Blog

Greetings from VMware Security Response Center ! We wanted to post a quick acknowledgement that VMware will be a part of the Tianfu Cup International PWN Contest 2021. We are planning to remotely participate in the event from our home offices in Palo Alto, Bangalore and Cork to review any vulnerabilities that may be demonstrated The post VMware and the 2021 Tianfu Cup PWN Contest appeared first on VMware Security Blog. More info: https://blogs.vmware.com/security/2021/09/vmware-and-the-2021-tianfu-cup-pwn-contest.html?utm_source=rss&utm_medium=rss&utm_campaign=vmware-and-the-2021-tianfu-cup-pwn-contest

“This is what I know about you. You are in this profession because you fall into that group of people who care a great deal about making a better world. You love finding a new way – whether it is figuring out how a cyberattack works or a better way of preventing attacks. At your The post Combating Cybersecurity Burnout Through Self-care, Empathy, and Empowerment appeared first on VMware Security Blog. More info: https://blogs.vmware.com/security/2021/08/combating-cybersecurity-burnout-through-self-care-empathy-and-empowerment.html?utm_source=rss&utm_medium=rss&utm_campaign=combating-cybersecurity-burnout-through-self-care-empathy-and-empowerment

VMworld 2021 is just around the corner and we have an exciting program for security professionals. In partnership with our customers, we see that more and more are being challenged by implementing a Zero Trust approach, dealing with ransomware and new types of attacks, and addressing security complexity across the IT environment. VMware has The post VMworld 2021: Register Now! appeared first on VMware Security Blog. More info: https://blogs.vmware.com/security/2021/09/vmworld-20201-register-now.html?utm_source=rss&utm_medium=rss&utm_campaign=vmworld-20201-register-now

VMware is proud to announce that its on-premises VMware Carbon Black Endpoint Detection and Response (EDR) product has received Common Criteria certification, an internationally recognized security certification required by the U.S. and other governments across the world seeking to procure commercial technology products. With this certification, VMware Carbon Black EDR Server 7.5 is approved by The post VMware Carbon Black Endpoint Detection and Response Server 7.5 Achieves NIAP Common Criteria More info: https://blogs.vmware.com/security/2021/09/vmware-carbon-black-endpoint-detection-and-response-server-7-5-achieves-niap-common-criteria-certification.html?utm_source=rss&utm_medium=rss&utm_campaign=vmware-carbon-black-endpoint-detection-and-response-server-7-5-achieves-niap-common-criteria-certification

Ask the Howlers is a monthly cybersecurity expert roundtable on LinkedIn Live where James Alliband speaks with security thought leaders about emerging attack trends, the latest threat research, and how to maintain resilience as a security professional. Follow VMware Carbon Black on LinkedIn to be alerted of the next Ask the Howlers roundtable and to watch past episodes. Job title: Senior Security Strategist and Manager of Product Marketing Years The post Ask the Howlers: Meet the Host, James More info: https://blogs.vmware.com/security/2021/09/ask-the-howlers-meet-the-host-james-alliband.html?utm_source=rss&utm_medium=rss&utm_campaign=ask-the-howlers-meet-the-host-james-alliband

OpenSSL vulnerability CVE-2021-3712 Security Advisory Security Advisory Description ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer ... More info: https://support.f5.com/csp/article/K19559038?utm_source=f5support&utm_medium=RSS

Netty vulnerability CVE-2021-21295 Security Advisory Security Advisory Description Netty is an open-source, asynchronous event-driven network application framework for rapid development of ... More info: https://support.f5.com/csp/article/K55834441?utm_source=f5support&utm_medium=RSS

Apache Pulsar vulnerability CVE-2021-22160 Security Advisory Security Advisory Description If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the ... More info: https://support.f5.com/csp/article/K68146245?utm_source=f5support&utm_medium=RSS

Apache vulnerability CVE-2021-30641 Security Advisory Security Advisory Description Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with MergeSlashes OFF (CVE-2021-30641) More info: https://support.f5.com/csp/article/K13815051?utm_source=f5support&utm_medium=RSS

mod_auth_openidc vulnerability CVE-2021-20718 Security Advisory Security Advisory Description mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition ... More info: https://support.f5.com/csp/article/K89941125?utm_source=f5support&utm_medium=RSS