Cyber security technical information

Preface: The Freescale hypervisor management driver provides several services to drivers and applications related to the Freescale hypervisor. About: Integer overflows and other integer manipulation vulnerabilities frequently result in buffer overflows. An integer overflow occurs when an arithmetic operation results in a number that is too large to be stored in the space allocated for…

Prefect: Headlines new – Critical VxWorks flaws expose millions of devices to hacking. What is VxWorks? The VxWorks RTOS comprises the core capabilities of the wind microkernel(not monolithic) along with advanced networking support, powerful file system and I/O management, and C++ and other standard run-time support. Vulnerability details: The vulnerabilities found on Wind River VxWorks…

Preface: Internet of Vehicles (IoV) growth rapidly, meanwhile they are also the potential target of the cyber attacker. About Mitsubishi Electric FR Configurator2: From inverter startup to maintenance, FR Configurator2 allows the user to specify settings easily at the computer. Vulnerability details: CVE-2019-10976 – This vulnerability is triggered when input passed to the XML parser…

Preface: Refer to market statistic on 2018, the growth in cloud revenues appear to be the strongest for Microsoft and weakest for IBM. Vulnerability details: In IBM Cloud Private on OpenShift icp-scc SecurityContextContraints is erroneously assigned to all pods in all namespaces Remedy: For IBM Cloud Private 3.1.1 or 3.1.2: To resolve the issue, run…

Preface: Message queues are unnecessary and cause a lot of overhead (setup such system cab be a lot of work). Product background: Zeromq libzmq A simple synchronous system will just receive a request from the client, perform an operation (anything from retrieving some data from the server to uploading an image) and return a response.…

Preface: Smart apps like your friend whenever you need one. Download the app and get a ride from a friendly driver within minutes. Product background: Engine.IO is a lightweight transport protocol that enables real-time bidirectional event-based communication between web browsers and a server. Python-engineio server can form a Eventlet asynchronous server and includes a small…

Preface: What is the difference of APT group and so called cyber attacker? In normal circumstance, the attack of APT group more often target different political factor of countries or benefits. Background: Physicists and engineers at CERN use the world’s largest and most complex scientific instruments to study the basic constituents of matter. Vulnerability details:…

Preface: Artificial intelligence especially custom face recognition will be using (ptrace_link). By attaching to another process using the ptrace call, a tool has extensive control over the operation of its target. Vulnerability detail: If a malicious unprivileged child uses PTRACE_TRACEME and the parent is privileged, and at a later point, the parent process becomes attacker-controlled…