-
intel new processor embedded anti malware feature – 15th june 2020
Preface: Starting with Oracle 11g release 1 (11.1), there is a just-in-time (JIT) compiler for Oracle JVM environment. A JIT compiler for Oracle JVM enables much faster execution because, it manages the invalidation, recompilation, and storage of code without an external mechanism. Background: A way to prevent attack code execution by stack and heap. It…
-
Archaeologist & Artificial intelligence – 14th Jun 2020
Preface: The traditional workforce faces the challenge of automation. Myth and Science: Archeologist don’t understand why Pyramids of Giza directions to Orion’s belt in the sky.Archeologist do not understand why Pyramids of Giza directions to Orion’s belt in the sky. So far, it has quite a lot of assumptions. The Myth mentioned that it let…
-
Perhaps this way come true – VMware horizon client for windows vulnerability (cve-2020-3961) 12th Jun 2020
Preface: In order to avoid the impact of the vulnerability. VMware do not provide the details for CVE-2020-3961. Synopsis: This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system. Vulnerability details: VMware Horizon Client for Windows contains a privilege escalation vulnerability due to folder permission configuration and…
-
us homeland security alert – design weakness of universal plug and play – 9th jun 2020
Preface: Universal Plug and Play (UPnP) is a set of networking protocols that permits networked devices, such as personal computers, printers, Internet gateways, Wi-Fi … Review historical event: Mirai is an IoT botnet that was designed to exploit vulnerabilities in IoT devices for use in large-scale DDoS attacks.In September 2016, the Mirai malware launched a DDoS…
-
machine learning vulnerability – vu#425163 (4th Jun 2020)
Preface: Artificial Intelligence applied machine learning and other techniques to solve problems. Will AI impact human? Background: You can use the Machine Learning model to get predictions on new data for which you do not know the target. For instance, AWS developing AI technology to predict cyber attack especially email spam, email phishing , etc.…
-
US homeland security alert – unpatched MS system vulnerability to cve-2020-0796 (5th Jun 2020)
Preface: Microsoft has released a security advisory to address a remote code execution vulnerability (CVE-2020-0796) in Microsoft Server Message Block 3.1.1 (SMBv3) on 11th Mar 2020. Synopsis: The proof of concept code vulnerability has been made public. Attacker do the exploit is that send a specially crafted packet to a targeted SMBv3 server. (refer to…
-
if not require to use, it is better turn off bluetooth function before your hardware vendor patch – 26th May 2020
Preface: Bluetooth enabled consumer electronics such as mobile phones, cameras simplify data sharing between devices. For instance, smartphone can wirelessly connect to a headset to make hands-free calling easier or can send pictures to another. Background: The Bluetooth market has changed dramatically in the past three to four years. Perhaps is the potential power of…
-
do you know the weaknesses of IP-in-IP design? 2nd jun 2020.
Background: IPIP tunnel is typically used to connect two internal IPv4 subnets through public IPv4 internet. It has the lowest overhead but can only transmit IPv4 unicast traffic. Vulnerability details: The vulnerability is due to the affected device unexpectedly decapsulating and processing IP in IP packets that are destined to a locally configured IP address.…
-
data breach spread to banking enterprise. no exception to bank of America – 28th may 2020.
Background: The PPP provides small businesses with forgivable loans of up to $10 million per company (8 weeks of payroll). This program was launched on April 3, 2020; it is a forgivable loan program offered primarily to help businesses deal with the adverse consequences COVID- 19. Point of view: Cybercrooks have been leveraging malicious macros…
-
weekly security focus – memory leak vulnerability in vmci module (cve-2020-3959)
Preface: TCP / IP design restrictions have introduced security vulnerabilities to transport protocols. Security focus: Memory leak vulnerability in VMCI module (CVE-2020-3959) – VMware ESXi, Workstation and Fusion contain a memory leak vulnerability in the VMCI module. It lets local non-administrative user send a malformed packet to a virtual machine. Such action may be able…