-
Vulnerability in Java Deserialization Affecting Cisco Products – 2019 Jan
Cause: A vulnerability in the Java deserialization used by the Apache Commons Collections (ACC) library could allow an unauthenticated, remote attacker to execute arbitrary code. Remark: Researchers have found complex object graphs which, when deserialized, can lead to remote code execution in most Java software. Official announcement:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-java-deserialization
-
Apocalypse – Is that the correct way? But this is the destiny!
Preface: The 2012 phenomenon was a range of eschatological beliefs that cataclysmic or otherwise transformative events would occur on or around 21 December 2012. In the moment: We are still alive, but climate in the earth running in irregular way. Changes in the amount of sea ice can disrupt normal ocean circulation, thereby leading to…
-
Exploitation of vulnerability transform to APT (Advanced Persistent threat) facility
Preface: On 4th Jan 2019 CERT/CC Reports Critical Vulnerabilities in Microsoft Windows, Server… Report details: The report recall vulnerabilities found on 13th Dec 2018 (see below): CVE-2018-8626 Windows DNS Server Heap Overflow Vulnerability – https://www.kb.cert.org/vuls/id/531281/ CVE-2018-8611 Windows Kernel Elevation of Privilege Vulnerability – https://www.kb.cert.org/vuls/id/289907/ But vulnerability (CVE-2018-8611) successfully bypasses modern process mitigation policies, such as…
-
2019 headline news – a data breach may impact nearly 2.4 million Blur users
Preface: Data breaches continue to be a threat to consumers. Many companies were hacked and likely had information stolen from them since January 2017. Headline news Jan 2019: Abine announced that they learned on 13th December 2018 that a file containing information from customers who had registered prior to January 2016 was exposed online. Who…
-
Security Bulletin for Adobe Acrobat and Reader | APSB19-02
An attacker could exploit these vulnerabilities to take control of an affected system. Reminder: It is hard to avoid system administrator read the pdf format of document during installation. If such vulnerability occur, it is very dangerous! Official announcement: https://helpx.adobe.com/security/products/acrobat/apsb19-02.html
-
Does QR Codes can pose a risk to your security and safety?
Preface:QR codes have become common in consumer advertising. Friendly speaking, it make your finger and mouth more relaxed! Is the QR code safe? Most risks with QR Codes stem from QR Codes not being readable to humans. Since the QR codes not being able to easily identify a code as the original where the problems…
-
Security Notification – Schneider EVLink Parking (Dec 2018)
Preface: Electric vehicles (EVs) have no tailpipe emissions. Replacing conventional vehicles with EVs can help improve roadside air quality and reduce greenhouse gas emissions. Technical background: Level 2 electric car chargers deliver 10 to 60 miles of range per hour of charging. They can fully charge an electric car battery in as little as two…
-
Celebration 2019! Coming Soon! But…? The most serious data breach in 2018… So far, do you know where they are?
Preface: The internet contains at least 4.5 billion websites that have been indexed by search engines. But may be more data not shown there? Technical background – Dark Web Synopsis: What is dark web? It is the part of the World Wide Web that is only accessible by means of special software, allowing users and…
-
Behind growth of APT attack
Preface: The objective of an APT attack is usually to monitor network activity and steal data. But the APT historical records shown that there are APT attacks intend to damage the network or organization. APT might not easy to detect: VM handler able to relocate and move code because of ASLR (address space layout randomization)…
-
Schneider Electric Security Notification – Nov and Dec 2018
Preface: Business Insider predicts business spending on IoT solutions will hit $6 trillion by 2021. Technical background: EcoStruxure is Schneider Electric’s IoT-enabled, plug-and-play, open, interoperable architecture and platform, in Homes, Buildings, Data Centres, Infrastructure and Industries. Vulnerability details: Security Notification – Embedded Web Servers for Modicon V2 : https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2018-327-01-Embedded-Web-Servers-Modicon-V2.pdf&p_Doc_Ref=SEVD-2018-327-01 Security Notification – Power Monitoring Expert,…