# data[].attributes.headline
Salesforce API error left data accessible (Group4)

# data[].attributes.subject
Salesforce API error left data accessible (Group4)

# data[].attributes.body
This article is about An error involving in a Salesforce marketing cloud API could have allowed third parties to access data or for data to be corrupted.
“During a Marketing Cloud release that was rolled out between June 4, 2018 and July 7, a code change was introduced that may have caused a small subset of REST API calls to improperly retrieve or write data from one customer’s account to another,” the company said in an advisory.
https://www.scmagazine.com/home/security-news/cloud-security/salesforce-api-error-left-data-accessible/

# data[].attributes.body
Flaws in Bluetooth Low Energy microcontrollers from Texas Instruments can allow hackers to gain control of an access point, or overwrite the OS of the access point completely. Using this vulnerability, attackers can gain access to the network with no indication or warning. This method can be used to break network segmentation, which is a primary network security method of keeping unsecured devices from the rest of the network. These microcontrollers are used in a variety of industries such as healthcare, industrial, automotive, retail, and more.
These low-energy microrontrollers allow a user to connect any device to their smartphone or tablet, so if an "airborn" attack happens to the access point it can be a crucial risk.  In order to overcome this risk, there area few things that could be implemented.  With the uses of a stateful packet inspection and specified proxy servers set to only new registered users and the three servers TI uses, bound together with a DMZ system to protect hackers from having access to reverse-engineer or sniff updates, significant amounts of hacking can be prevented.  Port scanners can be embedded to verify the user is on their usual devices, and alerts can be sent out requiring authentication if a system is not recognized.
Bleedingbit vulnerabilities endanger enterprises by using vulnerable access points in their networks. Besides access points the health sector is potentially affected by these vulnerabilities as the affected chips are used in many medical devices. Even private users might be affected by the vulnerabilities.Customers using these device should determine whether their devices are affected based on how it is being used and whether software updates are possible.

# data[].attributes.attachment_link.readable_text
Multiple Bluetooth Low-Energy microcontrollers from Texas Instruments (TI) were discovered to have one of two critical remote code execution vulnerabilities that can be exploited to compromise Wi-Fi access points from Cisco Systems, Cisco Meraki and Aruba Networks. But the two bugs could have even greater implications, as the scope of the threat likely extends beyond these network infrastructure devices.

Collectively referred to as Bleedingbit, the pair of flaws were discovered by researchers at Armis, who disclosed details of its findings on Nov .1, in conjunction with the CERT/CC at Carnegie Mellon University, which released its own security advisory. Around this same time, the various affected vendors began issuing updates designed to patch the issue. Texas Instruments had already separately addressed one of the two bugs in a previous BLE-STACK update earlier this year.

Because the flaws involve the over-the-air Bluetooth Low Energy protocol, they both can be exploited remotely via an "airborne attack" if the attacker is within proximity of the target device.

The first of the two bugs, CVE-2018-16986, is found in four chip models embedded in seven Cisco and five Meraki access points, and is the result of a memory corruption vulnerability stemming from the mishandling of malformed BLE advertising packets. Exploiting this error could allow nearby attackers to remotely hijack the access point from the proper user, using a specially crafted packet. Taking over this access point could then allow the actor to impact other devices as well.

The second vulnerability, CVE-2018-7080, affects multiple Aruba access points including its full 300 series - manifesting itself whenever the device uses the TI chip's Over the Air firmware Download feature to receive firmware updates.

Normally, Aruba devices require the user to enter a hardcoded password to permit an update. "However, an attacker who acquired the password by sniffing a legitimate update or by reverse-engineering Aruba's BLE firmware can connect to the BLE chip on a vulnerable access point and upload a malicious firmware containing the attacker's own code, effectively allowing a completely rewrite its operating system, thereby gaining full control over it," warns Armis in a technical write-up.

"Bleedingbit is a wake-up call to enterprise security for two reasons," said Armis CEO Yevgeny Dibrov, in a press release. "First, the fact that an attacker can enter the network without any indication or warning raises serious security concerns. Second, these vulnerabilities can break network segmentation - the primary security strategy that most enterprises use to protect themselves from unknown or dangerous unmanaged and IoT devices. And here, the access point is the unmanaged device."

Armis is warning that devices other than access points may also be affected. "In this instance, we have clearly identified how Bleedingbit impacts network devices," said Armis VP of Research Ben Seri in the release. "But... these chips are used in many other types of devices and equipment. They are used in a variety of industries such as healthcare, industrial, automotive, retail, and more. As we add more connected devices taking advantage of new protocols like BLE, we see the risk landscape grow with it."

# data[].attributes.attachment_link.title
Critical 'Bleedingbit' flaws found in microcontrollers used by Wi-Fi access points | SC Media

# data[].attributes.attachment_link.description
Bluetooth Low-Energy microcontrollers from Texas Instruments were found to have one of two critical RCE vulnerabilities, collectively called Bleedingbit.

