Virtuwise

Virtuwise

Virtuwise Articles.

GitHub Atom Project Will be Retired

Angelo LucianiCloud

The text editor I use is Atom from GitHub but it looks like I’ll need to find a new one since.

From the GitHub blog:

When we introduced Atom in 2011, we set out to give developers a text editor that was deeply customizable but also easy to use—one that made it possible for more people to build software. While that goal of growing the software creator community remains, we’ve decided to retire Atom in order to further our commitment to bringing fast and reliable software development to the cloud via Microsoft Visual Studio Code and GitHub Codespaces.

This move makes sense to me as GitHub focuses on the the cloud with GitHub Codespaces.

Broadcom Offering to buy VMware

Angelo LucianiVirtualization

It looks like VMware might be in play once again. It’s a gem in the data centre space and I am not suprised there is interest in acquiring it.

Shares of VMware, a major developer of data center software, on Monday rose by 25% on reports that Broadcom, a major developer of microchips for data centers equipment and other devices, wanted to buy it for $50 billion or more. But investors shouldn’t bet on a deal quickly passing muster with antitrust officials, even though the two companies don’t directly compete.

The biggest challenge with any acquisition is ‘culture fit’. This will be interesting to watch so stay tuned.

Cloud Security Alert Fatigue Report

Angelo LucianiInfosecurity

Orca Security recently published their 2022 Cloud Security Alert Fatigue Report with some very surprising results. What is alert fatigue?

Alert fatigue is a major problem in the cloud security industry with security practitioners receiving hundreds of unprioritized alerts every day. Understanding which alerts need to be remediated and in what order, is an extremely important, yet tedious and time-consuming task.

It was interesting to read that 55% of respondents use three or more cloud providers and that 57% have five or more cloud security tools. These tools are likely siloed and do not talk to each other contributing to the problem.

It’s easy to see how all these products can overwhelm a team with false positives if misconfigured.

VMware Security Advisory VMSA-2022-0008 Carbon Black Software

Angelo LucianiInfosecurity

If you are running VMware Carbon Black, there are several critical security updates. They all have a CVSSv3 rating of 9.1. These updates fix the following issues (1) OS command injection vulnerability in VMware Carbon Black App Control (CVE-2022-22951) and (2) File upload vulnerability in VMware Carbon Black App Control (CVE-2022-22952).

Multiple vulnerabilities in VMware Carbon Black App Control were privately reported to VMware. Updates are available to remediate these vulnerabilities in affected VMware products.

Update your system as soon as you can.

Economic Denial of Sustainability (EDoS)

Angelo LucianiInfosecurity

You’ve likely heard of Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks, but did you know there is also another ..oS attack threat called Economic Denial of Sustainability (EDoS). This is where attackers take advantage of auto-scaling features with cloud providers and can cause your cloud bill to spike.

Attackers primarily target infrastructure as a service (IaaS) solutions. EDoS attacks use a common pattern of DDoS attack methods: exploiting cloud system vulnerabilities, such as old software versions, unsafe protocols, and publicly exposed IP addresses to install malicious software. They take over devices or cloud resources, which follow the attacker’s instructions and send fake traffic packets to a target system or service. This additional traffic causes the cloud service to scale up until it becomes economically unsustainable.

I haven’t seen many tools to defend against this attack, if you know of any let me know of Twitter or add a comment below.

2
© 2022 Virtuwise

Sliding Sidebar