Cyber security technical information

Category: Under our observation

  • Virus, malware and ransomware may be can help mankind once AI develop become extreme.

    Preface: What is your expectation from our robot counterparts in the future? Before Professor Stephen Hawking leave the world. The final warning for humanity: AI is coming for us. In the world now in preparing the 5G mobile technology, Big Data technology and Smart City. A silent force unintend to drive human go to next…

  • Credit reporting agency TransUnion – personal data security flaw (Nov 2018)

    Preface: Transunion offers total credit protection all in one place from credit score, credit report and credit alert. On June 25, 2015, TransUnion became a publicly traded company for the first time, trading under the symbol TRU. Who is CreditGo? CreditGo provides free access to credit circular reports and credit scores for Hong Kong residents.…

  • SWIFT Customer Security Controls Framework

      Preface: All SWIFT users must comply with the mandatory security controls by the end of 2018. Objective: Introduction of new controls or guidelines will take account of strong cybersecurity practices that address the currently known new and arising threats in order to pragmatically raise the security bar. Technical details: Mandatory Security Controls 1. Restrict…

  • Security Updates for SIPROTEC and SICAM Products (Oct 2018)

    Preface: SIPROTEC and SICAM – Siemens products and solutions for protection engineering, station automation, power quality, and measurement – can be connected directly and easily to MindSphere and other cloud-based platforms. What is MindSphere? MindSphere is an open cloud platform or “IoT operating system” developed by Siemens for applications in the context of the Internet…

  • Self-Encrypting Solid-State Drive Vulnerabilities – November 06, 2018

    Preface: Retrospective last decade, the key word so called vulnerability look like a stranger to us. But it change today. Design vulnerability, it was no doubt to say. They are the belongings of cost effective solution, market competition (short development life cycle) and satisfy human want. Design technique – Wear leveling (also written as wear…

  • Cathay Pacific hack: Personal data of up to 9.4 million airline passengers stolen.

    From public safety point of view, if a enterprise firm found 9.4 million personal records steal by hacker. Since the firm postpone the announcement schedule. From technical point of view. the law enforcement must require to interview with the firm top management to understand the root cause. Regarding to my observation, the cyber security incident…

  • Unknown APT reference number ? Suspect that it targeting Advantech WebAccess/SCADA customer

      Advantech, a leader within the IPC global market. Advantech offers a comprehensive IPC product range that delivers reliability and stability for extreme environments, providing its customers with a one-stop shopping experience implementing Industry 4.0 and fulfilling their Industrial IoT needs. IoT and SCADA are the APT (Advanced Persistent threat) targeting devices so far. Meanwhile…

  • Oracle Releases October 2018 Security Bulletin – Stay alert!

    Oracle has released a gamut security update to address high amounts of vulnerabilities in its various enterprise products. The official vulnerability checklist includes some follow up actions given by 2016 and 2017. Perhaps we focus vulnerability in frequent and do the priority of analysis for the score. Even though the vulnerability score is important. But…

  • VMWARE ESXi,Workstation and Fusion out-of-bounds read vulnerability in SVGA device – 16thOct2018

    Malware authors constantly seek new methods to obfuscate their code so as to evade detection by virus scanners. Have you heard shader code? In order to avoid the vulnerability occurs, VMware Releases Security Updates on October 16, 2018. ESXi has an out-of-bounds read vulnerability in the SVGA device that might allow a guest to execute…

  • Reflections – New 5G network edge server design

    NSA Senior Cybersecurity Advisor questions Bloomberg Businessweek’s China iCloud spy chip claim (see below url) http://macdailynews.com/2018/10/10/nsa-senior-cybersecurity-advisor-questions-bloomberg-businessweeks-china-icloud-spy-chip-claim/ Now we take a quick discussion but do not related to conspiracy. From technical point of view, if hardware is polluted (spy feature). It is hard to imagine what the impact was? In the SD-branch, routing, firewall, and WAN…