Cyber security technical information

Author: admin

  • Cisco IOS XE Software CLI command injection vulnerabilities CVE-2018-0193

    The design objective of the Command Line Parser is used to parse the command line arguments. The parser parsing a string and returns an object representing the values extracted. This is the the regular expression design objective. The Cisco IOS XE is a train of Cisco Systems’ widely deployed Internetworking Operating System (IOS), introduced with the…

  • Bank ATM Framework QUICK TOUR

    Believe that ATM scammer or criminal activities will be signigicant dropped after ATM thief are under sentence. It looks that I am overlook the attraction of bank note since a new jackpotting malware is under development. I surprise to me that the malware originate country is in Hong Kong. We known that bank of China…

  • A quick way to do the remediation (CVE-2018-0171(smart install vulnerability))

    Headline news posted by Reuters report that Iran hit by global cyber attack that left U.S. flag on screens. As we know, this vulnerability will be conducted the following: Triggering a reload of the device. Allowing the attacker to execute arbitrary code on the device. Causing an indefinite loop on the affected device that triggers…

  • Russian regulator moves to ban messaging app Telegram – 2018

    The Fall of the Berlin Wall on November 9, 1989. A physical wall who goal to isolate the culture and humanity looks never appears in the world again. However we are living in the modern of ages. We unintend to transform our culture and daily life to a digital world. Furthermore the operation of the…

  • Ruby – CVE-2018-3740,CVE-2018-3741 & CVE-2018-8048

      There are total 2,149,836 web sites deployed Ruby On Rails framework.Ruby on Rails, or Rails, is a server-side web application framework written in Ruby under the MIT License. RubyGems is a package manager for the Ruby programming language that provides a standard format for distributing Ruby programs and libraries. There are 3 items of…

  • Verge Is Forced to Fork After Suffering a 51% Attack

    Blockchain technology contains advanced security features fundamentally. However the heist occurs in such secure platform are in frequent. The questions of a retrospective and why was hacked? It proof that the problem not given by blockchain technology design flaw. Most likely the root causes are given by end point (client side), operation management (show the…

  • Staying alert! Microsoft Malware Protection Engine design limitation CVE-2018-0986

    Staying alert! Microsoft Malware Protection Engine design limitation Microsoft Releases Security Update 3rd April 2018: https://portal.msrc.microsoft.com/en-US/security-guidance Technical details: Explanation 1. Microsoft Malware Protection Engine runs as NT AUTHORITY\SYSTEM without sandboxing, and is remotely accessible without authentication via various Windows services,including Exchange, IIS,…etc 2. NScript is the component of Microsoft Malware Protection Engine that evaluates any…

  • Magento-Based Websites Hacked: Steal Credit Card Data and Install Mining Malware

    I keep observe Magento platform so far. On Jan 2018, OnePlus Confirms Credit Card Breach Impacted Up to 40,000 Customers. A security expert found that Oneplus exploiting Magento eCommerce platform. Heard that over 1000 Magenoto stores as hacked this week (Apr 2018). It looks strange that only for 3 months another new cyber security accident…

  • Oil refinery industry security alert! CVE-2018-4841

    We heard in frequent that threat actors will be engaged APT attack to hostile country. The more percentage of cyber attack to the important public facilities most likely is the nuclear power facilities and power generator. As we know, a harden procedure has been built by nuclear power facilitates company. In order to avoid the unforeseen…

  • Firebase Analytics – To be compliance or not to be compliance on personal privacy

    Perhaps the scandal of Facebook and awaken people in the world concerning their personal privacy. Meanwhile web surfing behavior is a major element to do the behaviour analytic.  Now we fully understand the influence power of social media platform. However the analytic function not only valid today. Firebase is a mobile and web application development…