VeeamON 2024 - Use Code "COMMUNITY10" for 10% Off!
I wish to build a new HOMELAB. Here is a guide and many others I found on Reddit.- How is your lab setup? What would you recommend? Main virtualisation solution would be VMware (would need multiple hosts here). I would also have HyperV and Proxmox VE within this environment. Yes, this is possible!https://www.altaro.com/vmware/perfect-homelab-vmware/?vgo_ee=%2BWombPttbhpwDFBk3C2zvW7%2BX%2FpMfSStElYb34Re%2FNg%3D (I love the first approach in this guide).I have got my ideas, but would like to learn from you. Keep in mind, I need a cost effective solution ranging from hardware to Power etc. Here is a talking point but just talking about the installation. I do NOT need help with the setup (deployment) tips as this is a walkthrough for me. Just ideas on how to setup low a cost effective lab, but yet a Lab to be reckoned with.
Hey Guys, I would like to draw your attention to this event “AWS Dev Day Security 2023” happening tomorrow and next from 09:00 AM to 13:00 PM CET.AWS Dev Day Security Edition will focus on the latest developments in cloud security, identity and compliance.If you are a software engineer, security engineer, cloud and solution architect, and DevOps engineer involved in designing and implementing scalable, secure, resilient applications in the cloud, and that are keen on gaining deeper knowledge of the security and governance topics handled with the help of AWS services. Then, this event is for you. Kindly register via the links below to get acquainted with the latest in AWS security and learn how to implement them yourself during the various demonstration planned out.https://aws-experience.com/emea/dach-cee/e/203bd/aws-security-devdays-2023---day-1 https://aws-experience.com/emea/dach-cee/e/58d2b/aws-security-devdays-2023---day-2
In line with the breach reported by @dips 12 days ago, Barracuda is urging their customers that were impacted by the zero day flaw in its Email Security Gateway (ESG) to replace them forthwith.To learn about the initial compromise, please take a look at the link attached below. "Impacted ESG appliances must be immediately replaced regardless of patch version level," the company said in an update, adding its "remediation recommendation at this time is full replacement of the impacted ESG."For more information, kindly take a look at this link: https://vulnera.com/newswire/barracuda-urges-immediate-replacement-of-hacked-esg-appliances/
Some Security practitioners are familiar with the terms “due care” and “due diligence”. Everyone assumes to know what they mean in literal terms. But then, these terms are distinct and can be challenging to comprehend. Before diving into the topic further, Due care is an organization’s reasonable effort to protect system assets and/or people. A good way to think of this is “Do Correct” while Due diligence is an organization’s ongoing effort to ensure assets and/or personnel remain protected which involves prior planning. A good way to think of this is “Do Maintain”. Why should these terms be taken seriously? Due diligence and Due care are often used interchangeably. In the cybersecurity context, both aim in protecting the organization’s critical IT systems and data. But, these terms are different from each other. With an emphasis on various studies online, 82% of breaches are attributed to humans and this composes of various attack techniques such as social engineering etc. This is no
Windows LAPS is also referred to as Windows Local Administrator Password Solution which is a new feature that allows System Administrators to secure and protect local administrator passwords on domain PCs. More specifically, if you ever needed to recover a device and wished you could log in with a local administrator account in an AD or AAD environment, bingo! Here is an article created on Microsoft LAPS (Legacy LAPS) by Gary Williams. You can still use this solution in an Emulation mode while you prepare to migrate to the improved Windows LAPS. https://www.veeam.com/blog/microsoft-laps-deployment-configuration-troubleshoot-guide.htmlWindows LAPS inherits many design concepts from legacy Microsoft LAPS. If you're familiar with legacy Microsoft LAPS, many Windows LAPS features are familiar. A key difference is that Windows LAPS is an entirely separate implementation that's native to Windows. Windows LAPS also adds many features that aren't available in legacy Microsoft LAPS. You can use
Windows Server Upgrade also referred to as an "in-place upgrade" help move from an older version of the operating system to a newer version, while staying on the same physical hardware without wiping and reinstalling the operating system.Considering Windows Server 2012 and 2012 R2 is reaching their end of life at the end of 2023, organisations must consider migrating their Veeam Backup and Replication (VBR) Servers from Windows Server 2012 to Windows Server 2022. Below is a related articles and I highly recommend you to take a look at them. In this article below, I have attached links in the comment section on how to perform various in-place upgrade from various Windows Server Edition. The table shows the supported upgrade paths, based on the version you're currently on. That is, from 2012 to 2022 there are several steps.Reason for Server UpgradeRunning the latest version of Windows Server allows you to use the latest features? This includes running the latest security features tha
Hey guys, Are you interested in learning about API Security Fundamentals? If yes, please sign up using this link: https://www.apisecuniversity.com/courses/api-security-fundamentals Course outline: The API Security Fundamentals course covers the following areasCore threats to APIs and challenges to prevent breach. OWASP API Security Top 10, Examine how real-world API attacks have succeeded and understand the 3 Pillars of API Security.Note: The course is self-paced, and takes about 90 minutes and includes a certification.
