-
22nd May 2018: Security Advisory – Privilege escalation vulnerability found in some Dahua IP products
Based in Hangzhou, China, Dahua Technology is one of the world’s leading manufacturers of security and video surveillance equipment. According to its unaudited results for 2017, it had a turnover of $2.89bn representing a year-on-year increase of 41%, and a gross profit of $404m, growing by 31%.Based on above details, you can imagine that how…
-
The book of Revelation – OPC UA will be the target for next phase of SCADA system attack.
Preface A fascinating, unusual story which creates an eerie atmosphere. The security report issued by Kaspersky on 10th May 2018 driven my interest to do this study. So the report equivalent to enlightenment my conception. Background A tremendous potential cyber attack found by Cisco. Thereby it announced to public last week. They reveal this unknown story…
-
My speculation on how Cisco (Talos) found the malware (VPNFilter malware).
Preface: Using Big Data and data mining methods to predict attacks before they happen,the Cisco Umbrella Security Research team built such detection framework. Point of view: a. Vulnerability routers are vulnerable to Shell Metacharacters Attack Regarding to the observation result of Cisco Talos security team. There are group of router devices are vulnerable. They are…
-
Vulnerabilities – Waiting for vendor response – 23rd May 2018
The cyber attacks are wreak havoc today. In order to protect the power facility, water supply, Gas supply and petroleum industry daily operations. The SCADA control system vendor implemented security control in their system infrastructure. However when vulnerabilities encounter on their products. The remediation step of the vendor response sometimes not in effecient. For instance,…
-
21 May 2018 – CPU hardware utilizing speculative execution may be vulnerable to cache side-channel attacks
Regarding to the subject matter, please refer to below url for reference. Q2 2018 Speculative Execution Side Channel Update https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html Vulnerability of Speculative Processors to Cache Timing Side-Channel Mechanism https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
-
Quick look in virtual machine Zone (CVE-2018-8897) – 05/18/2018
Technology world is a challengeing zone. The key word “rest” looks do not apply to system developer, application programmer and IT expert! I re-call the vulnerability (CVE-2018-8897) to review. It ennounced by security experts for week ago. Perhaps you have full understanding. However no harm in my view point to do the review since it…
-
Software design limitation causes hardware Involved software Attacks – Shanghai 2345 Network
Shanghai 2345 Network major business focusing Mainland China. This companyprovides Internet access platforms. It provides 2345 Website navigation that facilitates users to find their own needs of the site entrance, as well as provides weather forecasts, practical inquiries, commonly used software download, e-mail login, search engine portal, online collection, and other Internet common service; 2345…
-
May 18, 2018 – ISC Releases Security Advisories for BIND
ISC Releases Security Advisories for BIND on May 18, 2018. This alert awaken my defense thinking. I was written few articles about the electronic war and the cyber arsenal. But forgot to contains a scenario which annoucned by ISC today (Security Advisories for BIND). Regarding to to the subject (ISC Releases Security Advisories for BIND) indeed…
-
May 15, 2018 – VMware releases security update. Alert!
VMware just released a security update to address a vulnerability in NSX SD-WAN Edge by VeloCloud. I couldn’t find techincal details but vendor state that VeloCloud by VMware will be removing the web ui component service from the product in future releases. My speculation is that the existing design limitation can merge with former vulnerability…
-
Published Monday, May 14, 2018 – Adobe Releases Security Updates
Death Note is a Japanese manga series. The story describ that if someone’s name is written on it while the writer imagines that person’s face, he or she will die. The computer and smartphone devices who installed adobe acrobat reader are in the similar situation. The vulnerabilities in Adobe Acrobat and Reader and Photoshop…