-
The next page of cyber attack – After European allies did the justice action (bombard Syria chemical facilities).
Preface I can’t hold the tears back! Rest in peace to victims who were killed in a suspected chemical attack on the rebel-held town of Khan Sheikhoun in north-western Syria on 4 April, 2018. International Law About Convention on the Prohibition of the Development, Production, Stockpiling and Use of Chemical Weapons and on their Destruction…
-
Stay alert! Cisco Releases Security Updates for Multiple Products 18th April 2018
Be extra alert because alliance bombarded Syria chemical facilities with justice. So the cyber attacks will be increased. I encourages users and administrators to review the following Cisco Security Advisories and apply the necessary updates. For more details, please see below: Cisco WebEx Clients Remote Code Execution Vulnerability cisco-sa-20180418-wbs (link is external) – https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-wbs Cisco…
-
About Apple security updates – CVE-2018-4173 – It allows invisible microphone access via a crafted app
We do not have suprise that malware infiltrate malicious code to software application because it happens in frequent from cyber technology world. Apple counputer found a vulnerability on their iOS and MacOS was that a invisible microphone access via a crafted app but do not display on status bar. But it bring up the concerns,…
-
Be patient! KB4100375. Stay tuned!
If the memory leak is intensive, it can cause the program to crash or even make the whole computer freeze. The most common reason programs have memory leaks is due to a programming error where unused memory is not allocated back to the system.Memory leaks are a class of bugs where the application fails to…
-
Company which are going to implement the opensource CMS system, you must be extra care – Apr 2018.
Using a CMS, companies can easily build sites for themselves and their clients. These systems streamline web design and content publishing, ensuring that both your site and workflow are streamlined.The open source CMS system (Drupal, Joomla, Magento and CMS Made Simple) boost up the market growth and demand. However EU is going to enforce the…
-
Easily Bypass iPhone Encryption – Apr 2018
Headline news report that law enforcement agencies across the country have purchased GrayKey, a relatively cheap tool for bypassing the encryption on iPhones, while the FBI pushes again for encryption backdoors. It looks that a great opportunities for technology firm. It can receive rewards. It is indeed a win win situation. Tech firm can earn…
-
VMware Releases Security Updates – especially cloud base users must staying alert! 12th Apr 2018
In java world, it has plenty of areas are allow hacker to do some tricks. VMware announced that found so called DOM Based Cross-site Scripting Vulnerability and Missing renewal of session tokens vulnerability. In regards to my comment, both vulnerabilities similar modern java applications security weakness, we are able to apply filter to do that.…
-
Juniper JunOS – The giant is sick! April 2018
Kernel crash upon receipt of crafted CLNP packets (CVE-2018-0016) https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10844&cat=SIRT_1&actp=LIST Denial-of-service vulnerability in flowd daemon on devices configured with NAT-PT (CVE-2018-0017) https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10845&cat=SIRT_1&actp=LIST Crafted packet may lead to information disclosure and firewall rule bypass during compilation of IDP policies (CVE-2018-0018) https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10846&cat=SIRT_1&actp=LIST Denial-of-service vulnerability in SNMP MIB-II subagent daemon (mib2d) (CVE-2018-0019) https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10847&cat=SIRT_1&actp=LIST rpd daemon cores due to…
-
Microsoft security update – April 10, 2018 – KB4093112
The security update of Microsoft this week included provides support to control usage of Indirect Branch Prediction Barrier (IBPB) within some AMD processors (CPUs) for mitigating CVE-2017-5715. Apart from that it also provides Windows Client Guidance for IT Pros to protect against speculative execution side-channel vulnerabilities. However I was wondering the mitigation plan coverage provided…
-
Allen Bradley – The design flaw of the programmable logic controller – system vulnerability
Traditional layer 2 communication system (without TCP/IP), proprietary OS system and without internet technology similar as a antibody protect the important facilities especially electricity power supply, water supply and natural gas facilities. But the element of civilization like a non stop vehicles moving forward. Whereby the man kind went through industrial revolution till today digital technology…