-
The injustice invasion – Destructive Malware (28th Feb 2022)
Preface: No matter what your reasons are, children are victims! Human nature: Human desires are infinite. We may meet some of our needs, but new ones will soon emerge. Thus, scarcity explains the relationship between having unlimited demand and the problems within it. Security Focus: The malware, known as WhisperGate, has two stages that corrupts…
-
Kubernetes Hardening Guidance by NSA & CISA (3rd Aug 2021)
Preface: Docker helps to “create” containers, and Kubernetes allows you to “manage” them at runtime. What is Kubernetes Security? That is Cloud, Cluster, Container and code. Background: Kubernetes is commonly targeted for three reasons observing by NSA and CISA. They are data theft, computational power theft, or denial of service. Cyber attacks encountered in the…
-
32-bit design limitation (0x7ffffffff). Another episode of Y2K. (23-07-2021)
Preface: Because humans have destroyed the environment. Therefore, natural disasters resemble God’s punishment. In the digital world, the situation is the same. The reason for the penalty is the design weakness of the software. Background: Perhaps the younger generation has not experienced “Y2K” technical problems because they are still children. The millennium bug is about…
-
Is the CVE process late? Esri has managed and remedy those vulnerabilities in May 2021.
Preface: When smartphones and Google Maps were born. The GIS function determines these two functions in a silent manner. Background: Geographic Information System (GIS) plays a key role in military operations. The military uses GIS in various applications, including cartography, intelligence, battlefield management, terrain analysis, remote sensing, etc. – Use of geospatial intelligence:The role of…
-
If the design defect cannot be remedied in time. Prevention and detection control is one of them. (Philips Vue PACS) [7-7-2021]
Preface: In theory, if your software application design trusts multiple vendors. Repairing takes more time. Because you need to do more verification. Technology background: Digital Imaging and Communications in Medicine (DICOM) is the standard for the communication and management of medical imaging information and related data. DICOM is most commonly used for storing and transmitting…
-
Headline News – unauthorized access to japan government systems via Fujitsu ProjectWeb – 28-05-2021
Headline News – The incident affected the Ministry of Land, Infrastructure, Transport and Tourism, Ministry of Foreign Affairs, Cabinet Office and Narita Airport. The stolen data included files stored by government employees on the cloud-based collaboration and file sharing platform ProjectWEB, which was launched by Fujitsu in the mid-2000s and was very popular among Japanese…
-
Update to CISA-FBI Joint Cybersecurity Advisory on DarkSide Ransomware (May 19, 2021).
Preface: Critical infrastructure cybersecurity is not new – it was first addressed by Presidential Decision Directive (PDD) 63 in 1998. The term Internet of Things (IOT) was used but it was for consumer product applications not industrial applications. Perhaps the Executive Order on Cybersecurity does not adequately protect critical infrastructures Background: Best Practices for Preventing…
-
Zerologon vulnerability note – last revised (23rd Mar, 2021)
Preface: “Logic 0” and “logic 1” represent binary digits (0 and 1) or Boolean logic conditions (true and false). A vulnerability in the cryptography of Microsoft’s Netlogon process that allows an attack against Microsoft Active Directory domain controllers. Background: The algorithm originally used to encrypt the logon process in Windows NT was 2DES. Thus design…
-
Microsoft fixes actively exploited Exchange zero-day bugs attacks (2nd Mar 2021). When service you are not in used, you should disable immediately.
Preface: The Microsoft Exchange Unified Messaging service on the Mailbox server will accept connections from a Client Access server on SIP ports 5062 and 5063. Technical background: Unified Messaging (UM) enables users to use voice mail and other features, including Outlook Voice Access and Call Answering Rules. UM combines voice messaging and email messaging into…
-
To avoid malware misuse “PACKET_MMAP” function,from Linux environment. CISA Releases Free Detection Tool for Azure/M365 Environment (29th Dec 2020)
Preface: Neither shellcode or shellcode injection have anything to do with shell scripting. It is a sophisticated way of finding a vulnerable spot on the cyber security layer of an organization and exploiting it for malicious purposes. Background: Azure Sphere is a secured, high-level application platform with built-in communication and security features for internet-connected devices.…