Security

ditatompel Insights
Plex Data Breach 2022 Exposes Emails, Usernames and Encrypted Passwords

A few days ago, I received an email from Plex (an American streaming media service and a client–server media player platform) informing me that they had a data leak. They ask their users to be aware of an incident involving their Plex account information.

Why Inactive Email Accounts is Dangerous
Why Inactive Email Accounts is Dangerous

Malicious users can retrieve deleted email and try to make password reset to every popular sites and original owner will lost their website / app account.

Trying Gmail Confidential Mode for G Suite Users
Trying Gmail Confidential Mode for G Suite Users

On March 7, 2019, Google announced that they launch their new feature: Gmail confidential mode in beta. This feature allow G Suite users with Gmail enabled sending emails with expiration date, in additional, the recipients won’t be able to forward, copy, print, or download email content or attachments and sender can be revoke email message any time.

ZombieLoad: Serious Intel Processors Security Flaw
ZombieLoad: Serious Intel Processors Security Flaw

Security researchers discovered security flaw in Intel processors allows malicious hacker to steal any data that’s been recently accessed by the processor. This security flaws called ZombieLoad and almost every computer with an Intel chips since 2011 (Ivy Bridge) are affected by the vulnerabilities.

Compromised Zimbra Server Running zmcat dblaunchs Malware 100% CPU Usage
Compromised Zimbra Server Running zmcat dblaunchs Malware 100% CPU Usage

Recent Zimbra XXE/SSRF Vulnerability Disclosure (CVE-2019-9670) being actively exploited. Security researcher An Trinh details his findings regarding a vulnerability which, if exploited, could allow an attacker to RCE on an affected Zimbra system.

Cloudflare Reverse Proxies are Dumping Uninitialized Memory
Cloudflare Reverse Proxies are Dumping Uninitialized Memory

Between 22 Sep 2016 – 18 Feb 2017 passwords, private messages, API keys, and other sensitive data were leaked by Cloudflare to random requesters. Data was cached by search engines, and may have been collected by random adversaries over the past few months. Many people call this issue Cloudbleed.