Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
OpenSSL Says Breach Did Not Involve Corrupted Hypervisor
Newest First  |  Oldest First  |  Threaded View
Stratustician
50%
50%
Stratustician,
User Rank: Moderator
1/7/2014 | 2:37:33 PM
Locking down the hypervisor
I sadly think we are going to see lots of these types of incidents as ports are left open in virtual environments, as well as faulty SSL policies.  The real threat to the hypervisor will probably come from an unsecured VM being accessed and somehow the hypervisor is accessed, or through the management console.  In a private environment it's a scary thought, but in a public environment where multiple companies share the same hypervisor, it's the stuff that would keep security folks up at night.
asksqn
50%
50%
asksqn,
User Rank: Ninja
1/4/2014 | 6:24:06 PM
The Turkish hack was a just a dry run-
Next time, however, it is doubtful the next crop of hackers will be so warm/fuzzy.  Regardless, this is a breach that should underscore security is dynamic.  It is simply no longer enough to rest on the laurels of hard to hack 'nux distros and proclaim impregnability.
cbabcock
50%
50%
cbabcock,
User Rank: Apprentice
1/3/2014 | 7:13:51 PM
First it was, then it wasn't
I like the speedy resolution of this issue. There's bound to be some questions at a site as sensitive as OpenSSL when an incident occurs, and the site administrators were on the right track when they pointed toward the hosting service server, VMware had the courage of its convictions to say no, it was not the hypervisor, when OpenSSL first pointed in that direction, and indeed, it was password management on the hosting site. Multiple parties looking at the problem came up with the right answers quickly and pretty transparently. Salud.


How to Better Secure Your Microsoft 365 Environment
Kelly Sheridan, Staff Editor, Dark Reading,  1/25/2021
Attackers Leave Stolen Credentials Searchable on Google
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-3318
PUBLISHED: 2021-01-27
attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.
CVE-2020-5427
PUBLISHED: 2021-01-27
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.
CVE-2020-5428
PUBLISHED: 2021-01-27
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.
CVE-2021-20357
PUBLISHED: 2021-01-27
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.
CVE-2020-4865
PUBLISHED: 2021-01-27
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741.