Cyber security technical information

Author: admin

  • Internet censorship versus Dark Web – 2019

    Preface: Have you heard Internet censorship in South Korea?https://en.wikipedia.org/wiki/Internet_censorship_in_South_Korea Synopsis: This news seems make people nervous. The fact is that most of the people concern about the freedom of speech. Perhaps this topic not included in this discussion. Let’s take a look at the recent activities. Japan is going to execute infiltration to citizens smart…

  • Security Focus – CVE-2019-0626 Microsoft Windows DHCP Server Remote Code Execution Vulnerability (12th Feb 2019)

    Preface: This vulnerability is included in MS Patch Tue this week. However the vulnerability is more critical than others. Since threat actor can be conduct a remote code execution through social engineering. Technical highlight: The official announcement told that attacker could exploit the vulnerability by sending a DHCP packet that submits malicious input to the…

  • Romance scams

    The Valentine’s Day is coming soon and the romantic atmosphere will always on you mind. You may think you spend a lot on flowers or chocolate, but losing money in a romance scam would cost you even more. From cyber security point of view, it is a great time for cyber criminals to conducting their…

  • Advantech WebAccess/SCADA Multiple Security Vulnerabilities – Jan 2019

    Preface: Advantech is a leading brand in IoT intelligent systems, Industry 4.0, machine automation, embedding computing, embedded systems, transportation, … New vulnerabilities found in WebAccess/SCADA Version 8.3: CVE-2019-6519 – An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data. CVE-2019-6521 – Specially crafted requests could allow…

  • UK-based Metro Bank has suffered an SS7 attack – Jan 2019

    Preface: The phrase “old wine in new bottles”! Cyber security world has similar things all the time! About SS7 design weakness: Business impact: A U.K. bank says no customers lost money after cyber attackers attempted account takeovers by rerouting one-time passcodes, Motherboard reports. The National Cyber Security Centre (NCSC) also confirmed. Such attacks involve tampering…

  • Docker (runc) – Malicious container escape – CVE-2019-5736 (11th Feb 2019)

    Preface: runc is a CLI tool for spawning and running containers according to the OCI specification. Vulnerability: Found vulnerability on runc affecting several open-source container management systems that leverage runc Impact: The vulnerability allows a malicious container to overwrite the host runc binary and thus gain root-level code execution on the host. But exploit this…

  • Understand New implemented China Cyber Law – 2019

    Aim to security: The new regulations on China’s Cybersecurity Law on November 2018 grant China cyber security agencies (the legal authority) to conduct remote testing of any Internet-related business operating in China. Their authority is possible to copy and share any data that government officials find on the system being inspected. MPS (The Ministry of…

  • Cisco finally fixed Elastic Services Controller Service 3.0 Portal Authentication Bypass Vulnerability (CVE-2018-0121) – 8th Feb 2019

    Preface: It was because of new version 4.0 introduced on Jan 2018. Cisco urge customers upgrade to 4.0 to do the remediation. The Elastic Services Controller Service Portal Authentication Bypass Vulnerability finally fixed on Feb 2019. Product background: Cisco ESC provides a single point of control to manage all aspects of VNF lifecycle for generic…

  • CVE-2019-6978 – GD Graphics Library gdImage*Ptr() Functions Double Free Vulnerability – Feb 2019

    Preface: GD is extensively used with PHP. As of PHP 5.3, a system version of GD may be used as well, to get the additional features that were previously available only to the bundled version of GD. Technical background: The LibGD 2.2.5 allow to written C code to load an entire image file into a…

  • Apple Releases Multiple Security Updates – 7th Feb 2019

    Preface: Apple found memory vulnerability, since no additional information will be provided by vendor. Does it relate to DUI (Dereference Under the Influence)? What is DUI?Attackers use the DUI vulnerability as a memory access service to mount attacks. Their aim to influence memory operations of isolated components through inputs to their public interface. Apple Releases…