-
Perhaps you don’t use Internet Explorer, you could still be at risk. Conduct patch install on IE today – 12th Feb 2020
Preface: If you try to open an .MHT file on a computer including Windows 10, or Windows Server 2012 R2 then it will attempt to load the file using Internet Explorer eventhough of the default browser in place! Security Focus: Microsoft released an emergency security update on Monday (February 10, 2020) to fix a vulnerability…
-
2019 – The security protection of Docker, where are they?
Preface: Sysadmin may unintentionally expose a Docker registry service without enforcing proper access control, said Palo Alto Networks. Background: Easy to deploy, one of the goal of container-based technology. Docker storing image in a managed collection, with standardized methods of identifying, committing, and pulling individual images. With this feature it is equivalent as a image…
-
HKMA alerting public of the hsbc phishing email – 6th Feb 2020
Preface: Not the first time heard that cyber criminals mimics email from bank to hunting the victims. Historical record: HSBC’s “Payment Notification” malware email was discovered in 2018.These emails are designed to confuse people’s vigilance and use the HSBC brand name to reduce the defensive awareness of email recipients. An “auto-generated” email suggests that you…
-
Learn more about CVE-2019-18634 – sudo vulnerability
Preface: Sudo (substitute user [or superuser] do) is a program used in Unix-like operating systems such as BSD, Mac OS X, and GNU / Linux to allow users to execute programs in a secure manner with special permissions (usually the system Super user). Highlight: When pwfeedback is set, sudo will provide visual feedback when the…
-
F-secure internet gatekeeper 5.40 (heap overflow) – 30th Jan 2020
Preface: Heap overflows are exploitable in a different manner to that of stack-based overflows. Memory on the heap is dynamically allocated at runtime and typically contains program data. Product background: F-Secure Internet Gatekeeper for Linux, aim to serve for small and medium business cyber security protection services. It capable to scanning incoming and outgoing including…
-
The endless story of the SMTP gateway – CVE-2020-7247
Preface: Ray Tomlinson sent the first email across a network, initiating the use of the “@” sign to separate the names of the user and the user’s machine in 1971, when he sent a message from one DEC-10 computer to another DEC-10. Synopsis: An SMTP relay is a protocol that allows email to be transmitted…
-
Digital transformation – coronavirus phishing scam email – Feb 2020
Synopsis: Staying alert especially to healthcare and pharmaceutical industry. Condemn this phishing scam email similar to harm ordinary people during this period of time. Observation: A sample phishing email detected last Tuesday, by email filter expert firm (Mimecast), shows cyber criminal send email with malicious links and PDFs that claim to contain information on how…
-
Can it be remedied or is it a enigma? – JAN 2020
Preface: User Account Control (UAC) is a fundamental component of Microsoft’s overall security vision. UAC helps mitigate the impact of malware. Synopsis: UAC Bypass Using eventvwr.exe was exploited by malware in 2017. Microsoft fixes Eventvwr.exe UAC Bypass Exploit in Windows 10 Creators Update. In Windows 10 Creators Update preview build 15007, Microsoft seems to have…
-
FusionAuth 1.10 Remote Command Execution – JAN 2020
Preface: The biggest differentiator between CIAM and regular (internal) IAM is that in CIAM the consumers of the service manage their own accounts and profile data. Background: FusionAuth provides all of the features you need without the need to code plugins or purchase an enterprise license. It also capable for SaaS architecture provides maximum flexibility…
-
Are there other similarly vulnerability component like ws2ifsl.sys in Windows?
Preface: You found an error in somewhere, sometimes will be expanded your idea of thinking. Synopsis: Ws2ifsl.sys is found in the C:\Windows\System32\drivers directory. In many cases, a driver creates a symbolic link and its name can be used as a file name for CreateFileA, but this is not the case with ws2ifsl. It only calls nt!IoCreateDevicewith the…