critical bug in VMware opens up corporate Treasure to hackers

A critical information-disclosure bug in VMware’s Directory Service (vmdir) could lay bare the contents of entire corporate virtual infrastructures, if exploited by cyberattackers. critical bug in VMware opens up corporate Treasure to hackers
The vmdir is part of VMware’s vCenter Server product, which provides centralized management of virtualized hosts and virtual machines (VMs) from a single console. According to the product description, “a single administrator can manage hundreds of workloads.”



These workloads are governed by a single sign-on (SSO) mechanism to make things easier for administrators; rather than having to sign into each host or VM with separate credentials in order to gain visibility to it, one authentication mechanism works across the entire management console.

The vmdir in turn is a central component to the vCenter SSO (along with the Security Token Service, an administration server and vCenter Lookup Service). Also, vmdir is used for certificate management for the workloads governed by vCenter, according to VMware.






The critical flaw (CVE-2020-3952) was disclosed and patched on Thursday; it rates 10 out of 10 on the CVSS v.3 vulnerability severity scale. At issue is a poorly implemented access control, according to the bug advisory, which could allow a malicious actor to bypass authentication mechanisms.



“Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls,” the description explained.







As for the attack vector, “a malicious actor with network access to an affected vmdir deployment may be able to extract highly sensitive information,” VMware noted. In turn, this information could be used to compromise the vCenter Server itself “or other services which are dependent upon vmdir for authentication.”

There are no workarounds, but administrators are encouraged to apply the patches as soon as possible.

vCenter Server 6.7 (embedded or external PSC) prior to 6.7u3f is affected by CVE-2020-3952 if it was upgraded from a previous release line such as 6.0 or 6.5. Clean installations of vCenter Server 6.7 (embedded or external PSC) are not affected, according to the company. To help administrators find out if their vmdir deployments are affected by CVE-2020-3952, the vendor has published a how-to knowledge base document.






“VMware, one of, if not the most, popular virtualization software companies in the world, recently patched an extremely critical information disclosure vulnerability…one of the most severe vulnerabilities that has affected VMware software,” Chris Hass, director of information security and research at Automox, told Threatpost. “vCenter Server provides a centralized platform for controlling VMware vSphere environments, it helps manage virtual infrastructure in a tremendous number of hybrid clouds, so the scope and impact of this vulnerability is quite large. Organizations using vCenter need to check their vmdir logs for affected versions, ACL MODE: legacy, and patch immediately.”

No specific acknowledgments were given for the bug discovery – VMware noted only that it was “disclosed privately.”

scammer cctv - PHOTO : bbc

British hacker reveals Microsoft's fake call center in India, CCTV exploits

Jim Browning studied for a full three months by hacking the CCTV camera of a fake call center running in Microsoft's name in Gurugram and then handing the footage to the BBC. A BBC report reported that a thug at the call center in Gurugram, adjacent to Delhi, spoke to people by the name of Chris Lawson and told that he was speaking from San Jose, California.







According to the CCTV footage obtained by the BBC, the scammer of the Grugram is talking to a UK man by the name of Chris Lawson. In the meantime, the scammer asks the UK man (victim) to recover his computer for £ 1,295, or about Rs 1,21,250. The victim tells the scammer that he is in depression and may have a heart attack. After this the scammer says why are you crying, you are a good man.


Hacker says he wanted to show the world how scammers defraud people. The hacker has claimed that these scammers were working as Microsoft's technical support staff while sitting in an office in Grurugram. They used to send fake pop-up messages on the users' system as a warning.


The BBC report states that scammers pay lime to the UK of around Rs 21 million, or Rs 1,53,85,96,500, every month. Scammers pretend to be from banks, computer companies, retailers, and even the government.

Microsoft revealed that about 4.4 crore of its users are using hacked passwords and user names for login.





