VeeamON 2024 - Use Code "COMMUNITY10" for 10% Off!
Again, we have a cool opportunity to win some cool gadMicrosoft Ignite is an annual conference for developers and IT professionals hosted by Microsoft.gets. Register with Veeam for a chance to win a Canon Camera or other great prizes, and a Free T-Shirt. Enter To Win Great Prizes with the following registration link: https://bit.ly/veeamplusmicrosoft After registering, do not forget to share on Social Media to gain extra entries, make sure to use the following hashtag #VeeamatMicrosoftIgnite2022. This piece was shared on the following link1 and link2.For some of us that are not so familiar with this event, Microsoft Ignite is an annual conference for developers and IT professionals hosted by Microsoft. You can register via the the following link: https://register.ignite.microsoft.com/.By registering any participating in the event, you will be able to explore the latest innovations, learn from product experts and partners, level up your skillset, and create connections from around the
The Cisco Champion program is now accepting applications. Cisco Champions are passionate about technology. They enjoy sharing their knowledge and thoughts with the technical community.Members gain early insights into Cisco products and solutions; provide candid feedback through message testing, beta testing and EFTs; and receive exclusive access to a diverse peer network. Applications are open for a limited time. Use the following hyperlink to Apply by Friday, March 4.
Having read and analyzed this myself, employees make these mistakes day in and day out. User Awareness Training is never enough!!! In cyber security, there are two types of companies, those that have been hacked and those that are yet to be hacked :-) Recently, Microsoft was in the news, and now Cisco. You may want to read about the attack: https://www.bleepingcomputer.com/news/security/cisco-hacked-by-yanluowang-ransomware-gang-28gb-allegedly-stolen/Some security experts have simplified and explained the breach! Kindly employ ways to increase and improve your security defenses, else you will pay the real-life costs of getting breached. Today, I was just discussing and shedding light on this guide below and I highlighted that despite the attacks perpetrated on 2FA, it Is still highly recommended to employ it (still far better than the alternative of simply relying on a username and a strong password), and also never underestimate user awareness training whenever possible…
For some of you that would like to manage K8, but not very confident working from the command line may want to see how Portainer works. What is Portainer? Portainer is a self-service container service delivery platform. It is the definitive container management GUI for Kubernetes, Docker and Swarm.Here is a link on how to install on Linux and create a container: https://techdirectarchive.com/2022/07/24/how-to-install-docker-portainer-on-linux/
VMware vCenter Server is advanced server management software that provides a centralised platform for controlling your VMware vSphere environments, allowing you to automate and deliver a virtual infrastructure across the hybrid cloud with confidence.This privilege escalation vulnerability in VMware Center Server was reported to VMware by Yaron Zinar and Sagi Sheinfeld of Crowdstrike for reporting.Present IssueThe vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.1. Impacted ProductsThe following products are impacted. Workarounds are available to remediate this vulnerability in the affected VMware products.VMware vCenter Server (vCenter Server) VMware Cloud Foundation (Cloud Foundation).Known Attack VectorsA malicious actor with non-administrative access to vCenter Server may expl
VMware ESXi contains Return-Stack-Buffer-Underflow (CVE-2022-29901, CVE-2022-28693) and Branch Type Confusion (CVE-2022-23816, CVE-2022-23825) vulnerabilities due to the Intel and AMD processors it utilizes.There is a resolution to this issue, and as such there is no workaround discussed in this guide. VMware has evaluated the severity of these issues to be in the Moderate severity range with a maximum CVSSv3 base score of 5.6. VMware ESXi enables you to:Consolidate hardware for higher capacity utilization. Increase performance for a competitive edge. Streamline IT administration through centralized management. Reduce CapEx and OpEx. Minimize hardware resources needed to run the hypervisor, meaning greater efficiency.Multiple side-channel vulnerabilities in Intel (CVE-2022-29901, CVE-2022-28693) and AMD (CVE-2022-23816, CVE-2022-23825) CPUs have been disclosed. Patches are available to mitigate these vulnerabilities in affected VMware products. Below are the impacted products.VMware ES
