-
Oct 2019 – The crisis of Indian nuclear power plant’s
Preface: In fact, of system design weakness, the chances of a hacker getting remote access to systems significantly intensifies. About Indian nuclear power plant’s network was hacked -They have confirmed its newest nuclear power plant was the victim of a cyber attack, exposing the vulnerability of one of the country’s most critical sectors to cyber…
-
past history, new attacks (cve-2015-0008) – 28th Oct 2019
Preface: Microsoft will be ending support for Windows 7 and Server 2008 on January 14, 2020. This means no more security patching and no more support from Microsoft. Vulnerability details: Found design flaw on 2015. Microsoft Windows Group Policy could allow a remote attacker to take complete control of the system, caused by improper application…
-
samba releases security updates – Oct 2019
Samba releases security updates – Oct 2019 Preface: Samba like a middle man bridging all the races in cyber world. Background: Samba is a free software for connecting the UNIX operating system to the SMB/CIFS network protocol of the Microsoft Windows operating system. The third edition not only accesses and shares SMB folders and printers,…
-
CVE-2019-1346 A denial of service vulnerability exists when Windows improperly handles objects in memory.
Preface: Doing web browsing and open document is our daily life. Opps! But it will hit a DoS vulnerability. Background: x64 extends x86’s 8 general-purpose registers to be 64-bit, and adds 8 new 64-bit registers. The 64-bit registers have names beginning with “r”, so for example the 64-bit extension of eax is called rax. The…
-
About Emotet malware (2019)
Preface: Emotet malware found in 2015. But he is still aggressive nowadays. It shown that it is a long life cyber attack product . Details: Australian Cyber Security Centre (ACSC) released an advisory that Emotet malware widespread in rapidly. The Emotet malware is distributed mostly by means of phishing email that contains either links to…
-
Please be vigilant. Spyware will be installed on your phone at any time – Oct 2019
Preface: Since the spyware runs in a stealth mode, it will let you track the device without being detected. Background: Patroit Act empower law enforcement agency or related department can legally monitor the movements of suspect especially Terrorism. And therefore law enforcement agency will be used spyware monitor what’ the target movement. As time goes…
-
CVE-2019-12941 – AutoPi ( Wi-Fi/NB and 4G/LTE) devices wifi password vulnerability (Oct 2019)
Preface: Are you afraid of someone suddenly controlling your car? Background: AutoPi is a small device that plugs into the OBD-II port of your car. What is OBD-II port? OBD-II port of the car which gives the dongle access to the cars internal systems. AutoPi also provides a cloud service that lets you communicate with…
-
Oct 2019 – When hostile countries are prepared to take military action. They took cyber attacks as a 1st step.
Preface: Both ransomware and malware are powerful cyber attack tools. This is equivalent to the army entering a hostile country. Background: On yesterday 21st Oct 2019, NSA and NCSC release joint advisory on Turla Group Activities article. The attack target is the aspx shell. It appeared to use these ASPX shells to preparing 2nd round…
-
CVE-2019-6475 Bind 9 vulnerability
Preface: Existing internet service require DNS lookup function. See whether artificial intelligence world will be replaced this function? Background: There are currently 13 root servers in operation. In order to avoid DNS request in high volume could not handle immediately. And therefore when requests are made for a certain root server, the request will be…
-
(CVE-2019-16919) VMware Cloud Foundation and VMware Harbor Container Registry for PCF address broken access control vulnerability 16th oct 2019
Preface: It seems that humans are hard to avoid living with robots and AI, because this is our destiny. Background: VMware Harbor Registry is an enterprise-class registry server that stores and distributes container images. The release of Harbor 1.8 revealed a number of new features, including the ability to share Harbor with other registries. The…