Cyber security technical information

A regular expression (regex or regexp for short) is a special text string for describing a search pattern. We can’t lack of this function in IT world. For example, your SIEM log parser and Web server input protection filter. Eventhough if you want to represent a group of Strings according to a particular pattern then…

Sometimes the situation of the technology world similar a people stand in the cross road. For instance, you relies on remote access to do your work. We relies SSL/TLS so far. Now we know SSL TLS 1.0 not safe and advice to use TLS 1.1 and 1.2. VPN (virtual private network) like a mandatory interconnect…

Apache and Tomcat is a perfect match. Their relationship similar pianist and piano. We can’t lack of music in our life. On the other hand, IT world can’t without Apache and Tomcat. But Tomcat is sick today. Found the Apache Tomcat Native (1.2.0 to 1.2.16 and 1.1.23 to 1.1.34) has a flaw that does not…

  Android and iOS apps contain multiple vulnerabilities: Original Release date: 14 Aug 2018 | Last revised: 15 Aug 2018 Google apps store and App Store (iphone) enforce security policies last year get rid the suspected malicious apps in their store. From customer point of view, it looks better because this is the soure download…

Vulnerability Note VU#641765 – 14 Aug 2018 Linux kernel IP fragment re-assembly vulnerable to denial of service Cyber security guy includes myself really tired last few days. Found Linux kernel IP fragment re-assembly vulnerability today. It causes denial of service. It looks that computer appliances vendor not confirm this vulnerability on their product yet. If…

  Security authorities announced total 2 items of high severity vulnerabilities from cisco products today. IT Guy must stay alert! 1. Cisco Web Security Appliance Web Proxy Memory Exhaustion Denial of Service Vulnerability Cisco AsyncOS Operating System started with a FreeBSD kernel and made three major changes to create the Cisco Email Security appliance. One…

From technical point of view, the Intel CPU design limitation jeopardize downstream product vendor. VMware is one of the vendor do the remediation immediately. A memory bank built into the CPU chip. Also known as the “primary cache,” an L1 cache is the fastest memory in the computer and closest to the processor. Let’s think…

An official announcement state that there are three more data-leakage security holes found in Intel chips: CVE-2018-3615 – L1 Terminal Fault: SGX CVE-2018-3620 – L1 Terminal Fault: OS/SMM CVE-2018-3646 – L1 Terminal Fault: VMM Across the board, Intel’s desktop, workstation, and server CPUs are vulnerable. Official announcement shown as below: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html Reminder: I am using window…

When I was young, the comics story attracting my seen. The comics picture similar provides like a virtual speaker tell a story to me. Oracle has released a security alert to address a vulnerability in multiple versions of Oracle Database yesterday. A remote attacker could exploit this vulnerability to take control of an affected system.…