-
Docker Hub hack! 25th Apri, 2019
Preface: Docker Hub hack exposed data of 190,000 users Incident details: On Thursday, 25th April, 2019 Docker Hub discovered unauthorized access to a single Hub database storing a subset of non-financial user data. Impact: Data breach includes usernames and hashed passwords for a small percentage of these users, as well as Github and Bitbucket tokens…
-
Client negligence (misconfiguration), AWS reputation suffer! 3rd Apr 2019
Preface: 540 Million Facebook Records Leaked Who bare the responsibility? Misconfiguration Headline News: Hundreds of millions of Facebook records exposed on Amazon S3 cloud! See the link below for details: https://www.forbes.com/sites/kateoflahertyuk/2019/04/03/facebook-exposes-540-million-user-records-what-you-need-to-know/#35a8f7043fd7 Observation: The incident shown that it is not difficult to keep track our web activities. A webhook (HTTP push API) is a way for…
-
Why APT attack changing their shape?
Preface: We known so far that APT attack aim to lockdown specify attack target. The target will be specifics government regime and the their revenue. This is the modern way not require engage the traditional war. Synopsis: APT attack lure people attention is that they form a structure attack and exploit with malware attacking major…
-
Headline News: ASUS Live Update software encounter Advanced Persistent Threat (APT) groups implant backdoor – 26th Mar 2019
Preface (Attack roadmap): Asus Live Update software installed on laptops and PCs encounter cyber attack in between June and November 2018. Hacker implant a backdoor into the live update software! Observation: ASUS, it configures the network using dynamic host configuration protocol and then makes a plain HTTP request to a remote server to check if…
-
Citrix Internal Network Hacked – Press release on Mar 2019
Preface: Citrix Systems, Inc. is an American multinational software company that provides server, application and desktop virtualization, networking, software as a service (SaaS), and cloud computing technologies. About data breach occurred on Dec 2018: Citrix says that the late 2018 attack appears to be distinct from the likely password-spraying attack that was the focus of…
-
Moody’s point of view – cyber attack
Preface: For companies that are experiencing cyber attacks. Moody said it has the potential to weaken its credit profile. Analytic result by Moody’s: About Moody’s findings. Ransomware attack against FedEx and Merck & Co in 2017. The total financial impact of all affected entities reached $10 billion. Question: Does Moody’s rating only focus on financial…
-
UK-based Metro Bank has suffered an SS7 attack – Jan 2019
Preface: The phrase “old wine in new bottles”! Cyber security world has similar things all the time! About SS7 design weakness: Business impact: A U.K. bank says no customers lost money after cyber attackers attempted account takeovers by rerouting one-time passcodes, Motherboard reports. The National Cyber Security Centre (NCSC) also confirmed. Such attacks involve tampering…
-
Marvell Avastar wireless SoCs have multiple vulnerabilities – 5th Feb 2019
Preface: The Marvell 88W8897A SoC (System on a Chip) is the industry’s first 802.11ac chip to combine Bluetooth 4.2, mobile MIMO (Multi-input Multi-output), transmit beamforming, and with built-in support for all screen projection technologies. Technology Background: Computer design primary focus on memory usage. Even though without an exception in SoC (System on a Chip) design.…
-
CISA Releases Blog on Emergency Directive: January 24, 2019
Preface: Cyber security experts predict that global DNS hijacking activities are underway. However, it is not certain who is the attacker (the cyber attack group), FireEye said on January 9, 2019. Background information: This cybersecurity incident caught the attention of the Network Security and Infrastructure Security Agency (CISA). Whereby, CISA released their first emergency order…
-
Is this a careless mistake? BlackRock Exposes Confidential Data on Thousands of Advisers on iShares Site!
Preface: Excel spreadsheets are used all the time in high-risk financial data analysis, and sometimes this is a silent way to dig out the data. BlackRock data leakage synopsis: Bloomberg found three spreadsheets contains BlackRock’s iShares ETF business confidential information included thousands of financial advisors were given ratings based on how much business they bring…