VeeamON 2024 - Use Code "COMMUNITY10" for 10% Off!
Hey guys, Are you interested in learning about API Security Fundamentals? If yes, please sign up using this link: https://www.apisecuniversity.com/courses/api-security-fundamentals Course outline: The API Security Fundamentals course covers the following areasCore threats to APIs and challenges to prevent breach. OWASP API Security Top 10, Examine how real-world API attacks have succeeded and understand the 3 Pillars of API Security.Note: The course is self-paced, and takes about 90 minutes and includes a certification.
Hey Guys, I have written a short piece on some of the reasons to attend VeeamOn Virtually or in Person. Kindly take a look at this link for more information: https://techdirectarchive.com/2023/04/27/why-you-should-attend-veeamon-2023/Also, I have shared a discount code for anyone that wishes to attend in-person. I wish you all a veeamazing time at this VeeamON 2023!
TeamPass is a Passwords Manager dedicated to managing passwords in a collaborative way by sharing them among team members.. It is an Open Source project totally free of charge for any usage. Recent times, there have been lots of news on Password Manager exploit, Here are some examples A lot of articles have been shared on how to choose the right password manager such as the following below. But I am here today to share with you a completely free solution that you can use at home and at your organisation for free. Here is a fantastic question raised by @Geoff Burke ”is it safe to use online password stores? “ , Visit this article to learn more about the various contributions from the community. TeamPass Password Manager enables you to organise password items into a structured way of folders associated with access rights given to dedicated users and groups. Features of TeamPass Password ManagerTeamPass provides a lot of options and features permitting you to customise it to
Recently, I had the privilege to attend a three-day Veeam Availability Suite: Configuration and Management (VMCE) course provided by Veeam from on the 7th - 9th December, 2022. Veeam Technical Education Services offers two industry certifications which are as follows “Veeam Certified Engineer (VMCE)” and the “Veeam Certified Architect (VMCA)“.Please check out the blogpost for a comprehensive information on this topic.After completion of the course, you will be able to effectively install, configure and manage Veeam Availability Suite. Thus, the knowledge gained will be evident in your practical and production environment. Some individuals made this course possible for me. Special thanks to Veeam Community Leadership: @Rick Vanover @Madi.Cristil @safiya, and @NikolaPejkova. Also, special thanks to these folks @haslund and @Federica. Veeam Backup & Replication v11 brings balance to your data protection objectives with a 4-in-1 solution, combining storage snapshots, backup, replicatio
If you wish to explore the capabilities of Veeam Backup and Replication v11A, then you probably upgrade to this version. Kindly visit the following URL for more of these capabilities/features.Here is a link to the complete guide highlighting on all the needed steps.You may be notified if there is an update of the Veeam Backup and Replication. Upon clicking on this notification, you will be redirected to the following KB (download) link. Note: I will be upgrading from Veeam v11 Build 11.0.0.839 → 11.0.1.1261.I will be downloading the new 11A ISO as shown below. If you are not prompted that an update is available, you can download the latest version of the Veeam Backup and Replication ISO from the following Veeam Backup & Replication Download page. You will be required to login in order to access the download. Before proceeding to upgrade, ensure all existing jobs are successfully completed. If there are any filed jobs, ensure to re-run them.- Also, ensure there isn't any restore s
Hello Veeamers, my name is Christian Eromosele, a System Administrator, and I live in Germany. I'm very much excited to be here as a community leader.As a community, we all have a shared interest in topic/cause, and I believe that we can accomplish great things by working together, and engaging more actively.I encourage everyone of us to introduce ourselves and share a little bit about themselves. It's important that we get to know ourselves so that we can better collaborate, organise events and even support one another.In addition, I'd like to suggest that we all actively participate in this group by sharing our ideas, insights, and experiences. Whether it's by asking questions, sharing resources, or engaging in discussions, we all have something valuable to contribute. By doing so, we can move this group forward and make a positive impact.Thank you all for being here, and I look forward to more active participation from every one of you!
