-
Whether it is the last round of remediation on CVE-2022-26373? Intel’s Enhanced Indirect Branch Restricted Speculation (eIBRS) – 6th Feb 2023
Preface: CVE-2022-26373 technical detail has released to public on 9th Aug 2022. Till end of Jan, 2023 it still has update on this vulnerability. For example, Red Hat fixed this vulnerability in their product Enterprise Linux 7 on 3rd Nov 2022. Since then it conducting the remediation to their product line. Perhaps the remediation on…
-
Celebration 2019! Coming Soon! But…? The most serious data breach in 2018… So far, do you know where they are?
Preface: The internet contains at least 4.5 billion websites that have been indexed by search engines. But may be more data not shown there? Technical background – Dark Web Synopsis: What is dark web? It is the part of the World Wide Web that is only accessible by means of special software, allowing users and…
-
Facebook 6.8 million users’ private photos leaked – Suspected it was happened in developers environment.
Facebook looks bad luck this year. It is better to invite Chinese Feng Shui master provides suggestion. Yes, it is kidding. Perhaps Facebook intend to improve their image. It immediately let’s public know what is happening in the moment. It is talking about 6.8 million users’ private photos leakage. But suspected that the loophole was…
-
About recent data breaches – Every CEO might say cyber security.
Data leakage accident as of December 2018. It provides a message to the world. Even though you installed antivirus, malware detector and Firewall. The hacker still have ways to evade. In a nutshell, technology world is fighting with evils. But it make the senior management team especially CEO headache. So who can help? CA insider…
-
Credit reporting agency TransUnion – personal data security flaw (Nov 2018)
Preface: Transunion offers total credit protection all in one place from credit score, credit report and credit alert. On June 25, 2015, TransUnion became a publicly traded company for the first time, trading under the symbol TRU. Who is CreditGo? CreditGo provides free access to credit circular reports and credit scores for Hong Kong residents.…
-
Apache Releases Security Update for Apache Tomcat JK Connectors – 31st Oct 2018
A reverse proxy is not totally transparent to the application on the backend. When the application on the backend returns content including self-referential URLs using its own backend address and port, the client will usually not be able to use these URLs. Deploy Apache Tomcat Connector (mod_jk) can easy to solve these technical problem. It…
-
Off-color humor – Cathay Pacific hack (9.4 million airline passengers data stolen by data thief)
Asia world seems feel shot of the Cathay Pacific Airline cyber security incident. To be honest, it is hard to avoid computer vulnerabilities occurs in business circumstances today. Why? It is a demanding environment includes comprehensive competition. Business man try a way to find out the cost efficiency solution. Meanwhile, it unintended to push a…
-
Cathay Pacific hack: Personal data of up to 9.4 million airline passengers stolen.
From public safety point of view, if a enterprise firm found 9.4 million personal records steal by hacker. Since the firm postpone the announcement schedule. From technical point of view. the law enforcement must require to interview with the firm top management to understand the root cause. Regarding to my observation, the cyber security incident…
-
Could ring 2 have the same momentum as a IoT backdoor?
Preface: In x86 protected mode, the CPU is always in one of 4 rings. The Linux kernel only uses 0 and 3: 0 for kernel 3 for users Hidden janitor living in your computer SMM is triggered through a System Management Interrupt (SMI), a signal sent from the chipset to the CPU. During platform initialization,…
-
2nd Oct 2018 – Homeland security alert (Retail payment system security advisory)
US Homeland security urge banking industry especially payment gateway services provider staying alert of new round of malicious cyber attack of their system. Similar of cyber attack was happened in Taiwan. The heist draw the cash equal to $2.6m (£2.1m). Homeland security reveal how the technique let ATM machine like human vomiting. But this is…