Skip to main content

Industry News

Let's talk shop!

327 Topics
A
adrian7818Rookie
asked in Vulnerabilities
How to still force notify users for reboot even when the users disabled notifications on their endpoint

Hi All, Would like to check if there is anyway that we can still notify the users for system reboot even when the users disabled the notifications on their endpoint. Currently when users disabled notifications, Automox would just reboot the endpoints when the deferral condition is met. So we would like to include a notification to users before the deferral condition is met.

1110
A
2 years ago
B
BRobertsonRookie
posted in Patch Tuesday
FEATURE REQUEST - Groups/Subgroups Functionality

Not sure if this is the correct way to submit a feature request… but…The usefulness of the parent/subgroup structure could be better. As it is now, it appears that subgroups only serve as a visual aid and nothing more.When working in reports or device filters (for example), I would love to be able to select the parent group and have that instantly include the subgroups in my results. Right now I am required to select each individual subgroup. Thanks!

1152
B
2 years ago
M
MRayboneNovice
asked in Vulnerabilities
Linux Patching Policies #2...

Hello,I recently queried about the best practice for Linux patch policies.I have since heard from other sources that the Automox support recommended method of Linux patching is to use a custom script and run it as a worklet.Just curious as to whether anyone else has come across this, also curious as to what any Automox peeps opinions are on this.  This isn’t the enterprise class Linux supporting system we were sold tbfCheers!

2061
E
2 years ago
M
MRayboneNovice
asked in Vulnerabilities
Policies to patch Linux systems...

Hello,We’re adding in some LInux systems to our Automox infrastructure, but the method of patching them is totally unclear when it comes to policies etc.  Does anyone have any examples, or any Linux based patching via Automox documentation available?Cheers,Mark.

3402
M
2 years ago
BrandonG-Automox
BrandonG-AutomoxAutomox Employee
posted in Patch Tuesday
June 2022 Patch Tuesday

June 2022 Every month, we share a thorough rundown of Patch Tuesday with videos and advice from our experts. Join our thread on Slack – we’ll help you prioritize this month's releases so you can get back to your day faster. Automox-Community Slack (this will expire in 30 days from 6/6)You can also bookmark our Patch Tuesday Rapid Response Center for easy access to our month-by-month patch index. Be sure to sign up for vulnerability alerts, too!  Our latest Blog post about this month’s Patch Tuesday vulnerabilities is now live on the Automox home page as well:https://www.automox.com/blog/Patch-Tuesday-june-2022 Be sure to visit the official Automox social media accounts for additional short form videos:YouTubeCVE-2022-30136 CVE-2022-30139 CVE-2022-30163TikTokCVE-2022-30136 CVE-2022-30139 CVE-2022-30163

980
BrandonG-Automox
2 years ago
askornia
askorniaNovice
asked in Patch Tuesday
Patch Tuesday Webinars

Is Automox planning on doing the informational Patch Tuesday webinars moving forward? I thought they were one of the best parts of the community and platform! I remember one in the last few months getting cancelled and then not getting emails to sign up moving forward. 

2963
BrandonG-Automox
2 years ago
P
PRuffinRookie
asked in Vulnerabilities
Automox Reboot Pop Up (Prompt) not responding

Hello, I have multiple users experiencing issues with workstation patching. Whenever a user clicks “Reboot Now” when prompted; nothing happens. We can click the “Reboot Now” button multiple times and no response. After waiting for 15-20 minutes; they manually reboot the machine only for Automox to reboot their computer later in the day causing them to lose work. Any ideas on what can be done to prevent this from happening? And has anyone else experienced this issue?

3101
K
2 years ago
A
adskiRookie
asked in Patch Tuesday
IT Service Providers - are you allowed to resell to customers?

Just wondering if there are any IT Service Providers out there that use this product as a service to their customers? I presume there are no licensing issues or considerations around this?

1391
BrandonG-Automox
2 years ago
jaldeguer
jaldeguerRookie
asked in Patch Tuesday
How does Automox mitigate supply chain attacks?

How do you prevent the downstream damage to my endpoints if you guys get hacked? What happened to Kaseya, where hackers exploited their VSA platform to deliver ransomware to MSP customers, was quite a nightmare event.  

1601
B
2 years ago
Afonso_Alves_31
Afonso_Alves_31Pro
asked in Patch Tuesday
multiple Azure IdP subscriptions

Is there any article or internal guidance regarding multiple Azure IdP subscriptions?Is there a limit? What’s the best practice and the limit for connecting multiple IdP subscriptions?

