Network Break 342: SolarWinds Back In Security Hot Seat; In Defense Of The Fax Machine
Summary: Take a Network Break! SolarWinds is back in the hot seat as Microsoft researchers discover an active exploit against SolarWinds Serv-U file transfer products. Meanwhile, SonicWall warns customers that a ransomware exploit is targeting end-of-life software on some of its products.<br> NVIDIA and Palo Alto Networks underwhelm with an announcement about using NVIDIA’s Bluefield-2 DPU to offload some network traffic from virtual instances of Palo Alto’s firewall software. Greg opines on the effects of inflation for IT project management, and Amazon snaps up a team of Facebook engineers that were working on a now-defunct satellite broadband project.<br> Last but not least, Japanese bureaucrats who refuse to relinquish their fax machines are stymieing the government’s digital transformation.<br> Sponsor: Itential<br> Itential is network and cloud automation. Itential’s software makes it easy for network teams to get insights into your entire infrastructure, immediately detect non-compliant assets for rapid remediation, and manage and deploy changes across both CLI & API infrastructure. Find out more at <a href="http://www.itential.com/packetpushers" target="_blank" rel="noopener">www.itential.com/packetpushers.</a><br> Tech Bytes: AppNeta<br> Stay tuned after the news for a sponsored Tech Bytes conversation with AppNeta. As organizations figure out how to make distributed work a more permanent feature, IT needs to be prepared to support both remote and on-prem workers for the foreseeable future. We talk with AppNeta about instrumenting application performance management to support a hybrid work environment.<br> Show Links:<br> <a href="https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211" target="_blank" rel="noopener">Serv-U Remote Memory Escape Vulnerability</a> – SolarWinds<br> <a href="https://arstechnica.com/gadgets/2021/07/microsoft-says-hackers-in-china-exploited-critical-solarwinds-0-day/" target="_blank" rel="noopener">SolarWinds 0-day gave Chinese hackers privileged access to customer servers</a> – Ars Technica<br> <a href="https://www.sonicwall.com/support/product-notification/urgent-security-notice-critical-risk-to-unpatched-end-of-life-sra-sma-8-x-remote-access-devices/210713105333210/" target="_blank" rel="noopener">Urgent Security Notice: Critical Risk to Unpatched End-of-Life SRA & SMA 8.x Remote Access Devices</a> – SonicWall<br> <a href="https://blogs.nvidia.com/blog/2021/07/12/palo-alto-networks-cyber-defenses/" target="_blank" rel="noopener">NVIDIA and Palo Alto Networks Boost Cyber Defenses with DPU Acceleration</a> – NVIDIA<br> <a href="https://www.theverge.com/2021/7/14/22576788/amazon-acquires-facebook-satellite-team-project-kuiper" target="_blank" rel="noopener">Facebook’s satellite internet team joins Amazon</a> – The Verge<br> <a href="https://www.theguardian.com/world/2021/jul/07/japanese-fax-fans-rally-to-defence-of-much-maligned-machine" target="_blank" rel="noopener">Japanese fax fans rally to defence of much-maligned machine</a> – The Guardian<br> <a href="https://en.wikipedia.org/wiki/Seal_(East_Asia)#Japanese_usage" target="_blank" rel="noopener">Hanko Stamp – Seal (East Asia)</a> – Wikipedia<br>