Hey Guys, I have written a short piece on some of the reasons to attend VeeamOn Virtually or in Person. Kindly take a look at this link for more information: https://techdirectarchive.com/2023/04/27/why-you-should-attend-veeamon-2023/Also, I have shared a discount code for anyone that wishes to attend in-person. I wish you all a veeamazing time at this VeeamON 2023!
TeamPass is a Passwords Manager dedicated to managing passwords in a collaborative way by sharing them among team members.. It is an Open Source project totally free of charge for any usage. Recent times, there have been lots of news on Password Manager exploit, Here are some examples A lot of articles have been shared on how to choose the right password manager such as the following below. But I am here today to share with you a completely free solution that you can use at home and at your organisation for free. Here is a fantastic question raised by @Geoff Burke ”is it safe to use online password stores? “ , Visit this article to learn more about the various contributions from the community. TeamPass Password Manager enables you to organise password items into a structured way of folders associated with access rights given to dedicated users and groups. Features of TeamPass Password ManagerTeamPass provides a lot of options and features permitting you to customise it to
Recently, I had the privilege to attend a three-day Veeam Availability Suite: Configuration and Management (VMCE) course provided by Veeam from on the 7th - 9th December, 2022. Veeam Technical Education Services offers two industry certifications which are as follows “Veeam Certified Engineer (VMCE)” and the “Veeam Certified Architect (VMCA)“.Please check out the blogpost for a comprehensive information on this topic.After completion of the course, you will be able to effectively install, configure and manage Veeam Availability Suite. Thus, the knowledge gained will be evident in your practical and production environment. Some individuals made this course possible for me. Special thanks to Veeam Community Leadership: @Rick Vanover @Madi.Cristil @safiya, and @NikolaPejkova. Also, special thanks to these folks @haslund and @Federica. Veeam Backup & Replication v11 brings balance to your data protection objectives with a 4-in-1 solution, combining storage snapshots, backup, replicatio
If you wish to explore the capabilities of Veeam Backup and Replication v11A, then you probably upgrade to this version. Kindly visit the following URL for more of these capabilities/features.Here is a link to the complete guide highlighting on all the needed steps.You may be notified if there is an update of the Veeam Backup and Replication. Upon clicking on this notification, you will be redirected to the following KB (download) link. Note: I will be upgrading from Veeam v11 Build 11.0.0.839 → 11.0.1.1261.I will be downloading the new 11A ISO as shown below. If you are not prompted that an update is available, you can download the latest version of the Veeam Backup and Replication ISO from the following Veeam Backup & Replication Download page. You will be required to login in order to access the download. Before proceeding to upgrade, ensure all existing jobs are successfully completed. If there are any filed jobs, ensure to re-run them.- Also, ensure there isn't any restore s
Hello Veeamers, my name is Christian Eromosele, a System Administrator, and I live in Germany. I'm very much excited to be here as a community leader.As a community, we all have a shared interest in topic/cause, and I believe that we can accomplish great things by working together, and engaging more actively.I encourage everyone of us to introduce ourselves and share a little bit about themselves. It's important that we get to know ourselves so that we can better collaborate, organise events and even support one another.In addition, I'd like to suggest that we all actively participate in this group by sharing our ideas, insights, and experiences. Whether it's by asking questions, sharing resources, or engaging in discussions, we all have something valuable to contribute. By doing so, we can move this group forward and make a positive impact.Thank you all for being here, and I look forward to more active participation from every one of you!
