Cyber security technical information

Author: admin

  • Gmail suffered a 2 million data breach – SSO situation sometimes ambush from all sides (1st Sep 2025)

    Quote: Google warns 2.5B Gmail users to update passwords after data breach of one of its databases – https://nypost.com/2025/08/27/business/google-warns-2-5-billion-gmail-users-to-update-passwords-after-hackers-complete-successful-intrusions/ Preface: More than 2.5 billion Gmail users could be at risk following a massive cyberattack that compromised a Google database managed through Salesforce’s cloud platform. The attack, which began in June 2025, relied on social engineering…

  • IEC 62351 is the official security extension for IEC 60870-5-104. How OpenSSL assists. (29th Aug 2025)

    Preface: Two of the most often used protocols in SCADA networks are Modbus and IEC 60870 – 5. A communication protocol is a collection of rules that enable two or more networked entities to interact with each other. Both the transmitter and the recipient of the information must agree on the protocol. Background: In IEC…

  • CVE-2025-23307: NVIDIA NeMo Curator for all platforms contains a vulnerability (28th Aug 2025)

    Preface: NeMo Curator, part of the NVIDIA NeMo software suite for managing the AI agent lifecycle, is a Python library specifically designed for fast and scalable data processing and curation for generative AI use cases such as foundation language model pretraining, text-to-image model training, domain-adaptive pretraining (DAPT), supervised fine-tuning (SFT) and parameter-efficient fine-tuning (PEFT). Background:…

  • CVE-2025-9386: It impacts any deployment of AppNeta’s tcpreplay tool (27thAug 2025)

    Preface: AppNeta, now part of Broadcom, is a SaaS-based network performance monitoring solution that provides IT and network operations teams with end-to-end visibility into application performance and network issues from the end-user perspective. Why do developers need to customize Tcpreplay? Background: Tcpreplay is a suite of free, open-source command-line tools for replaying and editing network…

  • CVE-2025-4609: About Mojo in Google Chrome on Windows (26-8-2025)

    Published: 2025-08-22 Updated: 2025-08-21 Preface: In Chrome, a sandbox is a security feature that isolates web content and processes into restricted environments, while serialization is the process of converting an object’s state into a format (like a byte stream) that can be stored or transferred. The sandbox focuses on security and isolation, whereas serialization is…

  • CVE-2025-27072: Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks (25-08-2025)

    Official announcement: 08/04/2025 Quote: I chose a Qualcomm product affected by this vulnerability as an example. The Snapdragon Ride™ Flex SoC, including the SA9000P series, does not run on a single embedded OS, but rather supports mixed-criticality operating systems such as those provided by Qualcomm’s partners or the automaker themselves. Preface: To set up Audio…

  • CVE-2025-5115: About Eclipse Jetty (22nd Aug 2025)

    Published: 2025-08-20 Updated: 2025-08-19 Preface: Apache Knox uses Eclipse Jetty as its embedded web server. When you deploy and execute Apache Knox, it uses Jetty to handle incoming HTTP requests and provide its various features, such as authentication, authorization, and routing to backend Hadoop services. Ref: Is Hadoop used in AI? Hadoop ecosystems help with…

  • CVE-2025-38553: Linux kernel’s net/sched subsystem (Fixed) – 21st Aug 2025

    Preface: While Kubernetes doesn’t directly expose net/sched as a configurable API, its network management and QoS features often rely on or interact with net/sched at the underlying Linux kernel level to achieve desired network behavior for containerized applications. Background: net/sched is the Linux kernel subsystem responsible for traffic control (tc). It manages how packets are…

  • AMD responds to known potential side channels attack in SEV-SNPs. (20-08-2025)

    Official Revision Date: 2025-08-12 Preface: AMD SEV-SNP is a confidential computing hardware technology present in AMD EPYC processors from generation 3 and newer. It is based on hardware virtualization extensions and achieves isolation by adding these measures: Full memory encryption. SEV-SNP is not solely located in the firmware. While the firmware plays a crucial role…

  • Overview of Transformer-based language models (19-08-2025)

    Technical Highlights: Megatron-LM codebase efficiently trains models from 2 billion to 462 billion parameters across thousands of GPUs, achieving up to 47% Model FLOP Utilization (MFU) on H100 clusters. The Megatron-LM codebase has successfully benchmarked the training of a 462B parameter model using 6144 H100 GPUs, achieving up to 47% Model FLOP Utilization (MFU). GPT-4,…