Cyber security technical information

Category: 2019

  • It will jeopardizing 400,000 Linux system in the world – Exim Releases Security Patches (alert issued in Jun 2019)

    Preface: Exim is growing in popularity because it is open source. Background:It’s the default mail transport agent installed on some Linux systems.It contain feature likes: Lookups in LDAP servers, MySQL and PostgreSQL databases, and NIS or NIS+ services. Vulnerability details: The vulnerability was patched in Exim 4.92, released on February 10, 2019. The vulnerable code…

  • Did you have trouble accessing internet on Sat (8th Jun 2019 GMT+8)

    Synopsis: The users were temporarily unable to reach adjacent countries internet web sites for short period of time (less than 1 – 3 minutes) due to an issue of Internet BGP backbone. Description: On Sat, I was surprise that some internet web site looks unstable. It is not only happens on a single web site.…

  • As of May 9, 2019, even “Virustotal” did not have his record! where is he from?

    Preface: The Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have identified a malware variant— so called ELECTRICFISH. Technical details: The malware implements a custom protocol like “Tor browser”. The aim to allows traffic by-pass defense mechanism in between source and a destination Internet Protocol (IP) address. The malware continuously attempts…

  • 2nd May 2019 – Don’t let you SAP facility become a cyber attack target

    Preface: Heard that estimated total of 1,000,000 SAP production systems could currently be at risk of being hacked. Technical details: When you configure sap router (saprouter) to allow remote (from the Internet) connections via the SAP GUI. The original design will add entries to the route tables for TCP port 3300, 3301, and 3303 the…

  • Docker Hub hack! 25th Apri, 2019

    Preface: Docker Hub hack exposed data of 190,000 users Incident details: On Thursday, 25th April, 2019 Docker Hub discovered unauthorized access to a single Hub database storing a subset of non-financial user data. Impact: Data breach includes usernames and hashed passwords for a small percentage of these users, as well as Github and Bitbucket tokens…

  • Client negligence (misconfiguration), AWS reputation suffer! 3rd Apr 2019

    Preface: 540 Million Facebook Records Leaked Who bare the responsibility? Misconfiguration Headline News: Hundreds of millions of Facebook records exposed on Amazon S3 cloud! See the link below for details: https://www.forbes.com/sites/kateoflahertyuk/2019/04/03/facebook-exposes-540-million-user-records-what-you-need-to-know/#35a8f7043fd7 Observation: The incident shown that it is not difficult to keep track our web activities. A webhook (HTTP push API) is a way for…

  • Why APT attack changing their shape?

    Preface: We known so far that APT attack aim to lockdown specify attack target. The target will be specifics government regime and the their revenue. This is the modern way not require engage the traditional war. Synopsis: APT attack lure people attention is that they form a structure attack and exploit with malware attacking major…

  • Headline News: ASUS Live Update software encounter Advanced Persistent Threat (APT) groups implant backdoor – 26th Mar 2019

    Preface (Attack roadmap): Asus Live Update software installed on laptops and PCs encounter cyber attack in between June and November 2018. Hacker implant a backdoor into the live update software! Observation: ASUS, it configures the network using dynamic host configuration protocol and then makes a plain HTTP request to a remote server to check if…

  • Citrix Internal Network Hacked – Press release on Mar 2019

    Preface: Citrix Systems, Inc. is an American multinational software company that provides server, application and desktop virtualization, networking, software as a service (SaaS), and cloud computing technologies. About data breach occurred on Dec 2018: Citrix says that the late 2018 attack appears to be distinct from the likely password-spraying attack that was the focus of…

  • Moody’s point of view – cyber attack

    Preface: For companies that are experiencing cyber attacks. Moody said it has the potential to weaken its credit profile. Analytic result by Moody’s: About Moody’s findings. Ransomware attack against FedEx and Merck & Co in 2017. The total financial impact of all affected entities reached $10 billion. Question: Does Moody’s rating only focus on financial…