• EN

Topics started by Link State

38 Topics

Link State
Link StateVeeam Legend
posted in Cyber Security Space

Microsoft: Exchange servers hacked to deploy BlackCat ransomware

 More bad news on the Exchange front, a new ransomware attack on MS mail systems.Microsoft: Exchange servers hacked to deploy BlackCat ransomware (bleepingcomputer.com)😓

8
marcofabbri
1 year ago
Link State
Link StateVeeam Legend
posted in Cyber Security Space

Microsoft emergency updates fix Windows AD authentication issues "May 2022 Patch Tuesday"

Hello everyone:MS released the May 2022 Patch Tuesday security buggy.Impacts O.s. Windows from Windows 2008 to Windows 2022.Microsoft emergency updates fix Windows AD authentication issues (bleepingcomputer.com)Microsoft released emergency out-of-band (OOB) updates to fix Active Directory (AD) authentication issues after installing Windows updates released during the May 2022 Patch Tuesday on domain controllers.Install fix patches only if you have the May 12, 2022 update installed.Microsoft: May Windows updates cause AD authentication failures (bleepingcomputer.com)  Microsoft has released emergency out-of-band (OOB) updates to address Active Directory (AD) authentication issues after installing Windows Updates issued during the May 2022 Patch Tuesday on domain controllers.The company has been working on a fix for this known issue causing authentication failures for some Windows services since May 12."After installing updates released May 10, 2022 on your domain controllers, you might

5
regnor
1 year ago
Link State
Link StateVeeam Legend
posted in Blogs and Podcasts

Hardened repository immutability backup copy + Infinidat Snaprotator Locked Volume

 Hi everyone I'm sharing this kind of configuration aimed to strengthen the security of immutable data backup against ransomeware attacks or possible 0 day \vul of the O.S. Linux used to deploy a Hardened Repository.Thanks to Veeam, it is now possible to perform immutable backups via Hardened Repository.This technique aims to safeguard the databackups saved on Raw LUN Volumes of a storage in “Locked Volume” mode on Hardenend Linux based repositories.The combo is to use the Hardened Repository to which present a RAW LUN Volume formatted in XFS to support block cloning, in this case Infinidat + the functionality/utility Snaprotator, allows to schedule a snapshot of one or more Volumes in "Locked Volume" mode.Tested also the restore, re-presented the Snapshot Volume on the Hardened Repository, the only trick is to force the change of the UUID of the Raw Lun, if not it is not mountable by the O.S. because of duplicate UUID.InfiniBox SnapRotator User Guide – INFINIDAT Support Find out if yo

2
JMeixner
2 years ago
Link State
Link StateVeeam Legend
posted in Blogs and Podcasts

[GUIDE] How To deploy & schedule Veeam Agent Protection Group MS Cluster step by step

How To deploy Veeam Agent Protection GroupAre two physical nodes of an MS cluster and MSSQL instance in the clusterReference:Installing Veeam Agent for Microsoft Windows - Veeam Agent for Microsoft Windows GuideGetting Started - Veeam Agent for Microsoft Windows GuideInstallation and Configuration - Veeam Agent for Microsoft Windows GuideCreate new Protection GroupThe account used to perform a consistent backup of an MSSQL DB must be entered either in the Local group Administrators or enter the user side MSSQL studio with permissions of DBA Admin\Owner.You require different sets of Microsoft SQL permissions in the following cases:Installation (remote or local): current account needs CREATE ANY DATABASE permission on the SQL server level. After database creation this account automatically gets a db_owner role and can perform all operations with the database. If the current account does not have this permission, a Database Administrator may create an empty database in advance and grant t

