-
Not a serious mistake and could cause more trouble! (21st Dec, 2019)
Preface: Computer technology especially software application is the soul of digital world. Background: Pingbacks (also known as trackbacks) are a form of automated comment for a page or post, created when another WordPress blog links to that page or post. When you publish a new blog post, WordPress attempts to ‘ping‘ all the sites that…
-
How we focus design weakness?
Preface: Flaws that require root access are not considered security issues in existing policy. If we are not using cloud computing concept. It is acceptable. But we need cloud system! Security focus: Turkish information security specialist found a design weakness in Windows kernel design. According to the vendor’s Bug Bounty program rules, flaws that require…
-
Gun and bullet – SMBV1 and Ransomware (Nov 2019)
Preface: Starting from around 2012 the use of ransomware scams has grown internationally. Background: About 5 days ago, headline news of Bloomberg told that cyber criminals compromised the IT infrastructure for Mexican Petroleum. Meanwhile, hacker hopes to extract nearly $5 million from the company, with a final deadline of 30th November, 2019. Tremendous incident record:…
-
Suspected that Podman-Varlink encounter Remote Code Execution – Under observation (14th Oct 2019)
Preface: Red Hat is investing in CRI-O and Podman. Meanwhile they are involved in the Open Container Initiative Standards Organization. The goal is to contribute and introduce drive innovation in their products, such as Red Hat OpenShift and Red Hat Enterprise Linux. Background: Podman decide to provide a simple CLI for managing pods and containers.…
-
NCSC prediction – DNS monitoring will get harder (Sep 2019)
Preface: DNS monitoring can let you predict the user behaviour. According to Cisco’s research, over 90% of attacks are done over DNS and only two-thirds of organizations monitor their DNS records. Technical details: Go to options->Advanced->Network->Settings->Automatic proxy configuration url and enter 8.8.8.8 All you Mozilla traffic uses Google dns now. Google Public DNS fully supports…
-
Previous NFS 4.1 vulnerability (CVE-2018-16884) show linux kernel design weakness.
Preface: A vulnerability in the NFS41+ subsystem of the Linux Kernel could allow an authenticated, adjacent attacker execute arbitrary code on a targeted system. The vulnerability exists because the bc_svc_process() function of the affected software uses the wrong back-channel ID. use-after-free in svc_process_common The defect not only affected software uses the wrong back-channel ID. Furthermore…
-
it might be new path way in cyber attack. yes, it is uefi.
Preface: UEFI has slowly come to replace BIOS. Whereby Intel schedule to completely replace BIOS with UEFI on all chipsets by 2020. Quote: Firmware is software, and is therefore vulnerable to the same threats that typically target software. Technical details: From technical point of view, EFI Runtime services are usually located below 4GB. As a…
-
China raised the security level for its vessels heading through the Strait of Malacca. Perhaps cyber security vulnerabilities causes shipping traffic jam in that place! Jul 2019
Preface: The string of attacks last month on tankers near Hormuz. It alerting to related industry and countries about bottleneck on supply chain. Quote: The head of Indonesian Maritime Security Agency, said it’s looking into the issue. And it doesn’t see why China raised the alert status? From technical point of view: As a matter…
-
Microsoft Windows RDP Network Level Authentication can bypass the Windows lock screen – Jun 2019
Vulnerability Note VU#576688 Original Release Date: 2019-06-04 | Last Revised: 2019-06-04 Preface: The more the power you have, the greater the risk is being infected. Synopsis: Microsoft Windows RDP Network Level Authentication can allow an attacker to bypass the lock screen on remote sessions. My observation: Observing that Microsoft re-engineering the RDP with create a…
-
May 2019 – Printerlogic shown weak vulnerability management
Preface: Patch management is the best practice of upgrading existing software applications to remove any weak security patches that could be exploited by hackers. Background: PrinterLogic’s printer and driver management platform reduces infrastructure costs by eliminating print servers and providing centralized management of every printer on the network. Sold in both on-premise and cloud configurations,…