-
CVE-2022-31711 – VMware vRealize Log Insight 8.x prior to 8.10.2 (Updated On: 2023-01-31)
Preface: As time goes by, Log management is a mandatory setting in the digital world. Log management core architecture design involves a lot of software design. Therefore, you will be exposed to different forms of cyber attacks. So you need to watch out and protect yourself from harm. Background: Log Insight includes the following key…
-
CVE-2023-20532 – See what’s going on with this vulnerability? (1st Feb 2023)
Preface: As usual when you read a vulnerability bulletin. The vendor sometimes do not disclose technical details to the public. If you will read daily renewal CVE records. Maybe you feel the same way I do. CPU is one of the key topics of the vulnerability database. Since the supplier has the right to secrecy.…
-
CVE-2023-0240 LINUX KERNEL until 5.10.160 IO_URING (IO_PREP_ASYNC_WORK) memory corruption (30th Jan 2023)
Preface: The basic idea behind AIO is to allow a process to initiate a number of I/O operations without having to block or wait for any to complete. Background: System calls are how a program enters the kernel to perform some task. Programs use system calls to perform a variety of operations such as: creating…
-
About CVE-2023-0394 (30th Jan 2023)
Preface: Believed that this design weakness already been fixed before CVE release to public. So do not worry about that.To become secure, since a known Potential issues of IPv6 extension headers. Therefore , both stateful and stateless firewalls should do a deep inspection. Otherwise, it can do the evasion silently. Background: From an early deployment…
-
Speculation – Cause of Microsoft Edge (Chromium-based) Vulnerabilities (25th Jan 2023)
Preface: Edge was initially built with Microsoft’s own proprietary browser engine, EdgeHTML, and their Chakra JavaScript engine. In late 2018, it was announced that Edge would be completely rebuilt as a Chromium-based browser with Blink and V8 engines. The new Microsoft Edge is based on Chromium and was released on January 15, 2020. It is compatible…
-
What is the value of the Trusted Execution Environment (TEE) ? (20th JAN 2023)
Preface: Some said, found malware lets cybercriminal remotely manipulate your Android. Background: The full name of TEE is trusted execution environment, which is an area on the CPU of mobile devices (smart phones, tablets, smart TVs). The role of this area is to provide a more secure space for data and code execution, and to…
-
Potential threat of ChatGPT (Artificial intelligence) – 19th JAN 2023
Preface: OpenAI was founded by Elon Musk, Sam Altman, Ilya Sutskever, Greg Brockman, Wojciech Zaremba and John Schulman in Nov 2015. ChatGPT is a chatbot launched by OpenAI in November 2022. It is built on top of OpenAI’s GPT-3 family of large language models, and is fine-tuned with both supervised and reinforcement learning techniques. Background:…
-
Oracle Critical Patch Update Advisory – January 2023 : Security Focus CVE-2022-2274 (17th JAN 2023)
Preface: Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update security patches as soon possible. Background: AVX-512 debuted in 2016 on Intel’s Xeon Phi x200 (codenamed Knights Landing). However, the instruction set has since found its way into other products from the chipmaker, such as Skylake-SP, Skylake-X,…
-
CVE-2022-47630 – See whether your android can skip this vulnerability? Perhaps it can. (16th Jan 2023)
Preface: Why configure Secure Boot? This type of hardware restriction protects the operating system from rootkits and other attacks that may not be detected by antivirus software. Background: Secure Boot is the process where the operating system boot images and code are authenticated against the hardware before they are authorized to be used in the…
-
Security Focus (CVE-2023-0022) – This CVE is included in SAP’s first 2023 security update. (15th JAN 2023)
Preface: OLAP is all about BI and Big Data. Online analytical processing (OLAP) is an approach to formulate and answer multidimensional queries to large datasets. Background: SAP have released a new statement of direction for SAP BusinessObjectsthat introduces a new version of the SAP BusinessObjects BI suite code named SAP BusinessObjects BI 2024, available on-premises…