DLIO Network Solutions

DLIO Network Solutions We provide total Network solutions

ඔබගේ වාහනය සොර සතුරන්ගෙන් ආරාක්ශිතද?සොර සතුරන් වෑඩි මේ කාලයේ අදම ඔබගේ වාහනයට GPS tracking පද්වතියක ආරක්ශාව ලබා ගන්න.* ඔබ...
13/12/2022

ඔබගේ වාහනය සොර සතුරන්ගෙන් ආරාක්ශිතද?

සොර සතුරන් වෑඩි මේ කාලයේ අදම ඔබගේ වාහනයට GPS tracking පද්වතියක ආරක්ශාව ලබා ගන්න.

* ඔබට ඔබගේ ජන්ගම දුරකතනයෙන්ම වාහනය පාලනය කල හෑක.
* වාහනය අස්තාන ගතවුහොත් වාහනයට දුරකතන ඈමතුමක් ලබා ගෙන ඈතුලත සිදුවන දේ සවන් දිමේ හෑකියාව.
* අවශය උ විට දුරකතනය බාවිතා කොට Engine Stop කිරිමේ හෑකියාව.
* වාහනය ගමන් කරන දිශාව Google Map ඔස්සෙ පරික්ශා කිරිමේ හෑකියාව.
*Offline alarm alert ලබා ගෑනිමේ හෑකියාව.

Contact: 071-7518566

Contact us
DLIO Network Solutions
No 201/A,
Gabadagoda,
Payagala,

Best Tracking Solution for your Vehicle* Engine cut-off facility.* Live voice Recording.* Reporting* Google map synchron...
08/12/2022

Best Tracking Solution for your Vehicle

* Engine cut-off facility.
* Live voice Recording.
* Reporting
* Google map synchronization

සොර සතුරන් වෑඩි මේ කාලයේ ඔබගෙ වාහනයේ අරාක්ශාව ගෑන ඔබ සෑලකිලිමත්ද?

අදම ඔබගේ වාහනයට GPS tracking පද්වතියක ආරක්ශාව ලබා ගන්න, ඔබට ඔබගේ ජන්ගම දුරකතනයෙන්ම වාහනය පාලනය කල හෑක. වාහනය අස්තාන ගතවුහොත් වාහනයට දුරකතන ඈමතුමක් ලබා ගෙන ඈතුලත සිදුවන දේ සවන් දිමේ හෑකියාව.
අවශය උ විට දුරකතනය බාවිතා කොට Engine Stop කිරිමේ හෑකියාව. වාහනය ගමන් කරන දිශාව Google Map ඔස්සෙ පරික්ශා කිරිමේ හෑකියාව.

Contact us
DLIO Network Solutions
No 201/A,
Gabadagoda,
Payagala,

Contact: 071-7518566

Do you have any IT issue? we can fix your matter affordable priceContact us: +94 71 751 8566
07/10/2022

Do you have any IT issue? we can fix your matter affordable price

Contact us: +94 71 751 8566

We can fix your IT Related issues.
10/09/2022

We can fix your IT Related issues.

New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a MessagePopular video conferencing service Zoom ha...
25/05/2022

New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a Message

Popular video conferencing service Zoom has resolved as many as four security vulnerabilities, which could be exploited to compromise another user over chat by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages and execute malicious code.

Tracked from CVE-2022-22784 through CVE-2022-22787, the issues range between 5.9 and 8.1 in severity. Ivan Fratric of Google Project Zero has been credited with discovering and reporting all the four flaws in February 2022.

The list of bugs is as follows -

CVE-2022-22784 (CVSS score: 8.1) - Improper XML Parsing in Zoom Client for Meetings
CVE-2022-22785 (CVSS score: 5.9) - Improperly constrained session cookies in Zoom Client for Meetings
CVE-2022-22786 (CVSS score: 7.5) - Update package downgrade in Zoom Client for Meetings for Windows
CVE-2022-22787 (CVSS score: 5.9) - Insufficient hostname validation during server switch in Zoom Client for Meetings
With Zoom's chat functionality built on top of the XMPP standard, successful exploitation of the issues could enable an attacker to force a vulnerable client to masquerade a Zoom user, connect to a malicious server, and even download a rogue update, resulting in arbitrary code ex*****on stemming from a downgrade attack.