As already shared by @dips, Microsoft has issued a statement on a zero-day remote code execution flaw tagged CVE-2022-30190 concerning the Microsoft Support Diagnostic Tool (MSDT) in Windows vulnerability. Microsoft Security Response Center team has detailed this security flaw and its impact on certain versions of Windows and Windows Server.These steps has been detailed on my blog via the following link. You do not need to visit it as all the steps are highlighted here as well. You will find interesting discussions on this topic in the link below. What is MSDT? Microsoft Support Diagnostic Tool (MSDT) is a service in Windows 11/10/8 and 7 and also on Windows Server. The tool allows Microsoft support representatives to analyze diagnostic data and find a resolution to issues.A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with
VMware Tools is a set of services and modules that enable several features in VMware products for better management of guests operating systems and seamless user interactions with them. Without VMware Tools installed in your guest operating system, the guest OS will lose some performance functionalities.Impacted Product: VMware Tools for WindowsVmware has released some updates to remediate this vulnerability. The VMware tool can be directly downloaded from the VMware Customer Connect page. Do ensure to select your desired version. It can also be downloaded directly from the VMware Workstation etc.Issue descriptionVMware Tools for Windows contains an XML External Entity (XXE) vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.8.How can this vulnerability be exploited?A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit th
Who else took the LabWarz challenge? Here is my score :-)What did you score?Outside the score, I found he challenge very informative. A quick way to learn!
Git has released a new verson to address some security vulnerabilities, As reported, we are aware that GitHub is affected. But there is a need to upgrade your local installation of Git, especifially when you are using Git on Windows or on multi-user machines. All credit goes to to 俞晨东, and the fix was authored by Johannes Schindelin. CVE-2022-24765As stated in this article, this vulnerability affects multi-user machines, Git users might find themselves unexpectedly in a Git worktree, e.g. when another user created a repository in C:\.git, in a mounted network drive or in a scratch space. Merely having a Git-aware prompt that runs git status (or git diff) and navigate to a directory that is supposedly not a Git worktree, or open such a directory in an editor or IDE such as VS Code or Atom, which will potentially run commands defined by that other user. Vulnerability ImpactSince part of Git for Windows’ uninstaller is copied into the current user’s temporary directory and run in that pla
Microsoft says that Windows 11 will get more security improvements in upcoming releases, which will add more protection against cybersecurity threats, offer better encryption, and block malicious apps and drivers. Perhaps you want to learn how you can protect your device against theft as a consult due to frequent travels etc: Kindly take a look at link1 and link2. I have a torn of guides on this topic. Kindly ensure to search the archive!It was also noted in the report that significant security updates which adds even more protection from the chip to the cloud by combining modern hardware and software will be added. Below are some of the key features.Enhanced phishing protection against targeted phishing attacks with the help of Microsoft Defender SmartScreen, a cloud-based anti-phishing and anti-malware service. With SmartScreen integrated into the OS, Windows users will be warned when entering their credentials into malicious applications or hacked websites. This has been proven to w
There are two critical CVEs that affect Veeam Backup & Replication and account for two of the three critical Veeam Backup & Replication CVEs, and the most serious of the products affected. The Critical Veeam Backup & Replication vulnerability notes include: CVE-2022-26500 | CVE-2022-26501CVE-2022-26500, CVE–2022-26501: These two CVEs relate to Veeam Backup & Replication allow executing malicious code remotely without authentication. This may lead to gaining control over the target system. This carries a CVSS rating of 9.8 and is classified as Critical.Cause? – The vulnerability is caused by the Veeam Distribution Service, running on TCP 9380 by default, allows unauthenticated users to access internal Veeam API functions. An attacker may send input to the Veeam API which may allow uploading and executing malicious code.It is worth nothing that patches are available for Veeam 11a and 10a as follow11a – Build 11.0.1.1261 P20220302: https://www.veeam.com/kb4245?ad=in-text-l
Vulnerability (CVE-2022-26503) in Veeam Agent for Microsoft Windows allows local privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code with LOCAL SYSTEM privileges.https://www.veeam.com/kb4289