Veeam Backup and Replication is comprehensive data protection and disaster recovery solution which is capable of creating image-level backups of virtual, physical servers, cloud machines, and restoration as well. You may encounter the following errors when installing the Veeam backup and replication tool “VEEAM service is unable to start, error 1064: An exception occurred in the service when handling the control request”. Therefore, I will be showing you the steps on how to resolve this issue very quickly. Here is a detailed link to this post.If you are here reading this troubleshooting guide "new Veeam Backup server but then Veeam won’t start", this means you must have recently installed Veeam Backup and Replication Server or must have recently upgraded it. As you can see from the images below, these are some errors I encountered while installing Veeam Backup and Replication in my test environment before deployment.The "Failed to start service / connect to Veeam" and "connection refus
In this article, I will be sharing a script that will enable you query the BitLocker recovery key from the MBAM reporting services. I have written a guide on how to query MBAM to display the report for BitLocker Recovery for a specified period of time. In this way, you will be able to save the report as a CSV file that we will later query in order to determine the number of times, a devices has been recovered via the MBAM help-desk or Self-service recovery. If you would like to set up an Microsoft BitLocker Administration and Monitoring, please see this this link.Upon downloading the BitLocker Recovery CSV file, kindly save it in your desired location. You can also configure the reporting servces to automatically save this report for you. Here is a guide on how to go about this “MBAM reports automatic E-mail notification: How to create MBAM Enterprise and Compliance, and Recovery Audit reports”. The process is similarand you just have to change the destination (delivery method).When th
Winget package manager makes it easy to install, upgrade, and uninstall applications in as you wish effortlessly in Windows 11 and some versions of Windows 10. Here is the link to the original blog post. We have already learnt about Chocolatey a lot and here is a guide on it. It will interest you to know now that the Windows Package Manager “Winget” command-line tool is now bundled by default with Windows 11 and modern versions of Windows 10 by default as the App Installer. If you are running an earlier version of Windows and the App Installer is not installed, you can get App Installer from the Microsoft Store. I have written on how to get Winget in the past. Here are two links should in case you wish to see how it was done in the past. Link1 and link2. As you can see in the image below, the current preview of the Winget tool supports the following commands. The Winget list commandThe winget list command will display more than just apps installed with the winget. You can also use the
Bitwarden has responded to renewed criticism of the encryption scheme it uses to protect users’ secret encryption keys by enhancing the mechanism’s default security configuration.This issue centers on the number of PBKDF2 hash iterations used to compute the decryption key for a user’s password vault. Note: OAWSP recommends using the PBKDF2 algorithm with random salts, SHA-256, and 600,000 iterations (a figure recently increased from the previous recommendation of 310,00 rounds). Bitwarden said that its data is protected with 200,001 iterations. That is 100,001 iterations on the client side and a further 100,000 on the server side. Security researcher Wladimir Palant has warned that, while this might sound impressive, the server-side iterations are ineffective. And, much worse, older accounts were stuck with much lower security settings (unless they manually increased iterations on their settings). Read more: https://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/
Norton LifeLock parent company Gen Digital says that hackers likely used a credential stuffing attack to compromise customers’ password managers. The breach began as early as December 1, 2022, although Gen Digital did not detect the issue until they became aware of a large volume of failed login attempts around December 12. The company has sent notifications to roughly 6,500 individuals whose accounts were compromised. For some reason, I have never used and not comfortable using Norton Password Manager. By the way, these Password managers have been breached (LastPass, Okta, and now Norton Password Manager). Which is next?! Bit^**den :-)
Veeam Backup & Replication is a data protection and disaster recovery solution for virtual, physical, and cloud environments. With Veeam Backup & Replication you can Create crash-consistent and application-consistent backups of virtual and physical machines, quickly restore physical machines, EC2 instances, VMs, VM disks, guest OS files, and application items, perform a backup health check to verify that backups are not corrupted and are ready for restoring, create VM replicas and switch to them in case of a disaster and automate transferring of backups to tapes and other external repositories. Veeam Backup and Replication Configuration Database Settings come with the Veeam.Backup.DBConfig.exe utility that allows you to manage connection settings for Veeam Backup & Replication and/or Veeam Backup Enterprise Manager configuration database. Using this utility, you can:1. Connect to a different Microsoft SQL Server instance. If you specify a database that does not exist yet, i
