-
Headline news – Insurer AXA hit by ransomware (17th May 2021)
Preface: Perhaps we think that ransomware only looked at hard drive C. But the truth is that other mapped drives like D:, E:, F will be compromised. Headline News: PARIS (Reuters) – French insurer Axa said on Sunday that one of its businesses in Asia was hit by a ransomware attack, adding that it was…
-
Small storm in Big data world (CVE-2021-22135 & CVE-2021-22136) 13th May 2021
Preface: 3350 companies reportedly use Elasticsearch in their tech stacks, including Uber, Shopify, and Udemy. Background: Organizations can use big data analytics systems and software to make data-driven decisions that can improve business-related outcomes. Elasticsearch is a popular open-source searchand analytics engine for use cases such as log analytics, real-time application monitoring, and click stream…
-
CVE-2021-23134 : Linux – the implementation of nfc sockets contains flaw ! (12th May 2021)
Preface: Near field communication (NFC) technology lets smartphones and other enabled devices communicate with other devices containing a NFC tag. Vulnerability details: Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.2 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local…
-
Citrix Workspace App (CVE-2021-22907) Security Update – 11th May 2021
Preface: The Improper Access Control weakness describes a case where software fails to restrict access to an object properly. Background: Citrix Workspace ensures corporate data is safe and malicious activities are spotted quickly. If the installation is user-based, Citrix Workspace app must be installed for each user who logs on to the local machine. Vulnerability details:…
-
CVE-2021-20326 Performing a specific type of find query in MongoDB may trigger a denial of service. 10th May 2021
Preface: The term ‘NoSQL’ means ‘non-relational’. It means that MongoDB isn’t based on the table like relational database structure. Background: MongoDB storage format called BSON. It is similar to JSON format. Traditional database store data in tabular format. In a MongoDB database, data is stored in collections and a collection has documents. A document has…
-
Cyber attack shuts down U.S. fuel pipeline ‘jugular,’ said Headline News – 9th May 2021
Preface: The hacker group claimed that its ransomware attacks were only used for “right targets.” The organization claimed that they only targeted ransomware attacks and large profitable companies to “make the world a better place.” Background: Cyber attacks in the oil and gas industry can threaten an organisation’s information technology (IT), its operational technology (OT)…
-
VMware vRealize Business for Cloud updates address a remote code execution vulnerability (CVE-2021-21984) – 5th May 2021
Preface: vSphere 6.5 – introduction of several new REST APIs included in the vCenter Server Appliance (VCSA). Background: You can use vRealize Business for Cloud to manage the following VMware products and services: vCenter Server,vCloud Director,vRealize Automation & vRealize Operations Manage. Through the REST API. To get access VCSA appliance. The corresponding API endpoint for…
-
Dell patches 12-year-old driver vulnerability impacting millions of PCs – 5th May 2021
Background: DBUtil_2_3. Sys is a Windows driver. A driver is a small software program that allows your computer to communicate withhardware or connected devices. This means that a driver has direct access to the internals of the operating system,hardware etc. Vulnerability details: Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to…
-
In normal circumstances, IT team will be avoid people scanning their site. Perhaps sometimes this check will be avoided of the careless mistake. 4th May 2021
Preface: US Homeland security urge their local country computer users should stay alert of multiple vulnerabilities matter on Pulse Secure product. Perhaps all the world should be aware of it. Synopsis: As times goes by, Pulse secure acquired juniper SSL VPN product for few years. Perhaps we can remember that Juniper is the active player…
-
Samba Releases Security Updates – 30th APr 2021
Technical background: A Samba file server enables file sharing across different operating systems over a network. It lets you access your desktop files from a laptop and share files with Windows and macOS users. Vulnerability details: Unprivileged users can delete files in network shares that they shouldn’t access. However, vendor stated that they conduct analysis…