USN-4916-1: Linux kernel vulnerabilities

It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated privileges. CVE-2021-3493 Piotr Krysiuk discovered that the BPF JIT...

Granular AWS Account Permissions for Adding an S3 Repository

This article documents the granular permissions required to add an S3 repository to Veeam Backup for AWS...

Granular AWS Account Permissions for Connection to and Upgrading of Veeam Backup for AWS Appliance

This article documents the granular permissions needed for connecting to an existing Veeam Backup for AWS appliance...

AWS User Account Permissions for Deployment of Veeam Backup for AWS Appliance

This article documents the granular permissions needed for deploying a new Veeam Backup for AWS appliance...

CVE-2021-26908 and CVE-2021-26909: Automox Agent Information Disclosure (FIXED)

Rapid7 researcher Danny Jordan discovered two vulnerabilities in the Automox Agent for Windows and macOS, which could result in information disclosure issues involving the Automox infrastructure. CVE-2021-26908 describes a vulnerability where Automox Agent improperly logs sensitive information on...

GHSA-RJMF-P882-645M mongodb-client-encryption vulnerable to Improper Certificate Validation

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and th...

mongodb-client-encryption vulnerable to Improper Certificate Validation

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and th...

Indian Brokerage Firm Upstox Suffers Data Breach Leaking 2.5 Millions Users' Data

Online trading and discount brokerage platform Upstox has become the latest Indian company to suffer a security breach of its systems, resulting in the exposure of sensitive information of approximately 2.5 million users on the dark web. The leaked information includes names, email addresses, dat...

11 Useful Security Tips for Securing Your AWS Environment

Want to take advantage of excellent cloud services? Amazon Web Services may be the perfect solution, but don't forget about AWS security. Whether you want to use AWS for a few things or everything, you need to protect access to it. Then you can make sure your business can run smoothly. Read on to...

Critical Photon OS Security Update - PHSA-2021-0007

Updates of 'linux-aws', 'containerd', 'linux-secure', 'glib', 'libtiff', 'linux-rt', 'curl', 'linux', 'libvirt', 'openssl', 'mysql', 'wpasupplicant', 'apache-tomcat', 'python3', 'nodejs', 'docker' packages of Photon OS have been released...

Wallarm API Discovery: Discover API endpoints automatically and secure them

What do you know about your APIs? Why are the vulnerable v2 and v3 still exposed if they are deprecated for almost a year? What else is exposed and you don’t even know? Are Swagger specs up to date? Teaser: Surely not. A lot of questions, right? Meet Wallarm’s latest feature for API Discovery and...

Critical Photon OS Security Update - PHSA-2021-4.0-0007

Updates of 'curl', 'mysql', 'docker', 'openssl', 'linux', 'linux-secure', 'nodejs', 'containerd', 'linux-rt', 'wpasupplicant', 'python3', 'libvirt', 'apache-tomcat', 'libtiff', 'linux-aws', 'glib' packages of Photon OS have been released...

SecretScanner - Find Secrets And Passwords In Container Images And File Systems

Deepfence SecretScanner can find any potential secrets in container images or file systems. What are Secrets? Secrets are any kind of sensitive or private data which gives authorized users permission to access critical IT infrastructure such as accounts, devices, network, cloud based services,...

Important Photon OS Security Update - PHSA-2021-0340

Updates of 'linux-aws', 'linux-secure', 'linux-esx', 'linux', 'cairo' packages of Photon OS have been released...

What’s new on AWS Lambda in 2021

This article explores new updates and documentation for AWS Lambda in 2021. Lambda launched several new updates including run container images, cost saving initiatives, and expanded compute capacity...

Whistleblower: Ubiquiti Breach “Catastrophic”

On Jan. 11, Ubiquiti Inc. NYSE:UI -- a major vendor of cloud-enabled Internet of Things IoT devices such as routers, network video recorders and security cameras -- disclosed that a breach involving a third-party cloud provider had exposed customer account credentials. Now a source who participat...

USN-4890-1: Linux kernel vulnerabilities

Piotr Krysiuk discovered that the BPF subsystem in the Linux kernel did not properly compute a speculative execution limit on pointer arithmetic in some situations. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-27171 Piotr Krysiuk discovered that the BPF...

DivvyCloud Adds Support for IAM Analyzer Policy Recommendations

Last week, Amazon Web Services AWS announced an improvement to its IAM Access Analyzer that allows its users to proactively analyze and validate Identity & Access Management IAM policies against more than 100 checks and receive actionable recommendations on improving its security and efficacy. By...

Important Photon OS Security Update - PHSA-2021-0210

Updates of 'linux-rt', 'wpasupplicant', 'containerd', 'linux-esx', 'nxtgn-openssl', 'libtiff', 'linux', 'linux- secure', 'linux-aws' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-3.0-0210

Updates of 'linux', 'linux-esx', 'linux-secure', 'containerd', 'linux-rt', 'wpasupplicant', 'libtiff', 'nxtgn-openssl', 'linux-aws' packages of Photon OS have been released...