Remote Defender Credential Guide was introduced in Windows 10 version 1607 to be precise and helps protect your credentials over a Remote Desktop connection by redirecting Kerberos requests back to the device that's requesting the connection. It also provides single sign-on experiences for Remote Desktop sessions. You may want to learn about how to enable or disable Memory integrity in windows, reputation based protection, and how to enable or disable Windows Defender Credential Guard I wrote yesterday :-). Please refer to the original guide, I will do my best to limit internal links from my website that are vital. You will agree with me that highly privileged Administrators' credentials are very critical and must be adequately and correctly protected. Note: Neither Windows Defender Remote Credential Guard nor Restricted Admin mode will send credentials in clear text to the Remote Desktop server. How does Windows Defender Remote Credential Guard compare to Restricted Admin and Remote
VMware Tools is a set of services and modules that enable several features in VMware products for better management of guests operating systems and seamless user interactions with them. VMware Tools has the ability to pass messages from the host operating system to the guest operating system. Therefore, VMware Tools is a suite of utilities that enhances the performance of the virtual machine guest operating system and improves the management of the virtual machine. Without VMware Tools installed in your guest operating system, guest performance lacks important functionality. Installing VMware Tools improves these issues low video resolution, inadequate color depth, incorrect display of network speed, restricted movement of the mouse, inability to copy and paste and drag and drop files, missing sound, and provides the ability to take quiesced snapshots of the guest OS, and synchronises the time in the guest operating system with the time on the host Impacted ProductVMware Tools for Wind
When attempting to add a pre-created (provisioned) PC to a domain or reuse an existing computer account, the following error below is encountered.An account with the same name exists in Active Directory. Re-using the account was blocked by the security policy.Microsoft released this update on October 11, 2022, thereby introducing additional protections (hardening) for your environment. This hardening mitigates the following “CVE-2022-38042 (Active Directory Domain Services Elevation of Privilege Vulnerability)”.Legacy behaviourBefore the installation of the October 11, 2022 update, or later cumulative updates, the client computer queries Active Directory for an existing account with the same name. This query occurs during domain join and computer account provisioning. If such an account exists, the client will automatically attempt to reuse it.Note: During this time, the re-use computer account will only fail if the user does not have the appropriate permission to join the device to th
Account lockout help keep user accounts secure by preventing unauthorised users etc., from guessing the username and password. When your account is locked, you will have to wait for a specified amount of time before being able to log into your account again. Here is the link to the original blogpost. In the past, it was recommended to disable the local Administrator account due to several known vulnerabilities such as the built-in administrator account cannot be locked out no matter how many failed logins it accrues, making it a prime target for brute-force attacks that attempt to guess passwords. This is no longer true as beginning October 11, 2022, or later Windows cumulative updates, a local policy will be available to enable local administrator account lockouts. Brute force attacks are one of the prevalent ways Windows devices are attacked today. Previously, Windows devices did not allow local administrators to be locked out. This leads to scenarios where, without the proper netwo
Hey guys, here are some cool gears for grabs! This is the right time to learn about VMware Aria Hub.This offer is only available during the VMware Explore Europe 2022 period which is from the November 7th through November 11th, 2022. Go to the Hands-on-Labs area and request HOL-2301-08-ISM “VMware Aria Hub – A look at what’s next in Multi-Cloud Management”.At the completion of the lab, you will be able to order Cloud Management gear as a gesture of our appreciation to be shipped to you*.Hey guys, let’s run with this….
The following disclosure vulnerability (CVE-2022-22948) was reported to VMware by Yuval Lazar (@Ul7raVi0l3t) of Pentera. To remediate this vulnerability, apply the patch in the response matrix below as it applies to you. The vCenter Server contains an information disclosure vulnerability due to improper permission of files. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.5.Below are the affected productsVMware vCenter Server (vCenter Server) VMware Cloud Foundation (Cloud Foundation)An information disclosure vulnerability in VMware vCenter Server was privately reported to VMware. Updates are available to remediate this vulnerability in affected VMware products.Known Attack VectorsA malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.ResolutionTo remediate CVE-2022-22948 apply the patches listed in the 'Fixed Version' column of the 'R
