Cyber security technical information

Category: Under our observation

  • Adobe Security Bulletin – PhoneGap Push plugin vulnerability and the other

    Coin has two sides, the computer has vulnerabilities on the other hand show benefits. Why, it provides a influence effect causes people found out resolution.And such a way go to advanced technology zone. Security announcement by Adobe urge adobe users following the requirement apply the fix. Since there are total 5 items of security update.…

  • Bank ATM Framework QUICK TOUR

    Believe that ATM scammer or criminal activities will be signigicant dropped after ATM thief are under sentence. It looks that I am overlook the attraction of bank note since a new jackpotting malware is under development. I surprise to me that the malware originate country is in Hong Kong. We known that bank of China…

  • A quick way to do the remediation (CVE-2018-0171(smart install vulnerability))

    Headline news posted by Reuters report that Iran hit by global cyber attack that left U.S. flag on screens. As we know, this vulnerability will be conducted the following: Triggering a reload of the device. Allowing the attacker to execute arbitrary code on the device. Causing an indefinite loop on the affected device that triggers…

  • Ruby – CVE-2018-3740,CVE-2018-3741 & CVE-2018-8048

      There are total 2,149,836 web sites deployed Ruby On Rails framework.Ruby on Rails, or Rails, is a server-side web application framework written in Ruby under the MIT License. RubyGems is a package manager for the Ruby programming language that provides a standard format for distributing Ruby programs and libraries. There are 3 items of…

  • Staying alert! Microsoft Malware Protection Engine design limitation CVE-2018-0986

    Staying alert! Microsoft Malware Protection Engine design limitation Microsoft Releases Security Update 3rd April 2018: https://portal.msrc.microsoft.com/en-US/security-guidance Technical details: Explanation 1. Microsoft Malware Protection Engine runs as NT AUTHORITY\SYSTEM without sandboxing, and is remotely accessible without authentication via various Windows services,including Exchange, IIS,…etc 2. NScript is the component of Microsoft Malware Protection Engine that evaluates any…

  • Magento-Based Websites Hacked: Steal Credit Card Data and Install Mining Malware

    I keep observe Magento platform so far. On Jan 2018, OnePlus Confirms Credit Card Breach Impacted Up to 40,000 Customers. A security expert found that Oneplus exploiting Magento eCommerce platform. Heard that over 1000 Magenoto stores as hacked this week (Apr 2018). It looks strange that only for 3 months another new cyber security accident…

  • Oil refinery industry security alert! CVE-2018-4841

    We heard in frequent that threat actors will be engaged APT attack to hostile country. The more percentage of cyber attack to the important public facilities most likely is the nuclear power facilities and power generator. As we know, a harden procedure has been built by nuclear power facilitates company. In order to avoid the unforeseen…

  • IOS-XE vulnerabilities (CVE-2018-0196) + (CVE-2018-0171 & CVE-2018-0151)

    Perhaps a medium vulnerability found on IT product not a shock. However the medium vulnerability co-exists with known critical vulnerabilities created multiple vulnerabilities are unable to foreseen what is the level of damage. Cisco IOS XE fundamental design integrate to open system. The severity of vulnerability CVE-2018-0196 is medium level. End user is allow to…

  • Bank Negara Malaysia (Bank) detected and foiled a cybersecurity incident involving attempted unauthorized fund transfers using falsified SWIFT messages.

    Easter holiday make me lazy. Seen cyber incident alert posted by my friend Enoch yesterday. However I just ignore until awaken this evening. The details of this incident was that the crooks use falsified SWIFT Messages try to achieve their goal. The news told that they haven’t successful. As far as I remember, on February…

  • Mar 2018 – Apple Releases Multiple Security Updates

    I spend a lot of time to study security update by Apple this week. It looks that core foundation vulnerability bring to my attention. As we know Objective-C is a general-purpose, object-oriented programming language used by Apple for the OS X and iOS operating systems. Retrospectively, vendor has urge developer that a good practices will be…