petroleum, electricity, Gas and water SCADA infrastructure are prohibited setup internet access function. However to cope with modernization. It is hard to avoid to do…

  • Off-color humor – Cathay Pacific hack (9.4 million airline passengers data stolen by data thief)

    Asia world seems feel shot of the Cathay Pacific Airline cyber security incident. To be honest, it is hard to avoid computer vulnerabilities occurs in business circumstances today. Why? It is a demanding environment includes comprehensive competition. Business man try a way to find out the cost efficiency solution. Meanwhile, it unintended to push a…

  • Cathay Pacific hack: Personal data of up to 9.4 million airline passengers stolen.

    From public safety point of view, if a enterprise firm found 9.4 million personal records steal by hacker. Since the firm postpone the announcement schedule. From technical point of view. the law enforcement must require to interview with the firm top management to understand the root cause. Regarding to my observation, the cyber security incident…

  • Cisco Webex Productivity Tools and the Cisco Webex Meetings Desktop App Releases Security Updates – October 24, 2018

    Cisco Webex Productivity Tools and the Cisco Webex Meetings Desktop App Releases Security Updates – October 24, 2018 Due to design weakness of ACL, WebExService that can execute arbitrary commands at SYSTEM-level privilege. Below remedy only reset the service to the default permission. sc sdset webexservice D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPLORC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD) But you should update your Cisco Webex Meetings…

  • Security Alert! Moxa ThingsPro IIoT Gateway and Device Management Software (Oct 2018)

    Security Alert – Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. MQTT (formerly MQ Telemetry Transport) is an ISO standard (ISO/IEC PRF 20922) publish-subscribe-based “lightweight” messaging protocol for use on top of the TCP/IP protocol. Since the original design objective of this protocol not for handling confidential information and therefore cyber security…

  • What is a smart city from an security point of view?

      Preface The objective of the smart city is design to incorporates information and communication technologies (ICT) to enhance the quality of life. The Smart City derivatives the cost effective solution. As a result, it benefits to urban services such as energy, transportation and utilities in order to reduce resource consumption, wastage and overall costs.…

  • Security Advisories and Alerts – LAquis SCADA Versions 4.1.0.3870 and prior

    Since it build and run on top of Microsoft windows platform and speculated that vulnerabilities might given from Microsoft itself. For instance: LAquis SCADA Versions 4.1.0.3870 and prior Integer overflow to buffer overflow vulnerabilities, which may allow remote code execution. Hints: Microsoft GDI+ is prone to an integer-overflow vulnerability. An attacker can exploit this issue…