Copyright © 2019 CyStack Security.

The future of Cybersecurity

An all-in-one platform that provides solutions to company’s cyber-threats.
Powered by Artificial Intelligence & Crowdsourced Security.
Get started

Trusted by 100+ customers

Our customers

Products

Explore our cyber-security products for your enterprise

DEFENSE

CyStack WhiteHub CyStack WhiteHub

Detect critical vulnerabilities in applications at low cost. Powered by Crowdsourced Security.

Learn more

CyStack WebShield CyStack WebShield

Automatically monitor website, detect fundamental vulnerabilities and prevent cyber attacks.

Learn more

DATA PROTECTION

CyStack CRM CyStack CRM

Monitor and detect abnormal events on CRM software using AI.

Learn more
Out platform

THREAT PREVENTION

CyStack Server CyStack Server

Detect and prevent illegal activities on server infrastructure.

Learn more

CyStack Enterprise CyStack Enterprise

Detect and prevent illegal activities & malware on local networks.

Learn more

DATA PROTECTION

CyStack CRM CyStack CRM

Monitor and detect abnormal events on CRM software using AI.

Learn more

Start for free

Request a DEMO

Case study

vntriplogo

Vntrip

Vntrip has protected their top-secret data including 500,000 users and 10,000 partners.

getflylogo

Getfly

Getfly has taken advantage of WhiteHub to ensures their system's continuation.

luxstaylogo

Luxstay

Luxstay has well-secured their customers' sensitive infomation from hackers.

News

12/6/2019

Cesanta Mongoose 6.16 - Integer overflow

CyStack Advisory IDCSA-2019-04CVE IDs CVE-2019-19307 [https://nvd.nist.gov/vuln/detail/CVE-2019-19307]SeverityCriticalCVSS v3 Base9.8 Synopsis CyStack Security discovered an integer overflow vulnerability in the implementation of MQTT protocol in the Cesanta Mongoose Library version 6.16. By exploiting the vulnerability, a remote, unauthenticated attacker can perform a DoS attack to broker server with an infinite loop or a potential remote code execution due to its out of bound access ability.

11/7/2019

Static binary injection with high-level code

Giới thiệu Static binary injection là một kỹ thuật dùng để chèn những đoạn code từ ngoài vào trong một file thực thi để theo dõi hoặc thay đổi hành vi của chương trình trong quá trình chạy. Nếu là một kẻ tấn công, hắn có thể sử dụng kỹ thuật này để thực hiện việc lây nhiễm lâu dài, còn đối với người nghiên cứu bảo mật, đây sẽ là sự hỗ trợ tuyệt vời cho việc instrument các file thực thi. Hiện tại các tool thực hiện việc này chủ yếu đều là inject những đoạn mã assembly vào file thực thi và cũng c

9/12/2019

D-Link DNS-320 ShareCenter <= 2.05.B10 - Unauthenticated Remote code execution

CyStack Advisory IDCSA-2019-03CVE IDs CVE-2019-16057 [https://www.cvedetails.com/cve/CVE-2019-16057/]SeverityCriticalCVSS v2 Base10.0 Vendor's announcementLink [https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10123] Synopsis CyStack Security discovered a remote code execution vulnerability in the D-Link DNS-320 ShareCenter [http://sharecenter.dlink.com/products/DNS-320]device which its version is lower or equal 2.05.B10 . By exploiting the vulnerability, a remote,