-
Hacker also interest of the SIEM operation (CVE-2018-1418)
SIEM functions play an important role in the IT infrastructure. And therefore the security architect plan to design the SIEM not only focusing for log collection, correlation, alert and report templates. Meanwhile, a critical item must be added to the design objective. That is how to hidden your SIEM. For instance, hacker target most likely…
-
2nd May 2018 – Windows Host Compute Service Shim Remote Code Execution Vulnerability
A low level container management API in Hyper-V called the Host Compute Service (HCS). HCS compatible written in Go (and used by Docker), and the other is written in C#. On 2nd of May, Microsoft official announcement urge end user who deployed Host Computer Service (HCS) requires to do the security update. Microsoft has patched their own…
-
Cisco Releases Security Updates Original release date: May 02, 2018
Cisco WebEx Advanced Recording Format Remote Code Execution Vulnerability – https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-war Reminder: My comment is that enterprise firm CSO may require to update the security policy on how to use the Cisco webex. Cisco Prime File Upload Servlet Path Traversal and Remote Code Execution Vulnerability – https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-prime-upload Cisco Secure Access Control System Remote Code Execution…
-
CVE-2018-10299 – integer overflow jeopardize Ethereum Zone
In the view of cryptocurrency supporter, Ethereum is the best. The cyber incident occured in cryptocurrency world so far shift the security focus to e-wallet (end point). Perhaps the cyrpto platform itself contains design limitation. However the end point design of crypto currency platform looks have more space for improvement. If you install the MetaMask browser plugin,…
-
Siemens – (CVE-2018-4832): Siemens Security Advisory by Siemens Product 18th Apr 2018
The Gas and Petroleum industries requires automation to enhance their overall operation in last decade. And therefore the automation system setup requires Supervisory control and data acquisition (SCADA). We noticed that hackers targeted SCADA system installed in nuclear power facilities. We are living in digital age and therefore electricity power supply similar air and water.…
-
Ethereum – CVE-2018-10468
As far as I remember, the goal of bitcoin technology aim to replace the traditional payment. In additional, the slogan of bitcoin is that it can provides a more secure way to send the money and it is hard to counterfeit. We heard cyber security incidents happened in bitcoin industry frequently last year. Ethereum ,…
-
6 vulnerabilities in some Huawei products – The culprit,SOAP!
The Simple Object Access Protocol (SOAP) invoking objects on remote machine. It is XML-based messaging thus run on top of HTTP/HTTPS. That is the reason why firewall cannot significant block them. An announcement issued by HUAWEI. For more details, please refer below url for reference. Security Advisory – Six Vulnerabilities in Some Huawei Products http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en
-
Attention: PeopleSoft Enterprise PeopleTools (Rich Text Editor) vulnerability – Apr 2018
CVE# Product Component Protocol Remote Exploit without Auth.? CVSS VERSION 3.0 RISK (see Risk Matrix Definitions) Supported Versions Affected Notes Base Score Attack Vector Attack Complex Privs Req’d User Interact Scope Confid- entiality Inte- grity Avail- ability CVE-2018-2772 PeopleSoft Enterprise PeopleTools Rich Text Editor HTTP No 8.8 Network Low Low None Un- changed High High…
-
CVE-2018-0229: See whether is there any attack make use of this vulnerability transform another type of attack in future?
Seems firewall administrator do not take the single sign-on authentication method in firewall. Perhaps it can’t fulfill audit requirement. Cisco found SAML Authentication Session Fixation Vulnerability. The vulnerability exists because there is no mechanism for the ASA or FTD Software to detect that the authentication request originates from the AnyConnect client directly. An attacker could exploit…
-
Date:2018-April-25 – Drupal Releases Critical Security Updates
Perhaps we urge the developers to do the re-engineering the core. There are 2 times of critical vulnerabilities happened within 1 week (18th Apr 2018, 24th Apr 2018). It provide a bad reputation of the brand. The founder is better to end the life of this product then make a new generation of CMS system.…