-
About CVE-2023-0394 (30th Jan 2023)
Preface: Believed that this design weakness already been fixed before CVE release to public. So do not worry about that.To become secure, since a known Potential issues of IPv6 extension headers. Therefore , both stateful and stateless firewalls should do a deep inspection. Otherwise, it can do the evasion silently. Background: From an early deployment…
-
Speculation – Cause of Microsoft Edge (Chromium-based) Vulnerabilities (25th Jan 2023)
Preface: Edge was initially built with Microsoft’s own proprietary browser engine, EdgeHTML, and their Chakra JavaScript engine. In late 2018, it was announced that Edge would be completely rebuilt as a Chromium-based browser with Blink and V8 engines. The new Microsoft Edge is based on Chromium and was released on January 15, 2020. It is compatible…
-
What is the value of the Trusted Execution Environment (TEE) ? (20th JAN 2023)
Preface: Some said, found malware lets cybercriminal remotely manipulate your Android. Background: The full name of TEE is trusted execution environment, which is an area on the CPU of mobile devices (smart phones, tablets, smart TVs). The role of this area is to provide a more secure space for data and code execution, and to…
-
Potential threat of ChatGPT (Artificial intelligence) – 19th JAN 2023
Preface: OpenAI was founded by Elon Musk, Sam Altman, Ilya Sutskever, Greg Brockman, Wojciech Zaremba and John Schulman in Nov 2015. ChatGPT is a chatbot launched by OpenAI in November 2022. It is built on top of OpenAI’s GPT-3 family of large language models, and is fine-tuned with both supervised and reinforcement learning techniques. Background:…
-
Oracle Critical Patch Update Advisory – January 2023 : Security Focus CVE-2022-2274 (17th JAN 2023)
Preface: Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update security patches as soon possible. Background: AVX-512 debuted in 2016 on Intel’s Xeon Phi x200 (codenamed Knights Landing). However, the instruction set has since found its way into other products from the chipmaker, such as Skylake-SP, Skylake-X,…
-
CVE-2022-47630 – See whether your android can skip this vulnerability? Perhaps it can. (16th Jan 2023)
Preface: Why configure Secure Boot? This type of hardware restriction protects the operating system from rootkits and other attacks that may not be detected by antivirus software. Background: Secure Boot is the process where the operating system boot images and code are authenticated against the hardware before they are authorized to be used in the…
-
Security Focus (CVE-2023-0022) – This CVE is included in SAP’s first 2023 security update. (15th JAN 2023)
Preface: OLAP is all about BI and Big Data. Online analytical processing (OLAP) is an approach to formulate and answer multidimensional queries to large datasets. Background: SAP have released a new statement of direction for SAP BusinessObjectsthat introduces a new version of the SAP BusinessObjects BI suite code named SAP BusinessObjects BI 2024, available on-premises…
-
Headline news: FAA system outage disrupts thousands of flights across U.S. (12th Jan 2023)
Preface: Thousands of flights across the U.S. were delayed Wednesday after a Federal Aviation Administration pilot alert system failed overnight, prompting a nationwide halt to departures. said CNBC news. Headline news – https://www.cnbc.com/2023/01/11/faa-orders-airlines-to-pause-departures-until-9-am-et-after-system-outage.html Background: The Department of Homeland Security published the following opinion piece four years ago. The GPS system is now considered a “crosssector…
-
CVE‑2022‑42271 Staying alert, Artificial intelligence world! (12th Jan 2023)
Preface: An “intelligent” computer uses AI to think like a human and perform tasks on its own. Machine learning is how a computer system develops its intelligence. One way to train a computer to mimic human reasoning is to use a neural network, which is a series of algorithms that are modeled after the human…
-
Intel security advisory (AV23-015) 10th JAN 2023
Preface: OpenMP (Open Multi-Processing) is an application programming interface (API) that supports multi-platform shared-memory multiprocessing programming in C, C++, and Fortran, on many platforms, instruction-set architectures and operating systems, including Solaris, AIX, FreeBSD, HP-UX, Linux, macOS, and Windows. Background: A LEGO brick is a small plastic part, but it can build a big robot. Similar concept,…