Shrink the DNS attack surface with Auth-DoH Imagine you could keep your building location private by making employees invisible as they traveled from home to office. (My inspiration: Loki, the Marvel superhero.) Nobody can see the employee’s destination. There’s a hitch, though. Before opening the door, you’ll need to make sure the person is authorized to enter—not some random … [Read more...] about Future Focused: A Safer Way to Expose Private Server Names
Server
SolarWinds Hackers Also Accessed U.S. Justice Department’s Email Server
The U.S. Department of Justice on Wednesday became the latest government agency in the country to admit its internal network was compromised as part of the SolarWinds supply chain attack. "On December 24, 2020, the Department of Justice's Office of the Chief Information Officer (OCIO) learned of previously unknown malicious activity linked to the global SolarWinds incident that … [Read more...] about SolarWinds Hackers Also Accessed U.S. Justice Department’s Email Server
Valve’s Steam Server Bugs Could’ve Let Hackers Hijack Online Games
Critical flaws in a core networking library powering Valve's online gaming functionality could have allowed malicious actors to remotely crash games and even take control over affected 3rd-party game servers. "An attacker could remotely crash an opponent's game client to force a win or even perform a 'nuclear rage quit' and crash the Valve game server to end the game … [Read more...] about Valve’s Steam Server Bugs Could’ve Let Hackers Hijack Online Games
Google Researcher Reported 3 Flaws in Apache Web Server Software
If your web-server runs on Apache, you should immediately install the latest available version of the server application to prevent hackers from taking unauthorized control over it.Apache recently fixed multiple vulnerabilities in its web server software that could have potentially led to the execution of arbitrary code and, in specific scenarios, even could allow attackers to … [Read more...] about Google Researcher Reported 3 Flaws in Apache Web Server Software
Microsoft Issues Emergency Security Updates for Windows 8.1 and Server 2012 R2
Microsoft has issued an emergency out-of-band software update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 systems to patch two new recently disclosed security vulnerabilities.Tracked as CVE-2020-1530 and CVE-2020-1537, both flaws reside in the Remote Access Service (RAS) in a way it manages memory and file operations and could let remote attackers gain elevated … [Read more...] about Microsoft Issues Emergency Security Updates for Windows 8.1 and Server 2012 R2
Critical Jenkins Server Vulnerability Could Leak Sensitive Information
Jenkins—a popular open-source automation server software—published an advisory on Monday concerning a critical vulnerability in the Jetty web server that could result in memory corruption and cause confidential information to be disclosed.Tracked as CVE-2019-17638, the flaw has a CVSS rating of 9.4 and impacts Eclipse Jetty versions 9.4.27.v20200227 to 9.4.29.v20200521—a … [Read more...] about Critical Jenkins Server Vulnerability Could Leak Sensitive Information
Unsecured Adobe Server Exposes Data for 7.5 Million Creative Cloud Users
The U.S. multinational computer software company Adobe has suffered a serious security breach earlier this month that exposed user records' database belonging to the company's popular Creative Cloud service.With an estimated 15 million subscribers, Adobe Creative Cloud or Adobe CC is a subscription service that gives users access to the company's full suite of popular creative … [Read more...] about Unsecured Adobe Server Exposes Data for 7.5 Million Creative Cloud Users
Apple Releases VPN Update for OS X Mavericks Server
OS X Server is the next generation of Apple’s award winning server software. Designed for OS X and iOS devices, OS X Server makes it easy to share files, schedule meetings, synchronise contacts, develop software, host your own website, publish wikis, configure Mac, iPhone and iPad devices, remotely access your network, and more. … [Read more...] about Apple Releases VPN Update for OS X Mavericks Server
Apple Releases OS X Mavericks Server Gold Master to Developers
Apple has released OS X Mavericks Server Gold Master (GM) to developers ahead of its October 22 event where it is expected to officially announce the release of Mavericks. The consumer version of OS 10.9 Mavericks was pushed out a few weeks ago and will most likely be the final version released to consumers, while today's GM seed is the Server edition of OS X. … [Read more...] about Apple Releases OS X Mavericks Server Gold Master to Developers