-
Vulnerabilities in the old OLE2-based HWP file format – engages APT attacks to South Korea
North Korea’s rising ambition seen in bid to breach global banks My reflection on CNBC News (North Korea’s rising ambition seen in bid to breach global banks) and written down comments below: Preface: The overall situation looks extreme today no matter political or commercial. From commercial area, enterprise try to monopolize on market. From country…
-
Apple icloud security burden – Webkit looks like a culprit! (Mar 2017)
Apple developers work hard on iCloud security to improve the security. They are in an effort to encourage adoption of the two factor authentication standard. Since Apple device did a good job in end point device so far. And therefore it such a way reduces of inherent risks. However it is hard to avoid the…
-
DDOS never expire! A powerful tool for political and economic weapon (Part 1)
We heard DDOS term till 80’s. The foundation of attack given from network layer (OSI layer 3) till today application layer (OSI layer 7). Since 2010 a mobile computing trend leads BYOD (Bring your own device) terminology and carry out more serious distribution denial of services. A public DNS incident occured last year (2016) exposed…
-
Next vulnerable operating system! Not Microsoft, Linux but it is Tizen.
Heads up by Vault 7 CIA scandal topic on Wikileak. Last time we are talking about the high level overview of Samsung TV vulnerabilities for home user and hospitality industry. http://www.antihackingonline.com/cell-phone-iphone-android-windows-mobile/voyeur-vs-surveillance-immoral-or-civil-governance/ We did not discuss technical information last time, since this is a quite interested topic. Let’s take this opportunity see whether we can find…
-
voyeur vs surveillance – immoral or civil governance
Nowadays, CCTV, webcam or even though your mobile phone camera looks involves in our life daily. Seems that the surveillance behavior is following with us once we are born on the earth. The reflections of my thinking of CIA scandal. What is the exact scandal? Immoral or civil governance As said, the surveillance behavior is…
-
The culprit of the CIA’s global covert hacking program given from SS7 design limitation
-
Imaginations – a phantom command DNS queries activated Stone Drill attack in Saudi
Patrick Jane is a fictional character and the protagonist of the CBS crime drama The Mentalist, Jane is an independent consultant. It looks that sound likes you can me in Cyber world. Ha Ha. The most interested Cyber security topics past two days is the destructive malware dubbed StoneDrill. Since the incident happened end of…
-
Heard that Android operating not secure anymore, but it is properly not.
Android phone users widely cover up mobile phone market. We understand that no hack proof devices in the world. Even though iphone iOS before 10.2.1 is vulnerable to DoS Exec Code Overflow (CVE-2017-2370). As a Android user we are not surprise Android operation system bug. There are 2 critical bug occurs on mediaserver and surfaceflinger.…
-
Truetype font + code = fileless malware
Security services provider alert the IT world that malware might infiltrate to their infrastructure facilities. However their cyber defense mechanism looks fall into asleep. So strange? Over 140 enterprises in 40 countries affected. Dubbed that fileless or invisible cyber attack common are in three types. They are memory resident, Rootkits and Windows registry. Refer to…
-
He is great partner of virtual machine but he can kill VM simultaneously – address space layout randomization
The trend in IT world running into virtual world nowadays. Even though your mobile phone operation system is run on top of virtual machine. The memory resources utilization from tradition static to dynamic since virtual machine architecture founded. Security experts worries about infiltration of malware on virtual machine. A mitigation step introduce…