Home Tags Posts tagged with "Enterprise"
Tag:

Enterprise

Internet

McAfee VirusScan Enterprise for Linux Security Flaws Gives Attackers Root Access

by Rajdeep
written by Rajdeep

McAfee VirusScan Enterprise for Linux Security Flaws Gives Attackers Root Access

McAfee has patched 10 critical vulnerabilities in its VirusScan Enterprise for Linux, reportedly six months after they were disclosed. According to security researcher Andrew Fasano from MIT Lincoln Laboratory, the vulnerabilities when chained could result in the execution of the code remotely as a root user.

“At a first glance, Intel’s McAfee VirusScan Enterprise for Linux has all the best characteristics that vulnerability researchers love: it runs as root, it claims to make your machine more secure, it’s not particularly popular, and it looks like it hasn’t been updated in a long time,” the security advisory reads. “When I noticed all these, I decided to take a look.”

Fasano said that attackers could chain the flaws to compromise VirusScan Enterprise for Linux by running malicious update servers. The malicious script after chaining the vulnerabilities is then run by the root user on the victim machine.

The vulnerabilities have been found present from at least version 1.9.2 through version 2.0.2, which was released in April 2016.
Fasano originally reported the vulnerabilities in June through the US computer emergency response team clearing house which passed on the information to McAfee. The security company in return asked for a six month non-disclosure extension until December. The company made no contact after July and was informed on December 5 that the report would be published on December 12.

McAfee on December 9 published the reports of the vulnerabilities, four days ahead of Fasano’s report.

Fasano detailed the process which requires four of the 10 vulnerabilities to complete the exploit. The first pair, CVE-2016-8016 and CVE-2016-8017 allows an authentication token to be brute-forced and used to connect with McAfee Linux clients.

The attackers then use another flaw CVE-2016-8021 to force the target to create a malicious script. A request is then sent to authenticate the start of virus scan but which will execute the malicious script instead using CVE-2016-8020 and CVE-2016-8021. With these flaws combined, the attackers malicious script is run as root on the victim’s machine.

In addition to this, Fasano found six more bugs which include an authenticated SQL injection, CVE-2016-8025, HTTP response splitting (CVE-2016-8024), cross-site scripting (CVE-2016-8019), cross-site request forgery tokens (CVE-2016-8018) and a remote unauthenticated file read and existence test (CVE-2016-8016, CVE-2016-8017).

[Source:- gadgets.ndtv]

0 comment
0 FacebookTwitterPinterestEmail
Internet

Email and Messaging Lead Enterprise SaaS Adoption: Survey

by Rajdeep
written by Rajdeep

The good news, at least for cloud providers, is that organizations are increasingly relying on the cloud to conduct business. The bad news is that their users are having a tough time holding onto their data.

In a survey of over 1,000 IT professionals in the U.S. and U.K., Spanning, an EMC subsidiary that specializes in software-as-a-service (SaaS) data backup, found that cloud email and messaging were top services (50 percent) they have already deployed or plan to deploy within the next 12 months. The study also found that financial, human resources and customer relationship management (CRM) cloud apps are in high demand.

Spanning’s findings are encouraging for enterprise SaaS vendors, but meanwhile, their customers are wrestling with data loss.

The leading cause of SaaS application data loss was accidental deletion by users (70 percent U.S., 66 percent U.K.). User error, not hackers, disgruntled employees or company insiders with malicious intent, is the main reason users may find that their cloud CRM records are missing or their inboxes have been mysteriously emptied out. In total, 43 percent of organizations in the U.S. and 41 percent in the U.K. suffered data loss from SaaS applications.

 Fortunately, the vast majority of businesses recognize the importance of SaaS data backups, observed Jeff Erramouspe, vice president and general manager of Spanning. “This survey not only validates the accelerating adoption of SaaS, but also that U.S. and U.K. IT professionals understand the importance of having a backup and recovery strategy for SaaS application data with only 7 percent and 8 percent, respectively, not planning or using any form of backup and recovery for their SaaS applications,” he said in a statement.

Just don’t expect cloud application providers to bail users out when they mistakenly delete crucial business data.

“When it comes to SaaS data protection, however, the survey shows misplaced confidence. SaaS providers are not responsible for recovery of data lost due to user error, yet that continues to be its leading cause,” cautioned Erramouspe. “It demonstrates the need for cloud-to-cloud backup and restore solutions.”

Generally, enterprises expect their SaaS providers to provide backup and recovery services (49 percent U.S., 42 percent U.K.). About a third of organizations are currently using cloud-to-cloud backup and recovery solutions or plan to use them within the next 12 months.

[Source:- Eweek]

0 comment
0 FacebookTwitterPinterestEmail
Gadgets News

Google Glass Enterprise Edition Goes on Sale, Starting $1,829

by Loknath Das
written by Loknath Das

Google Glass Enterprise Edition Goes on Sale, Starting $1,829

HIGHLIGHTS

  • Google Glass Enterprise Edition starts from $1,829 (roughly Rs. 1,16,600)
  • It has a 780mAh battery and 32GB storage
  • The first Google Glass was introduced with much fanfare in 2014

Streye, a Glass for Work partner, on Tuesday started selling the eye-wearable device Google GlassEnterprise Edition starting from $1,829 (roughly Rs. 1,16,600).

Google sells the eye-wearable device with ‘Glass for Work’ partners which are authorised to develop and deliver enterprise solutions for Glass customers.

“Glass Enterprise Edition is clearly intended for businesses through Google’s network of expert partners and has a 780mAh battery and 32GB storage,” Engadget reported on Tuesday.

The device runs on Intel Atom processor, consists of faster Wi-Fi, an expanded range of sensors than its predecessor and a louder speaker.

Last month, Jay Kothari, Project Lead, Glass, wrote in a blog post that the company has spent the last two years working closely with a network of more than 30 expert partners to build customised software and business solutions for Glass for people in these fields.

“We have also made improvements to the design and hardware so that it’s lightweight and comfortable for long term wear. We have increased the power and battery life too,” added Kothari, who is with Alphabet X, Google’s branch.

Google Glass is also helping scientists to study brain disease, during emergency and it can teach you Morse code in four hours.

Glass is a small, lightweight wearable computer with a transparent display that brings information into your line of sight.

The first Google Glass was introduced with much fanfare in 2014. At $1,500, it promised a new, bold era for information.

People, however, realised the device was not yet ready to be part of their lives. There were safety and health concerns. The built-in camera raised privacy and piracy issues too.

“Now the Glass product team is back at X, and we’ll be collaborating with the Google Cloud team and our partners to help customers across a variety of business sectors make the most of Glass,” Kothari posted.

[“Source-gadgets.ndtv”]

0 comment
0 FacebookTwitterPinterestEmail
error: Content is protected !!