CISA Adds Two Known Exploited Vulnerabilities to Catalog 

This article is contributed. See the original author and article here.

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added vulnerabilities in the catalog, click on the arrow in the “Date Added to Catalog” column, which will sort by descending dates. 

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known CVEs that carry significant risk to the federal enterprise. BOD 22-01 requires FCEB agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information. 

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the Catalog that meet the specified criteria. 

Cisco Releases Security Update for Multiple Products

This article is contributed. See the original author and article here.

Cisco has released a security update to address a vulnerability affecting Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software. This vulnerability could allow a remote attacker to obtain sensitive information. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page.

CISA encourages users and administrators to review the following Cisco advisory and apply the necessary updates:
•    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability cisco-sa-asaftd-rsa-key-leak-Ms7UEfZz

#StopRansomware: Zeppelin Ransomware

This article is contributed. See the original author and article here.

5841ef35aaff08bb03d25e5afe3856a2

ffd228b0d7afe7cab4e9734f7093e7ba01c5a06e

1e3c5a0aa079f8dfcc49cdca82891ab78d016a919d9810120b79c5deb332f388

d6c4b253ab1d169cf312fec12cc9a28f

0f47c279fea1423c7a0e7bc967d9ff3fae7a0de8

347f14497df4df73bc414f4e852c5490b12db991a4b3811712bac7476a3f1bc9

fba7180ad49d6a7f3c60c890e2784704

f561f9e3c949fe87f12dbfa166ffb2eb85712419

7d8c4c742689c097ac861fcbf7734709fd7dcab1f7ef2ceffb4b0b7dec109f55

bc6c991941d9afbd522fa0a2a248a97a

a243ce234fc8294e2e2e526418b4eaadc2d6c84f

37c320983ae4c1fd0897736a53e5b0481edb1d1d91b366f047aa024b0fc0a86e

f3490951ae51922cb360a3d76a670159

e2cb60be111716e32db7ca2365ad6e73c30f0e21

894b03ed203cfa712a28ec472efec0ca9a55d6058115970fe7d1697a3ddb0072

e4f1f05c2e6c3fc2f3336a8c8799ffb4

dbd9fcf2b05e703d34181c46f4c22392b9fcc1da

307877881957a297e41d75c84e9a965f1cd07ac9d026314dcaff55c4da23d03e

aa2048271f0aef3383480ce4a7c93b52

512b16ea74027fa4d0055831de5e51278812c8de

bafd3434f3ba5bb9685e239762281d4c7504de7e0cfd9d6394e4a85b4882ff5d

f66b738e1bfe1f8aab510abed850c424

571f50fee0acad1da39fe06c75116461800cc719

faa79c796c27b11c4f007023e50509662eac4bca99a71b26a9122c260abfb3c6

bb30f050546f5d6e61fafc59eaf097c3

ee44179f64918f72a8d2e88a5074d89efab3d81b

e48cf17caffc40815efb907e522475722f059990afc19ac516592231a783e878

78621f1e196497d440afb57f4609fcf9

eed7c3bb3fc5181b88abeed2204997f350324022

4a4be110d587421ad50d2b1a38b108fa05f314631066a2e96a1c85cc05814080

f4e0ee0200de397691748a2cdcd7e34a

bd3f6b878284a63c72e8354e877e3f48d6fca53c

9ef90ec912543cc24e18e73299296f14cb2c931a5d633d4c097efa372ae59846

cf5a358a22326f09fd55983bb812b7d8

1addcffae4fd4211ea24202783c2ffad6771aa34

dd89d939c941a53d6188232288a3bd73ba9baf0b4ca6bf6ccca697d9ee42533f

7afe492a38ca6f27e24028aab68406b5

5870a3adbce9737319f3c9461586d5f2afbc7adb

79d6e498e7789aaccd8caa610e8c15836267c6a668c322111708cf80bc38286c

1da1c0115caca5ebf064380eb7490041

5edb8b651c7013ebaba2eb81c87df76a1e0724d6

b22b3625bcce7b010c0ee621434878c5f8d7691c2a101ae248dd221a70668ac0

8c3c663ffcf363d087f4e114a79945ca

905726d178962dd1d7fe87504d051aca440740b8

961fbc7641f04f9fed8391c387f01d64435dda6af1164be58c4cb808b08cc910

17c5cae3bce5832dd42986fe612517d9

6f70e73c53d7622d8c4808ae7849133df1343484

