Cyber security technical information

Author: admin

  • Bitcoin exchanges must remain vigilant to low value coins

    Heard that a vulnerability found on cryptocurrency (FuturXE (FXE)). The problem is that smart contact designer make a programming logic mistake. Department of Homeland Security confirm the bug this week. (CVE-2018–12025) – https://nvd.nist.gov/vuln/detail/CVE-2018-12025 The vulnerabilities and cyber attack looks never stop so far. Do you still remember virtual currency exchange Coincheck lost $400 million in…

  • June 2018 – Red Shell service arousing public question!

    DNS logs explicitly shown the internet user activities. For instance a malicious network traffic that can be identified in DNS logs. The technical details includes command and control (C2) traffic of the following cyber attacks. Ransomware, malicious ads and redirects, exploit kits, phishing, typosquatting attacks, DNS hijacking; denial of service (DoS) attacks; and DNS tunneling.…

  • My reflections – Why do we require complete artificial intelligence into daily life?

    The important thing is to never stop questioning, said Albert Einstein. Since there is no prefect design items in the world. and therefore bug fix or so called software patch update is the acceptable method. So when I heard Apple issued the security update for Siri (speech recognition application program). As usual I will be…

  • June 13, 2018 – ISC Releases Security Advisory for BIND

      Operating system · Linux, NetBSD, FreeBSD, OpenBSD, macOS, Windows · Type · DNS server · License · Mozilla Public License (ISC license before 9.11). Website, www.isc.org/downloads/bind. BIND is the most widely used Domain Name System (DNS). ISC Releases Security Advisory for BIND Published Wednesday, June 13, 2018 – A remote attacker could exploit this…

  • June 13, 2018 – Intel Releases Security Advisory on Lazy FP State Restore Vulnerability

    Many CPU architectures support lazy saving of floating point state (registers) by allowing floating point capability to be disabled, resulting in an exception when a floating point operation is performed. Virtually all floating point math is done in SSE (and thus XMM registers) in 64 bit mode. Attacker is able via a local process instead…

  • Why do we require AI (Artifical intelligence)?

    Preface When a child is born, his destiny is learning. He requires continuous learning the knowledge. His objective looks simple because his goal is survival. What is the objective of AI (Artificial Intelligence)? The aim of the development of AI it is to mimic in machines the “intelligent” behavior of humans. The major element of…

  • June 12, 2018 – VMware Releases Security Update

    VMware release security update to avoid remote code execution. The attacker could exploit this vulnerability to take control of an affected system before do the security update. Details shown as below (url): https://www.vmware.com/security/advisories/VMSA-2018-0015.html

  • June 2018 – Cisco releases security update for their products

    The marketing strategy of Cisco covered full scope of Cyber security and computer world. Since provides a wide angle of functional product features are hard to avoid vulnerabilities occurs. And therefore the security update are in frequent on the way. No harm! This is the IT world. Cisco IP Phone 6800, 7800, and 8800 Series…

  • Who is most faster? Crossbar SW or PCR?

    Preface China won 1st of the TOP500 list of the world’s top supercomputers on June 2016. Can we say PCR is the mainstream? Or still keep crossbar switch deployment? Who’s ready to break a record today? IBM announced on June 2018. SUMMIT’s do mathematical calculations at the rate of 200 quadrillion per second, or 200…

  • 29th May 2018 – VMware security update – CVE-2018-6964

    Found VMware Horizon Client (Linux) contains design weakness causes privilege escalation vulnerability. I speculate that the vulnerability only happened on Horizon client for Linux. And therefore it can’t bring the IT guy attention. But do not ignore this vulnerability. As we know, ESXi 6.5 could allow an autenticated VNC session to cause a heap overflow…