Cyber security technical information

Author: admin

  • 3I/ATLAS’s , who are you? (4th Aug 2025)

    Quote: Hawking advised against active attempts to contact alien civilizations, which could be dangerous, arguing that an advanced alien race could see the same bacteria as humans, which could lead to catastrophic consequences if they discovered Earth. Ref: https://pmc.ncbi.nlm.nih.gov/articles/PMC11462274/ Background: 3I/ATLAS, also known as C/2025 N1 and previously as A11pl3Z, is an interstellar comet discovered…

  • CVE-2025-54574: About Squid. Stay alert! (4 Aug 2025)

    NVD Published Date: 08/01/2025 NVD Last Modified: 08/01/2025 Preface: While HTTP/1.0 is largely obsolete, HTTP/1.1 remains in widespread use, despite the newer HTTP/2 and HTTP/3 protocols. Though HTTP/1.1 has been updated in recent years, its core functionality is still foundational for much of the web. Does processing Uniform Resource Names consume memory? Yes, processing Uniform…

  • CVE-2025-54576: Design weakness in OAuth2-Proxy 7.10.0 and below (1 Aug 2025)

    Preface: Regular Expressions are efficient in that one line of code can save you writing hundreds of lines. But they’re normally slower (even pre-compiled) than thoughtful hand written code simply due to the overhead. Generally the simpler the objective the worse Regular Expressions are. They’re better for complex operations. Background: OAuth2 Proxy is used to…

  • CVE-2025-43209: Processing maliciously crafted web content may lead to an unexpected Safari crash (31-07-2025)

    Preface: In essence, built-in browsers are not just about browsing; they are about maintaining control over the core functionality and user experience of the operating system. Background: Safari and Edge, while built-in, utilize rendering engines derived from the KHTML project, specifically WebKit and Blink, respectively. WebKit is used in Safari, and Blink, a fork of…

  • CVE-2025-54419: Design weakness in version 5[.]0[.]1, Node-SAML (30th July 2025)

    Preface: SSO isn’t completely secure; in fact, it depends on the design of the entire system. This month, a YouTuber, known for his camera skills, posted a video about his experience, which resulted in him losing all his miles redeemed in February 2025. He contacted airline customer service, but received no reasonable response. The airline…

  • CVE-2025-8183: About µD3TN protocol.

    A spaceman came travel, cyber security in space (29-07-2025) NVD Published Date: 07/25/2025 NVD Last Modified: 07/25/2025 Preface: Essentially, any industry or application that requires communication in environments with unreliable or intermittent network conditions can benefit from BPv7’s capabilities. µD3TN has been successfully tested in Low Earth Orbit (LEO) on the OPS-SAT satellite, demonstrating its…

  • The whole world is paying attention to Nvidia, but supercomputers using AMD are the super ones! (July 28, 2025)

    Preface: The El Capitan system at the Lawrence Livermore National Laboratory, California, USA remains the No. 1 system on the TOP500. The HPE Cray EX255a system was measured with 1.742 Exaflop/s on the HPL benchmark. El Capitan has 11,039,616 cores and is based on AMD 4th generation EPYC™ processors with 24 cores at 1.8 GHz…

  • Security Focus: CVE‑2025‑23284 NVIDIA vGPU software contains a vulnerability (25-07-2025)

    Preface: Memory Allocation Flow: Background: An OS-agnostic binary is a compiled program designed to run on multiple operating systems without requiring separate builds for each. This means the binary file can be executed on different OS platforms without modification, achieving a level of portability that’s not common with traditional compiled software. The core loadable module…

  • CVE-2025-8058: The regcomp function in the GNU C library design weakness, do not contempt! (24-07-2025)

    Preface: Glibc is a fundamental component of many embedded systems, which are small, specialized computer systems found in vehicles for tasks like engine control, braking, and infotainment. Background: The regcomp function in Linux is used to compile a regular expression pattern into a form that can be efficiently used by regexec for matching. A good…

  • CVE-2025-7427: Affected Products (Arm Development Studio before 2025.0) [23-07-2025]

    Preface: Arm Development Studio (Arm DS) is a suite of software tools designed for developing and debugging software for Arm-based SoCs (Systems on Chip). Thus, Arm DS optimizing software for Arm-based hardware, primarily in embedded systems and IoT devices. These tools help developers write, compile, and debug code for various Arm processors, including those found…