Cyber security technical information

Author: admin

  • Microsoft working with Intel to deliver CPU Microcode Fixes via Windows Updates

    Cyber computer world news similar Hollywood celebrity scandal. It can’t maintain longer and easy to forget. Intel learned by experience. Thus invite Microsoft for assistance. About CPU platforms around Spectre Variant 2 (CVE 2017-5715 (“Branch Target Injection”)). I speculate that a technical problem occurs by Intel patch program last time cause by the following issue.…

  • Application security awareness – Before Html5 full cover up, we must stay alert of Html4

    Preface: The bitcoin mining malware, cyber espionage program and malicious malware merely relies on iframe. Where are they from? Understanding Frame: The main advantage of frames is that it allows the user to view multiple documents within a single Web page. It is possible to load pages from different servers in a single frameset. iframe:…

  • When will the dream comes true – Retail business operate cryptocurrency as a exchange

    Former Chairman of the Communist Party of China (Mao) said that sailed on the sea must relies on helmsman(大海航行靠舵手). The statement looks true. The drinking coffee trend found by STARBUCKS. The STARBUCKS, a founder and leading the coffee market. The founder has business sense to dig out the potential business pipeline in the market. Schultz’s…

  • Tomcat – CVE-2018-1305 – Don’t ignore!

    Apache and Tomcat server usage covered more than 60% in cyberworld. A common practice is that Apache server hold the static page or it is a front end (Reversed Proxy function). Tomcat server trend to become a major server component. So all your java application, configure and DB service ID will be located in this…

  • SCADA manufacturer security awareness awaken – ABB

    I speculate that APT attack will be proactive doing their engagement in electric Power supply industry and target manufacturer this year. Since they are all deployed SCADA system. Perhaps engage an attack in this zone as much as better than negotiating with world trade commissioner request to reduce other country quota. The SCADA manufacture awaken the…

  • Information warfare and arsenal

    Preface: There are different countries located in the world, meanwhile so called regime has different governance concept and strategic task force in different area. A simple introduction of regimes around the planet Our story begin with Bear Bear group views electronic warfare as an essential tool for gaining and maintaining information superiority over its adversaries.…

  • Blockchain technology can do the magic – EU GDPR new data protection regulation

    Preface: The movie title – when harry met Sally romantic. It is a comedy film written by Nora Ephron. It gives an idea to the world all we are interconnected with fate. GDPR – High Level Understanding The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation by which the European Parliament, the…

  • Evade sanctions or this is our new world trend – petroleum cryptocurrency

    The legitimacy of the crypto currency provides misty seen to everybody. Heard that  it is legal in some countries. However it cannot maintain the legitimacy since we must following the traditional financial currencies system guideline and policy. But think it over. In ancient age, people using material change concept. The revolution of the change since the…

  • The US Securities and Exchange Commission (SEC) new guidance

    Big country versus Big discussion: The US Securities and Exchange Commission (SEC) released a statement urge high-ranking executives not to trade stocks before the disclosing breaches, major vulnerabilities, and other cybersecurity related incidents. New guidance – https://www.sec.gov/rules/interp/2018/33-10459.pdf Meanwhile Intel release guidance this week (details of availability and schedule for microcode update). For more details, please…

  • For your attention! Multiple vulnerabilities in both Drupal 7 and Drupal 8

    It indeed a tragedy. A multiple vulnerabilities in both Drupal 7 and Drupal 8. Drupal is a free and open source content-management framework written in PHP and distributed under the GNU General Public License. In short, in order to avoid unforeseen technology risk issue occurs, please read the official announcement shown as below: https://www.drupal.org/sa-core-2018-001 Synopsis:…