# data[].attributes.headline
Vulnerability discovered in WPA (Marleni Chiappini)

# data[].attributes.subject
Vulnerability discovered in WPA (Marleni Chiappini)

# data[].attributes.body
German researches had discovered (2008) that WiFi protected access encryption can be somewhat cracked.
"The vulnerability exists in the Temporal Key Integrity Protocol (TKIP), a security protocol that replaced the Wired Equivalent Privacy (WEP) standard and was renamed WPA by the Wi-Fi Alliance trade group. It’s main improvement was that it generated new packet encryption keys at frequent intervals” https://www.scmagazine.com/home/security-news/vulnerability-discovered-in-wpa-encryption/

# data[].attributes.body
We went with a more topical article considering today is election day. Our neighbors to the North, Georgia, have been calling into question the security of their voting systems including the network that transports and centrally tabulates the voting data. The Secretary of State, Brian Kemp who also just so happens to be running for governor, assures the voters that no part of the network has or can be compromised. However, there have been very recent examples of lapses in the security of the network that has lead to extraction of voter PII and even deletion of voting tabulation data in a contested election. The security of the network of voting machines controls the destiny of our democracy. Or we could just switch to, you know, paper ballots like Florida...

https://www.scmagazine.com/home/security-news/state-of-security-georgia/

# data[].attributes.body
This webcast looks at the challenges of scaling a network correctly and making sure that security is baked in, not stapled on. and a change a pace from the everyday "read this article". Very interactive and engaging from our experience.

# data[].attributes.attachment_link.readable_text
Building a scalable network today in some ways is easier than in the past, but in others it's far more complex. Moving applications and storage to the cloud is simple, but can be challenging when it comes to compliance and data security. Ad hoc cloud use conducted without IT oversight could violate various laws and regulations, but if no one tells IT and risk, it could go undiscovered until it's breached. Today's 20/20 webcast looks at the challenges of scaling a network correctly and making sure that security is baked in, not stapled on.

# data[].attributes.attachment_link.description
This interactive 20/20 webcast looks at the challenges of scaling a network correctly and making sure that security is baked in, not stapled on.

# data[].attributes.body
https://www.scmagazine.com/home/security-news/critical-bleedingbit-flaws-found-in-microcontrollers-used-by-wi-fi-access-points/

One of the most basic things an individual or an organization can do to protect themselves is ensuring that the devices protecting their network are up to date. Many exploits, like the one mentioned in this article, are almost immediately addressed by device manufacturers with patches available shortly after the such exploits are found. What amounts to minor preventative maintenance can save you from having major problems in the future.

# data[].attributes.body
Employees can sometimes be the cause of attacks against a company’s security network even if it isn’t on purpose like the case with the USGS employee. Situations like this can occur frequently if companies don’t implement contingencies for employees who misuse company property. Using a variant firewall such as a proxy server would allow companies to filter traffic for attacks or undesirable content such as malware or traffic to Web sites hosting adult content and log which employees were mishandling company property. A basic firewall would also suffice preventing employees from visiting websites such as adult and other unproductive sites.

# data[].attributes.attachment_link.readable_text
An employee at the U.S. Geological Survey (USGS) infected his agency's network with Russian malware delivered via adult websites.

The Office of Inspector General initiated an investigation into suspicious internet traffic at the agency's Earth Resources Observation and Science (EROS) Center satellite imaging facility in Sioux Falls, SD when they found an employee visited some 9,000 pornographic webpages on the agency's network, Matthew T. Elliott Assistant Inspector General for Investigations said in a letter to the USGS.

Many of these sites were routed through Russian servers and the malware infected the network when the employee downloaded these images to an unauthorized USB device and personal Android cell phone he eventually connected to a government-issued computer which subsequently infected the network.

The investigation also revealed two vulnerabilities in the USGS' IT security posture which included website access and open USB ports.

"We recommend that the USGS enforce a strong blacklist policy of known rogue Uniform Resource Locators (more commonly known as a web addresses) or domains and regularly monitor employee web usage history," Elliot said. "Since this incident, the EROS Center has deployed enhanced intrusion detection systems and firewall technology to assist in the prevention and detection of rogue websites trying to communicate with Government systems."

The Inspector General's Office also recommended the agency ban the use of unauthorized USB devices on all employee computers.

# data[].attributes.attachment_link.title
Federal employee infects gov't network with Russian malware through adult video websites | SC Media

# data[].attributes.attachment_link.description
An employee at the U.S. Geological Survey (USGS) infected his agency's network with Russian malware delivered via adult websites. The Office of Inspector

# data[].attributes.headline
5 steps for ensuring storage network security (group 8)

# data[].attributes.subject
5 steps for ensuring storage network security (group 8)

# data[].attributes.body
Many other security attributes are covered by specifications such as FC-SW, FC-GS, FC-SB and other standards either approved or in development. Another key development for security is the Storage Networking Industry Association’s (SNIA’s) Storage Management Initiative Specification (SMI-S) standard, which includes a variety of security attributes.
https://www.scmagazine.com/home/security-news/features/5-steps-for-ensuring-storage-network-security/