Cyber security technical information

Author: admin

  • 5g, where to go from here?

    Preface: Why some people want everything fast. But when a man is having dinner with his girlfriend, he hopes that time will be slower. 5G communication background: In April 2008, NASA partnered with Geoff Brown and Machine-to-Machine Intelligence (M2Mi) Corp to develop 5G communications technology. As times go by, On 3 April 2019, South Korea…

  • All users of iTerm2 should update immediately – Oct 2019

    Preface: iTerm2 not the default Mac terminal Vulnerability details: A vulnerability, identified as CVE-2019-9535, exists in the way that iTerm2 integrates with tmux’s control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including 3.3.5. Technical background: iTerm2 with…

  • How to know your infrastructure under APT attack? NSA provide hints to cyber world (7th oct 2019)

    Preface: Before the earthquake, many special phenomena will awaken people. Does a similar situation apply to cybersecurity attacks, especially APT? Security focus: NSA has announcement a day ago. They urge the company must be extra care of vulnerabilities in Multiple VPN Applications. Are you interested of this article? Following URL can provide the details. https://media.defense.gov/2019/Oct/07/2002191601/-1/-1/0/CSA-MITIGATING-RECENT-VPN-VULNERABILITIES.PDF…

  • NCSC prediction – DNS monitoring will get harder (Sep 2019)

    Preface: DNS monitoring can let you predict the user behaviour. According to Cisco’s research, over 90% of attacks are done over DNS and only two-thirds of organizations monitor their DNS records. Technical details: Go to options->Advanced->Network->Settings->Automatic proxy configuration url and enter 8.8.8.8 All you Mozilla traffic uses Google dns now. Google Public DNS fully supports…

  • RTOS vulnerabilities found on July this year might impacting medical industry, said FDA (1st Oct 2019)

    Preface: The Department of Homeland Security (DHS) and FDA are aware that the (URGENT/11) vulnerabilities will be effected medical device and hospital networks. They released announcement to urge specify industry to staying alert. Vulnerability details: So called (URGENT/11) found on Wind River VxWorks on July 2019. Urgent11, it include 6 remote code defects and 5…

  • Preface: The heap is the portion of memory where dynamically allocated memory resides (i.e. memory allocated via malloc ). Background: Exim is a message transfer agent (MTA). It generally comes with default Debian installation. If you need to use ACL and other features you may need to install exim4-daemon-heavy (see below):– apt-get install exim4-daemon-heavy Vulnerability…

  • RSA BSAFE Crypto-C Micro Edition vulnerability CVE-2019-3733

    Preface: Who uses RSA’s BSAFE library? BSAFE uses Dual_EC_DRBG as its default pseudorandom number generator. Dual_EC_DRBG let people hesitation because the algorithm that is suspected to contain a NSA backdoor. Product background: The Crypto-C ME software development toolkit is designed to enable developers to incorporate cryptographic technologies into applications. Crypto-C ME security software helps to…

  • cve-2019-16941 (28th Sep 2019)

    Preface: It is rare that software application do not have design weakness. If there is a perfect software appears. Perhaps we can say, it is created by God. Background: Ghidra is a software reverse engineering framework developed by NSA that is in use by the agency for more than a decade. Design weakness: When you…

  • Vulnerability in PHP – 27th Sep 2019

    Preface: CIS Center for Internet Security Urge PHP customer stay alert of the zero-day vulnerability. It could allow for Arbitrary Code Execution. 27th Sep 2019 Vulnerability details: A vulnerability has been discovered in PHP, which could allow an attacker to execute arbitrary code. PHP is prone to a heap-based buffer-overflow vulnerability because the application fails…

  • VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability (CVE-2019-16097) Sep 2019

    Background: There are six major modules in harbor. The default components of each harbor are packaged into a docker container, so the harbor can be deployed via compose, which is divided into 8 containers and run through docker-compose ps. Vulnerability details: A vulnerability in the POST /api/users API of Harbor may allow for a remote…