Microsoft Corporation is an American multinational technology company with headquarters in Redmond, Washington. It develops, manufactures, licenses, supports, and sells computer software, consumer electronics, personal computers, and related services. Its best known software products are the Microsoft Windows line of operating systems, the Microsoft Office suite, and the Internet Explorer and Edge web browsers. Its flagship hardware products are the Xbox video game consoles and the Microsoft Surface lineup of touchscreen personal computers. In 2016, it was the world's largest software maker by revenue (currently Alphabet/Google has more revenue). The word "Microsoft" is a portmanteau of "microcomputer" and "software". Microsoft is ranked No. 30 in the 2018 Fortune 500 rankings of the largest United States corporations by total revenue.


Microsoft was founded by Bill Gates and Paul Allen on April 4, 1975, to develop and sell BASIC interpreters for the Altair 8800. It rose to dominate the personal computer operating system market with MS-DOS in the mid-1980s, followed by Microsoft Windows. The company's 1986 initial public offering (IPO), and subsequent rise in its share price, created three billionaires and an estimated 12,000 millionaires among Microsoft employees. Since the 1990s, it has increasingly diversified from the operating system market and has made a number of corporate acquisitions, their largest being the acquisition of LinkedIn for $26.2 billion in December 2016, followed by their acquisition of Skype Technologies for $8.5 billion in May 2011. Microsoft said- 4.4 crore users used hacked username-password


Microsoft revealed that about 4.4 crore of its users are using hacked passwords and user names for login. This flaw came to light when Microsoft's research team conducted data analysis. The team scanned the account between January and March. It turned out that these accounts are using hacked passwords and usernames on Azure and other similar platforms. Microsoft said- 4.4 crore users used hacked password-username



According to a PC Mag report, the company's research team matched the database of more than 3 billion passwords and user names leaked in 2019. In this, the accounts of more than 4.4 crore users were matched with it. The company said that users whose accounts were matched, were asked to reset the password. hacked password

99.9% hacking failed by MFA

Microsoft said - The number of hacked accounts shows that 99.9% of hacking was thwarted through multi-factor authentication (MFA). We told users that MFA is an important system for online account security. We suggested users to strengthen the password. Many users' passwords were weak.

Best Android Emulators for Linux. Genymotion. If you're searching for the best Android Emulators for Linux, chances are you'll stumble across the name Genymotion almost everywhere. Andro VM. Anbox. Android-x86. Shashlik. ARChon. Android SDK. Andy OS. how to install android emulator in kali linux




Best Android Emulators for Linux. Genymotion. If you're searching for the best Android Emulators for Linux, chances are you'll stumble across the name Genymotion almost everywhere. Andro VM. Anbox. Android-x86. Shashlik. ARChon. Android SDK. Andy OS.


Kali Linux has over 600 preinstalled penetration-testing programs, including Armitage (a graphical cyber attack management tool), Nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper password cracker, Aircrack-ng (a software suite for penetration-testing wireless LANs), Burp suite and OWASP ZAP web application security scanners. Kali Linux can run natively when installed on a computer's hard disk, can be booted from a live CD or live USB, or it can run within a virtual machine. It is a supported platform of the Metasploit Project's Metasploit Framework, a tool for developing and executing security exploits. install android emulator in kali linux


It was developed by Mati Aharoni and Devon Kearns of Offensive Security through the rewrite of BackTrack, their previous information security testing Linux distribution based on Knoppix. The third core developer, Raphaël Hertzog, joined them as a Debian expert.how to install android emulator 









So today we will tell you through this blog, how you can download and install Android Emulator inside your Kali Linux operating system.
So a few days ago, we had installed the carpet with the help of dual boot in our system and told them how you can install this operating system in your black Linux system and for this we have given you the video and Through this blog, you were told that in which way you can install Kali Linux, so now let us know in which way your Linux operating system In the inside Android emulator can be installed.android emulator 






Read Also Here 

• How To Install Kali Linux :-   CLICK HERE

Install Android Emulator

Since it’s sheer technical and requires a handful of computer jargons, installing Android emulator in Kali Linux is a bit intricate task. Therefore, the rest of the content has been designed such that to educate the readers upon the step by step process of setting up Android SDK, an Android emulator by Google and the creation of AVD (Android Virtual Device) so that even the laymen can do it without a hitch. Read on – kali linux

• Install the requisite libraries.

