Mozilla fixes 2 wildly exploited zero-day vulnerabilities in Firefox
Mozilla has released fixes for 2 zero-day vulnerabilities in Firefox. The fixes are available in the newly released version of the browser, Firefox 74.0.1.The updated version fixes the vulnerabilities CVE-2020-6819 and CVE-2020-6820 Vulnerability and impact Both CVE-2020-6819 and CVE-2020-6820 are use-after-free vulnerabilities and occur due to improper memory space management by Firefox. These bugs when exploited allow the hacker to write codes into Firefox's memory and have it executed in the
Mozilla fixes 2 wildly exploited zero-day vulnerabilities in Firefox
Mozilla has released fixes for 2 zero-day vulnerabilities in Firefox. The fixes are available in the newly released version of the browser, Firefox 74.0.1.The updated version fixes the vulnerabilities CVE-2020-6819 and CVE-2020-6820 Vulnerability and impact Both CVE-2020-6819 and CVE-2020-6820 are use-after-free vulnerabilities and occur due to improper memory space management by Firefox. These bugs when exploited allow the hacker to write codes into Firefox's memory and have it executed in the
Launching Intune Application Management in Patch Connect Plus
Hello folks, We are happy to announce that Patch Connect Plus now features Intune Application Management. You can seamlessly create and deploy third party applications in Microsoft Intune, in a hassle-free manner. With Intune Application Management, you can Create third party applications in Mocrosoft Intune. Leverage the cloud platform to deploy third party applications. Use pre-defined application templates to ease the process of creating applications. Customize deployment using pre/post deployment
Zoom issued fix for an UNC vulnerability that compromises Windows credentials
Zoom patched a fatal flaw in the Zoom Windows client that allows attackers to use its chat feature to share malicious links that once clicked will leak the Windows network credentials of the victim. Such attacks are possible because Zoom for Windows not only converts normal URLs into a clickable link but also Windows networking Universal Naming Convention (UNC) paths. UNC is used to locate a network resource, such as a file hosted on an attacker-controlled SMB (Server Message Block) server. When
Zoom issued fix for an UNC vulnerability that compromises Windows credentials
Zoom patched a fatal flaw in the Zoom Windows client that allows attackers to use its chat feature to share malicious links that once clicked will leak the Windows network credentials of the victim. Such attacks are possible because Zoom for Windows not only converts normal URLs into a clickable link but also Windows networking Universal Naming Convention (UNC) paths. UNC is used to locate a network resource, such as a file hosted on an attacker-controlled SMB (Server Message Block) server. When
PAM360 new build 4101
Hi, PAM360 4101 has been released and is now available for download. This build comes with an enhancement to the already existing password access control workflow. It is now possible for administrators to provide Just in Time (JIT) privilege elevation to user accounts in local groups of Windows resources. Please see our Release Notes to learn in detail about the same. How to Upgrade to Build 4101? If you are an existing customer of PAM360, download the upgrade pack from the following page: https://www.manageengine.com/privileged-access-management/upgradepack.html
[Community Digest] ServiceDesk Plus - March 2020
Every month is an opportunity to learn or discover something new with this quote, let's see the top activities that happened in are ServiceDesk Plus community for the month of March. Version and Build releases: We had 4 builds released, 11106, 11107, 11108 and 11109 Release Note on "11107" build - https://pitstop.manageengine.com/portal/community/topic/servicedesk-plus-11107-released Reason for revoke of "11108" build - https://pitstop.manageengine.com/portal/community/topic/important-notice-for-users-migrating-to-11108
Google Chrome releases Stable Channel Update
Hello guys, Google Chrome has updated its stable channel to 80.0.3987.162 for Windows, Mac, and Linux systems. This update also includes 8 security fixes. Below are the fixes that require immediate attention CVE ID Severity Vulnerability CVE-2020-6450 High Use after free in WebAudio CVE-2020-6451 High Use after free in WebAudio CVE-2020-6452 High Heap buffer overflow in media Initiate a sync between the Vulnerability Manager Plus server and the Central Vulnerability database
Google Chrome releases Stable Channel Update
Hello guys, Google Chrome has updated its stable channel to 80.0.3987.162 for Windows, Mac, and Linux systems. This update also includes 8 security fixes. Below are the fixes that require immediate attention CVE ID Severity Vulnerability CVE-2020-6450 High Use after free in WebAudio CVE-2020-6451 High Use after free in WebAudio CVE-2020-6452 High Heap buffer overflow in media Initiate a sync between the Desktop Central server and the Central Vulnerability database and search
Google Chrome releases Stable Channel Update
Hello guys, Google Chrome has updated its stable channel to 80.0.3987.162 for Windows, Mac, and Linux systems. This update also includes 8 security fixes. Below are the fixes that require immediate attention CVE ID Severity Vulnerability CVE-2020-6450 High Use after free in WebAudio CVE-2020-6451 High Use after free in WebAudio CVE-2020-6452 High Heap buffer overflow in media Initiate a sync between the Patch Manager Plus server and the Central Vulnerability database and search
[Blog] Transforming User Experience
Visuals give us a better understanding of not just the content, but what is behind the content — easier, faster, and clearer than just a cluster of written words. Why User experience matters for an Enterprise Software? The success of any application depends on how usable is the product to the user and how easy it is for your user to interact with. Let us take a look on how ServiceDesk plus interface provides an updated look and usability improvements. Themes for Requester Self-Service Portal:
[Tips & Tricks] How to find OID's for new devices ?
