-
For your attention! Multiple vulnerabilities in both Drupal 7 and Drupal 8
It indeed a tragedy. A multiple vulnerabilities in both Drupal 7 and Drupal 8. Drupal is a free and open source content-management framework written in PHP and distributed under the GNU General Public License. In short, in order to avoid unforeseen technology risk issue occurs, please read the official announcement shown as below: https://www.drupal.org/sa-core-2018-001 Synopsis:…
-
Cisco Releases Security Updates for Multiple Products – 21st Feb 2018
Understanding: The VOSS platform is integrated in Cisco HCS where it is called Cisco Unified Communications Domain Manager (UCDM). VOSS has web services application programming interfaces (APIs) available to third-party developers.Features of VOSS include Web-based Administration, Centralised Management, Collaboration Lifecycle Management, Collaboration Service Management, Business Process Layer on top Network Infrastructure and Communications Architectures Management.…
-
About APT37
A cyber security company (FireEye) so bold to accuse a country. As a matter of fact the APT threat actor make a mistake. It inadvertently show their location. Regarding to the details provided by FireEye. The APT 37 develop total 10 different types of malware to satisfy their goal. Regarding to my observation. I would suggest…
-
UK cyber security agency sticks with China’s Huawei despite US spy fears
The espionage scandal jeopardize the trustworthy reputation. However China is not the espionage program initiator. But America worries about espionage by cross counties. It is hard to tell who’s correct or who’s wrong! UK cyber security agency sticks with China’s Huawei despite US spy fears. For more details, please refer below url for reference. http://www.telegraph.co.uk/technology/2018/02/20/uk-cyber-security-agency-sticks-chinas-huawei-despite-us-spy/
-
IoT World and Smart City must staying wide-awake!
SmartCity project wide spreading implement in the world. The framework transform existing IT world domain includes Cloud computing, virtual machine, router and network infrastructure. Meanwhile it carry the design flaw so called vulnerability simultaneously. As we know, Microsoft product has famous activities patch Tuesday to do the mitigation of critical risk occurs on their product.…
-
City Union Bank in India victim of cyber hack through SWIFT system – Reuters Headline News (19th Feb 2018)
Sounds horrible! A heist occurred from SWIFT payment system again? Chief Executive Officer N. Kamakodi called it a “conspiracy” involving multiple countries, and added the lender was still investigating how it had happened. But the statement seems not precise to describe. A fundamental design limitation on original MT 202 message. Perhaps MT 202 COV doing…
-
Heists last year – SWIFT defense solution
Reuters news told that a heist occurred in Russia Bank last year. Unknown hackers stole 339.5 million roubles ($6 million) from a Russian bank last year in an attack using the SWIFT international payments messaging system. Perhaps we are not going speculating the reason to delaying the public announcemnt. Yes, it may be for forensic…
-
UK blames Russia for NotPetya cyber-attack on June 2017
UK blames Russia for NotPetya cyber-attack last year (details shown below url for reference) https://www.theguardian.com/technology/2018/feb/15/uk-blames-russia-notpetya-cyber-attack-ukraine MeDoc is widely used among tax accountants in Ukraine, and the software was the main option for accounting for other Ukrainian businesses. Threat actors using email scam counterfeit MeDoc lure victims goal suspend the services of Nuclear power supply facilities…
-
Mew Trend 2018 – Exfiltrating Data via DNS
New Trend 2018 – Exfiltrating data via DNS (see below url for reference) https://blogs.forcepoint.com/security-labs/udpos-exfiltrating-credit-card-data-dns Comments: A popular discussion on cyber attack topic this year focusing on DNS attack. Security expert found that threat actor transform DNS topology as a hack tool assists their goal. It show small data set with frequent connections. But the new…
-
My imagination – New way of money laundry evade regulations
We heard turmedous crypto currency heist this year (see below). Do you think is it a trick? Let’s think it over. The refund of the fees after heist is a grey area of regulator custodian.Since the money is a new sources far away from criminal activities revenue.How to using legal regulation forfeiting their money.Let’s think…