-
Is the CVE process late? Esri has managed and remedy those vulnerabilities in May 2021.
Preface: When smartphones and Google Maps were born. The GIS function determines these two functions in a silent manner. Background: Geographic Information System (GIS) plays a key role in military operations. The military uses GIS in various applications, including cartography, intelligence, battlefield management, terrain analysis, remote sensing, etc. – Use of geospatial intelligence:The role of…
-
DarkSide Ransomware ready to move. Operational Technology (OT) should staying alert (7-7-2021)
Preface: IDC report predicted that By 2024, 60% of industrial organizations will integrate data from edge OT systems with cloud-based reporting and analytics, moving from single-asset views to sitewide operational awareness. Background: PowerShell provides an adversary with a convenient interface for enumerating and manipulating a host system after the adversary has gained initial code execution.…
-
CVE-2021-34527 & CVE-2021-1675, no nightmare. Go to sleep well. (7th,JUl 2021)
Preface: Microsoft has assigned CVE-2021-34527 to PrintNightmare. CVE-2021-1675 is similar but distinct from CVE-2021-34527. Background: There is a vulnerability nickname PrintNightmare. PrintNightmare is not the same as CVE-2021-1675, which was fixed in the patch in June. there is currently no patch available for PrintNightmare. Technical Details: The vulnerability numbered CVE-2021-34527 is the same RCE vulnerability…
-
If the design defect cannot be remedied in time. Prevention and detection control is one of them. (Philips Vue PACS) [7-7-2021]
Preface: In theory, if your software application design trusts multiple vendors. Repairing takes more time. Because you need to do more verification. Technology background: Digital Imaging and Communications in Medicine (DICOM) is the standard for the communication and management of medical imaging information and related data. DICOM is most commonly used for storing and transmitting…
-
If your querying and updating RDF models using the SPARQL standards, please aware of this design weakness. (5th JUl 2021)
Preface: Artificial intelligence (AI) has the potential to overcome the physical limitations of capital and labor and open up new sources of value and growth. Background: Apache Jena is a free and open source Java framework for building semantic web and Linked Data applications. The framework is composed of different APIs interacting together to process…
-
Are there other ways to avoid ransomware infection? (6th Jul, 2021)
Preface: A ransomware attack paralyzed the networks of at least 200 U.S. companies, said headline News. President Biden announces investigation into international ransomware attack on 3rd Jul, 2021. Background analysis: Cyber criminals are turning to fileless attacks to bypass firewalls. These attacks embed malicious code in scripts or load it into memory without writing to…
-
The Thirty-six stratagems – Know yourself and the ransomware, never lost in cyber war. 30-06-2021
Preface: The Thirty-six stratagems is a Chinese essay use to illustrate a series of stratagems used in war. It also applies to cyber warfare. Background: Kernel-based Virtual Machine (KVM) is an open source virtualization technology built into Linux®. Specifically, KVM lets you turn Linux into a hypervisor that allows a host machine to run multiple,…
-
Who makes supercomputers faster and faster (CPU, fibre interconnect, parallel processing or virtual machine)? 29th June, 2021.
Preface: In Japanese mythology, the Namazu (鯰) or Ōnamazu (大鯰) is a giant underground catfish who causes earthquakes. This giant not caused disaster, he is the fastest supercomputer in the world. His name is FUGAKU. Background: Riken and Fujitsu started developing the system in 2014, working closely with ARM to design the A64FX processor. Each…
-
Similar or not relevant – QEMU: net: eepro100: stack overflow via infinite recursion (27-06-2021)
Preface: Similar vulnerability with another CVE record was announced on Feb 2021. Perhaps Citrix waiting for other vendor response and confirmation . Whereby, supculated that this is one of the possible factor of the announcement by the Citrix on Friday (25th June, 2021). Background: How is memory allocated when recursive functions are called? Calling a…
-
Security Focus – About the CVE-2021-21999 VMware vulnerability (23rd June 2021)
Preface: An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl[.]cnf’ in an unrestricted directory which would allow code to be executed with elevated privileges,” VMware said. Background: VMware App Volumes provides a system to deliver applications to desktops through virtual disks. Installing App…