1111
K
2 years ago
Afonso_Alves_31
Afonso_Alves_31Pro
asked in Vulnerabilities
Child Zones

Is there a way to create child zone? Or the only option is through the main zone?

1562
Afonso_Alves_31
2 years ago
JessicaS-Automox
JessicaS-AutomoxAutomox Employee
published in Vulnerabilities
Patch Tuesday Rundown - April 2022

Happy Patch Tuesday Week Y’all!  Let’s do a quick rundown of Patch Tuesday, then we’ll send you over to some of our other resources that you can use to tackle these updates. This month, there are 238 total vulnerabilities this month. Woah, that’s a lot.  Here’s the full breakdown: 129 Microsoft,  2 Apple (out-of-band from March), 1 Google, 78 Adobe and 28 Mozilla. Of the Microsoft vulnerabilities, 12 have a severity rating of critical. All of these are Remote Code Execution vulnerabilities. We recommend you patch these within 72 hours. For Apple, we highlighted the two out-of-band zero days that they patched in March. We wrote more about that in our blog, but we recommend patching this within 72 hours as well. Google’s vulnerability this month for Chrome V8 Javascript engine has been actively exploited. Since Chrome is also so popular and widely used, we recommend prioritizing this update. Adobe released updates for Acrobat and Reader, Commerce, After Effects, and Photoshop, fixing a t

1440
JessicaS-Automox
2 years ago
LaurenH
LaurenHAutomox Employee
posted in Vulnerabilities
We'll help you prioritize Patch Tuesday’s long list of 129 vulnerabilities [Tomorrow's Webinar]

April’s Patch Tuesday drops 129 vulnerabilities – the most we’ve seen since 2020. Join us tomorrow, April 13th at 12 pm ET for a review of this month’s patches and guidance on how to prioritize your remediations fast. Jessica Onorati, Team Lead of Organizational Security, joins our Patch Tuesday experts, Eric Feldman and Adam Whitman, to dive into this month’s announcement.    

830
LaurenH
2 years ago
A
Anonymous
published in Patch Tuesday
Weekly Security Wrap-Up (April 5th, 2022)News

Happy Tuesday, everybody! While we all recover from another Monday that seemed to have too many hours somehow, let’s talk about a couple of security stories:State Department Announces Bureau of Cyberspace and Digital Policy -- Well, how do you do? This seems pretty important! From the article: “The new cybersecurity bureau reflects the growing importance of cybersecurity in national policy, economy, and defense. The CDP bureau includes three policy units: International Cyberspace Security, International Information and Communications Policy, and Digital Freedom, says the State Department.” I think this is a great step, since our previous “administration” did away with some high-ranking positions in cybersecurity.Germany takes down Hydra, world's largest darknet market -- I have to be honest here: on first glance, I figured this was something to do with “the Marvel universe”. In spite of that, I kept reading, as it was super interesting. From the article: “The servers of Hydra Market, t

800
A
2 years ago
Brittany
BrittanyPro
posted in Vulnerabilities
VULNERABILITY UPDATE: Apple Announces Two Zero-Day Vulnerabilities for macOS and iOS

On Thursday, March 31st, Apple has released patches to fix two zero-day vulnerabilities in macOS, iOS, and iPad OS. This marks the fourth and fifth zero-days of 2022 for the OSs listed above. The vulnerabilities are as follows:CVE-2022-22675: A vulnerability in AppleAVD, Apple’s audio and video decoding framework, affects all three operating systems and may have been actively exploited. When exploited, the vulnerability may allow a threat actor to execute arbitrary code with kernel privileges. CVE-2022-22674: An out-of-bounds read issue with the Intel Graphics Driver that may allow an application to view kernel memory, only affecting macOS. This vulnerability may have also been exploited in the wild.So, why are kernel-related vulnerabilities dangerous? Kernel-related exploitations can be particularly dangerous as the kernel is a central component to operating systems (OS) that connects the physical hardware (CPU, memory, etc.) with the software on the operating system.Apple has release

1280
Brittany
2 years ago
Brittany
BrittanyPro
posted in Vulnerabilities
VULNERABILITY UPDATE: Vulnerabilities Confirmed in Spring Core and Spring Cloud

For those of you that have been following along with the Spring4Shell saga at home, yesterday, CVE-2022-22965 was assigned and published for the critical remote code execution vulnerability in Spring Framework dubbed “Spring4Shell.”A patch was also released by Spring - so upgrade to Spring Framework 5.3.18 or 5.2.20 as soon as possible to remediate CVE-2022-22965. Additional details on the patch and workarounds for those unable to patch immediately can be found on the Spring Blog post.Read all of the past updates about Spring4Shell on the Automox blog: https://www.automox.com/blog/spring-cloud-core-vulnerabilities

