-
Security Alert – Debug Exception May Cause Unexpected Behavior (8thMay2018)
CVE-2018-8897 indicate that an unexpected behavior for debug exceptions. A possibility way causes a local attacker could exploit this bug to obtain sensitive information. Regarding to my observation, this issue found on 2008 by system developer accidentally. However the dangerous issue of this vulnerability is that it is difficult to detect. It is hard to…
-
Any further idea on SAN storage data deduplication function under GDPR data protection policy
EU-GDPR held on 28th May, 2018. We believe that enterprise firms are ready. The GDPR policy indirect assist both employees and consulting firm doing the business and career development. Many company require to hire data protection officer. Meanwhile the consulting company has opportunities to promote the data protection consulting services. But there are more and…
-
Hacker also interest of the SIEM operation (CVE-2018-1418)
SIEM functions play an important role in the IT infrastructure. And therefore the security architect plan to design the SIEM not only focusing for log collection, correlation, alert and report templates. Meanwhile, a critical item must be added to the design objective. That is how to hidden your SIEM. For instance, hacker target most likely…
-
Integrated GPU may allow side-channel and rowhammer attacks – 03 May 2018 | Last revised: 03 May 2018
The side-channel attack looks never ending in CPU world. So called rowhammer attack jeopardize to the cyber security world today especially smartphone. The worst is that it can altering the information saved in a computer’s memory once attack successful. An academic paper describes an attack called “GLitch,” which leverages two different techniques to achieve a compromise…
-
6 vulnerabilities in some Huawei products – The culprit,SOAP!
The Simple Object Access Protocol (SOAP) invoking objects on remote machine. It is XML-based messaging thus run on top of HTTP/HTTPS. That is the reason why firewall cannot significant block them. An announcement issued by HUAWEI. For more details, please refer below url for reference. Security Advisory – Six Vulnerabilities in Some Huawei Products http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en
-
Attention: Stay Alert – Multiple Vulnerabilities in PHP Could Allow for Arbitrary Code Execution
Preface: PHP is a widely-used open source general-purpose scripting language that is especially suited for web development and can be embedded into HTML. Security concern by security experts The security issues are typically exposed when PHP code makes use of system-level calls. Found critical security problem today! – Original release date: April 27, 2018 The…
-
CVE-2018-0229: See whether is there any attack make use of this vulnerability transform another type of attack in future?
Seems firewall administrator do not take the single sign-on authentication method in firewall. Perhaps it can’t fulfill audit requirement. Cisco found SAML Authentication Session Fixation Vulnerability. The vulnerability exists because there is no mechanism for the ASA or FTD Software to detect that the authentication request originates from the AnyConnect client directly. An attacker could exploit…
-
Be alert! Vulnerability in the Java SE, Java SE Embedded and JRockit component of Oracle Java SE (subcomponent: Serialization).
The security concerns on CVE-2018-2815, please staying alert. For more details, please see below: The Java Security Architecture (JSA) defines ways for unprivileged code to perform privileged operations using AccessController.doPrivileged(). 2. The method includes create a new PrivilegedIntrospectHelper. 3. The new PrivilegedIntrospectHelper will be executed on a privileged block. This block will all internalIntrospecthelper(bean,prop,value,request,param,ignoreMethodNF) which will allow to invoke encapsulation…
-
Schneider Electric Important Security Notification – Mar & Apr 2018
A flaws found in Schneider Electric’s Modicon M340 PLC Station P34 Module human machine interface (HMI) software since 2015. An official announcement by vendor since last month till now. From techincal point of view, Modicon product series programmable logic controller has large usage in electric, gas and oil supply industry. So related party must…
-
Realistic threats exists in NFC. Are they all secure?
The mobile payment is aggressive in some sort of area. As seen, it fully utilized in China market. From the economey point of view, this new payment design driven the retail business in parallel. The traditional banknote concept convert to digitalization silently.Is this a prelude of digital currency? The people doubt of the NFC (near…