Sometimes it seems that organizations function as a ‘house of laughter’: stairs that go nowhere, doors that lead to walls, windows overlooking other rooms, furniture and shelves on the ceiling, mirrors that distort reality. Go! There is no blueprint of what the finished house is supposed to look like, it is simply a set of ideas or unconnected projects.

According to Gartner, this type of chaos is very common since, it is estimated, 9 out of 10 companies in Latin America have not realized the power of their internal and external indicators for decision-making, lacking a 360 panoramic view of all the information on the preferences or consumption habits of their customers and, in addition, with challenges to take advantage of organizational data with a view to business growth.

We then find that they operate in silos and their teams work with multiple tools, different processes, logistical inconsistencies and know-hows that collide with each other. This can lead to a decrease in corporate profits and, of course, to a decrease in consumer confidence (since, in the first place, these companies do not even understand them).

That’s where Data Modernization initiatives come in, which can make your organization thrive when you plan, build, and execute more and better projects based on strategic insights.

Learn the 4 steps to a successful Data Modernization to the cloud.

By having a Cloud Centric approach, being specialists in digitization of services and implementation of IT operation and governance models, at Itera we help you design the best strategy to modernize your data platforms.

Wiz discovered information about a set of vulnerabilities in Linux virtual machines in the Azure cloud. This occurred when using the proprietary agent functions of the Open Management Infrastructure (OMI) platform.

A few days after this announcement, Microsoft released the corresponding patches on September 14.

What to do about it?

Experts recommend updating OMI to the latest versions, making sure that all potentially dangerous services are disabled.

The risk to sensitive information and the security for customers that their data is protected are essential today for any company that wants to remain in the global market.

Your incomplete list looks like this:

• Azure automation.
• Azure auto-update.
• Azure Operations Management (OMS) Pack.
• Azure log analysis.
• Azure configuration management.

“Customers should update vulnerable extensions for their cloud and on-premises systems as updates become available as scheduled,” the company’s support response states.

Get to know Azure Notebooks

It will probably be very difficult to find a software and application company that does not use Microsoft Azure services. They are widely recognized as essential tools that facilitate the software development process, especially from the operational side of the problem.

That’s why many companies are looking for reliable and experienced developers with Azure knowledge that they can use in their work.

Modern business applications combine many areas of development. They are familiar and easy to understand. But that all changes when you start adding new technologies and approaches, creating distributed, scalable computing platforms that leverage big data and machine learning.

This is where Azure Notebooks comes in handy, giving you a place to learn analytics using familiar languages in a playground where you can test code and visualizations, share results with colleagues, and add descriptive text around your code, as well as results for presentations to management and your team.

Sources:

https://revistabyte.es/ciberseguridad/microsoft-vulnerabilidades-en-azure/

https://azure.microsoft.com/es-mx/blog/new-azure-vmware-solution-updates-and-global-expansion-drives-customer-success/

Do you have questions or would you like to learn more? At Itera we can help you.

Contact a specialist: seguridad@iteraprocess.com

Microsoft released software updates on June 30 to patch two high-risk security vulnerabilities affecting users of Windows 10 and Server editions. Both flaws likely reside in the Windows Codec Library.

The two newly disclosed security vulnerabilities, assigned CVE-2020-1425 and CVE-2020-1457, are remote code execution bugs that could allow an attacker to execute arbitrary code and control the compromised Windows computer.

However, exploiting both flaws requires an attacker to trick a user running an affected Windows system into clicking on a specially crafted image file to open with any application that uses the built-in Windows codec library.

CVE-2020-1425 is more critical because successful exploitation could allow an attacker to even harvest data to further compromise the affected user’s system.

The second vulnerability, tracked as CVE-2020-1457, has been rated as important and could allow an attacker to execute arbitrary code on an affected Windows system.

However, none of the security vulnerabilities have been reported as publicly known or actively exploited by hackers at the time Microsoft released emergency patches.

According to the warnings, Abdul-Aziz Hariri of Trend Micro’s Zero Day Initiative informed Microsoft of both vulnerabilities and it affects the following operating systems:

• Windows 10 version 1709, 1803, 1809, 1903, 1909, 2004.
  • Windows Server version 1803, 1903, 1909, 2004, 2019.

Since Microsoft is not aware of any solutions or mitigating factors for these vulnerabilities, Windows users are advised to deploy new patches before attackers start exploiting the issues and compromising their systems.

Source: https://thehackernews.com/2020/07/windows-security-update.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+TheHackersNews+%28The+Hackers+News+-+Cyber+Security+Blog%29&_m=3n.009a.2264.pq0ao0e48j.1f7i

At Itera we can help you.
Contact a specialist: seguridad@iteraprocess.com