Microsoft Windows: BitLocker-protected operating system drives recovery (password)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winosbitlockerpassword.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected operating system drives can be recovered: Recovery password Authors: Emanuel Moss Copyright: Copyright c 2018...

Microsoft Windows: Require additional authentication at startup (TPM startup PIN)

This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with or without a Trusted Platform Module TPM. This policy setting is applied when you turn on BitLocker. Note: Only one of the...

Microsoft Windows: BitLocker-protected removable drives recovery (wizard)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmbitlockerrecoverywizard.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard Authors: Emanuel Mos...

Microsoft Windows: BitLocker-protected operating system drives recovery (key)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winosbitlockerkey.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected operating system drives can be recovered: Recovery key Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Turn off the Publish to Web task for files and folders

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnopublishingwizard.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off the "Publish to Web" task for files and folders Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Turn off access to the Store

This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association. When a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to...

Microsoft Windows: Turn off handwriting recognition error reporting

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhandwritingerrorsharing.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off handwriting recognition error reporting Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: BitLocker-protected fixed drives recovery

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winbitlockerdrivesrecovered.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected fixed drives can be recovered Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Turn off Registration (URL connection refers to Microsoft.com)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnoregistration.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off Registration if URL connection is referring to Microsoft.com Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Qualys Cloud Platform (VM, SCA, PC) 8.14 New Features

This new release of the Qualys Cloud Platform VM, SCA, PC, version 8.14, includes several new feature improvements across the apps such as Wallix AdminBastion support, EC2 scan improvements, VM reporting improvements, ESX/ESXi PC support for vCenter, PC STIG Report, and expanded technology suppor...

QSC18 Virtual Edition: Securing Hybrid IT Environments from Endpoints to Clouds

As organizations embrace digital transformation to boost business processes, traditional IT environments get altered, becoming distributed, elastic and hybrid. “That’s creating a new challenge for security,” Chris Carlson, Qualys’ Product Management VP, said during QSC18 Virtual Edition. As...

HealthTech Security and Compliance, the Practitioner View

A conversation with George Michelson, a long term executive of LiveWatch Services George, can you tell us a bit about yourself? I am an IT professional with over 25 years of experience spanning different industries. From 2008 to 2013 I was serving as a vice president of IT for LIfeWatch Services,...

Microsoft Windows: Disable IPv6

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windisableipv6.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Disable IPv6 Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Driving data security is a shared responsibility, here’s how you can protect yourself

You're driving a long, dark road on a rainy night. If you're driving 20 miles over the speed limit and you don't step on the brakes when the car in front of you comes to a sudden stop, is it your fault or your car manufacturers fault if you rear-end the car that is in front of you? When we drive,...

Updated imagemagick packages fix security vulnerability

Imagemagick has been updated to version 6.9.10.0 to fix several bugs and possible security issues. - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts - Missing break when checking "compliance" element. - Fixed errant 'not enough pixel data' - Fixed...

Security Bulletin: Open Source Apache Tomcat , Commons FileUpload Vulnerabilities affecting IBM Algo Audit and Compliance (CVE-2016-3092)

Summary Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sending file upload requests, an attacker could exploit this vulnerability to cause the server to become unresponsive. Vulnerability Details CVEID: CVE-2016-3092...

Security Bulletin: Multiple OpenSource Apache Tomcat vulnerabilities in IBM Algo Audit and Compliance

Summary Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by an error when accessing a protected directory. By redirecting to the URL, an attacker could exploit this vulnerability to determine the presence of a directory. Apache Tomcat is used by IBM Algo Audit a...

Security Bulletin: OpenSSL vulnerabilities in IBM Algo Audit and Compliance (CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176)

Summary OpenSSL could allow a remote attacker to execute arbitrary code, obtain sensitive information or perform denial of service attacks. OpenSSL is used by IBM Algo Audit and Compliance. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute...

Security Bulletin: OpenSSL vulnerability in IBM Algo Audit and Compliance (CVE-2015-3197)

Summary OpenSSL could allow a remote attacker to conduct man-in-the-middle attacks. OpenSSL is used by IBM Algo Audit and Compliance. Vulnerability Details CVEID: CVE-2015-3197 DESCRIPTION: OpenSSL could allow a remote attacker to conduct man-in-the-middle attacks, caused by an error related to t...

Security Bulletin: Apache Tomcat vulnerability in IBM Algo Audit and Compliance (CVE-2015-5174)

Summary Apache Tomcat could allow a remote attacker to traverse directories on the system. Apache Tomcat is used by IBM Algo Audit and Compliance. Vulnerability Details CVEID: CVE-2015-5174 DESCRIPTION: Apache Tomcat could allow a remote attacker to traverse directories on the system. An attacker...