Security News > 2020 > November

ADTRAN announced Mosaic One, a cloud-based network and service optimization platform that simplifies the deployment of broadband services. The platform collects, correlates and analyzes data from the broadband network gateway, the broadband access network and the in-home network to proactively address service issues and improve the subscriber experience.

Viavi Solutions announced enhancements to the VIAVI OneAdvisor-800 all-in-one tool to streamline cell site maintenance of 5G and 4G technologies. With the addition of 5G NR and 4G LTE signal analyzer functionality to the award-winning OneAdvisor-800, field technicians can efficiently deploy, integrate and troubleshoot today's multi-technology networks with a single instrument.

One of the fixed flaws is being actively exploited, the Windows Kernel Cryptography Driver vulnerability disclosed by Google's Project Zero at the end of last month. The CVE-2020-17087 driver bug was also exploited with CVE-2020-15999, a remote-code exec vulnerability in Chrome's font-parsing code, to also hijack targeted people's PCs. All three bugs are now patched; installing the latest software updates fixes them.

PKWARE has acquired Dataguise, a company with innovative technology for businesses to discover and protect personal data stored across diverse IT systems and environments. "Driven by increasing privacy regulations, such as GDPR, CCPA, PCI and HIPAA, and the need to prevent data breaches, the demand for data discovery solutions is rapidly increasing," said Brandon Muirhead, Director, Thompson Street Capital Partners and PKWARE investor.

Stealthbits Technologies has appointed Jim Barkdoll as CEO. A data security veteran with a long, successful track record, Barkdoll most recently served as CEO of Titus, an industry leader in the data classification and security market. To further strengthen Stealthbits' product, marketing and finance organizations, the company has expanded its leadership team with the addition of Mark Cassetta as General Manager, Karyl Parks as CMO and Sarah Foottit as CFO. These additions will bolster the expertise of Stealthbits' existing team, which has propelled the company's aggressive growth trajectory and customer success during a challenging year.

Microsoft's November Patch Tuesday roundup of security fixes tackled an unusually large crop of remote code execution bugs. Twelve of Microsoft's 17 critical patches were tied to RCE bugs.

A massive Intel security update this month addresses flaws across a myriad of products - most notably, critical bugs that can be exploited by unauthenticated cybercriminals in order to gain escalated privileges. These critical flaws exist in products related to Wireless Bluetooth - including various Intel Wi-Fi modules and wireless network adapters - as well as in its remote out-of-band management tool, Active Management Technology.

Microsoft has plugged 112 security holes, including an actively exploited one. The most information is available about CVE-2020-17087, a Windows Kernel privilege escalation vulnerability, because it's being actively exploited in the wild and because Google disclosed it on October 29, along with PoC exploit code.

It's a big week for gamers across the globe, with imminent, dueling releases of Xbox Series X and PlayStation PS5. However, an army of retail bots threaten to drive prices up as much as three times the retail price, putting the coveted holiday gifts well out of reach of everyday fans. "Since most retailers have built their environments for high-speed and high-volume transactions, the bots are being supported by the environment that is trying to keep them out. The effort to build a retail store that delights customers and enables transactions plays right into the bot creators' hands."

In a paper titled "Real-World ADS-B signal recognition based on Radio Frequency Fingerprinting," three Chinese researchers describe what they said was a method of identifying unique transmitters fitted to aircraft - regardless of what identity code the equipment is broadcasting. ADS-B transmitters work by broadcasting the aircraft's GPS location along with a unique identifier, issued by the registering country's authorities.