880
Brittany
2 years ago
A
Anonymous
published in Patch Tuesday
Weekly Security Wrap-Up (March 29th, 2022)News

Hey, y’all - happy Tuesday! While we were all busy being distracted by ridiculous people on awards shows, there was a lot going on around us. Let’s check out a few stories from world of security news.. CISA warns of attacks targeting Internet-connected UPS devices -- Oh man, that’s an infuriating one. Stay out of my power supply, jerks! I guess some organizations use this for management of the device over the internet, but...it’s just a power supply. If that’s not necessary, go disconnect that thing’s network cable. From the article: “Recommended mitigation measures include finding all UPSs and other emergency power systems on orgs' networks and ensuring they're not reachable over the Internet.” Shutterfly discloses data breach after Conti ransomware attack -- Image provider Shutterfly disclosed this week a ransomware that led to a data breach back in December. That’s bad for folks who work there or use the service, so be sure to update your creds and keep an eye on your credit report/

660
A
2 years ago
A
Anonymous
published in Patch Tuesday
Weekly Security Wrap-Up (March 22nd, 2022)News

Happy Tuesday, y’all - and now it’s over because we’re talking about Russia today! Mainly, because I think it’s important to get some eyebrows raised before it’s too late. (<--fun fact: that’s the scariest book I’ve ever read!) Hackers/APTs associated with Russian IPs/groups have already been scanning the networks of US-based companies in the energy, finance, and defense sectors, prompting President Biden to issue his recent warning to American businesses. PLEASE TAKE THIS SERIOUSLY. For a great perspective on all this (and a quick read), check out this blog from our Director of InfoSec/Research.Let’s get diligent, y’all!

690
A
2 years ago
JessicaS-Automox
JessicaS-AutomoxAutomox Employee
published in Vulnerabilities
What is a Zero-Day Vulnerability?F.A.Q.

Keeping an ear out for new vulnerabilities is part of the daily routine for those of us in the IT/cybersecurity world. But when we see a new one, how do we know if it’s a “drop your coffee and get to it” type of scenario or not? One keyword to help is “zero-day”. Sounds pretty intense. Let’s explain it! What does Zero-Day mean?Zero-day is the identifier for “a vulnerability in a system or device that has been disclosed but is not yet patched.” That’s because, according to Wired, “The term "zero-day" refers to the number of days that the software vendor has known about the hole.” As you can imagine, this can be cause for concern since it can’t be patched, leaving systems vulnerable to exploitation by the bad guys.What can I do in response to a Zero-Day?Unfortunately, it can feel frustrating to see a zero-day when you know there’s no fix to implement. The good news is, even though no patch is released, sometimes there are other actions that the researcher offers to mitigate the possibili

890
JessicaS-Automox
2 years ago
A
Anonymous
published in Patch Tuesday
Weekly Security Wrap-Up (March 15th, 2022)News

Happy Ides of March, y’all! I guess that’s a bit of an oxymoron, but it’s fine. While we were all eating sandwiches and pretending to work but looking at houses online, a lot of serious security stories broke. As you can suspect, a lot of them have to do with the Russia/Ukraine stuff.  Thousands of Secret Keys Found in Leaked Samsung Source CodeOOF. From the article: “The firm’s researchers have yet to determine how many of the exposed keys are valid. However, their analysis showed that 90% are likely associated with internal systems and “can be more challenging for an attacker to use.” On the other hand, the remaining keys — roughly 600 of them — can grant attackers access to a wide range of systems and services.” About 10% of those keys are for external services too, like GitHub and AWS. YikesGerman government advises against using Kaspersky antivirusWell, this is pretty similar to some former warnings about Kaspersky and it’s no surprise. Founder/CEO Eugene Kaspersky raised some ire

650
A
2 years ago
A
Anonymous
published in Patch Tuesday
Weekly Security Wrap-Up (March 8th, 2022)News

Hi, everybody - and Happy International Women’s Day! As someone who was #RaisedByLadies, this one’s near and dear to my heart. I think Adam “MCA” Yauch said it best, way back when I was in high school: “I want to say a little something that's long overdueThe disrespect to women has got to be throughTo all the mothers and the sisters and the wives and friendsI want to offer my love and respect to the end”  - “Sure Shot”, 1994  On to some security news!Zero-Click Flaws in Widely Used UPS Devices Threaten Critical InfrastructureFrom the article: “Three critical security vulnerabilities in widely used smart uninterruptible power supply (UPS) devices could allow for remote takeover, meaning that malicious actors could cause business disruptions, data loss and even physical harm to critical infrastructure, researchers have found.” The words “critical infrastructure” are sadly gonna be the summer hit of 2022, I’ve got $5 on it.Google: Chinese hackers target Gmail users affiliated with US govt