Veeam Backup and Replication is comprehensive data protection and disaster recovery solution which is capable of creating image-level backups of virtual, physical servers, cloud machines, and restoration as well. You may encounter the following errors when installing the Veeam backup and replication tool “VEEAM service is unable to start, error 1064: An exception occurred in the service when handling the control request”. Therefore, I will be showing you the steps on how to resolve this issue very quickly. Here is a detailed link to this post.If you are here reading this troubleshooting guide "new Veeam Backup server but then Veeam won’t start", this means you must have recently installed Veeam Backup and Replication Server or must have recently upgraded it. As you can see from the images below, these are some errors I encountered while installing Veeam Backup and Replication in my test environment before deployment.The "Failed to start service / connect to Veeam" and "connection refus
In this article, I will be sharing a script that will enable you query the BitLocker recovery key from the MBAM reporting services. I have written a guide on how to query MBAM to display the report for BitLocker Recovery for a specified period of time. In this way, you will be able to save the report as a CSV file that we will later query in order to determine the number of times, a devices has been recovered via the MBAM help-desk or Self-service recovery. If you would like to set up an Microsoft BitLocker Administration and Monitoring, please see this this link.Upon downloading the BitLocker Recovery CSV file, kindly save it in your desired location. You can also configure the reporting servces to automatically save this report for you. Here is a guide on how to go about this “MBAM reports automatic E-mail notification: How to create MBAM Enterprise and Compliance, and Recovery Audit reports”. The process is similarand you just have to change the destination (delivery method).When th
Winget package manager makes it easy to install, upgrade, and uninstall applications in as you wish effortlessly in Windows 11 and some versions of Windows 10. Here is the link to the original blog post. We have already learnt about Chocolatey a lot and here is a guide on it. It will interest you to know now that the Windows Package Manager “Winget” command-line tool is now bundled by default with Windows 11 and modern versions of Windows 10 by default as the App Installer. If you are running an earlier version of Windows and the App Installer is not installed, you can get App Installer from the Microsoft Store. I have written on how to get Winget in the past. Here are two links should in case you wish to see how it was done in the past. Link1 and link2. As you can see in the image below, the current preview of the Winget tool supports the following commands. The Winget list commandThe winget list command will display more than just apps installed with the winget. You can also use the
Bitwarden has responded to renewed criticism of the encryption scheme it uses to protect users’ secret encryption keys by enhancing the mechanism’s default security configuration.This issue centers on the number of PBKDF2 hash iterations used to compute the decryption key for a user’s password vault. Note: OAWSP recommends using the PBKDF2 algorithm with random salts, SHA-256, and 600,000 iterations (a figure recently increased from the previous recommendation of 310,00 rounds). Bitwarden said that its data is protected with 200,001 iterations. That is 100,001 iterations on the client side and a further 100,000 on the server side. Security researcher Wladimir Palant has warned that, while this might sound impressive, the server-side iterations are ineffective. And, much worse, older accounts were stuck with much lower security settings (unless they manually increased iterations on their settings). Read more: https://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/
Norton LifeLock parent company Gen Digital says that hackers likely used a credential stuffing attack to compromise customers’ password managers. The breach began as early as December 1, 2022, although Gen Digital did not detect the issue until they became aware of a large volume of failed login attempts around December 12. The company has sent notifications to roughly 6,500 individuals whose accounts were compromised. For some reason, I have never used and not comfortable using Norton Password Manager. By the way, these Password managers have been breached (LastPass, Okta, and now Norton Password Manager). Which is next?! Bit^**den :-)
Veeam Backup & Replication is a data protection and disaster recovery solution for virtual, physical, and cloud environments. With Veeam Backup & Replication you can Create crash-consistent and application-consistent backups of virtual and physical machines, quickly restore physical machines, EC2 instances, VMs, VM disks, guest OS files, and application items, perform a backup health check to verify that backups are not corrupted and are ready for restoring, create VM replicas and switch to them in case of a disaster and automate transferring of backups to tapes and other external repositories. Veeam Backup and Replication Configuration Database Settings come with the Veeam.Backup.DBConfig.exe utility that allows you to manage connection settings for Veeam Backup & Replication and/or Veeam Backup Enterprise Manager configuration database. Using this utility, you can:1. Connect to a different Microsoft SQL Server instance. If you specify a database that does not exist yet, i
