Shi Yu Dong

Great Post! Very Interesting.

“Finland’s 3rd Largest Data Breach Exposes 130,000 Users’ Plaintext Passwords”

Finland’s citizens had their credentials compromised in a large data breach. Hackers attacked a new Business Center in Helsinki, a company that provides business consulting and planning and stole over 130,000 user’s credentials which were stored website database in…[Read more]

“Microsoft’s Meltdown Patch Made Windows 7 PCs More Insecure”

Meltdown CPU vulnerability was critical vulnerability of CPUs. Upon patching/fixing the vulnerability, Microsoft somehow made the flaw in the Patch/Fix that made vulnerability even worse on Windows 7 OS allowing any unprivileged, user-level application to read content from and even…[Read more]

An interesting read that I found talked about how Memcached servers can be quickly hijacked and compromised by to launch large DDoS attacks. Utilizing IT spoofing and a poorly implemented UDP causes the servers to be put at risk because attackers will send a packet to the server, which will in turn greatly increase the size and forward the attack…[Read more]

Dubbed RottenSys, the malware that disguised as a ‘System Wi-Fi service’ app came pre-installed on millions of brand new smartphones that actually does not provide any WiFi services but rather takes all sensitive Android permissions to enable its malicious activity.

Ref. Link:
https://thehackernews.com/2018/03/android-botnet-malware.html

Computer Security Firm “CrowdStrike” performed research and analysis of recent attacks (NotPetya, WannaCry) targeting U.S. organizations that caused million of dollars in losses. Especially, it has been found that U.S. administration as top intelligence group is most vulnerable as they can’t keep up with network security threats.

Next-Gen Firew…[Read more]

Discussion Topic 14.3
I would report my discoveries as required, in any case if the new software engineer is the relative of the VP. The VP can offer whatever he needs however at last, the honesty of myself is more vital than more cash. In the realm of digital security, we would prefer not to energize individuals who infringe upon the law and…[Read more]

Traffic on a system can be managed by either Rejecting or Denying. Both these choices are utilized broadly in separating activity from clients to a framework or server. Reject is utilized when the objective host needs to dismiss parcels got from source by sending and ICMP Unreachable message. The reason for Reject is to tell the source that the…[Read more]

Hi Andres:

Great post! I found very interesting of topic that whether cyber security is a risk management issue or a technology problem, I also found interesting of how to protect our information and data.

Hi Fred:

Great post. I was very shock that Uber didn’t announced data breach and try to use money to cover up.

In week 11 (IT Risk & Security Management), the following were discussed in the class:

– Risk adopting is a viable strategy for an association to be effective. Recognizing dangers and overseeing them

successfully impacts the achievement of an association.

– The hazard administration design encourages the association to diminish, e…[Read more]