Cyber security technical information

Author: admin

  • Kubernetes Hardening Guidance by NSA & CISA (3rd Aug 2021)

    Preface: Docker helps to “create” containers, and Kubernetes allows you to “manage” them at runtime. What is Kubernetes Security? That is Cloud, Cluster, Container and code. Background: Kubernetes is commonly targeted for three reasons observing by NSA and CISA. They are data theft, computational power theft, or denial of service. Cyber attacks encountered in the…

  • It is reminded by the vulnerability note VU#405600 – 2nd Aug 2021

    Preface: Alert by CISA. Microsoft Windows Active Directory Certificate Services can allow for AD compromise via PetitPotam NTLM relay attacks. Background: Because NTLM has basic design weaknesses. If cyber criminals take advantage of NTLM’s design weaknesses. The design weaknesses of converting NTLM coexist with the EfsRpcOpenFileRaw method. It such made a powerful tool to corrupt…

  • CVE-2021-23417: DevOps Should be vigilant! (2nd Aug, 2021)

    Preface: JSON is a text-based data format following JavaScript object syntax. Even though it closely resembles JavaScript object literal syntax,it can be used independently from JavaScript, and many programming environments feature the ability to read (parse) and generate JSON. Background: Java application developer oftentimes need to combine objects into a single one which contains all…

  • Stay alert to Trend Micro products – 30th Jul 2021

    Preface: In order to expand business development, software products sometimes use similar engineering designs. When vulnerabilities occur, their effects seem to be interrelated. Privilege Escalation Attack Techniques: A low-privileged process from being escalated via a token stolen from a process with greater privileges. This technique is often used in tandem with another vulnerability to successfully…

  • CISA security advisory: KUKA KR C4 Controller (27th Jul 2021)

    Preface: The computer behind the robots performance is the Programmable Logic Controllers (PLCs). PLCS are able to control the robots and help them do their job at very specific times and points in the production process. Product background: The KR C4 software architeture integrates Robot Control, PLC Control, Motion Control (e.g. KUKA.CNC) and Safety Control.…

  • CVE-2021-34432 Do not kill mosquitto (27th July, 2021)

    Preface: Internet of Things (IoT) and machine-to-machine (M2M) technologies need to use a messaging and connectivity protocol in order to exchange information from a remote location. Background: MQTT is a binary-based protocol and has command and command acknowledgement format. So every time a client sends a command to the broker, the broker sends an acknowledgement.…

  • Elasticsearch ECE 7.13.3 Database Disclosure (27th Jul 2021)

    Preface: 3431 companies reportedly use Elasticsearch in their tech stacks, including Uber, Shopify, and Udemy. Background: Elasticsearch is based on Lucene, very fast and scalable for searching operations. Elasticsearch is good for data analysis, logging and error monitoring and alerting so can be used to search all kinds of documents.Remark: Apache Lucene is a free…

  • Vulnerability found by Apple on Feb, 2021. However such vulnerability awaken digital world consider whether to continue using LibTIFF. (26th July, 2021)

    Preface: Multiple vulnerabilities have been found in libTIFF, the worst of which may allow execution of arbitrary code. It is talking about 5 years ago (2016)! Has it become the focus of manufacturers’ attention now? Background: TIFF offers support for tag extensions allowing for more tags than the standard TIFF specification. For example: Code, 326…

  • Stay alert! IPython code execution (23-7-2021)

    Preface: IPython offers an enhanced read-eval-print loop (REPL) environment particularly well adapted to scientific computing. In other words, IPython is a powerful interface to the Python language. Background: IPython provides a rich toolkit to help you make the most out of using Python, with: Powerful Python shells (terminal and Qt-based). A web-based notebook with the…

  • 32-bit design limitation (0x7ffffffff). Another episode of Y2K. (23-07-2021)

    Preface: Because humans have destroyed the environment. Therefore, natural disasters resemble God’s punishment. In the digital world, the situation is the same. The reason for the penalty is the design weakness of the software. Background: Perhaps the younger generation has not experienced “Y2K” technical problems because they are still children. The millennium bug is about…