Hello Legends/Vanguards in the building,I would like to write about this course (VMCA) on my blog and also share the write up here word to word. If any of you is interested in saying a word (contributing) to the reviewing the Veeam Backup & Replication: Architecture and Design (VMCA) course, please pleat me know. You can share your thoughts in the comment session or send me a message privately. I will collate all information and post it online. I will do a lot of social media promotion on it as well. An opportunity to affect and influence the product, let’s seize it guys!Kindly spare some minutes of your time as this will greatly influence the outcome for many future VMCAs. After reading @MicoolPaul post today “Veeam Legend Experience - Year One Review” I have gotten more points to write on :-) Hello @haslund , can I also reference your videos thread? I can see some of us already contributed in the comment session via this post from @regnor!I will be looking forward to some lines
For some reason and to come to speed with all the Veeam components, I decided to revive my Veeam Lab and during the process, I encountered the following error “Error 1064 - An exception occurred in the service when handling the control request : No connection can be made because the active machine rejected it “. Before I proceed to fix this issue, I would love to discuss the capabilities of Veeam for anyone that may stumble on this article. Veeam Backup & Replication is comprehensive data protection and disaster recovery solution that provides a centralized console for administering backup, restore, replication operations in all supported platforms (virtual, physical, cloud). Regardless of what your needs are ranging from flexible hybrid cloud capabilities from AWS, Azure, and Google Cloud, or the most robust ransomware protection and recovery options. Veeam brings hardened immutable storage options, dependable cloud-native backup options, Continuous Data Protection, and much more
Impacted Products: VMware NSX Edge A CLI shell injection vulnerability affecting VMware NSX Edge was privately reported to VMware.- Updates are available to address this vulnerability in affected VMware products.- VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.8. Known Attack VectorsA malicious actor with SSH access to an NSX-Edge appliance can execute arbitrary commands on the operating system as root.ResolutionTo remediate CVE-2022-22945 apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' below.Workarounds: NoneResponse MatrixProduct Version Running On CVE Identifier CVSSv3 Severity Fixed Version Workarounds Additional Documentation VMware NSX Edge Any Any CVE-2022-22945 8.8 Important 6.4.13 None None Downloads and Documentation:- https://customerconnect.vmware.com/en/downloads/details?downloa
Some potential security vulnerabilities have been reported on the 8th of this month on the impact / vulnerabilities in the BIOS firmware for some Intel® Processors which may allow escalation of privilege, denial of service or information disclosure. Intel ID: INTEL-SA-00527 Advisory Category: Firmware Impact of vulnerability: Escalation of Privilege, Denial of Service, Information Disclosure Severity rating: HIGH Original release: 02/08/2022 Last revised: 02/08/2022 All affected products are listed on the intel website and the recommendations as well as I quote below.Intel recommends that users of listed Intel® Processors update to the latest versions provided by the system manufacturer that addresses these issues. You may want to read more about the Intel vulnerabilities in the following URL below- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html
Issue Date:2022-01-04Updated On:2022-01-27VMSA-2022-0001 - VMware Workstation, Fusion and ESXi updates address a heap-overflow vulnerability (CVE-2021-22045)- Please see the updated advisory here: https://www.vmware.com/security/advisories/VMSA-2022-0001.html Below is a related post.https://community.veeam.com/topic/show?tid=1966&fid=81
VMSA-2021-0028 - VMware Response to Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228) - Please see the updated advisory here: https://www.vmware.com/security/advisories/VMSA-2021-0028.html
For those of use that have won the “Nike Air Force 1 shoes”. Kindly endeavour to share on your Twitter and Facebook, and Reddit (sub-reddit) platforms. https://www.reddit.com/r/TDArchive/comments/sdb0id/my_nike_air_force_1_shoes/ (Unfortunately, Reddit yanked my old community off.. Here is a new one and I have no time yet to grow it). https://www.facebook.com/TechDarchive/photos/a.135315758105436/487508049552870/ https://www.instagram.com/p/CZM4fhaI_mN/There is a flyer in the pack to this effect! You can find some of the other winners in the link below.
