Cyber security technical information

Category: Potential Risk of CVE

  • Be alert! Vulnerability in the Java SE, Java SE Embedded and JRockit component of Oracle Java SE (subcomponent: Serialization). 

    The security concerns on CVE-2018-2815, please staying alert. For more details, please see below: The Java Security Architecture (JSA) defines ways for unprivileged code to perform privileged operations using AccessController.doPrivileged(). 2. The method includes create a new PrivilegedIntrospectHelper. 3. The new PrivilegedIntrospectHelper will be executed on a privileged block. This block will all internalIntrospecthelper(bean,prop,value,request,param,ignoreMethodNF) which will allow to invoke encapsulation…

  • Apple security updates (Apr 2018)

    My speculation on iOS 11.3.1 show on picture.This is the moment when silence is more expressive than all words ever spoken. For more details about official announcement. Please see below url for references: About the security content of iOS 11.3.1 https://support.apple.com/en-us/HT208743 About the security content of Safari 11.1 https://support.apple.com/en-us/HT208741 About the security content of Security…

  • Schneider Electric Important Security Notification – Mar & Apr 2018

      A flaws found in Schneider Electric’s Modicon M340 PLC Station P34 Module human machine interface (HMI) software since 2015. An official announcement by vendor since last month till now. From techincal point of view, Modicon product series programmable logic controller has large usage in electric, gas and oil supply industry. So related party must…

  • Cisco Firepower vulnerabilities – Apr 2018

    The content filter features enhance the firewall defense function. At the same time it is hard to avoid the design limitation occurs in this place. And therefore vulnerabilities occurs! Vulnerabilities  details shown as below: CVE-2018-0233: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fpsnort CVE-2018-0272: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-firepower CVE-2018-0254: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fss2 CVE-2018-0244: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fss1 CVE-2018-0243: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fss CVE-2018-0230: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fp2100

  • The next page of cyber attack – After European allies did the justice action (bombard Syria chemical facilities).

    Preface I can’t hold the tears back! Rest in peace to victims who were killed in a suspected chemical attack on the rebel-held town of Khan Sheikhoun in north-western Syria on 4 April, 2018.  International Law About Convention on the Prohibition of the Development, Production, Stockpiling and Use of Chemical Weapons and on their Destruction…

  • Stay alert! Cisco Releases Security Updates for Multiple Products 18th April 2018

    Be extra alert because alliance bombarded Syria chemical facilities with justice. So the cyber attacks will be increased. I encourages users and administrators to review the following Cisco Security Advisories and apply the necessary updates. For more details, please see below: Cisco WebEx Clients Remote Code Execution Vulnerability cisco-sa-20180418-wbs (link is external) – https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-wbs Cisco…

  • Oracle security update for April 2018 to address 254 vulnerabilities across multiple products

    We heard tsunami so far, but it is hard to imagine that it will be happened in IT world. Oracle has released its Critical Patch Update for April 2018 to address 254 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. A technology type…

  • About Apple security updates – CVE-2018-4173 – It allows invisible microphone access via a crafted app

    We do not have suprise that malware infiltrate malicious code to software application because it happens in frequent from cyber technology world.  Apple counputer found a vulnerability on their iOS and MacOS was that a invisible microphone access via a crafted app but do not display on status bar. But it bring up the concerns,…

  • Be patient! KB4100375. Stay tuned!

    If the memory leak is intensive, it can cause the program to crash or even make the whole computer freeze. The most common reason programs have memory leaks is due to a programming error where unused memory is not allocated back to the system.Memory leaks are a class of bugs where the application fails to…

  • Company which are going to implement the opensource CMS system, you must be extra care – Apr 2018.

    Using a CMS, companies can easily build sites for themselves and their clients. These systems streamline web design and content publishing, ensuring that both your site and workflow are streamlined.The open source CMS system (Drupal, Joomla, Magento and CMS Made Simple) boost up the market growth and demand. However EU is going to enforce the…