VeeamON 2024 - Use Code "COMMUNITY10" for 10% Off!
Hi @Daria_K This is a great initiative and have voted. I won’t be able to attend in person but happy to take part virtually.
Cisco’s turn this week. 😂 Man 2024 has started out well with security stuff, not looking forward to the rest of the year. 😥 It’s not been fun, that’s for sure. For us Sec Teams, we are ridiculously busy.
Oh wow, thank you for the sharing @dips , Veeam is now targeted since it is the market leader of the backup software. Standing at the peak of the mountain, you become visible to all and the wind blows harder I reckon we will see more targeted attacks against Veeam infrastructure in the environment with the way things are going.
Hi @Chris.Childerhose Will there be a recording available?Thanks!
Shows how important backups are @Chris.Childerhose Seems they are beginning to focus a lot more on backup servers.
Thanks for sharing @Link State In terms of the vulnerability, unless the Putty installation that is included with Veeam is being used for SSH connections it should be fine to wait for the update from Veeam. Additionally, the attacker would need to have compromised the server. More serious is that the P521 private keys generated using the vulnerable version of Putty should be considered vulnerable and replaced.
The event was recorded @ratkinsonuk so hopefully you can catch up.
Have you encountered any problems while continuing to use it? @dips I’ve not encountered any issues. As @Chris.Childerhose mentioned if you need App Aware, go with the Agent route. What’s your workload looking like?
So a question I had about Object Storage. When trying to determine a external Object Storage provider, how important is data portability for you? Is that a major factor?
My 2 cents:The Sessions were great and just the right amount of time was allocated. Some of the sessions probably needed a bit of additional time but all in all the timings were fine. Right mixture of technical and non-technical material. If possible, I would love to be able to get a copy of the presentations beforehand so I can have a read through. Would love to see more live Demos For the in-person event, I would love to try and arrange a session from the Security Desk Group is possible but that is another separate conversation. Thanks for a great Session and looking forward to the next one!
My question, what is your opinion on the Microsoft 365 backup offering that is being included in Microsoft 365 Tenants?
Anyone here joining us “live” during Michael’s session? I am
Very interesting read for sure Dips. Thanks for sharing it. Good Friday reading. 😁 Welcome, have a good weekend!
One more article that is worth a read:https://isc.sans.edu/diary/The+amazingly+scary+xz+sshd+backdoor/30802/
To add, for those who have access to Microsoft Defender XDR portal, there are some really good reports there too. Another one to the list. There are some good reports.https://www.crowdstrike.co.uk/resources/?lang=1
Thank you everyone that watched, live or on demand! And a huge round of applause to @SteveHeart for his amazing contributions to the Veeam community! Steve makes my favourite product feature (SureBackup) even better! 🎉 Sounds like you are a massive fan of SureBackup @MicoolPaul 😉
Thanks @Cassandra Faris @MicoolPaul @SteveHeart I really enjoyed the show and learnt some new things too which is always really helpful.
Personally, Hyper-V as well.Following on from Broadcom’s acquisition and constant news on what they are planning with VMware, it feels that the next logical step for an organisation who have invested heavily into Azure and 365, Hyper-V becomes a logical step to migrate to. Especially with the announcements coming out of Microsoft and Windows Server 2025. If they offer a smooth migration path away from VMware, and organisations start dipping their toes into Hyper-V, there is a huge opportunity for Microsoft to take customers away from VMware.
YARA rule here: https://github.com/Neo23x0/signature-base/blob/master/yara/bkdr_xz_util_cve_2024_3094.yar
Have to say, this is one of the most insane things I have come across.There is a great breakdown here: https://boehs.org/node/everything-i-know-about-the-xz-backdoorFor those folks who are utilising Microsoft Defender XDR, KQL queries for this can be found here:https://github.com/cyb3rmik3/KQL-threat-hunting-queries/blob/main/01.ThreatHunting/CVE-2024-3094-internet-facing-devices.md
Yea, definitely @MarkBoothman I do see a lot of automation of certs now with 30 - 60 day validity now rather than the usual 1 year.
Thanks @MarkBoothman Are there any options for auto-renewal of certs in Nagios?
Thanks @Chris.Childerhose @coolsport00
I’m curious @coolsport00 @Chris.Childerhose Do you use any particular tool to track certificate expiration?
Nice @dips - great reminder. Any chance you have links to setting this up with Letsencrypt? I don’t but it’s sounds like an idea. On the other hand I’d isolate the B&R server from the internet as much as possible.
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