d618c1ccd24d29e911cd3e899a4df2625155297e80f4c5c1354bc2e79f70768c

bfe7f54f1f0640936dd7a3384608b1f6

9436ccee41c01ca3cb4db55c10884615aba76d19

8170612574f914eec9e66902767b834432a75b1d6ae510f77546af2a291a48a2

f28af04ef0370addfebfdd31f1ec25ed

cfcfa995c15d9f33de21d0dd88d3b95d0f91d6bc

5326f52bd9a7a52759fe2fde3407dc28e8c2caa33abf1c09c47b192a1c004c12

f3bcad5358f89df1eb0294ef53f54437

eb036759beb28f86ee981bdca4fad24152b82d8c

6bafc7e2c7edc2167db187f50106e57b49d4a0e1b9269f1d8a40f824f2ccb42b

b1f6370582fbaf5c51e826fecef53cd7

4b2d0127699f708a8116bff8f25c9d6140033197

f7af51f1b2b98b482885b702508bd65d310108a506e6d8cef3986e69f972c67d

de785ed922d4e737dc0fa0bb30a4de8b

4d280105e724db851f03de8fc76409ef4057ff2c

bc214c74bdf6f6781f0de994750ba3c50c0e10d9db3483183bd47f5cef154509

7a296f7c1ac4aeee18d4c23476735be7

c13542310f7a4e50a78247fc7334096ca09c5d7f

ed1548744db512a5502474116828f75737aec8bb11133d5e4ad44be16aa3666b

37f18b38e1af6533d93bbb3f2ddb86dc

d3929331d9bc278dea5607aec1574012a08de861

cf9b6dda84cbf2dbfc6edd7a740f50bddc128842565c590d8126e5d93c024ff2

291de974e5cbe5e3d47e3d17487e027f

def93f18aaf146fe8f3c4f9a257364f181197608

21807d9fcaa91a0945e80d92778760e7856268883d36139a1ad29ab91f9d983d

99d59c862a082b207a868e409ce2d97c

908a9026d61717b5fa29959478a9bd939da9206f

0d22d3d637930e7c26a0f16513ec438243a8a01ea9c9d856acbcda61fcb7b499

d27125d534e398f1873b7f4835a79f09

1862f063c30cd02cfea6070d3dba41ac5eee2a35

6fbfc8319ed7996761b613c18c8cb6b92a1eaed1555dae6c6b8e2594ac5fa2b9

4534f2afe5f7df1d998f37ad4e35afeb

e2cc94e471509f9fa58620b8bb56d77f2cfe74b0

e8596675fef4ad8378e4220c22f4358fdb4a20531b59d7df5382c421867520a9

7ab0676262c681b8ec15bdada17d7476

2f1803d444891abb604864d476a8feac0d614f77

353e59e96cbf6ea6c16d06da5579d3815aaaeeefacabd7b35ba31f7b17207c5b

d7d3d23a5e796be844af443bda5cd67e

a9771c591f6ccc2f3419d571c64ab93228785771

85f9bf4d07bc2ac1891e367f077dd513d6ca07705bffd1b648d32a7b2dc396f5

0a1cd4efda7543cec406a6822418daf6

af4f8d889d6a2049e7a379ea197f8cd361feb074

614cb70659ef5bb2f641f09785adc4ab5873e0564a5303252d3c141a899253b2

23eda650479fc4908d0ddff713508025

b1e6527c10f68586f7f1a279ed439d46c3f12a06

fb3e0f1e6f53ffe680d66d2143f06eb6363897d374dc5dc63eb2f28188b8ad83

6607d8c1a28d7538e2a6565cf40d1260

f618879c011cde344066072949f025827feea663

594df9c402abfdc3c838d871c3395ac047f256b2ac2fd6ff66b371252978348d

caa7a669da39ffd8a3a4f3419018b363

44538b7f8f065e3cef0049089a8522a76a7fccc6

2dffe3ba5c70af51ddf0ff5a322eba0746f3bf3ae0751beb3dc0059ed3faaf3d

48b844494a746ca96c7b96d6bd90f45f

7bf83b98f798f3a8f4ce85b6d29554a435e516e3

45fba1ef399f41227ae4d14228253237b5eb464f56cab92c91a6a964dc790622

9c13ab7b79aec8dc02869999773cd4b2

4b4d865132329e0dd1d129e85fc4fa9ad0c1d206

774ef04333c3fb2a6a4407654e28c2900c62bd202ad6e5909336eb9bc180d279

450e5bf4b42691924d09267ac1a570cb

665a563157f4aa0033a15c88f55ac4fa28397b49

677035259ba8342f1a624fd09168c42017bdca9ebc0b39bf6c37852899331460

51104215a618a5f56ad9c884d6832f79

801580a46f9759ceeeebbce419d879e2ed6943fe

26ec12b63c0e4e60d839aea592c4b5dcff853589b53626e1dbf8c656f4ee6c64

73627cbe2ba139e2ec26889a4e8d6284

1116dc35993fce8118e1e5421000a70b6777433f

37efe10b04090995e2f3d9f932c3653b27a65fc76811fa583934a725d41a6b08

935f54b6609c5339001579e96dc34244

a809327d39fab61bfcfac0c97b1d4b3bfb9a2cfe

a5847867730e7849117c31cdae8bb0a25004635d49f366fbfaebce034d865d7d

ba681db97f283c2e784d9bb4969b1f5a

5d28acf52f399793e82ec7e79da47d372d9175d7

e61edbddf9aed8a52e9be1165a0440f1b6e9943ae634148df0d0517a0cf2db13

c1ab7b68262b5ab31c45327e7138fd25

b8c74327831e460d2b2a8eb7e68ee68938779d8d