 Android Emulator In kali Linux ( Live Pratical Video )




      





Kali Linux Installation with Dual Boot ( Live Pratical Video )




      



Remove Kali Linux In Dual Boot System ( Live Pratical Video )



         

If you too are fond of using the internet and you like to know about technology and the world of internet and hacking, then you have probably heard about Kali Linux but do you know what happens next and then What are the advantages and disadvantages of using Kali? It is a very popular operating system that if you are learning hacking in the world, then you want to do it?  kali linux installation with dual boot Through this post, you will know The laptop has a mouse pad. If the mouse pad is not working, then how can you fix it? not working  Through this post, you will know and at the same time you will find the end of this post.  our a video will get you where you through this video you can learn how you can fix it?  touchpad



Laptop TouchPad Doesn't work 



         

• hp laptop touchpad not working
• 
  
• laptop touchpad not working windows 10
• 
  
• laptop touchpad not working lenovo
• 
  
• touchpad not working windows 7
• 
  
• touchpad not working asus
• 
  
• samsung laptop touchpad not working
• 
  
• surface laptop touchpad not working
• 
  
• touchpad not working windows 8
• 
  

If you too are fond of using the internet and you like to know about technology and the world of internet and hacking, then you have probably heard about Kali Linux but do you know what happens next and then What are the advantages and disadvantages of using Kali?  kali linux or debian It is a very popular operating system that if you are learning hacking in the world, then you want to do it? Ledge should know what it is and what is its use. kali linux installation with dual boot Through this post, you will know what happens to Kali and at the same time will know that if you want to install Kali's operation in your computer or laptop system. kali linux 2019.3


What is Kali Linux and what is its use ? 


Kali is a Linux operating system that you can download and use for free from the Internet. It is a dispensed version, specially designed for Security Testing Testing Security Research, can install windows on your computer and laptop. And you can use it, this is your work, which you can install and use in your work, now many people use Kali Nan For good deeds we call whiteheads and some people use this operating system for the wrong deeds we call black hat hackers. kali linux

• Also Read Here 

• How to install Kali linux with dual boot windows+linux   CLICK HERE  

red hat linux And there is some good work , which we call White Hat Hacker. Now you must be thinking that in the end, Kali goes to Linux to learn hacking, then why do you use it because the carpet has you in it but already kali linux and windows 7 dual boot You will be able to create a lot of code, that is, you will not have to write much code in Kali Linux and you will get many hacking tools already made for free, which will save your time and And you can learn hacking at an advanced level, hacking so people love Kali Linux operating system very much, besides this opening system is completely free. You can download this operating system for free from the official website of Kali Linux. how to hack facebook 



So let us now know that if you have installed black Linux operating system in your laptop system and if the mouse pad of your laptop is not working, then how can you fix the problem? Let's know. how to become a hacker 

Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security Ltd.

Remove Kali linux with dual boot windows 10 Kali Linux has over 600 preinstalled penetration-testing programs, including Armitage (a graphical cyber attack management tool), Nmap (a port scanner), Wireshark (a packet analyzer), John the Ripper password cracker, Aircrack-ng (a software suite for penetration-testing wireless LANs), Burp suite and OWASP ZAP web application security scanners. Kali Linux can run natively when installed on a computer's hard disk, can be booted from a live CD or live USB, or it can run within a virtual machine. It is a supported platform of the Metasploit Project's Metasploit Framework, a tool for developing and executing security exploits.

It was developed by Mati Aharoni and Devon Kearns of Offensive Security through the rewrite of BackTrack, their previous information security testing Linux distribution based on Knoppix. The third core developer, Raphaël Hertzog, joined them as a Debian expert.

Kali Linux is based on the Debian Testing branch. Most packages Kali uses are imported from the Debian repositories.Remove Kali linux with dual boot 



Remove Kali Linux with Dual Boot in windows 10

• REMOVE KALI LINUX
• HARD DISK PARTITION DELETE
• HARD DISK PARTITION MERGE
• COMPLETELY AND PARMANENTLY

Let's Start

• First of all you go to windows setting and go to update and security 

• and you wiil find Recovery option and got to recovery and select Restart Now option.