Independent

ComputerWorldIndependent

How to make sure Windows gets the right patches coming to it

Credit to Author: Gregg Keizer| Date: Tue, 16 Jan 2018 03:12:00 -0800

The Windows emergency security updates issued by Microsoft earlier this month came with an unprecedented prerequisite – a new key stored in the operating system’s registry – that antivirus vendors were told to generate after they’d guaranteed their code wouldn’t trigger dreaded Blue Screens of Death (BSoD) when users apply the patches.

The demands confused customers, and fueled a flood of support documents and an avalanche of web content. Those who heard about the Meltdown and Spectre vulnerabilities struggled to figure out whether their PCs were protected, and if not, why not. Millions more, not having gotten wind of the potential threat, carried on without realizing that their PCs might be barred from receiving several months’ worth of security updates.

To read this article in full, please click here

Read More
IndependentSecuriteam

SSD Advisory – GitStack Unauthenticated Remote Code Execution

Credit to Author: SSD / Maor Schwartz| Date: Mon, 15 Jan 2018 12:22:25 +0000

Vulnerability Summary The following advisory describes an unauthenticated action that allows a remote attacker to add a user to GitStack and then used to trigger an unauthenticated remote code execution. GitStack is “a software that lets you setup your own private Git server for Windows. This means that you create a leading edge versioning system … Continue reading SSD Advisory – GitStack Unauthenticated Remote Code Execution

Read More
ComputerWorldIndependent

Intel says new firmware patches trigger reboots in Haswell and Broadwell systems

Credit to Author: Woody Leonhard| Date: Fri, 12 Jan 2018 05:18:00 -0800

The headlong race to cover the Meltdown/Spectre debacle has claimed another victim. In a surprising move, Intel has raised a red flag about some of its firmware patches. What should you do? Wait.

Yesterday, Intel executive VP Navin Shenoy posted on the company blog:

We have received reports from a few customers of higher system reboots after applying firmware updates. Specifically, these systems are running Intel Broadwell and Haswell CPUs for both client and data center. We are working quickly with these customers to understand, diagnose and address this reboot issue. If this requires a revised firmware update from Intel, we will distribute that update through the normal channels.

To read this article in full, please click here

Read More
ComputerWorldIndependent

CES 2018: The top 9 new products for the enterprise

Credit to Author: Peter Sayer| Date: Fri, 12 Jan 2018 08:24:00 -0800

Alexa on Windows 10 PCs at CES 2018
hp alexa

Image by HP

At CES 2018 everyone was talking about – or talking to – Amazon.com’s Alexa digital assistant. It’s omnipresent – around the home and in phones, cars and, increasingly, offices. You’ll probably even find it in your next Windows 10 PC. It’s already in the new HP Pavilion Wave small form-factor PC (pictured); the Aspire, Spin, Switch and Swift notebooks from Acer; the 2018 ZenBook and VivoBook from Asus, and the Thinkpad X1 Carbon and Yoga devices from Lenovo.

To read this article in full, please click here

Read More
IndependentSecuriteam

SSD Advisory – Seagate Personal Cloud Multiple Vulnerabilities

Credit to Author: SSD / Maor Schwartz| Date: Thu, 11 Jan 2018 13:45:21 +0000

Vulnerabilities summary The following advisory describes two (2) unauthenticated command injection vulnerabilities. Seagate Personal Cloud Home Media Storage is “the easiest way to store, organize, stream and share all your music, movies, photos, and important documents.” Credit An independent security researcher, Yorick Koster, has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor … Continue reading SSD Advisory – Seagate Personal Cloud Multiple Vulnerabilities

Read More