VPN

Cisco Reveals Zero-Day VPN Bug Without a Fix

Cisco doesn’t yet have a fix for a zero-day vulnerability in the Linux, MacOS, and Windows versions of its virtual private network (VPN) software, AnyConnect Secure Mobility Client. While Cisco says it isn’t aware of any instances in which attackers have exploited the vulnerability, in a security advisory updated late Thursday, the vendor warned that a proof-of-concept exploit code is available, and this would make it significantly easier to take advantage of the flaw. The high-severity bug, CVE-2020-3556, earned a CVSS score of 7.3 and is an arbitrary code execution vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client software. It’s due to a lack of authentication to the IPC listener, and attacker could exploit this vulnerability by sending crafted IPC messages to the AnyConnect client IPC listener. If exploited, an attacker could execute a malicious script via the targeted AnyConnect user.

Spotlight

Spotlight

Related News

Virtual Server Infrastructure

Scale Computing Offers Simple, Secure, Reliable IT Infrastructure to Combat 'Zombie' Technology

PR Newswire | October 10, 2023

Scale Computing, a market leader in edge computing, virtualization, and hyperconverged solutions, today announced its new campaign targeting outdated, 'zombie-like' infrastructure and calling on organizations to learn more about Scale Computing Platform's (SC//Platform) future-ready solutions. Between now and November 4, 2023, end users in North America and Europe, Middle East, and Africa (EMEA) can register for the company's free Zombie Apocalypse Essentials Kit, containing a water bottle, lantern, and powerbank. "IT managers are increasingly dealing with unreliable, inflexible, and inefficient systems. Instead of being haunted by outdated and traditional infrastructure, we invite users to learn more about Scale Computing and our Scale Computing Platform. SC//Platform brings together simplicity and scalability, replacing existing outdated infrastructure and providing high availability for running workloads in a single, easy-to-manage platform, while leveraging our patented self-healing technology to maintain maximum uptime for all applications," said Jeff Ready, CEO and co-founder of Scale Computing. October is Cybersecurity Awareness Month, dedicated to raising awareness about the importance of digital security and protecting personal data. As cyberattacks become more sophisticated, maintaining modern infrastructure with a powerful cybersecurity stance is key to keeping critical business applications and data secured. Scale Computing's campaign aims to help businesses fortify their defenses against the three blood-thirsty 'zombies' that commonly haunt outdated, traditional three-tier infrastructure Dreadful Downtime — an unreliable network that causes unexpected and expensive downtime for an organization Mangled Management — disparate technology systems, managed across multiple platforms, that make upgrades, patching, and overall management unnecessarily time- consuming Creeping Complexity — old and outdated systems across multiple locations that make scaling overly complicated SC//Platform provides infrastructure that is simple, secure, scalable, and reliable. With SC//Fleet Manager, the industry's first cloud-hosted monitoring and management tool built for hyperconverged edge computing infrastructure at scale, customers can quickly identify areas of concern using a single pane of glass, scaling from 1 to over 50,000 clusters. Zero-touch provisioning and Secure Link features allow administrators to centrally and securely monitor and manage hundreds or thousands of distributed edge infrastructure deployments, with few or no on-site IT personnel. About Scale Computing Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Using patented HyperCore™ technology, Scale Computing Platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime, even when local IT resources and staff are scarce. Edge Computing is the fastest-growing area of IT infrastructure, and industry analysts have named Scale Computing an outperformer and leader in the space, including being named the #1 edge computing vendor by CRN. Scale Computing's products are sold by thousands of value-added resellers, integrators, and service providers worldwide.

Read More

Backup and Disaster Recovery

In an Era of Escalating Cyber Threats, Commvault and Lenovo Simplify Enterprise Data Protection and Speed Recovery in the Hybrid Cloud