1130
A
2 years ago
JessicaS-Automox
JessicaS-AutomoxAutomox Employee
published in Vulnerabilities
Patch Tuesday Rundown - March 2022

Hello Community - Happy Spring! I don’t know if it’s spring quite yet for you, but let’s just pretend like it is. It’s time to review Patch Tuesday, so let’s get right into it! Microsoft had 71 vulnerabilities this month - inline with the 12-month rolling average of 73 per month we’ve seen. Only 3 of these are rated critical. And more good news, no exploited vulnerabilities so far this year! That being said, updates should not be delayed. Apple disclosed multiple vulnerabilities throughout last month requiring updates to iOS, iPad, watchOS and macOS. Since Apple doesn’t discuss or confirm vulnerabilities until they’ve conducted their own investigation, we recommend prioritizing these updates for your organization. Google released Chrome 99, and if you haven’t updated yet, be aware that there is an actively exploited zero-day in Chrome 99. They also released a total of 34 security fixes for the month. Be sure to update your instances of Chrome as soon as possible. Adobe has released upd

1040
JessicaS-Automox
2 years ago
A
Anonymous
published in Vulnerabilities
VULNERABILITY UPDATE: Zero-Day RCE Vulnerabilities Released for Mozilla FirefoxVulnerability Update

It’s a two-fer on a Monday! Quick update for a couple of zero-day remote code execution CVEs discovered in Mozilla Firefox. On the AX Blog, our Technical Marketing Engineer, @JessicaS-Automox has put together a breakdown and remediation steps to take.From the blog: “Mozilla released an out-of-band patch for Firefox that addresses two critical vulnerabilities (CVE-2022-26485 and CVE-2022-26486). Both are actively exploited in the wild as zero-days. Both are use-after-free issues in the browser’s XSLT processing and WebGPU IPC frameworks, respectively...Given this is an actively exploited zero-day, it’s recommended that IT admins prioritize patching this vulnerability within 24 hours to reduce exposure to malicious actors. For Firefox, Firefox ESR, and Thunderbird, you can fix vulnerabilities fast with Automox by using a patch-all policy for Windows and Mac (which will patch every third-party software we support on these OSes). Patch all policies ensure you fix vulnerabilities fast in th

2100
A
2 years ago
A
Anonymous
published in Vulnerabilities
VULNERABILITY UPDATE: CVSS 7.8 “Dirty Pipe” Vulnerability Disclosed in Linux KernelNews

Well, what would a Monday morning be without some vulnerabilities to talk about? Over on the Automox Blog, @Peter-Automox has a breakdown of “Dirty Pipe” - a newly-disclosed kernel-level vulnerability in the Linux OS.From the AX blog: “Dirty Pipe is a vulnerability in the Linux Kernel disclosed Monday morning. Dirty Pipe, or CVE-2022-0847, allows overwriting data in arbitrary read-only files. This can lead to privilege escalation and code injection into root processes. The vulnerability exists in all Linux kernel versions from 5.8 forward and has been patched in Linux 5.16.11, 5.15.25, and 5.10.102….Given the prevalence of Linux in highly sensitive infrastructure, this is a very important vulnerability to mitigate. It is highly recommended that IT and SecOps admins prioritize patching and remediation of this vulnerability in the next 24 hours to reduce organizational risk from this vulnerability.”Remediation steps: If you don’t have an existing Linux patch policy, we recommend a Patch

2670
A
2 years ago
A
Anonymous
published in Patch Tuesday
Weekly Security Wrap-Up (March 1st, 2022)News

Wait, it’s already March!?Happy Tuesday, y’all. As I type this, there is a lot going on that we could talk about, obviously. But let’s keep it “light” and just talk about a few stories that were in the news this week. Yes, we’ll have to mention Russia. But the good news is, I’ve been given approval by the Automox Party Department® to allow you all to start a drinking game based around those mentions. If it’s past noon and you see me mention “Russia”, do what you will. :)NVIDIA confirms data was stolen in recent cyberattackGraphics card giant NVIDIA has confirmed “a cybersecurity incident which impacted IT resources.”, from back in November. The threat actor compromised the NVIDIA network and stole employee credentials/proprietary information. The company noted that the incident isn’t expected to disrupt its business.Microsoft Accounts Targeted by Russian-Themed Credential HarvestingHey, everyone take a drink! Anyways, phishing emails to MS users warning of Russian-led account hacking h

640
A
2 years ago
Terms & ConditionsCookie settings