-
Staying alert! – Mozilla Patches Critical Vulnerabilities in Firefox, Firefox ESR (3rd Apr 2020)
Preface: According on 2020 market statistic, FireFox market share only 9.25%. But Chrome has 68.11% coverage. However I like FireFox. How Firefox’s memory allocator works? Firefox uses a memory allocator called moz jemalloc. There are two properties which focus by cyber security expert so far! [PSJ] – In essence, a chunk is broken into several…
-
Why US Homeland security urge to public stay alert of the vulnerability on DrayTek Devices? 3rd April 2020
Preface: A conspiracy was leaked this week, someone ambitious to spying the world. Details: The espionage activities will be exploit computer technology as 1st approach in today. It is merely relies on design weakness. Yes, it is the vulnerability. When I read the conspiracy details, I was wonder that if the formulation of this design…
-
Marriott says 5.2 million guest records were stolen in another data breach, said Marriott. 31st Mar 2020
Preface: Perhaps this is not the key factor causes data breach on Jan 2020. But the sound can tell. Observation: It is believed that a new round of data breaches by Marriott this week has attracted attention. Maybe the hotel industry will run within 24 hours. Do maintenance or system upgrade is not easy. We…
-
Kwampirs Targeted Attacks Involving Healthcare Sector – (31st Mar 2020)
Preface: Orangeworm is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015. Synopsis: Why does Kwampirs fall into the “Advanced Persistent Threat (APT)” category? For tradition malware “click and action” attacks. APT attack not condct the similar action. Instead, APT merely do the…
-
Apocalypse: Unknown secret plan – project citing Mirai malware and intend to exploit IoT design weakness triggers cyber attack (29th Mar 2020)
Preface: The Greece Myth – During the war against Cronus, the Cyclops gave Lightning Fire to Zeus as weapon. Meanwhile Poseidon received Trident, and Hades achieve Invisible Helmet. Background: The strategic outsourced concept of IT services not limited to commercial In-house IT team. It is also practiced in intelligence circles. The group claimed that it…
-
If you are using Adobe Creative Cloud Desktop Application for Windows. You should do the update immediately. 24th Mar 2020
Preface: Maybe the software vendor didn’t disclose it explicitly. But you will be interested review this concept. Background: Adobe Creative Cloud is a set of applications and services from Adobe Inc. that gives subscribers access to a collection of software used for graphic design, video editing, web development, photography, along with a set of mobile…
-
Microsoft Windows Type 1 font parsing remote code execution vulnerabilities – 23rd Mar 2020
Preface: Make our life easy, just rename or disable it. Background: Type 1 is a font format which came to market around 1984, together with PostScript and the Apple LaserWriter. Perhaps ATMFD.DLL was first built into Windows 2000. Through observation, this vulnerability was caught by Google project Zero in 2015. Over time, maybe someone has…
-
Centreon – Remote code execution can be configured via Poller (18th Mar 2020)
Preface: Centreon Engine allows you to schedule periods of planned downtime for hosts and service that you’re monitoring. So if design weakness occurs in this place. It provides a way to attacker for exploit. Background: Centreon is an open source IT monitoring solution by Centreon. It is easy to install and you can deploy within…
-
Security Focus – CVE-2020-326 – So called New wine in old bottles (18th Mar 2020)
Preface: Cisco SD-WAN Solution Privilege Escalation Vulnerability. Sound dangerous but it can only conduct internally. If someone can make it happen. It can elevate privileges to root on the underlying operating system. Details: Perhaps Cisco fans still remember that a vulnerability encountered on SDWAN on Jun 2019. I presumably there may be similarities to this…
-
Outline the definition of data breach law in five major U.S. population areas – Mar 2020
Preface: For those who conducting Ransomware attack to another person may be considered a data breach under federal or state law. While attempting to unlock and save its data, a victim of a ransomware attack may have an obligation to enact its data breach protocol and notify individuals whose data is affected by the attack.…