PR Newswire | October 17, 2023

Commvault®, an enterprise data protection leader for global businesses, announced new highly reliable backup and recovery solutions for enterprise organizations, powered by Lenovo technology. Paired with Lenovo's award-winning hardware systems, Commvault is delivering simplicity to IT teams with data protection and management from a single view, while giving CIOs flexibility, reliability, and blazing performance at immense scale with better TCO and faster time to value. "Innovation through collaboration has always been at the heart of Commvault. Partnering with Lenovo propels us further into a future where enterprises can safely say their data is secured, protected, and recoverable," said Alan Atkinson, Chief Partner Officer, Commvault. "This partnership stands as a testament to both companies' commitment to supporting global enterprises in navigating the multifaceted challenges posed by today's data-driven business landscape." "As we continue to operate in such a fast-paced and data-driven business environment, ensuring the safety, accessibility, and recoverability of critical business data has never been more important. It is for this exact reason that Commvault and Lenovo have come together to deliver highly reliable backup and recovery solutions for enterprise organizations," said Brian Connors, Vice President and General Manager, Software & Business Development, Lenovo. Commvault software is recognized for its unmatched depth in cloud-native integrations, supporting an array of applications, databases, and infrastructures. For the 12th consecutive year, Gartner positioned Commvault as a Leader in the Gartner® Magic Quadrant™ for Enterprise Backup and Recovery Software Solutions. Commvault also ranked highest in six out of seven use cases in the 2023 Gartner® Critical Capabilities for Enterprise Backup and Recovery Software Solutions. About Commvault Commvault is a global leader in cloud data protection. Our industry-leading platform redefines the next generation of data protection as the only solution with comprehensive data protection, proactive data defense, advanced ransomware protection, and a single view across all your data. This lets you secure, defend, and recover your data, applications, and production workloads – on-premises, in the cloud, over SaaS, or spread across hybrid and multi-cloud environments. The result is early warning of attacks, active defense to reduce the impact of intrusion, and rapid, accurate recovery of your data. Simply put, Commvault is data, protected.

Read More

Backup and Disaster Recovery

GRAX Introduces Free Data Backup and Recovery Service for Salesforce

businesswire | September 12, 2023

GRAX, Inc., a leading innovator in Salesforce data management and protection, announces the general availability of GRAX Lite for free Salesforce backup and recovery. GRAX Lite is a game-changing free solution that enables businesses to prevent data loss by safeguarding their Salesforce data. GRAX Lite addresses a critical need in the SaaS data protection market by offering comprehensive free backup software. In an era marked by escalating cyber threats and stringent compliance regulations, GRAX Lite arms businesses with a powerful tool to shield their vital Salesforce data. Built on the principle of data ownership, GRAX Lite gives Salesforce users the power to take back that ownership and control of their valuable Salesforce data with a couple of clicks. "At GRAX, we have always believed that data protection is an unassailable right," said Joe Gaska, Head of Product at GRAX. "With the launch of GRAX Lite, we are breaking down barriers and providing businesses with the tools they need to secure their mission-critical Salesforce data so that they can focus on growing their business." Key capabilities of GRAX Lite for Salesforce Backup and Recovery Effortless Backup and Recovery: GRAX Lite simplifies the backup process allowing users to protect and easily restore their Salesforce data with just a couple of clicks. 100% Data Ownership: GRAX Lite empowers users to retain full ownership of their data by enabling backups into the customer-owned storage service – Amazon Web Services (AWS) or Azure cloud storage environments. Maintain Your Digital Chain of Custody: With GRAX, users retain full control over their data’s Digital Chain of Custody – GRAX runs entirely in the customer-owned cloud. Unlimited backup storage: GRAX Lite enables users to capture all of their data into their cloud of choice, where users can leverage their existing cloud agreements. Daily Automated Backups: Users gain peace of mind with automated incremental backups of Salesforce data, including files and attachments, ensuring no critical information is lost. Granular Control: Swiftly restore individual records, making it simple to bring back data quickly when you need it. User-Friendly Interface: The user-centric design of GRAX ensures that any user can navigate and deploy free Salesforce data protection from the GRAX Platform with ease. GRAX Lite is a testament to GRAX's commitment to data sovereignty and data governance. By providing a free and user-friendly solution for Salesforce backup and recovery, GRAX Lite empowers organizations to take back ownership of their data assets, create a comprehensive backup strategy, and focus on driving business growth. About GRAX GRAX helps organizations adapt faster by making it easier to get strategic value out of their historical SaaS application data. Customers can fully own, access, and reuse all versions of their cloud application data anywhere, anytime by simply backing up or archiving it to their own cloud environment and seamlessly pushing it into their data ecosystem. GRAX delivers unparalleled SaaS data backup, archive, recovery, and reuse functionality in a fully integrated solution, helping leading organizations improve business continuity, regulatory compliance, customer retention, and revenue growth.

Read More