Cyber security technical information

Category: Data privacy

  • ABout MasterCard data breach – Aug 2019

    Preface: Still remember that when I was work in bank environment. Visa and Master payment solutions looks indeed secure. Those facilities are running in standalone machine. The communication protocol is the IBM SDLC communication. In order to communication with S390 mainframe. We setup data link switch in network switch and define VTAM major nodes on…

  • CVE-2019-10099 Apache Spark Unencrypted Data Vulnerability Aug 2019

    Background: Apache Spark is the tailor made for big data industry.Spark’s advanced acyclic processing engine can operating as a stand-alone mode or a cloud service. Synopsis: Spark supports encrypting temporary data written to local disks. This covers shuffle files, shuffle spills and data blocks stored on disk (for both caching and broadcast variables). It does…

  • Australian Cyber Security Centre urge his citizen beware of Password Spraying Attacks

    Preface: Even though you company install full set of cyber defense mechanism. More than 70% of feature is detective and preventive. Perhaps SIEM can do a predictive action. May be you have doubt, but it is factual. Details: Australian Cyber Security Centre urge his citizen beware of Password Spraying Attacks (refer below url): https://www.cyber.gov.au/sites/default/files/2019-08/2019-130_-_password_spray_attacks_detection_and_mitigation_strategies.pdfSuch activities…

  • Even though you deployed SSL, stay alert in Python Iot world (CVE-2018-18074)

    Preface: The invention of the IoT sensor looks like a contingent driving a smart city. At the same time, the python programming language gives life to the Internet of Things. Security Focus: Even though IoT devices and their back-end facilities deploy SSL certification. It cannot prevent data leakage because of programming language flaw. Vulnerability details:…

  • Fileless Malware Advisory – 17 JUl 2019

    Preface: Stolen account information of nearly 750 million users was available for sale on the dark web after hackers breached 24 popular websites. The stolen data, released in two batches, includes names, email addresses and hashed passwords. Description: Spear phishing email with URL to an archive file containing a .lnk file can misleading receiver to…

  • Orvibo smart home devices leak billions of user records – customer must staying alert – Jul 2019

    Preface: If victim is not negligence. Can we give an excuse to him? Company background: Orvibo, a Chinese smart home solutions provider. Story begin: A technical report shown to the world that Orvibo (ElasticSearch cluster) leaked more than two billion user logs containing sensitive data of customers from countries all over the world.Does the admin…

  • User opinion – Would you mind your user credential naked running? Facebook scandal (Mar 2019)

    Preface: Do I Really Need To Encrypt Every File on My Computer? May be answer is simple, all depends on your data classification label….. The focus: Informed sources told that access logs showed some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords. What is…

  • Internet censorship versus Dark Web – 2019

    Preface: Have you heard Internet censorship in South Korea?https://en.wikipedia.org/wiki/Internet_censorship_in_South_Korea Synopsis: This news seems make people nervous. The fact is that most of the people concern about the freedom of speech. Perhaps this topic not included in this discussion. Let’s take a look at the recent activities. Japan is going to execute infiltration to citizens smart…

  • 2019 headline news – a data breach may impact nearly 2.4 million Blur users

    Preface: Data breaches continue to be a threat to consumers. Many companies were hacked and likely had information stolen from them since January 2017. Headline news Jan 2019:  Abine announced that they learned on 13th December 2018 that a file containing information from customers who had registered prior to January 2016 was exposed online. Who…

  • Self-Encrypting Solid-State Drive Vulnerabilities – November 06, 2018

    Preface: Retrospective last decade, the key word so called vulnerability look like a stranger to us. But it change today. Design vulnerability, it was no doubt to say. They are the belongings of cost effective solution, market competition (short development life cycle) and satisfy human want. Design technique – Wear leveling (also written as wear…