Showing posts with label platform. Show all posts
Showing posts with label platform. Show all posts
Monday, May 8, 2017
Are Webscale App Providers Shaping Core Telecom Platform Trends
Are Webscale App Providers Shaping Core Telecom Platform Trends
Webscale Internet companies (Google, Apple, Facebook, Microsoft and Amazon) now are exerting a “markedly increased influence” on markets for communications service. Analysts at Heavy Reading now think the webscale players also increasingly are shaping the market for networking hardware, software and services.
That will be a contentious point of view, even if many telecom industry execs and others think that is true, to some extent.
Google and Facebook are developing new backhaul and access platforms. Google Fiber does buy industry-standard optical access networks as well.
But Facebook mostly is looking at open source platforms that can be manufactured by supplied by industry suppliers.
Clearly, there is impact in terms of buying behavior in the case of Google Fiber, and development potential in the open source efforts by Facebook.
At least some telecom industry professionals believe the webscale providers are "leading in networking innovation"; are "increasingly calling the shots"; increasingly "building out their own telecom infrastructure" and that "its a matter of time before one of these guys buys one of the big CSPs (communications service providers).”
A Heavy Reading analyst team interviewed more than a dozen leading network infrastructure professionals at leading CSPs at the CTO, VP and director level, as well as more than 25 senior individuals in network equipment vendors at CTO, VP and director level; plus several leaders in key telecom industry associations, standards bodies and other specialist consultancies; and some of the WICs themselves.
The primary and secondary research was complemented by a Heavy Reading online survey, generating responses from 82 qualified respondents in network equipment vendors and 57 from qualified respondents in CSPs.
Keep in mind that about half the 82 vendor respondents came from individuals from one vendor company.
Around half came from vendors from whom two or more (but no more than four) respondents supplied responses. Those companies from which two or more respondents participated include ADVA, Broadsoft, Casa Systems, Cisco Systems, Ericsson, F5, Huawei, HP, IBM, Infinera, Juniper Networks, Nokia, NetScout, Vasona Networks and Radisys.
As you might expect, the online respondents identified Google as the webscale player posing the greatest threat to communications service providers.
Source: Heavy Reading
Go to link for download
Monday, March 20, 2017
An Attack Platform Infecting WordPress Sites
An Attack Platform Infecting WordPress Sites
Amid a late examination of a huge infections we found a trove of assault tools that all indicated back a solitary "meta" script. This script was just two lines in length however furnished an attacker with an intense capability. When it completely introduces itself it gives what we are alluding to as an "attack platform".
We figured out the script and uncovered that it was downloading its full source code from pastebin.com which is a webpage where anybody can post any content anonymously. The attacker had posted the source on pastebin and the script would download itself from that point and execute. The impact of this is the starting disease is just two lines in length.
The platform once completely introduced furnishes an attacker with 43 attack tools they can then download, likewise from pastebin, with a single click. The usefulness these tools give incorporates:
- Complete attack shells that let you deal with the filesystem, access the database through a very much outlined SQL client, view framework information, mass taint the framework, DoS different systems, find and contaminate all CMSs, view and oversee client accounts both on CMSs and the nearby operating framework and considerably more.
- A FTP brute force attack tools
- A Facebook brute force aggressor
- A WordPress brute force attack script
- Tools to examine for config documents or sensitive information
- Tools to download the whole webpage or parts thereof
- The capacity to examine for different attackers shells
- Tools focusing on particular CMSs that let you change their design to have your own malicious code
On account of this disease, the source has all the earmarks of being a hacking bunch in Vietnam and one individual inside of that gathering.
To give you some understanding into the effective capability that this platform gives, Wordfence have made a video show where we taint a test virtual machine with the two line meta script and utilize it to download the tools it gives.
A Demonstration of a Meta Attack Tool Targeting WordPress sites from Wordfence.
Note that we did this showing inside a clean new virtual machine and incorporated our very own couple tools to avert further contamination and information exfiltration. These incorporate forcing all system activity from this machine by means of a proxy with the goal that we can see what is arriving and leaving from this infected test machine.
As should be obvious, attackers have grown inconceivably refined techniques and tools to trade off and abuse your site. As a site proprietor your first need ought to be to keep the aggressor from picking up section to your site. Wordfences WordPress Security Learning Center is an awesome asset for you to take in more about what moves you ought to be making to ensure yourself.
Your second need ought to be to distinguish a hack as fast as could be allowed ought to one happen. This article on recognizing a hack early contains an intensive rundown of steps you can take to minimize the time from disease to disclosure. Likewise, we emphatically prescribe moving up to Wordfence Premium in the event that you havent as of now. It permits you to timetable outputs to run regularly, enhancing your chances of getting a trade off right on time.
We trust you have found this showing accommodating. If you dont mind leave your remarks beneath and make certain to impart this post to the group.
(Source: Wordfence)
Go to link for download
Subscribe to:
Posts (Atom)