Fratric dubbed the zero-click attack sequence as a case of "XMPP Stanza Smuggling," adding "one user might be able to spoof messages as if coming from another user" and that "an attacker can send control messages which will be accepted as if coming from the server."

At its core, the issues take advantage of parsing inconsistencies between XML parsers in Zoom's client and server to "smuggle" arbitrary XMPP stanzas — a basic unit of communication in XMPP — to the victim client.

CyberSecurity
Specifically, the exploit chain can be weaponized to hijack the software update mechanism and make the client connect to a man-in-the-middle server that serves up an old, less secure version of the Zoom client.

While the downgrade attack singles out the Windows version of the app, CVE-2022-22784, CVE-2022-22785, and CVE-2022-22787 impact Android, iOS, Linux, macOS, and Windows.

The patches arrive less than a month after Zoom addressed two high-severity flaws (CVE-2022-22782 and CVE-2022-22783) that could lead to local privilege escalation and exposure of memory content in its on-premise Meeting services. Also fixed was another instance of a downgrade attack (CVE-2022-22781) in Zoom's macOS app.

Users of the application are recommended to update to the latest version (5.10.0) to mitigate any potential threats arising out of active exploitation of the flaws.

Windows 10 Users Beware—New Hacker Attack Confirmed By Google, MicrosoftAs Microsoft confirms a Google-disclosed and unp...
10/07/2021

Windows 10 Users Beware—New Hacker Attack Confirmed By Google, Microsoft

As Microsoft confirms a Google-disclosed and unpatched zero-day vulnerability is being targeted by attackers right now, here's what you need to know.

Microsoft has confirmed that an unpatched 'zero-day' vulnerability in the Windows operating system, affecting every version from Windows 7 through to Windows 10, is being actively targeted. Microsoft was first informed of the vulnerability by Google's Project Zero team, a dedicated unit comprised of leading vulnerability hunters, which tracks down these so-called zero-day security bugs. Because Project Zero had identified that the security problem was being actively exploited in the wild by attackers, it gave Microsoft a deadline of just seven days to fix it before disclosure. Microsoft failed to issue a security patch within that hugely restrictive timeframe, and Google went ahead and published details of the zero-day vulnerability, which is tracked as CVE-2020-17087.

The bug itself sits within the Windows Kernel Cryptography Driver, known as cng.sys, and could allow an attacker to escalate the privileges they have when accessing a Windows machine. The full technical detail can be found within the Google Project Zero disclosure, but slightly more simply put, it's a memory buffer-overflow problem that could give an attacker admin-level control of the targeted Windows computer.

While attackers are known to be actively targeting Windows systems right now, that doesn't mean your system is going down. Firstly, I should point out that, according to a confirmation from Shane Huntley, director of Google's Threat Analysis Group, the attackers spotted exploiting the vulnerability are not targeting any U.S. election-related systems at this point. That's good news, and there's more.

While Microsoft has confirmed that the reported attack is real, it also suggests that it is limited in scope being targeted in nature. This is not, at least as of yet, a widespread broad-sweep exploit. Microsoft says that it has no evidence of any indication of widespread exploits.

Why You Should Stop Using Your Facebook Messenger App
Apple iMessage Soundly Beaten By WhatsApp’s Stunning New Update
Is Google’s ‘Nasty’ New Technology Secretly Tracking Your iPhone?

06/07/2021

I stopped by the house of the original Apple garage when on a trip from Australia. They were setting it up for the upcoming Sony Steve Jobs biopic. Took some...

06/07/2021

Google was started in this garage office in California in 1998

Today, Google is an $800 billion tech behemoth with nearly 90,000 employees spread around the world. But, 20 years ago, Google was a fledgling internet company consisting of its two founders, Larry Page and Sergey Brin, working out of a garage.

Now, you can see what it was like for Page and Brin to work out of that cramped garage in 1998, thanks to a new virtual tour posted online by Google on Thursday.

Google is celebrating its 20th birthday today (though the company was officially incorporated on September 4, 1998, Google marks its anniversary each year on September 27). The company is marking its two-decade celebration by recreating the Menlo Park, California garage where Page and Brin first launched the website.

Google historians can now take a virtual tour of Google’s earliest office in new street-view 360-degree images from Google Maps. The images are titled “Susan’s Garage,” a reference to Susan Wojcicki, who rented the garage of her Menlo Park home to her friends, Page and Brin, when they were Ph.D. students at Stanford looking to get their new company off the ground.

