-
Apple Releases Multiple Security Updates – December 05, 2018
Preface: One of the biggest successes of the iPhone is its security. Still No Major Malware found on iPhone. Current possible infection methods: 1. iOS process named “iBoot” that starts up the system when you first turn on your iPhone and ensures the code being run is valid and originates from Apple. Hacker mimic counterfeit…
-
Release updates from the Chrome team – design weakness (Dec 2018)
Preface: As of 2018, expert estimates that Google Chrome has a 68% worldwide usage share of web browsers as a desktop browser. It also has 61% market share across all platforms combined. Moreover it has over 50% share on smartphones. Technical features: Google chrome not only a web browser. It contained friendly capabilities. How to…
-
Security Bulletin: NVIDIA GeForce Experience – November 2018
Preface: NVIDIA GeForce graphics cards are built for the ultimate PC gaming experience, delivering amazing performance, immersive VR gaming, and high-res graphics. Technical background: GeForce Experience is the companion application to your GeForce GTX graphics card. It keeps your drivers up to date and automatically optimizes your game settings. Vulnerability details announced on Nov 2018:…
-
Reflective thinking on Marriott data beaches – Dec 2018
Preface: Why we are concerning personal data privacy. Or major concern is we scare someone misuse your credit card for online shopping? About cyber security: Cybersecurity is the practice of protecting systems, networks, and programs from digital attacks – Quote Cisco definition. Crime in the Hotel & Lodging Industry: In the comments of security experts,…
-
Cyber Security focus: Node.js – Nov 2018
Preface: Who use Node JS? Node.js build various applications such as social media apps, video and text chat engines, real-time tracking apps, online games and collaboration tools. CiscoDevNet has sample to guide the developer how to integrate integrate Webex with node.js. Technology background: Node.js is an open-source, cross-platform JavaScript run-time environment that executes JavaScript code…
-
SamSam Ransomware variant – December 3, 2018
Preface: The Department of Homeland Security urge the world and United state staying alert of new wave of cyber attack. Technical details: SamSam ransomware is a custom infection used in targeted attacks, often deployed using a wide range of exploits or brute-force tactics. Most likely the goal of the action is interfere the society stability.…
-
Credit reporting agency TransUnion – personal data security flaw (Nov 2018)
Preface: Transunion offers total credit protection all in one place from credit score, credit report and credit alert. On June 25, 2015, TransUnion became a publicly traded company for the first time, trading under the symbol TRU. Who is CreditGo? CreditGo provides free access to credit circular reports and credit scores for Hong Kong residents.…
-
Who hinder smart city development?
Preface: The desire of human being is infinite. It create motivation and innovation. However it embedded greedy and selfishness. Smart city major domains In high level point of view, it is easy to interpret smart city major domains. They are Analytics,Transportation,Health & Environment. You might ask, where is cyber security? I assumed that cyber security…
-
Cisco Prime License Manager SQL Injection Vulnerability – 28th Nov 2018
Preface: Cisco Prime License Manager provides simplified, enterprise-wide management of user-based licensing, including license fulfillment. Cisco Prime License Manager handles licensing fulfillment, supports allocation and reconciliation of licenses across supported products, and provides enterprise-level reporting of usage and entitlement. Vulnerability synopsis: A vulnerability in the web framework code of Cisco Prime License Manager (PLM)…
-
Samba release security update – 27th Nov 2018
Preface: Samba is an implementation of the Server Message Block (SMB)/Common Internet File System (CIFS) protocol for Unix systems, providing support for cross-platform file and printer sharing with Microsoft Windows, OS X, and other Unix. Vulnerabilities highlights: Double free error is caused by freeing same memory location twice by calling free() on the same allocated…