-
NSA preemptive curb threats factor – an exploitation of exim design weakness – 29th May 2020
Preface: The severity depends on your configuration, said vendor. It depends on how close to the standard configuration your Exim runtime configuration is. Jun 2019 Headline news on 28th May 2020 – The National Security Agency (NSA) has released a cybersecurity advisory on Russian advanced persistent threat (APT) group Sandworm exploiting a vulnerability—CVE-2019-10149—in Exim Mail…
-
Critical Android bug 8,8.1 and 9 (CVE-2020-0096) – 27th May 2020
Preface: As of April 2020, 37.4% of Android devices run Pie, making it the most popular Android version. Vulnerability details: A critical vulnerability on Android causes privilege-escalation The impact is that it allows attackers to hijack any app on an infected phone, it is much more difficult to detect, the name so called StrandHogg 2.0.…
-
Ebayer, are you aware someone behind you? 25th may 2020
Preface: Host discovery function embedded detection and vulnerability scan service. Under normal circumstances, since you are on a private network, there is no objection in this setting. Synopsis: When visiting the eBay, a script will run that performs a local port scan of your computer to detect remote support and remote access applications, said bleeping…
-
Security focus – Bind vulnerability (CVE-2020-8616) – 20th May 2020
Preface: BIND is open source software that enables you to publish your Domain Name System (DNS) information on the Internet, and to resolve DNS queries for your users. About traditional DNS attack: An example of a DoS attack is the SYNflood, which uses a the TCP SYN packet to create half open TCP connections on…
-
VMware Cloud Director updates address Code Injection Vulnerability (CVE-2020-3956) – 22nd May 2020
Preface: Don’t underestimate the vulnerabilities discovered in the past, it will cause trouble for your cloud or system. Background: VMware vCloud Director is a management tool for private and hybrid cloud architectures. Top Industries that use VMware vCloud Director are Financial Services, Insurance Program Managers Group, & business technology services provider. Vulnerability details: VMware officially…
-
an issue was discovered in smartbear readyapi soapui pro 3.2.5 (20th May 2020)
Preface: SmartBear ReadyAPI and SoapUI are automated testing tools that you can use to create functional and security tests for web service APIs. The easiest way to run ReadyAPI tests from Azure DevOps is to use the SoapUI Pro for Azure DevOps task. Background: The ReadyAPI platform accelerates functional, security and load testing of RESTful,…
-
Hacker target EU supercomputer – 19th May 2020
Preface: What if your computer is slow? Perhaps it is a sign of malware infection. This scenario also apply to modern supercomputer. Perhaps it is powerful. So no one aware. This is only a assumption. However modern supercomputer will be infected by malware. Why? Because part of the modern supercomputer has deployed a Linux OS…
-
Is it a cyber attack or a design change? (Sunday, May 17, 2020 (EDT))
Preface: High-level state-backed APT groups wreak havoc on cyber world. Does this attack only in short time or it will become a constant activities? Security focus: Information technology professional will relies on DHS (US Homeland security) news update as a standard security alert indicator. For example, I am the follower. Found by tonight that the…
-
Little-Known Linux Exploits is being weaponize – 15th May 2020
Preface: The following information will continue the theme released yesterday. For review the details by yesterday, please follow this link – www.antihackingonline.com/cyber-war/high-level-state-backed-apt-groups-entrenched-in-plenty-of-servers-for-nearly-a-decade-using-little-known-linux-exploits-14th-may-2020/ About the theme: Sound can tell, according to statistic provided by Microsoft. Cyber security attack is rapidly growth especially in education area within past 30 days. Perhaps Healthcare and pharmaceuticals area cyber attack…
-
High-level state-backed APT groups entrenched in plenty of servers for nearly a decade Using Little-Known Linux Exploits – 14th May 2020
Preface: According to statistical data, most organizations store data in cloud platforms operating in Linux based environment. Statistics show that, compared with the Windows operating system, Linux coverage rate exceeds 75%. Background: Linux system commonly using drive by downloads on an infected website. For instance you install program on Linux sometimes require specify library file…