-
The design weakness of Ethereum
Preface: Any idea from you in regards to cryptocurrencies security features at this moment? From technical point of view, blockchain technology is able to protect the data in the block. Thus hacker is hard to modify the data. It looks a prefect system. As far as we know, crypto currencies platform not secure as expected.…
-
Netapp-How I met your Java debugger(CVE-2018-5486)
How I met your Java debugger is not a new hacking technique. It announced in 2014. Hacker is able to turn any open JDWP service into reliable remote code execution. But it can only execute in inside compartment (exploit inside). JDWP is one component of the global Java debugging system, called the Java Platform Debug…
-
Any further idea on SAN storage data deduplication function under GDPR data protection policy
EU-GDPR held on 28th May, 2018. We believe that enterprise firms are ready. The GDPR policy indirect assist both employees and consulting firm doing the business and career development. Many company require to hire data protection officer. Meanwhile the consulting company has opportunities to promote the data protection consulting services. But there are more and…
-
Hacker also interest of the SIEM operation (CVE-2018-1418)
SIEM functions play an important role in the IT infrastructure. And therefore the security architect plan to design the SIEM not only focusing for log collection, correlation, alert and report templates. Meanwhile, a critical item must be added to the design objective. That is how to hidden your SIEM. For instance, hacker target most likely…
-
Integrated GPU may allow side-channel and rowhammer attacks – 03 May 2018 | Last revised: 03 May 2018
The side-channel attack looks never ending in CPU world. So called rowhammer attack jeopardize to the cyber security world today especially smartphone. The worst is that it can altering the information saved in a computer’s memory once attack successful. An academic paper describes an attack called “GLitch,” which leverages two different techniques to achieve a compromise…
-
2nd May 2018 – Windows Host Compute Service Shim Remote Code Execution Vulnerability
A low level container management API in Hyper-V called the Host Compute Service (HCS). HCS compatible written in Go (and used by Docker), and the other is written in C#. On 2nd of May, Microsoft official announcement urge end user who deployed Host Computer Service (HCS) requires to do the security update. Microsoft has patched their own…
-
Cisco Releases Security Updates Original release date: May 02, 2018
Cisco WebEx Advanced Recording Format Remote Code Execution Vulnerability – https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-war Reminder: My comment is that enterprise firm CSO may require to update the security policy on how to use the Cisco webex. Cisco Prime File Upload Servlet Path Traversal and Remote Code Execution Vulnerability – https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-prime-upload Cisco Secure Access Control System Remote Code Execution…
-
CVE-2018-10299 – integer overflow jeopardize Ethereum Zone
In the view of cryptocurrency supporter, Ethereum is the best. The cyber incident occured in cryptocurrency world so far shift the security focus to e-wallet (end point). Perhaps the cyrpto platform itself contains design limitation. However the end point design of crypto currency platform looks have more space for improvement. If you install the MetaMask browser plugin,…
-
Siemens – (CVE-2018-4832): Siemens Security Advisory by Siemens Product 18th Apr 2018
The Gas and Petroleum industries requires automation to enhance their overall operation in last decade. And therefore the automation system setup requires Supervisory control and data acquisition (SCADA). We noticed that hackers targeted SCADA system installed in nuclear power facilities. We are living in digital age and therefore electricity power supply similar air and water.…
-
Ethereum – CVE-2018-10468
As far as I remember, the goal of bitcoin technology aim to replace the traditional payment. In additional, the slogan of bitcoin is that it can provides a more secure way to send the money and it is hard to counterfeit. We heard cyber security incidents happened in bitcoin industry frequently last year. Ethereum ,…