-
CVE-2019-3878: Uninett mod_auth_mellon ECP Authentication Bypass Vulnerability (26th Mar 2019)
Preface: The statistic by Netcraft in January 2019, Apache server coverage market reach 30.88%. Technical background: Apache server not only contain web server service, it can config as a reserve proxy server to enhance the web infrastructure isolation level. Single sign-on authentication method growth significant in past few years. A popular web architecture model, setup…
-
Headline News: ASUS Live Update software encounter Advanced Persistent Threat (APT) groups implant backdoor – 26th Mar 2019
Preface (Attack roadmap): Asus Live Update software installed on laptops and PCs encounter cyber attack in between June and November 2018. Hacker implant a backdoor into the live update software! Observation: ASUS, it configures the network using dynamic host configuration protocol and then makes a plain HTTP request to a remote server to check if…
-
Found CVE-2018-18252, Capmon enhance their privilege command handling technique in new version.
Preface: In order to avoid cyber attack and insider threat. The monitoring feature is a critical feature in IT world. Background: CapMon monitors and collects information from the infrastructure and applications. The system does not require installation of extra software on other units in the network. CapMon IT monitoring has a Web based user interface,…
-
Front end secure, back end negligent! RSA® Authentication Manager – CVE-2019-3711
Preface: RSA Authentication Manager delivers intelligent, transparent, behind-the-scenes authentication to enhance every secure access scenario. Product advantage: Take full advantage of virtualization in your organization to ease deployment, administration, and on-going system management. Vulnerability details: RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may…
-
Coinbase acquisition hits controversial!
Preface: Coinbase announced that it had acquired Neutrino, a blockchain intelligence startup on Feb 2019. This acquisition aim to analyzing data on public blockchains, Neutrino will help us prevent theft of funds from peoples’ accounts, investigate ransomware attacks, and identify bad actors. Market status: A tremendous worries by cryptocurrency users because the Neutrino (acquired company)…
-
Our Future especially Smart City is waiting for 5G mobile communication. Does your body ready for 5G signal?
Preface: When mobile phone was born. Some of the people had concerning about the impact of electronic device to human health. As time goes by, seems we forget about it because we need smartphone now! Historical background: The FCC has established a policy for human exposure to radio frequency electromagnetic fields. Seems it looks fine,…
-
User opinion – Would you mind your user credential naked running? Facebook scandal (Mar 2019)
Preface: Do I Really Need To Encrypt Every File on My Computer? May be answer is simple, all depends on your data classification label….. The focus: Informed sources told that access logs showed some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords. What is…
-
Cisco managed to conduct the remediation of IP Phone 8800 Series vulnerabilities – 20th Mar 2019
Preface: Cisco has announcement yesterday that there are vulnerabilities found on IP Phone 8800 Series. About IP Phone 8800 Series: The Cisco IP Phone 8800 Series delivers HD video and VoIP communications, and integrates with your mobile device to meet your business needs. Vulnerability details are shown as below: Cisco IP Phone 8800 Series Path…
-
Do not ignore integer overflow attack. His power equivalent with torpedo.
Preface: Malware detection, SIEM and predictive technology enhance the detective and preventive control in cyber security world. However the hacker still have solutions to conduct infiltration thus compromise the system. Attacker exploit integer overflow do the evasion. From technical point of view. It is difficult to detect. Historical records of cyber attack who exploit integer…
-
CVE-2019-0804 Azure Linux Agent Information Disclosure Vulnerability (14th Mar 2019)
Preface: To speed up the deployment of your cloud computing readiness. Use the image deployment is faster than mounting an ISO and manually installing a VM.When system admin created images for an OpenStack provider, he will pre-installed cloud-init and haveged. Azure has similar feature, it is so called Azure WaLinuxAgent. Vulnerability detail: An information disclosure…