Archive for category: Uncategorized

You are here: / Uncategorized

Hello world!

Welcome to WordPress. This is your first post. Edit or delete it, then start writing!

Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00241)

Vulnerability: Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00241)

Severity: High

Location: 623/TCP & 16992/TCP

Summary: Multiple potential security vulnerabilities in Intel Active Management Technology (Intel AMT) may allow escalation of privilege, information disclosure, and/or denial of service.
Vulnerability Detection Result

Installed version: 11.8.55.3510
Fixed version: 11.8.70
Installation
path / port:      /

Solution type: VendorFix  – Upgrade to version 11.8.70, 11.11.70, 11.22.70, 12.0.45 or later.

Affected Software/OS: Intel Active Management Technology 11.0 to 11.8.65, 11.10 to 11.11.65, 11.20 to 11.22.65 and 12.0 to 12.0.35.

Vulnerability Insight:

Intel Active Management Technology is prone to multiple vulnerabilities:

– Cross site scripting may allow a privileged user to potentially enable escalation of privilege via network access (CVE-2019-11132)

– Insufficient input validation may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access (CVE-2019-11088)

– Logic issue may allow an unauthenticated user to potentially enable escalation of privilege via network access (CVE-2019-11131)

– Insufficient input validation may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access (CVE-2019-0131)

– Insufficient input validation may allow an unauthenticated user to potentially enable information disclosure via network access (CVE-2019-0166)

– Insufficient input validation may allow an unauthenticated user to potentially enable information disclosure via physical access (CVE-2019-11100)

Vulnerability Detection Method:

Checks if a vulnerable version is present on the target host.

Details: Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00241) (OID: 1.3.6.1.4.1.25623.1.0.143286)

Version used: 2020-01-07T08:25:23+0000

References

CVE: CVE-2019-11132, CVE-2019-11088, CVE-2019-11131, CVE-2019-0131, CVE-2019-0166, CVE-2019-11100
CERT: CB-K19/0978, DFN-CERT-2019-2375
Other: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00241.html

SummerCon 2018

Summercon is one of the oldest hacker conventions, and the longest running such conference in America. It helped set a precedent for more modern “cons” such as H.O.P.E. and DEF CON, although it has remained smaller and more personal. SummerCon has been hosted in cities such as Pittsburgh, St. Louis, Atlanta, New York, Washington, D.C., Austin, Las Vegas, and Amsterdam.

[maxgallery id=”9655″]

 

Baltimore becomes the third U.S. city in a week to be hacked

An article by Julius White at WEAA.org:

Ransomware. Privacy. User Data. Facebook. Hacked. Those words and phrases have been all over the news in the past couple of weeks. Just last week, the City of Atlanta’s computer network was hacked and those responsible demanded $58,000 in ransomware to allow the city to regain its systems. Computer repair expert William Allen, talks with WEAA’s Julius White about how not only to protect your computers, but your privacy on social media as well.

The City of Leeds, Alabama, a small community just outside of Birmingham, was hacked and the hackers demanded and were paid $12,000. In Baltimore, city officials say the 911 dispatch system was hacked over the weekend, prompting a temporary shutdown of automated dispatching.

In a statement released Wednesday, Frank Johnson, Baltimore Chief Information Officer, issued a statement about the weekend hack that prompted a temporary shutdown of the automated 911 dispatch system. “ [We] identified a limited breach of the Computer Aided Dispatch (CAD) Network over the weekend that supports the 911 and 311 Public Safety Emergency Communications Services due to “ransomware” perpetrators,” said Johnson. “We were able to successfully isolate the threat and ensure that no harm was done to other servers or systems across the City’s network. Once all systems were properly vetted, CAD was brought back online. No personal data of any citizen was compromised in this attack. The City continues to work with its federal partners to determine the source of the intrusion.” Johnson went on to assure all Baltimore city residents that [the City is] fully committed to safeguarding the integrity of the City’s IT infrastructure and assets.

So, how can you protect your home computers—your laptops, etc., from being hacked? What about safeguarding your privacy while social media, i.e., Facebook, Instagram, etc.? Computer repair expert William Allen has information for your social media peace of mind.

Read and Listen to more here.

Post Formats is a theme feature introduced with Version 3.1. Post Formats can be used by a theme to customize its presentation of a post.

Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula eget dolor. Aenean massa. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus – more on WordPress.org: Post Formats

A Post without Image

Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.

Read more