Google’s recreation of the small garage office in street-view includes a wooden work bench with a single 20-year-old desktop computer displaying an image of the beta version of Google’s original logo and homepage. There are also a lot of stacked cardboard boxes, exposed wires, heating ducts, a washer-dryer, and a beer bottle.

You can even explore other rooms of Wojcicki’s old house, where you can see more old desktop computers, a hockey jersey with Brin’s name on the back, and a decidedly low-tech whiteboard featuring the phrase “Google Worldwide Headquarters.”

Of course, Wojcicki later became Google’s 18th employee and is now the CEO of Google-owned YouTube. In 2015, she said she charged Page and Brin $1,700 per month to rent the space in her garage. Wojcicki, who was working in the marketing department at Intel at the time, needed help with the rent at her four-bedroom house.

″[Rent] is even more expensive now, but it was expensive back then,” she said in an interview at Salesforce’s Dreamforce conference three years ago.

Wojcicki even took a security deposit from the two computer scientists, who had previously been working out of their Stanford dorm rooms on the algorithm that would power Google’s search engine.

Page and Brin moved into the garage in September 1998, a month after they received a $100,000 investment from Sun Microsystems co-founder Andy Bechtolsheim. Later that year, Google picked up more investment money, including from Amazon founder Jeff Bezos, who met the pair through an Amazon employee and eventually invested a reported $1 million in the startup. (Bezos’ initial stake in the company would be worth nearly $4 billion today, based on Google’s current stock price.)

By March 1999, Page and Brin moved Google into actual offices in Palo Alto. That year, the company reported $220,000 in annual revenue — a number that grew to nearly $1 billion by 2003. That same year, Google leased an office complex in Mountain View, California, which is now the site of the “Googleplex,” the company’s 2 million square-foot headquarters, which houses over 20,000 employees. Page is now CEO of Google’s parent company, Alphabet, while Brin is president.

Along with the virtual look at Google’s humble beginnings, the company is also celebrating its birthday with other fun features like a new animated Google Doodle on its homepage and an interactive graphic showing some of the most popular Google searches of the past 20 years and other interesting tidbits. (Fyi: “Orlando Bloom was the most searched actor of 2003 and 2004.”

Steve Jobs original house and garage (Apple)
06/07/2021

Steve Jobs original house and garage (Apple)

I stopped by the house of the original Apple garage when on a trip from Australia. They were setting it up for the upcoming Sony Steve Jobs biopic. Took some...

Critical Auth Bypass Bug Affects VMware Carbon Black App ControlVMware has rolled out security updates to resolve a crit...
02/07/2021

Critical Auth Bypass Bug Affects VMware Carbon Black App Control

VMware has rolled out security updates to resolve a critical flaw affecting Carbon Black App Control that could be exploited to bypass authentication and take control of vulnerable systems.

The vulnerability, identified as CVE-2021-21998, is rated 9.4 out of 10 in severity by the industry-standard Common Vulnerability Scoring System (CVSS) and affects App Control (AppC) versions 8.0.x, 8.1.x, 8.5.x, and 8.6.x.

Carbon Black App Control is a security solution designed to lock down critical systems and servers to prevent unauthorized changes in the face of cyber-attacks and ensure compliance with regulatory mandates such as PCI-DSS, HIPAA, GDPR, SOX, FISMA, and NERC.

"A malicious actor with network access to the VMware Carbon Black App Control management server might be able to obtain administrative access to the product without the need to authenticate," the California-based cloud computing and virtualization technology company said in an advisory.

CVE-2021-21998 is the second time VMware is addressing an authentication bypass issue in its Carbon Black endpoint security software. Earlier this April, the company fixed an incorrect URL handling vulnerability in the Carbon Black Cloud Workload appliance (CVE-2021-21982) that could be exploited to gain access to the administration API.

That's not all. VMware also patched a local privilege escalation bug affecting VMware Tools for Windows, VMware Remote Console for Windows (VMRC for Windows), and VMware App Volumes (CVE-2021-21999, CVSS score: 7.8) that could allow a bad actor to execute arbitrary code on affected systems.

"An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as 'openssl.cnf' in an unrestricted directory which would allow code to be executed with elevated privileges," VMware noted.

Address

Kalutara

Telephone

+94717518566

Website

Alerts

Be the first to know and let us send you an email when DLIO Network Solutions posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Share