Security on ditatompel Insights

Beware, Phishers Target Monero Users

Wed, 21 May 2025 00:20:00 +0700

I received a suspicious email claiming to be from the Monero Development Team, the email was a phishing scam designed to trick users into installing ‘remote desktop’ through an ‘update’ package.

Password 101: Best Practices for Secure Online Living

Fri, 09 Sep 2022 19:47:48 +0700

Discusses how you should create and treat your passwords as well as tips for using a password manager to make it easier to manage unique and random passwords on every site/application you use.

Plex Data Breach 2022 Exposes Emails, Usernames and Encrypted Passwords

Mon, 29 Aug 2022 04:53:11 +0700

A few days ago, I received an email from Plex (an American streaming media service and a client–server media player platform) informing me that they had a data leak. They ask their users to be aware of an incident involving their Plex account information.

Why Inactive Email Accounts is Dangerous

Mon, 29 Jun 2020 13:33:45 +0700

Malicious users can retrieve deleted email and try to make password reset to every popular sites and original owner will lost their website / app account.

Trying Gmail Confidential Mode for G Suite Users

Wed, 29 May 2019 02:40:06 +0700

On March 7, 2019, Google announced that they launch their new feature: Gmail confidential mode in beta. This feature allow G Suite users with Gmail enabled sending emails with expiration date, in additional, the recipients won’t be able to forward, copy, print, or download email content or attachments and sender can be revoke email message any time.

ZombieLoad: Serious Intel Processors Security Flaw

Wed, 15 May 2019 01:43:22 +0700

Security researchers discovered security flaw in Intel processors allows malicious hacker to steal any data that’s been recently accessed by the processor. This security flaws called ZombieLoad and almost every computer with an Intel chips since 2011 (Ivy Bridge) are affected by the vulnerabilities.

Compromised Zimbra Server Running zmcat dblaunchs Malware 100% CPU Usage

Thu, 02 May 2019 00:21:28 +0700

Recent Zimbra XXE/SSRF Vulnerability Disclosure (CVE-2019-9670) being actively exploited. Security researcher An Trinh details his findings regarding a vulnerability which, if exploited, could allow an attacker to RCE on an affected Zimbra system.

Cloudflare Reverse Proxies are Dumping Uninitialized Memory

Sat, 25 Feb 2017 23:25:58 +0700

Between 22 Sep 2016 – 18 Feb 2017 passwords, private messages, API keys, and other sensitive data were leaked by Cloudflare to random requesters. Data was cached by search engines, and may have been collected by random adversaries over the past few months. Many people call this issue Cloudbleed.

Implementing Firewall Protection via Iptables Port Knocking

Mon, 01 Jul 2013 22:16:19 +0700

Strengthening server security by leveraging port knocking techniques in conjunction with iptables firewall functionality.