-
Is this a careless mistake? BlackRock Exposes Confidential Data on Thousands of Advisers on iShares Site!
Preface: Excel spreadsheets are used all the time in high-risk financial data analysis, and sometimes this is a silent way to dig out the data. BlackRock data leakage synopsis: Bloomberg found three spreadsheets contains BlackRock’s iShares ETF business confidential information included thousands of financial advisors were given ratings based on how much business they bring…
-
CVE-2019-6446 NumPy pickle Python Module Remote Code Execution Vulnerability – 16th Jan 2019
Preface: Gamma-Ray Observatory Satellite Mission for the study of cosmic gamma-ray sources in the keV to MeV energy range. About Numpy and Gammapy: NumPy is an open source Python package for scientific computing. NumPy supports large, multidimensional arrays and matrices. NumPy is written in Python and C. NumPy arrays are faster compared to Python lists.…
-
CoreOS etcd Role-Based Access Control Authentication Vulnerability – 16th Jan 2019
Preface: Container Linux by CoreOS is an open-source lightweight operating system based on the Linux kernel and designed for providing infrastructure to clustered deployments, while focusing on automation, ease of application deployment, security, reliability and scalability. Found vulnerability: A vulnerability in CoreOS etcd could allow an unauthenticated, remote attacker to bypass security restrictions and gain…
-
Drupal Releases Security Updates – 16th Jan 2019
Preface: Drupal is a free and open source content-management framework written in PHP and distributed under the GNU General Public License. Security Focus: Drupal has traditionally depended on multiple external tools. Drupal core uses the third-party PEAR Archive_Tar library. In PEAR Archive_Tar before 1.4.4, there are several file operation with $v_header[‘filename’] as parameter (such as…
-
Security Focus – Critical Path Update contains 3 new security fixes for the Oracle Database Server – 15th Jan 2019
Preface: Computer system vulnerability wreak havoc, IT life not easy! Background: Oracle’s revolutionary cloud database features autopilot, self-protection, and self-healing capabilities designed to eliminate error-prone manual data management. But the Core RDBMS vulnerability still exists! Security focus – CVE-2019-2444: Since it did not provide the details. We supculated that even if you revoke the CREATE…
-
Jackson is very popular choice for processing JSON data in Java but has critical vulnerabilities occurred. Developer must staying alert(Jan 2019)
Preface: In Java development, software developers will often need to read in JSON data, or provide JSON data as an output. But Java JSON Processing API is not very user friendly and doesn’t provide features for automatic transformation from Json to Java object. Jackson technical background: Jackson is a suite of data-processing tools for Java…
-
Linux Kernel mincore() Implementation Information Disclosure Vulnerability – 12th Jan 2019
Preface: Hard drives are slower and they affect loading and saving (read and write) times only. Technical overview: The mincore() function requests a vector describing which pages of a file are in core and can be read without disk access. Vulnerability occurred: A vulnerability in the mincore() function in the Linux Kernel could allow a…
-
CVE-2019-0246 Multiple Vulnerabilities in SAP Cloud Connector – January 2019
Preface: Using both private and public clouds in parallel allows company to pick and choose which data and services they want to keep in the private cloud for added security, and which in the public cloud. This is so called a hybrid cloud concept. Vulnerability found on SAP cloud connector: SAP Cloud Connector, before version…
-
Has the extraterrestrial (E.T.) established a hydrogen line to observe our planet since ancient times?
Preface: Principle in the detection of radio signals from space is the Hydrogen atom. The hydrogen atom comprises a proton and an electron. It emits radioenergy at a wavelength of 21 cm or a frequency of 1420 MHz. Background: The Egyptian pyramids are ancient pyramid-shaped masonry structures located in Egypt. But the archaeologist found that…
-
Simple and powerful evasion technique – Threat actor will be exploit MS word document.
Preface: Preface: Threat Intelligence vendor (FireEye) alert that Global DNS Hijacking Campaign rapidly growth. This storm affected dozens of domains belonging to government, telecommunications and internet infrastructure entities across the Middle East and North Africa, Europe and North America. Synopsis: More information about the impact of this cyber attack.. Please refer to below url for…