7
BertrandFR
2 years ago
Link State
Link StateVeeam Legend
posted in Blogs and Podcasts

[GUIDE] How to deploy CDP v.11 step by step

 Hi all, I share the lab I created to test the CDP feature.HW List:VmwareServer: 4 UCSC-C220-M5SX - VMware ESXi, 6.5.0, 15256549 VCSA 6.7.0 15129973 Storage: Dell Storage SC 5020 VBR+CDP-Proxy Source 1x4 vCPU – 16 Gb RAM CDP-Proxy Target 1x4 vCPU – 16 GB RAM System Requirements - User Guide for VMware vSphere (veeam.com) Requirements and Limitations - User Guide for VMware vSphere (veeam.com) Backup Infrastructure for CDP - User Guide for VMware vSphere (veeam.com)Deploy & Configure  CDP proxy VBR on source & target Vmware datacenterDeploy & Configure  CDP proxy on Target DCInstalling I/O FilterInstalling I/O Filter - User Guide for VMware vSphere (veeam.com)KB4096: VeeamCDP I/O filter installation fails with “The agent’s workflow is blocked” erroresxcli software acceptance set --level CommunitySupported on all your Esxi.07/10/2021 10:53:39 Error    Installing CDP components on cluster: CDP-Source... Error: The operation is not allowed in the current state.The operation is

1
I
2 years ago
Link State
Link StateVeeam Legend
posted in Discussion Boards

[SEC-CVSS:3.1 9.8 / 8.5] Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2022-26809

Hi guy update April 2022 for fix RPC vulCVE-2022-26809 - Security Update Guide - Microsoft - Remote Procedure Call Runtime Remote Code Execution VulnerabilityHow could an attacker exploit the vulnerability?To exploit this vulnerability, an attacker would need to send a specially crafted RPC call to an RPC host. This could result in remote code execution on the server side with the same permissions as the RPC service.Why did Microsoft remove the Mitigation to “Block TCP port 445 at the enterprise perimeter firewall”?The researcher who submitted the vulnerability used SMB as the attack vector to trigger the exploit in the RPC service, so the mitigation was effective for the issue that was presented to us. Although blocking ports 139 and 445 [smb] at the perimeter firewall is a recommended practice, it does not directly protect against all potential attack scenarios for this specific vulnerability. At this time we are not aware of any other specific attack vectors for this vulnerability,

1
Iams3le
2 years ago
Link State
Link StateVeeam Legend
posted in Blogs and Podcasts

Spring4Shell: Detect and mitigate new zero-day vulnerabilities in the Java Spring Framework

Hello to share a new vulnerabilitySpringShell attacks target about one in six vulnerable orgs (bleepingcomputer.com)(1) New Messages! (checkpoint.com)Spring4Shell: Detect and mitigate vulnerabilities in Java Spring | Dynatrace | Dynatrace newsWhat is Spring4Shell?Spring4Shell is a critical vulnerability in the Spring Framework, an open source platform for Java-based application development. Because 60% of developers use Spring for their main Java applications, many applications are potentially affected.Spring is popular because it enables software engineers to more easily write and test code to maintain modular applications. Other libraries enable developers to become less dependent on enterprise web servers and, therefore, reduce configuration complexity and cost.Spring4Shell is one of three vulnerabilities published on March 30:Spring Core RCE (critical): CVE-2022-22965 a.k.a. Spring4Shell or SpringShell Affected library: org.springframework:spring-bean Information exposure in Spring

2
regnor
2 years ago
Link State
Link StateVeeam Legend
posted in Discussion Boards

Reliable Red Hat Virtualization backup (Public Beta - Fully supported beta)

 Hi guys,The beta for Hypervisor KVM support is finally out \o/Veeam Backup for Red Hat VirtualizationVeeam Backup for Red Hat Virtualization 1.0 | Release NotesOverview - Veeam Backup for RHV User Guide 

