-
Have you awaken by this alert [CVE-2022-32894] few days ago? (21st Aug 2022)
Preface: Security Alert from the vendor (Apple) on 17th Aug 2022, found a bug on their iOS. If you use iPhone and iPad, you need to update now. Some experts said that the update was also taken seriously by security research unit ZecOps, who tweeted that the iOS 15.6.1 patch vulnerability was already in use,…
-
CVE-2022-2568 – Logic flaw leads to privilege escalation (Red Hat Ansible Automation Platform) 18th Aug 2022
Preface: What is backward compatibility in Linux?Backward compatible (also known as downward compatible or backward compatibility) refers to a hardware or software system that can successfully use interfaces and data from earlier versions of the system or with other systems. Background: Ansible Automation Platform provides an enterprise framework for building and operating IT automation at…
-
When you are interested in reading this article, you may agree that the industrial sector needs to strengthen cybersecurity protection (17th Aug 2022)
Preface: OPC UA is a standard that ensures the open connectivity, interoperability, security, and reliability of industrial automation devices and systems. OPC UA is widely recognized as the key communication and data modeling technology for the Industry 4.0 initiative.The UA SDK is a C++ library that supports you in writing portable C++ OPC UA Servers.…
-
CVE-2022-38362 – Apache Airflow Docker Provider design weakness (prior to 3.0.0) 16th Aug 2022
Preface: The three top industries that use Apache Airflow for Workflow Automation are Machine Learning, Big Data and Artificial Intelligence. Background: Airflow is a platform that lets you build and run workflows. A workflow is represented as a DAG (a Directed Acyclic Graph), and contains individual pieces of work called Tasks, arranged with dependencies and…
-
CVE-2022-35623 Nordic nRF5 SDK for Mesh 5.0 design weakness – 15th Aug 2022
Preface: Bluetooth mesh is ideal for industrial IoT use cases—especially lighting—that require the relatively low-cost and low-power scalability, reliability, and performance of Bluetooth technology. It enables many-to-many device communications and is optimized for creating large-scale device networks. Background: Bluetooth mesh networks – Communication from one node to another. Unlike traditional IP-based networks, Bluetooth Mesh uses…
-
Point of view: Networking flagship firm hits ransomware attack. (You’ll see what no one else can see) 14th Aug 2022
Preface: The CISCO Talos article mentions a ransomware attack on their company. They mentioned in detail that on the 1st phase of attack. The attacker use Phishing to victims. When the target machine compromised. Then the attacker proceed 2nd phase. But so-called zero-day, therefore no one will know. If we could do scenario replay, maybe…
-
CVE-2022-20377 – Google Android Fingerprint keymaster_ipc[.]cpp Local Privilege Escalation (11th Aug 2022)
Preface: Pixel phones install downloaded Android updates in the background. The installed updates become active the next time that you restart your phone. Background: Protection of the sensitive date stored on the mobile devices is a hot topic.This is the reason why it is very important for mobile app developers to take care of it.…
-
AMD’s delayed announcement – CVE-2021-46778 (9th Aug 2022)
Preface: Is this a possible solution? Can we disabled SMT technology as mitigating SQUIP? As far as we know, it will severely degrade the performance of AMD processors. Background: Attacker modifies system MTR registers to change the SMM memory space from uncacheable to cacheable with type Write-back. The MTRR (Memory Type Range Registers), are registers…
-
What’s going on lets vendor (SAP) updating vulnerability note (the vulnerability was happened on April 2018 – Note# 26226600)? 9th Aug 2022
Preface: SAP has released its August 2022 Patch Day updates. However, you will still see items you are familiar with. What’s that? As follows!Update to Security Note released on April 2018 Patch Day:Security updates for the browser control Google Chromium delivered with SAP Business ClientProduct-SAP Business Client, Versions -6.5, 7.0, 7.70 (Hot News – CVSS…
-
CVE-2022-33719 – Improper input validation in baseband prior to SMR Aug-2022 Release 1 (5th Aug 2022)
Preface: Samsung Galaxy S22 series national version uses Qualcomm Snapdragon 8, European version uses Exynos 2200. European users will cheer as Samsung Galaxy S23 ditches Exynos chip. Background: Android 12 is the twelfth major release and 19th version of Android, the mobile operating system developed by the Open Handset Alliance led by Google.Android Q is…