What is an OID? Object Identifier (OID) is the unique id provided by the manufacturer to identify the device/system information. Each device's information would have a unique OID. Here we are going to discuss the 2 easy ways to find OID information, 1. Get a MIB file from the Manufacturer 2. SNMP walk using a MIB browser 2.1. Using Inbuilt MIB browser in SDP 2.2. Using External MIB browser Get a
[DidYouKnow-34] Easy Resource Management
Technology helps in completing work more efficiently, faster and with great flexibility. Do you know that ServiceDesk Plus helps you in managing your daily work more conveniently? ServiceDesk Plus allows creating multiple tasks under a single request and this can be assigned to different technicians. Every day, as an admin, you are supposed to manage all these tasks. Most of the requests may contain more number of tasks and it becomes tedious to manage all these tasks in one go. So here comes the Resource
Mobile Device Manager Plus- Free Training
Join us on 14th, 21st and 28th April 2020 at 6:30 GMT or 11:30 EDT for a free training session on ManageEngine's enterprise mobility management solution - Mobile Device Manager Plus! Following topics will be covered on April 14: Device Onboarding and Provisioning: Enrollment methods to manage BYOD and corporate devices Applying corporate configurations like VPN, e-mail and Wi-Fi to devices Containerizing corporate data on personally-owned devices Monitoring devices accessing organization's corporate
[DidYouKnow-33] Initiate a quick chat from request collaboration
As you all may know, the Request collaboration feature was released with the build 9220 to overcome various hassles. Few are listed below, When multiple Technicians work on the same request in parallel, the changes(s) made by each of them are not known to one another. Such as, #The same request might be assigned to different technicians #Multiple responses might be sent for the same request by different technicians #Modifications made on a request and so on. As an enhancement to the request collaboration,
[ForYourInformation -32] Automation to delete workstation/server or move to Disposed/Expired state
In ServiceDesk Plus you can manage all your IT and Non-IT assets, the tool can also handle, software asset management, software metering, software compliance, multiple methods of scanning assets(which includes automatic scan), barcode scans and much more.. click here to more details. Usage of any application over a period of time will have a proportional increase in data and content, which can cause a lag in the application performance. Clearing out unnecessary content ( like assets) is essential
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators,
WFH Essentials for managing and securing remote workforce
As most of the organizations are now forced to adopt Remote Work culture, managing and securing endpoints can be an amplified challenge. To help you ensure business continuity as your organization transitions to remote work our ManageEngine seasoned experts will be offering a 3-week webinar series to help you navigate through all the endpoint management and security challenges that IT teams are currently facing. By the end of the series, you will have a complete understanding of: All the challenges
Upgrade DataSecurity Plus to build 6013 to fix security issues
Hello All, We have fixed the Remote Code Execution and authentication bypass vulnerabilities reported by Sahil Dhar (xen1thlabs). If your current build is between 6000 and 6012, please upgrade the product immediately to the build 6013 to ensure that DataSecurity Plus continues to run safely and efficiently. To Upgrade: Download Service Pack Apologies for the inconvenience caused. Security is our foremost priority. We will strive to maintain the
[DidYouKnow-32] Pending request count can be considered as an important KPI
The measure of time taken for tickets in Pending Status can be a perfect KPI in an IT Service Desk operations, let see how? In a Helpdesk environment, tickets are handled in 2 different ways. We expect tickets raised by the users to get resolved in the first interaction, in reality, most of them require back and forth conversations, between support tech and the user for various reasons. These ticket needs more attention and will be handled with different tickets status (on-hold, waiting for approval,
All Windows versions compromised due to critical Zero-day vulnerabilities
Hello folks, Two critical zero-day vulnerabilities have been discovered in Windows Adobe Type Manager Library. Both these vulnerabilities are unpatched and allows attackers to take remote control of the systems affected (Remote Code Execution vulnerability). As of now, the attacks are not widespread and only limited targeted systems are hit. Versions affected All versions of the Windows Operating system is susceptible to attacks including Windows version 10, 8.1, 7, and Server 2008, 2012, 2016,
All Windows versions compromised due to critical Zero-day vulnerabilities
Hello folks, Two critical zero-day vulnerabilities have been discovered in Windows Adobe Type Manager Library. Both these vulnerabilities are unpatched and allows attackers to take remote control of the systems affected (Remote Code Execution vulnerability). As of now, the attacks are not widespread and only limited targeted systems are hit. Versions affected All versions of the Windows Operating system is susceptible to attacks including Windows version 10, 8.1, 7, and Server 2008, 2012, 2016,
Opening up ManageEngine's Secure Remote Access Toolkit to the World