746f0c02c832b079aec221c04d2a4eb790287f6d10d39b95595a7df4086f457f

f818938b987236cdd41195796b4c1fb5

bfed40f050175935277c802cbbbce132f44c06ec

b191a004b6d8a706aba82a2d1052bcb7bed0c286a0a6e4e0c4723f073af52e7c

0a1cd4efda7543cec406a6822418daf6

af4f8d889d6a2049e7a379ea197f8cd361feb074

614cb70659ef5bb2f641f09785adc4ab5873e0564a5303252d3c141a899253b2

d7d3d23a5e796be844af443bda5cd67e

a9771c591f6ccc2f3419d571c64ab93228785771

85f9bf4d07bc2ac1891e367f077dd513d6ca07705bffd1b648d32a7b2dc396f5

7ab0676262c681b8ec15bdada17d7476

2f1803d444891abb604864d476a8feac0d614f77

353e59e96cbf6ea6c16d06da5579d3815aaaeeefacabd7b35ba31f7b17207c5b

4534f2afe5f7df1d998f37ad4e35afeb

e2cc94e471509f9fa58620b8bb56d77f2cfe74b0

e8596675fef4ad8378e4220c22f4358fdb4a20531b59d7df5382c421867520a9

d27125d534e398f1873b7f4835a79f09

1862f063c30cd02cfea6070d3dba41ac5eee2a35

6fbfc8319ed7996761b613c18c8cb6b92a1eaed1555dae6c6b8e2594ac5fa2b9

99d59c862a082b207a868e409ce2d97c

908a9026d61717b5fa29959478a9bd939da9206f

0d22d3d637930e7c26a0f16513ec438243a8a01ea9c9d856acbcda61fcb7b499

#StopRansomware: Zeppelin Ransomware

This article is contributed. See the original author and article here.

CISA and the Federal Bureau of Investigation (FBI) have released a joint Cybersecurity Advisory (CSA), #StopRansomware: Zeppelin Ransomware, to provide information on Zeppelin Ransomware. Actors use Zeppelin Ransomware, a ransomware-as-a-service (RaaS), against a wide range of businesses and critical infrastructure organizations to encrypt victims’ files for financial gain.

CISA encourages organizations to review #StopRansomware: Zeppelin Ransomware for more information. Additionally, see StopRansomware.gov for guidance on ransomware protection, detection, and response. 

Azure SQL News Update: August 2022

This article is contributed. See the original author and article here.

Today Data Exposed goes live at 9AM PT on LearnTV. Every 4 weeks, we’ll do a News Update. We’ll include product updates, videos, blogs, etc. as well as upcoming events and things to look out for. If you missed the episode, you can find them all at https://aka.ms/AzureSQLYT. This month we’ll recap all the updates and announcements in the database space July.


 


You can read this blog to get all the updates and references mentioned in the show. Here’s the August 2022 update:


 


By the way, this was a special episode, because we filmed it live, for the first time in over two years, from the studios on Microsoft campus in Redmond, WA! If you missed the live stream, you won’t want to miss this in-person action: https://aka.ms/AzureSQLYT. Here are some of the references from our awesome guests:


 



 


Product updates


We technically discussed this in the last update, but I wanted to make sure everyone saw the important announcement and that is SQL Server 2012 has reached end of support. Please see the blog to see the four options you have if you find yourself with SQL Server 2012 instances.


 


The other big update (apart from the updates already covered by our guests) is the general availability of premium-series hardware for Azure SQL Managed Instance. This new hardware is what led to the study by Principled Technologies which shows how Azure SQL Managed Instance significantly outperformed Amazon RDS. Offering between double and five times the performance depending on workload, the three SQL Managed Instances tested also offer better price/performance by as much as 90.3%. The new hardware is available across different service tiers and might offer you more storage and more memory per vCore if you need it.


