-
Point of view: Networking flagship firm hits ransomware attack. (You’ll see what no one else can see) 14th Aug 2022
Preface: The CISCO Talos article mentions a ransomware attack on their company. They mentioned in detail that on the 1st phase of attack. The attacker use Phishing to victims. When the target machine compromised. Then the attacker proceed 2nd phase. But so-called zero-day, therefore no one will know. If we could do scenario replay, maybe…
-
CVE-2022-20377 – Google Android Fingerprint keymaster_ipc[.]cpp Local Privilege Escalation (11th Aug 2022)
Preface: Pixel phones install downloaded Android updates in the background. The installed updates become active the next time that you restart your phone. Background: Protection of the sensitive date stored on the mobile devices is a hot topic.This is the reason why it is very important for mobile app developers to take care of it.…
-
AMD’s delayed announcement – CVE-2021-46778 (9th Aug 2022)
Preface: Is this a possible solution? Can we disabled SMT technology as mitigating SQUIP? As far as we know, it will severely degrade the performance of AMD processors. Background: Attacker modifies system MTR registers to change the SMM memory space from uncacheable to cacheable with type Write-back. The MTRR (Memory Type Range Registers), are registers…
-
What’s going on lets vendor (SAP) updating vulnerability note (the vulnerability was happened on April 2018 – Note# 26226600)? 9th Aug 2022
Preface: SAP has released its August 2022 Patch Day updates. However, you will still see items you are familiar with. What’s that? As follows!Update to Security Note released on April 2018 Patch Day:Security updates for the browser control Google Chromium delivered with SAP Business ClientProduct-SAP Business Client, Versions -6.5, 7.0, 7.70 (Hot News – CVSS…
-
CVE-2022-33719 – Improper input validation in baseband prior to SMR Aug-2022 Release 1 (5th Aug 2022)
Preface: Samsung Galaxy S22 series national version uses Qualcomm Snapdragon 8, European version uses Exynos 2200. European users will cheer as Samsung Galaxy S23 ditches Exynos chip. Background: Android 12 is the twelfth major release and 19th version of Android, the mobile operating system developed by the Open Handset Alliance led by Google.Android Q is…
-
CVE-2022-19773 A use-after-free vulnerability was found in the Linux kernel (log_replay in fs/ntfs3/fslog[.]c for NTFS logs)
Preface: The NTFS3 component is not included in the 5.15 kernel of Manjaro. The ntfs3 is a kernel module. This module will be ready for use on version 5.15.2_rt19-1.Type “modinfo ntfs3” can let you know the ntfs3 installation status. Background: The ext4 is better on Linux based systems because it is designed and built for…
-
CVE-2022-35930 – Ability to bypass attestation verification on sigstore (policy-controller) 4th Aug 2022
Preface: In simplest terms, policies define what end-users can do on the cluster and possible ways to ensure that clusters are in compliance with organization policies.Policy-enablement empowers organizations to take control of Kubernetes operation and ensure that clusters are in compliance with organization policies. Background: The policy-controller admission controller will only validate resources in namespaces…
-
CVE-2022-37035 FRRouting Release 8.3 design weakness (4th Aug 2022)
Preface: FRRouting is a free IP protocol suite. Many companies: ISPs, SaaS, web 2.0 businesses, hyper-scale services, and Fortune 500 private clouds — use it as a fundamental part of their networks. Background: FRRouting (FRR) is a free and open source Internet routing protocol suite for Linux and Unix platforms. It implements BGP, OSPF, RIP,…
-
CVE-2022-33917: In certain circumstances, some versions of the Mali GPU Kernel driver can become compromised. (2nd Aug 2022)
Preface: Mali GPU kernel drivers have a wide range of applications in the IoT and IIoT world. Even the auto industry, gaming, healthcare and artificial intelligence. Background:The Android and Linux version of the Mali GPUs Device Driver provide low-level access to the Mali GPUs that are part of the Valhall family. Some of these components…
-
CVE-2022-35918 Streamlit vulnerability – If you work in the machine learning industry, you should consider it.
(1st Aug, 2022)Preface: On 2017, Facebook’s artificial intelligence robots shut down after they start talking to each other in their own language. Maybe no one remembers! Background: If you are a data scientist. You know the details of the algorithms, which libraries to use, and perform diagnostics. For the machine learning setup, perhaps you will use a…