Tag Archive for: functions

Local city’s functions restored, $350K used to handle ransomware attack


After spending over a quarter of a million dollars to investigate a ransomware attack a local city is still searching for answers.

Blondezena Williams lives in Huber Heights and shared her concerns.

“They’re going to have to get it from somewhere right?” she said.

Williams is talking about the $350,000 Huber Heights paid to fix issues caused by the ransomware attack.

The attack happened on Nov. 12.

There are no cutbacks scheduled at this time.

>> PREVIOUS COVERAGE: Huber Heights provides update on cyber attack, says some services restored

“I prefer that they didn’t cut anything because we are still growing and to see a stagnation now would not be a good idea,” Williams said.

Many people are concerned about their personal information being compromised.

“Somebody from the Y(MCA) asked if I sent him a message and asked him for money and I said ‘no I didn’t,” Priscilla Klinedinst said.

She is always on alert now.

She is also worried about the plan of attack going forward.

“I would hate to see the police force be cut because I think we need them,” Klinedinst said.

Huber Heights City Council is still working on getting answers to if personal information was stolen.

Source…

TerraMaster Launches Comprehensive Data Backup & Sync Functions for Ransomware Protection


Data protection from ransomware and other cyberattacks is a considerable and primary concern for NAS clients and users, and TerraMaster recognizes the need for better protective measures. Recently, the QNAP NAS device was struck by ransomware dubbed “Checkmate.” The Checkmate ransomware invades through SMB services disclosed to the Internet and utilizes a dictionary attack to crack accounts with vulnerable passwords.

TerraMaster reveals a comprehensive data backup and sync function to increase protection

TerraMaster is releasing several brand-new single portal folder-level data backup and synchronization elements for TerraMaster products. With the newly released TOS 5’s suite of latest applications, such as centralized backup, TFSS, and TFM Backup, the company is doing what it can to deliver many data backup and recovery options.

Key Features

Business Focused ProActive Backups for Larger Enterprises

“Centralized Backup” is an enterprise-oriented backup solution that helps with not only the backup of data but also restoration for numerous device types with a single TNAS device.

TFSS (TerraMaster File System Snapshot)

TFSS (TerraMaster File System Snapshot), created by the company, presents a disaster recovery tool designed based on the BTRFS file system.

Image source: TerraMaster

BTRFS is a computer storage format that combines a file system based on the copy-on-write (COW) principle with a logical volume manager (not to be confused with Linux’s LVM), developed together. It was initially designed at Oracle Corporation in 2007 for use in Linux, and since November 2013, the file system’s on-disk format has been declared stable in the Linux kernel. According to Oracle, Btrfs “is not a true acronym.”

— BTRFS Wikipedia explanation

BTRFS will take a snapshot of the TNAS file system to assist in recovering data from faulty operations or ransomware incursions.

TFM Backup
Image source: TerraMaster

TerraMaster Folder Mirror (TFM) Backup is a reliable and dedicated backup tool for the TNAS system’s shared folders. Through TFM Backup, backup shared folders in TNAS that are readily available are sent to other local folders. Users can schedule the backups for automation and…

Source…

Imperva introduces Serverless Protection to secure serverless computing functions


Imperva launches Imperva Serverless Protection, a new product built to secure organizations from vulnerabilities created by misconfigured apps and code-level security risks in serverless computing environments. Designed with the developer and security team in mind, the new product is easily deployed as an AWS Lambda layer, protecting functions without changing code.

Built on Amazon Web Services (AWS), Imperva Serverless Protection is a fully integrated tool within AWS Lambda Extensions. The integration gives developers faster access to the new Imperva offering to provide an additional layer of security for their AWS Lambda environment. This latest innovation from Imperva adds to the company’s solutions for protecting applications in all their forms: legacy, APIs, microservices, and serverless functions.

“We see hundreds of thousands of customers of all sizes embrace serverless applications to quickly deliver value to their customers,” says Holly Mesrobian, General Manager, AWS Lambda, AWS. “The Imperva extension enables customers to easily embed additional security in their DevOps processes for serverless applications with just a simple configuration change.”

Developers are increasing adoption of serverless functions that offer lower costs, less configuration and faster deployment. However, “through 2022, 80% of successful attacks on serverless [platform as a service] PaaS will have a root cause of misconfiguration or the use of known vulnerable code due to immature tools and processes,” writes Neil MacDonald, Vice President, Distinguished Analyst, Gartner, in the March 2020 report, “Security Considerations and Best Practices for Securing Serverless PaaS”.

He adds, “New approaches and techniques for securing serverless will be required and should be designed using a life cycle approach, starting in development and carrying through into operations.”

Imperva Serverless Protection offers market-differentiated capabilities to help organizations manage the complex security risks that emerge in serverless functions.

  • Protection against malicious activity: Purpose-built for serverless computing, Imperva uniquely enables a positive security model that…

Source…

Amazon to kill Dash button functions on August 31—you have a month to hack yours

Why, hack them! Existing Dash buttons come packed … which revolves in part around discovering the button’s MAC address. (The guide at one point points users to a dead URL for IFTTT’s Maker …
mac hacker – read more