309 matches found
How to Setup Work from Home (BCP) with Citrix due to COVID-19
Citrix is committed to providing the support you need to keep your employees safe and operations running throughout the COVID-19 coronavirus pandemic. If you are looking to provide access for additional remote users working from home in response to COVID-19, please refer to our Business Continuit...
Information Disclosure
github.com/hashicorp/vault is vulnerable to information disclosure. After mount filter creation on an upstream Performance secondary cluster, the Disaster Recovery secondary clusters do not remove the replicated secrets and remain replicated on it...
FAQ: Licensing for Disaster Recovery Servers
Q: Can existing licenses in the production environment be used for a Disaster Recovery Server? A: Yes, it is possible to use the same server/farm licenses in another server/farm if it is a disaster recovery server/farm. Q: Can both Production and Disaster Recovery servers run simultaneously? A: N...
Ransomware response—to pay or not to pay?
The increased connectivity of computers and the growth of Bring Your Own Device BYOD in most organizations is making the distribution of malicious software malware easier. Unlike other types of malicious programs that may usually go undetected for a longer period, a ransomware attack is usually...
Ransomware Attack Hits Data Center Provider CyrusOne: Report
U.S. data center provider CyrusOne has been hit by a ransomware attack, which has impacted six of its managed services customers, a report has found. CyrusOne, which is based in Texas and is one of the biggest data center providers in the U.S., serves more than 185 of Fortune 1000 customers...
Unauthorized Access Vulnerability in ASRock DAYS Disaster Recovery Software
ASRock DAYS disaster recovery software belongs to DAYS series of optional products, which integrates disaster recovery, fault tolerance, backup and query functions, and provides one-stack infrastructure, the same disaster recovery management, elasticity, multi-layer data protection, smooth...
Payroll Provider Gives Extortionists a Payday
Payroll software provider Apex Human Capital Management suffered a ransomware attack this week that severed payroll management services for hundreds of the company's customers for nearly three days. Faced with the threat of an extended outage, Apex chose to pay the ransom demand and begin the...
Cisco Coverage for Shamoon 2 & 3
Update Dec. 14, 2018 10:30 CST: Added new Shamoon 3 IOCs Shamoon is a type of destructive malware that has been previously associated with attacks against various organizations in the oil and gas industry that we've been tracking since 2012. A new variant of this threat, identified as Shamoon 2,...
The holiday shopping surge is going global: How to keep up (and cash in)
Big promotional days like Black Friday and Cyber Monday that got their start in the U.S. are now major online shopping days for consumers around the world. Here are some tips for catering to global shoppers, and preparing for the surge of traffic to retail websites from all sources. If the 2017...
Preparing for Shadow OT: A Hospital Case Study
The convergence of IT and OT is happening more rapidly than IT expects. Once upon a time, IT was so expensive that enterprises built entire departments to prioritize spending and efficiently manage those costly investments. Now, IT is so inexpensive that any individual who wants IT can buy it or...
Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15897)
The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to elevate privileges from web server user to root via setsid...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15877)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Email Relay Host Update" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. The vulnerability can be exploited to execute commands via the 'hostname' request...
CVE-2018-11179
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 37 of 46...
CVE-2018-11176
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 34 of 46...
CVE-2018-11181
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 39 of 46...
CVE-2018-11180
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 38 of 46...
CVE-2018-11166
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 24 of 46...
CVE-2018-11174
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 32 of 46...