VMware Aria Operations (formerly VMware vRealize Operations) automates and simplifies IT management with full-stack visibility from physical, virtual and cloud infrastructure including Virtual Machines (VMs) and containers to the applications they support. It delivers continuous performance optimisation, efficient capacity and cost management, proactive planning, intelligent remediation and integrated compliance. It is available on premises and as-a-service. More information on this product here, and link to my blogpost. An arbitrary file read vulnerability in VMware Aria Operations was privately reported by Yu Dai of NSFOCUS TIANJI Lab to VMware. There are updates (patches) to remediate these vulnerabilities in the affected VMware products. What Exploit does this Vulnerability Present? A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data. Remediation To remediate CVE-2022-31682, apply the patches listed in the ‘Fixed Version’
VMware vCenter Server is advanced server management software that provides a centralized platform for controlling your VMware vSphere environments, allowing you to automate and deliver a virtual infrastructure across the hybrid cloud with confidence. With VMware Center, you gain centralized visibility, simplified and efficient management at scale, and extensibility across the hybrid cloud from a single console. Here is the link to my blogpost. The following vulnerability was reported by Yaron Zinar and Sagi Sheinfeld of Crowdstrike to Vmware. The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.1. Impacted ProductsVMware vCenter Server (vCenter Server) VMware Cloud Foundation (Cloud Foundation)What Exploit does this Vulnerability Present? A malicious actor with non-administrative
https://www.wsj.com/articles/former-uber-security-chief-found-guilty-of-obstructing-ftc-probe-11665004454?st Always disclose breaches! what are your thoughts?W🤔
Microsoft 365 formerly referred to as Office 365 is a SaaS application that provides productivity and collaboration through a diverse set of micro-services and applications such as Exchange Online, SharePoint Online, Skype for Business Online, Microsoft Teams, Exchange Online Protection, Office in a browser, and many others. Microsoft recently made a distinction between M365 and O365. Therefore, M365 is a bundle of services that includes O365, and many other services as mentioned previously. I will be discussing these details in a subsequent guide. Here are some related guides that might interest you: How to Cancel Office 365 Family Subscription, how to complete Microsoft Office 365 Family Subscription, how to install Microsoft Teams on a Mac PC, and how to install and activate Office 2019 on your Mac PC.As of today, data is the most critical resources and one of the most valuable currency in the world. In Cyber Security, we refer to data as the New Oil. This Forbes link will highlight
Found these resources useful- This will also help you determine what focus in cybersecurity to take before investing a lot of money and time. These courses are perfect for helping you break into cybersecurity 👇 👇 👇 👇 👇 1. Introduction to Cyber Attacks at NYU https://lnkd.in/gK-muH_k2. Cryptography I at Stanford https://lnkd.in/gTEN6GNP 3. Hardware Security at University of Maryland https://lnkd.in/g7Neqed84. Network and Security Foundations at Western Governors University https://lnkd.in/gmMgXJvB5. Internet History, Technology, and Security at University of Michigan https://lnkd.in/gSKimTrY6. Network and Computer Security at MIT https://lnkd.in/g7BakrPS7. Computer Networks at MIT https://lnkd.in/gb_WbFcx 8. System Issues in Cloud Computing Specialization at Georgia Tech https://lnkd.in/gg5A8Kw49. Cybersecurity Management at Charles Sturt University https://lnkd.in/gE37ZdnW10. Certified Information Systems Security Professional at Charles Sturt University https://lnkd.in/gz6xTr4b11
Modern business requires a Modern Data Protection solution that not only allows for the backup and recovery of core infrastructure, clouds, and applications but enables the lowest possible operational overhead through advanced automation, monitoring and orchestration. With Veeam Modern Data Protection, your critical data such as Microsoft 365 Exchange, OneDrive, and SharePoint online will be protected with just one integrated solution. However, Veeam also offers Veeam Backup for Microsoft Office 365 as a standalone product to protect and restore Microsoft O365 data, including Office 365 mailboxes, Exchange, SharePoint, OneDrive, OneNote, and Teams. It allows you to timely back up your data weekly, daily, or as often as every five minutes.Here is a guide on why is it imperative to protect Microsoft Office 365.As of today, data is the most critical resource and valuable currency in the world. In Cyber Security, we refer to data as the New Oil. This Forbes link will highlight more on this
Again, we have a cool opportunity to win some cool gadMicrosoft Ignite is an annual conference for developers and IT professionals hosted by Microsoft.gets. Register with Veeam for a chance to win a Canon Camera or other great prizes, and a Free T-Shirt. Enter To Win Great Prizes with the following registration link: https://bit.ly/veeamplusmicrosoft After registering, do not forget to share on Social Media to gain extra entries, make sure to use the following hashtag #VeeamatMicrosoftIgnite2022. This piece was shared on the following link1 and link2.For some of us that are not so familiar with this event, Microsoft Ignite is an annual conference for developers and IT professionals hosted by Microsoft. You can register via the the following link: https://register.ignite.microsoft.com/.By registering any participating in the event, you will be able to explore the latest innovations, learn from product experts and partners, level up your skillset, and create connections from around the
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