Veeam Backup for Microsoft Azure is purpose-built for simplicity, scale, savings, and security for your Azure environment. Veeam Backup for Microsoft Azure is available as a virtual machine (VM) offer exclusively through the Azure Marketplace in both Free and BYOL editions.Here are some guides that may interest you: How to set up Veeam ONE 11 Server, What’s new in Veeam Backup and replication v11?, how to install and configure Veeam Backup and Replication 11 Community Edition with its default SQL Server Express Edition, how to migrate Veeam MsSQL Database to a new MsSQL Server, and how to install Veeam Backup and Replication 11 Community Edition with a dedicated SQL Server.Due to the Shared Responsibility Model by Cloud providers, it is evident that it is still your data and that you retain the responsibility to secure and protect it. You may want to take a look at Veeam Backup & Replication which can also enable you to centrally manage Azure backup with another cloud, virtual, phy
I am more than excited to announce today that I was selected from the raffle as a winner of this amazing prize. Basically I love kicks and this will be my regular henceforth.My enthusiasm go make me to use this shoe almost every day eeehn (Naija pidgin) . Special thanks to @Kseniya and @Rick Vanover for this special opportunity as a Veeam Legend. I am grateful once again.This bring me to the question @Rick Vanover, how can Veeam maximise my sites? I love to even showcase Veeam more and more on my site. I get thousand of visitors and viewers around the world each day, and I want Veeam to leverage on this.
Since majority of us use Windows for our day to day operations, in this guide, you will learn about Windows update expiration policy.By expiring older, redundant packages, you will get better performance, shorter scan times, a faster user experience, and a reduced risk of deploying older updates that have been superseded with newer, more secure ones.Note: This policy only applies to Windows updates. Updates for other Microsoft software or firmware may have different policies and should be considered separately.An expired package will not appear in Windows Update scan results thereby reducing internet data usage.Kindly visit this link to learn more.
Recently, I have noticed on this platform that most of us work with Windows Server 2016, 2019, and now 2022. Also even Windows 10. In this guide, I will be showing you how to update the Windows installation image (install.wim) file with the latest security intelligence package available. I have successfully tested this on Windows 10 Enterprise, Pro und Home-Edition and Windows Server 2016 and 2019. Here is a detailed guide on "how to install ADK, MDT, and WDS: How to deploy Windows images via Microsoft Deployment Toolkit and Windows Deployment Services".How do you provision your new servers? Regardless of how this is done, you may also find this guide useful.Microsoft Defender Antivirus, formerly known as Windows Defender, is an antivirus protection program that’s included with Windows 10. Unlike other antivirus programs like McAfee, Microsoft Defender is free and doesn’t require any additional installation. After the installation of Windows 10, the built-in version of Microsoft Defend
Veeam ONE is a comprehensive solution developed by Veeam Software and it enables real-time monitoring, business documentation, and management reporting for Veeam Backup & Replication, VMware vSphere, VMware vCloud Director, and Microsoft Hyper-V. Veeam ONE is designed to give IT administrators peace of mind to manage every aspect of the modern virtual environment.Do not turn your eyes away from unknown issues lurking in your environment. Mitigate potential issues even before they occur (threats) with 340+ preset alarms and 150+ prebuilt reports available in Veeam One.Veeam ONE brings deep visibility that helps you prevent common backup problems, stay informed about your storage trends and cut costs through better storage usage and planning, thanks to new insights for NAS data.In the typical deployment scenario, all Veeam ONE components are installed on a single machine, and this comprises of the Veeam ONE Client and Veeam ONE Web Client.– Veeam ONE Client is the primary tool used f
Already have an account? Login
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