 


Other database updates


Starting in 2022 we’re trying to keep you updated on what’s going on with other database services at Microsoft, as we understand that oftentimes you’re using more than one service. Here are the updates I gathered from July 2022.


 














Azure Database for PostgreSQL-Hyperscale (Citus)



Flexible Server



General availability: Azure Database for PostgreSQL—Hyperscale (Citus) supports PostgreSQL minor versions (11.16, 12.11, 13.7, 14.3)


 


General availability: Citus 11 support for Azure Database for PostgreSQL – Hyperscale (Citus)


 


Public preview: Cross-region read replicas for Azure Database for PostgreSQL – Hyperscale (Citus)


 


Generally available: Basic tier updates for Azure Database for PostgreSQL – Hyperscale (Citus)


 


Generally available: vCore compute options for Azure Database for PostgreSQL – Hyperscale (Citus)



General Availability: Azure Database for MySQL – Flexible Server – On demand backups


 


Public preview: Azure Database for MySQL – Flexible Server data encryption with CMK


 


Generally available: New extensions for Azure Database for PostgreSQL – Flexible Server


 


Generally available: PostgreSQL 14 with Azure Database for PostgreSQL – Flexible Server


 


Generally available: Same-zone high availability for Azure Database for PostgreSQL – Flexible Server



 


Videos


We continued to release new and exciting episodes this month. Here is the list, or you can just see the playlist we created with all the episodes!



  • Daniel Perlovsky: How to explore your data estate using the Microsoft Purview data catalog

  • [MVP Edition] Wolfgang Strasser: Track your data supply chain using Azure Purview

  • Aditi Gupta: Backup and Restore your Azure Database for MySQL – Flexible Server workload

  • Pieter Vanhove: Bringing the power of blockchain to Azure SQL Database and SQL Server with ledger

  • [SQL Insider Series] Stephen Giles: Azure SQL DB – Automating scale up and down


 


We’ve also had some great Data Exposed Live sessions. Subscribe to our YouTube channel to see them all and get notified when we stream. Here are some of the recent live streams.



  • May the 4th be with Azure SQL (News Updates): this was a Star Wars-themed episode and it was so fun! Check it out for costumes, themed demos and slides, and fun!

  • Azure SQL & SQL Server 2022: Intelligent Database Futures

  • Azure SQL News Update: 2021 Year in Review

  • Welcome to SQL Server 2022 Live!


 


Blogs


As always, our team is busy writing blogs to share with you all. Blogs contain announcements, tips and tricks, deep dives, and more. Here’s the list I have of SQL-related topics you might want to check out.


 



 


Events


We have several in-person and virtual events coming in the next couple months. Here are a few to put on your calendar and register for from the Azure Data team:

August 8-12: Visual Studio Live!, Microsoft HQ
September 19-22: Data Platform Summit, Virtual
September 24: Data Saturday Dallas
October 1:
Data Saturday Atlanta

And, if you can’t make it to our events, find new, on-demand Data Exposed episodes released every Thursday at https://aka.ms/dataexposedyt


 


Microsoft Learn module of the month


Jumping the gun on the pick of the month, but in the case that any of you are newer to Azure SQL, it’s been a long time since I highlighted the Introduction to Azure SQL module. In this module, you’ll start with a brief history of why and how Microsoft built Azure SQL. You’ll then learn about the various deployment options and service tiers, including what to use for your organization, and when. These options include Azure SQL Database, Azure SQL Managed Instance, and SQL Server in an Azure virtual machine. Understanding what platform as a service (PaaS) encompasses and how it compares to a traditional SQL Server environment will help you understand what you do and don’t get when you move to the cloud.


 


Anna’s pick of the month!


OK this month my pick of the month is a new thing I’m dipping my toes into on TikTok. The goal is to start sharing database tips in a short, consumable fashion while I walk my dog. Check it out, follow along, and let me know what you think! It’s running on TikTok (https://www.tiktok.com/@analyticanna), Instagram (https://www.instagram.com/analytic.anna/reels/), and Twitter (https://twitter.com/AnalyticAnna).


 


Until next time…


That’s it for now! Be sure to check back next month for the latest updates on LearnTV. We also release new episodes on Thursdays at 9AM PT and new #MVPTuesday episodes on the last Tuesday of every month at 9AM PT at aka.ms/DataExposedyt.


 


Having trouble keeping up? Be sure to follow us on twitter to get the latest updates on everything, @AzureSQL.


 


We hope to see you next time, on Data Exposed :)


–Anna and Marisa