Remote Defender Credential Guide was introduced in Windows 10 version 1607 to be precise and helps protect your credentials over a Remote Desktop connection by redirecting Kerberos requests back to the device that's requesting the connection. It also provides single sign-on experiences for Remote Desktop sessions. You may want to learn about how to enable or disable Memory integrity in windows, reputation based protection, and how to enable or disable Windows Defender Credential Guard I wrote yesterday :-). Please refer to the original guide, I will do my best to limit internal links from my website that are vital. You will agree with me that highly privileged Administrators' credentials are very critical and must be adequately and correctly protected. Note: Neither Windows Defender Remote Credential Guard nor Restricted Admin mode will send credentials in clear text to the Remote Desktop server. How does Windows Defender Remote Credential Guard compare to Restricted Admin and Remote
VMware Tools is a set of services and modules that enable several features in VMware products for better management of guests operating systems and seamless user interactions with them. VMware Tools has the ability to pass messages from the host operating system to the guest operating system. Therefore, VMware Tools is a suite of utilities that enhances the performance of the virtual machine guest operating system and improves the management of the virtual machine. Without VMware Tools installed in your guest operating system, guest performance lacks important functionality. Installing VMware Tools improves these issues low video resolution, inadequate color depth, incorrect display of network speed, restricted movement of the mouse, inability to copy and paste and drag and drop files, missing sound, and provides the ability to take quiesced snapshots of the guest OS, and synchronises the time in the guest operating system with the time on the host Impacted ProductVMware Tools for Wind
When attempting to add a pre-created (provisioned) PC to a domain or reuse an existing computer account, the following error below is encountered.An account with the same name exists in Active Directory. Re-using the account was blocked by the security policy.Microsoft released this update on October 11, 2022, thereby introducing additional protections (hardening) for your environment. This hardening mitigates the following “CVE-2022-38042 (Active Directory Domain Services Elevation of Privilege Vulnerability)”.Legacy behaviourBefore the installation of the October 11, 2022 update, or later cumulative updates, the client computer queries Active Directory for an existing account with the same name. This query occurs during domain join and computer account provisioning. If such an account exists, the client will automatically attempt to reuse it.Note: During this time, the re-use computer account will only fail if the user does not have the appropriate permission to join the device to th
Account lockout help keep user accounts secure by preventing unauthorised users etc., from guessing the username and password. When your account is locked, you will have to wait for a specified amount of time before being able to log into your account again. Here is the link to the original blogpost. In the past, it was recommended to disable the local Administrator account due to several known vulnerabilities such as the built-in administrator account cannot be locked out no matter how many failed logins it accrues, making it a prime target for brute-force attacks that attempt to guess passwords. This is no longer true as beginning October 11, 2022, or later Windows cumulative updates, a local policy will be available to enable local administrator account lockouts. Brute force attacks are one of the prevalent ways Windows devices are attacked today. Previously, Windows devices did not allow local administrators to be locked out. This leads to scenarios where, without the proper netwo
Hey guys, here are some cool gears for grabs! This is the right time to learn about VMware Aria Hub.This offer is only available during the VMware Explore Europe 2022 period which is from the November 7th through November 11th, 2022. Go to the Hands-on-Labs area and request HOL-2301-08-ISM “VMware Aria Hub – A look at what’s next in Multi-Cloud Management”.At the completion of the lab, you will be able to order Cloud Management gear as a gesture of our appreciation to be shipped to you*.Hey guys, let’s run with this….
The following disclosure vulnerability (CVE-2022-22948) was reported to VMware by Yuval Lazar (@Ul7raVi0l3t) of Pentera. To remediate this vulnerability, apply the patch in the response matrix below as it applies to you. The vCenter Server contains an information disclosure vulnerability due to improper permission of files. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.5.Below are the affected productsVMware vCenter Server (vCenter Server) VMware Cloud Foundation (Cloud Foundation)An information disclosure vulnerability in VMware vCenter Server was privately reported to VMware. Updates are available to remediate this vulnerability in affected VMware products.Known Attack VectorsA malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.ResolutionTo remediate CVE-2022-22948 apply the patches listed in the 'Fixed Version' column of the 'R
VMware Aria Operations (formerly VMware vRealize Operations) automates and simplifies IT management with full-stack visibility from physical, virtual and cloud infrastructure including Virtual Machines (VMs) and containers to the applications they support. It delivers continuous performance optimisation, efficient capacity and cost management, proactive planning, intelligent remediation and integrated compliance. It is available on premises and as-a-service. More information on this product here, and link to my blogpost. An arbitrary file read vulnerability in VMware Aria Operations was privately reported by Yu Dai of NSFOCUS TIANJI Lab to VMware. There are updates (patches) to remediate these vulnerabilities in the affected VMware products. What Exploit does this Vulnerability Present? A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data. Remediation To remediate CVE-2022-31682, apply the patches listed in the ‘Fixed Version’
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