4
Chris.Childerhose
2 years ago
Link State
Link StateVeeam Legend
posted in Blogs and Podcasts

VBR v11 - Step by step: Installation & Configuration Best Practices - PART 2

  BR v.11 - Step by step Install & Configure (Best Practice) | Veeam Community Resource Hub#########################################################   CREATE NEW JOB add multiple VM 15 restore point Incr Weekly sinth full Saturday  ######################################################### #Create new Job:$test2 = Find-VBRViEntity -Name "spc*"$repository = Get-VBRBackupRepository -ScaleOut -Name *****-SOBRAdd-VBRViBackupJob -Name "D002-TEST2" -Entity $test2 -BackupRepository $repository #Set 15 restore point:$retention = New-VBRJobOptions -ForBackupJob$retention.BackupStorageOptions.RetainCycles = 15$job = Get-VBRJob -Name "D002-TEST2"Set-VBRJobOptions -Job $job -Options $retention#Configure job schedule and enable it:Get-VBRJob -Name "D002-TEST2" | Set-VBRJobSchedule -Daily -At "23:30" -DailyKind Everyday | Enable-VBRJobSchedule#Set Forever Incremental:Get-VBRJob -Name "D002-TEST2" | Set-VBRJobAdvancedBackupOptions -Algorithm Incremental -TransformFullToSyntethic $true -TransformIn

3
Chris.Childerhose
2 years ago
Link State
Link StateVeeam Legend
posted in Blogs and Podcasts

VBR v11 - Step by step: Installation & Configuration Best Practices - PART 1

The virtual machines I use for the deployment are generated from a Template (Golden Image) through a configuration file unattend.xml Answer files (unattend.xml)https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/update-windows-settings-and-scripts-create-your-own-answer-file-sxs What is Windows System Image Manager?https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc766347(v=ws.10) Useful links for sizingVeeam Architects Site https://www.veeambp.com/ Veeam Size Estimation Tool (VSE)https://vse.veeambp.com/#/ The Restore Point Simulatorhttp://rps.dewin.me/ Veeam Ports Calculatorhttps://www.veeambp.com/ports/ REFS Calculatorhttp://dewin.me/calculator/ Bandwidth Calculatorhttp://rps.dewin.me/bandwidth/ Pricing calculator for small businesshttps://www.veeam.com/pricing-calculator NAS Calculatorhttps://cloudoasis.com.au/nas-calculator/ Veeam Clikable Demoshttps://veeamclick.be/ Prerequisite: System Requirements - Veeam Backup Guide for vSphere

11
Link State
2 years ago
Link State
Link StateVeeam Legend
posted in Discussion Boards

Secure your VMware (HelloKitty ransomware targets VMware ESX) hosts against ransomware in 3 simple steps!

Hi all,from Gostev's Veeam R&D Forums Digest, report a new threat targeting ESXi hostsSecure your VMware ESXi hosts against ransomware in 3 simple steps! (truesec.com) Linux version of HelloKitty ransomware targets VMware ESXi servers (bleepingcomputer.com)

6
I
2 years ago
Link State
Link StateVeeam Legend
posted in Blogs and Podcasts

CVE-2021-36934 "HiveNightmare" Serious SAM - Windows 10/11 Elevation of Privilege Vulnerability

Hi all,a new 0Day vulnerability for Windows 10 clients has been released, the article also recommends deleting all the vss restore points and recreating themSecurity Update Guide - Loading - MicrosoftCheck Windows 10 for SeriousSAM and HiveNightmare Vulnerability Fix - Virtualization Howtohttps://github.com/GossiTheDog/HiveNightmarecommad check : icacls c:\windows\system32\config\samWorkaroundsRestrict access to the contents of %windir%\system32\configCommand Prompt (Run as administrator): icacls %windir%\system32\config\*.* /inheritance:eWindows PowerShell (Run as administrator): icacls $env:windir\system32\config\*.* /inheritance:eDelete Volume Shadow Copy Service (VSS) shadow copiesDelete any System Restore points and Shadow volumes that existed prior to restricting access to %windir%\system32\config. Create a new System Restore point (if desired).Impact of workaround Deleting shadow copies could impact restore operations, including the ability to restore data with third-party backu

3
I
2 years ago
Link State
Link StateVeeam Legend
posted in Discussion Boards

Google Cloud backup and recovery

Hi I read through Gostev newsletter of this new integration also with GCloud.I'm impressed how the Veeam suite progresses technologically and keeps up with the new technologies.Secure Google Native Backup & Recovery (veeam.com)  Has anyone tried this feature yet?Opinions?Discuss: D

1
Cloud_dizzle
3 years ago

Badge winners

Show all badges
Terms & Conditions