Hi All, Due to the rapid outspread of COVID-19, Zoho Corporation (including all three brands: Zoho, ManageEngine, and WebNMS) has decided to switch its entire workforce to a remote work model. Until this global crisis has been brought under control, the majority of our 8,000+ employees residing in over 10 countries will be working from home. We're able to make this shift seamlessly only with the help of our Zoho suite of apps for remote collaboration, as well as the ManageEngine solutions for
Opening up ManageEngine's Secure Remote Access Toolkit to the World
Hi All, Due to the rapid outspread of COVID-19, Zoho Corporation (including all three brands: Zoho, ManageEngine, and WebNMS) has decided to switch its entire workforce to a remote work model. Until this global crisis has been brought under control, the majority of our 8,000+ employees residing in over 10 countries will be working from home. We're able to make this shift seamlessly only with the help of our Zoho suite of apps for remote collaboration, as well as the ManageEngine solutions for
Opening up ManageEngine's Secure Remote Access Toolkit to the World
Hi All, Due to the rapid outspread of COVID-19, Zoho Corporation (including all three brands: Zoho, ManageEngine, and WebNMS) has decided to switch its entire workforce to a remote work model. Until this global crisis has been brought under control, the majority of our 8,000+ employees residing in over 10 countries will be working from home. We're able to make this shift seamlessly only with the help of our Zoho suite of apps for remote collaboration, as well as the ManageEngine solutions for
Opening up ManageEngine's Secure Remote Access Toolkit to the World
Hi All, Due to the rapid outspread of COVID-19, Zoho Corporation (including all three brands: Zoho, ManageEngine, and WebNMS) has decided to switch its entire workforce to a remote work model. Until this global crisis has been brought under control, the majority of our 8,000+ employees residing in over 10 countries will be working from home. We're able to make this shift seamlessly only with the help of our Zoho suite of apps for remote collaboration, as well as the ManageEngine solutions for
Best virtual server management practices for exceptional IT operations
IT teams have a hard time handling zombie VMs, host hardware configuration backups, CPU resource allocation, and memory utilization. So we came up with practical, tried-and-true guidelines for impeccable virtual server management. This ebook sheds light on: Virtual server monitoring and management cycle 10 tried-and-true virtual server monitoring best practices How to choose a suitable virtual server monitoring tool Read more: https://https://www.manageengine.com/network-monitoring/server-virtualization-management-best-practices.html
Zero day Vulnerability - Need immediate attention! Desktop Central Server might be compromised.
Dear Customer's, At ManageEngine, we consider security as our top priority. That’s why we bring it to your immediate attention, that some versions of Desktop Central Server contain an unauthenticated remote code execution vulnerability (originally reported by Steven Seeley of Source Incite). Since this vulnerability has been declared as "Zero Day - Vulnerability", we could see that some of the enterprises were targeted and few customers network compromised. Ever since this vulnerability was brought
[Blog] The best ways to sell your Self service to your employees!!
How well do we feel when we brew our coffee from the Vending machine? We get exactly what we want. We know Self Service is beneficial to us because it saves time and helps to get quick service. Businesses with Self Service have always been delivering the service on time to the end-users and in turn, raise the bar to employee satisfaction. With that said, Convincing the Employees to use the Self-service is not as easy as building a Service Catalog. WHY? 1. Not all our users are tech-savvy. They
ServiceDesk Plus 11107 Released
Dear Users, We are glad to announce the release of latest servicepack 11107 for ServiceDesk Plus. This servicepack includes new enhancements , behaviour changes and Issue fixes. Enhancements : 1) Operational-level Agreement Configure Operational Level Agreement to ensure that the SLA is achieved by the internal groups working on the request. 2) User Addition from instance based on ESM directory application settings Under ESM Directory >> General Settings >> Application Settings, you can enable the
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Remote Access Plus for remote work
Due to the recent outbreak of COVID-19, most global enterprises are adopting work from home policies. Organizations may extend their remote work operations well into the future to keep their employees safe. This is the new normal for IT administrators, who now have to work around the clock to monitor all of their enterprise’s endpoints remotely. The go-to solution for IT technicians is ManageEngine Remote Access Plus, which can help you adapt to remote work culture. Benefits of having this remote
Google Chrome releases stable version 80.0.3987.149
Hello folks, Google Chrome has recently updated the stable channel to 80.0.3987.149. This version comes with fixes for 13 security bugs, of which nine are rated High in severity. The CVE IDs of the patches released are as follows. CVE-2020-6422 CVE-2020-6424 CVE-2020-6425 CVE-2020-6426 CVE-2020-6427 CVE-2020-6428 CVE-2020-6429 CVE-2019-20503 CVE-2020-6449 Vulnerability Manager Plus now supports Google Chrome's latest version 80.0.3987.149 for Windows, Mac, and Linux. If you're looking
Next Page