-
Vulnerabilities causes attacker take control of an affected system – Firefox & Firefox ESR Oct 2018
Firefox 62.0.3 and Firefox ESR 60.2.2 user require attention! System vulnerability never stop and keep running in cyber world. Sometimes you feel frustrated and may give up! As a modern people, no way ! So the only way is follow to do so! People say human can control computer systen. But now vulnerabilities control business,…
-
2nd Oct 2018 – Homeland security alert (Retail payment system security advisory)
US Homeland security urge banking industry especially payment gateway services provider staying alert of new round of malicious cyber attack of their system. Similar of cyber attack was happened in Taiwan. The heist draw the cash equal to $2.6m (£2.1m). Homeland security reveal how the technique let ATM machine like human vomiting. But this is…
-
Honeywell Mobile Computers with Android Operating Systems – CVE-2018-14825
Port of Barcelona and Port of San Diego suffers cyber attack on September 2018. The San Diego port indicated the ransomware attack is mainly an administrative problem and the port is open and operating as usual. Cyber attacker conducting cyber attack to logistic industry not new. Honeywell one of the Industrial Control Systems leading manufacturer.…
-
Adobe Releases Security Updates – Oct 2018
Adobe Releases Security Updates – Oct 2018 Many years ago adobe has two main modules Adam and Eve. Now use….. It looks that adobe products hard to manage memory space. So the critical vulnerabilities happens again. It looks that the software patching hit rate in demanding today. It is better to consider virtual patching now.…
-
An attack on media platform causes exposed nearly 50 million user informations – Sep 2018
In 80’s our daily life without any electronic type social media involves. But we understood that we are avoid to talk to the stranger. As time goes by, internet social media fine tune our mind. As a result we make friend and relies on this communication platform. Since this is a popular open platform. It…
-
DNSSEC Key Signing Key Rollover – 11th Oct 2018
Even Though end user not affected by the DNSSEC Key Signing Key Rollover. But at least we know the internet world what is happening. For more detail, please refer below url for reference. https://www.icann.org/ If run below command , result display (dnssec-failed.org. 7200 IN 69.252.80.75). It shown that DNSSEC is off. $ dig @$server dnssec-failed.org…
-
CVE-2018-17082 – PHP Apache2 Component Transfer-Encoding – chunked Request Cross-Site Scripting Vulnerability
XSS vulnerabilities looks common in application world. But do not contempt this issue. A vulnerability in the php_handler function of PHP could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. XSS attack has different ways. For instance XSS callback,…etc PHP has confirmed the vulnerability and released software…
-
Cisco Releases Security Updates for Multiple Products – September 26 and Oct 17, 2018
-
Open vSwitch 2.7.x vulnerabilities – Sep 2018
In the past, servers would physically connect to a hardware-based switch located in the data center. When VMware created server virtualization the access layer changed from having to be connected to a physical switch to being able to connect to a virtual switch. This virtual switch is a software layer that resides in a server…
-
Rockwell Automation RSLinx Classic cyber security alert! 20th Sep 2018
Perhaps we believe that the vulnerability of industrial automation system or SCADA merely happens on Microsoft product. As a matter of fact, Linux OS base system do not have exception. They are also vulnerable! Below vulnerabilties details was found on Rockwell RSLinx Classic. RSLinx Classic is an inclusive communication server which provides plant-floor device connectivity…