-
The fundamental of data sharing versus data privacy
Preface: What is “Fair Information Practices,” the principles of privacy protection are internationally recognized and are found in most privacy legislation around the world. These principles inform the way private organizations collect, secure, use and disclose personal information. What is the bottleneck of data sharing? Privacy is about respecting individuals. If a person has a…
-
It is a hurricane, but it happen in cyber world – Multiple vulnerabilities in PHP (Sep 2018)
The United States and Asia were hit by hurricanes. It looks that the similar situation is happen in cyber world. MS-ISAC Releases Advisory on PHP Vulnerabilities urge technology world to staying alert. For more details, please refer below hyperlink: https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-php-could-allow-for-arbitrary-code-execution_2018-101/ Hacker exploit the PHP design weakenss (Arbitrary Code Execution or RCE) for attack must fulfill…
-
Sep 2018 – Veeam MongoDB left unsecured, 440 million records exposed
Sanitization process is important in IT world. If without correct validation, it may allow malicious code pass to trust boundary. As a result it may causes remote code execution, SQL injection, trigger Zero day attack, ….etc. So…… Headline News this week. Should you have interest, my picture can tell my speculation. https://www.scmagazine.com/home/news/veeam-mongodb-left-unsecured-440-million-records-exposed/ Vulnerability looks scary!…
-
Consider how does JQuery affect millions of people confidential data – Sep 2018
RiskIQ expose one of the possible way how hacker steal customer credit card data of British Airline. Expert speculate the suspects exploit Inject jQuery into a page technique collect the confidential data. BA claim that the data breach only occurs in credit card data. Risk IQ share the proof of concept shown that the technique…
-
Adobe has released security updates to address vulnerabilities in Adobe Flash Player and ColdFusion – Sep 2018
Adobe revealed that the Flash end of life will take place at the end of 2020. So we still can be use the flash. Perhaps computer products includes software and hardware.The key word vulnerability similar human not feeling well (sick) then receive medication. The patient will get well. So vulnerability occurs in cyber world do…
-
Docker for Windows design weakness – without verifying the validity of the object – CVE-2018-15514
Docker brings several new things to the table that the earlier technologies didn’t. It capable to all platform. It equivalent a multiple adapter. It is hard to avoid vulnerability happen on software and hardware. Docker no exception. The specific vulnerability found on Aug 2018. For more details, please see below: Docker for Windows Edge Release…
-
Security Notification – Modicon M221 (Sep 2018)
Because many industries requires monitoring and control capabilities that SCADA offers. In most uses, SCADA is used to manage a physical process of Electric, Gas and water Utilities.We heard cyber security alert in SCADA facilities so far. As a citizen we cannot immagine how worst will be the incident happened. For instance once SCADA PLC…
-
6th Sep 2018 – AirWatch Agent and VMware Content Locker updates resolve data protection vulnerabilities
The development of the cyber security mechanism involves preventive and corrective control. Security experts alert IT world that a unforseen cyber security loophole will be occurs when the poplarity of smartphone growth. Perhaps mobile device management (MDM) establish a way to rescue the enterprise firm business operation in demand of the usage of mobile phone…
-
British Airway announcement – 7th Sep 2018 (380,000 customers’ bank details stolen from website)
The Spokesman of British Airways said around 380,000 payment cards had been compromised and it had notified the police.He stated that they suspected that hacker stolen customers’ bank details through official website and or mobile apps. However the stolen data didn’t include travel or passport details. If there is european citizens become a victims of…
-
Cisco Releases Security Updates on 5th Sep 2018 – Staying alert!
Vendor would like to bring below problems to your attention. Apache Struts Remote Code Execution Vulnerability Affecting Cisco Products: August 2018 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180823-apache-struts Cisco Umbrella API Unauthorized Access Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-api Cisco RV110W, RV130W, and RV215W Routers Management Interface Buffer Overflow Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-rv-routers-overflow