Thursday, June 2, 2022

Free TI feed for SIEM

There are several free TI feed for SIEM, you can follow those script to automatically download those data feed and import to the SIEM.

 

https://www.secjuice.com/threat-intelligence-siem-free

 

Beside, there are awesome-threat-intelligence on github https://github.com/hslatman/awesome-threat-intelligence

 

Reference:

Feed Your SIEM With Free Threat Intelligence Feeds

https://www.secjuice.com/threat-intelligence-siem-free

 

Print Friendly and PDF
Share/Bookmark

deepin 20.6 Release

https://www.deepin.org/en/

 

Download from HK:

http://mirror-hk.koddos.net/deepin-cd/20.6/deepin-desktop-community-20.6-amd64.iso

 

I running the deepin on Lenovo X240 and running well so far.

 

Print Friendly and PDF
Share/Bookmark

Wednesday, June 1, 2022

Microsoft issued CVE-2022-30190 - a zero-day remote code execution vulnerability in the Microsoft Support Diagnostic Tool.

Follina (CVE-2022-30190): a vulnerability in MSDT

 

There are workaround by using ENS Access Protection rules to against this vulnerability:

https://community.mcafee.com/t5/Endpoint-Security-ENS/CVE-2022-30190-Microsoft-Support-Diagnostic-Tool-Vulnerability/td-p/704193

 

The sample configuration of access protection:

https://community.mcafee.com/t5/Endpoint-Security-ENS/CVE-2022-30190-follina/m-p/704208

 

Print Friendly and PDF
Share/Bookmark

Thursday, May 19, 2022

Windows 10 21H2 on VMware VDI Horizon 8 Version 2111 ESB with Zoom

The latest release Zoom which is required to deploy due to a CVE-2022-22782 and CVE-2022-22786 vulnerability:

 

Zoom for VDI 5.10.2

Zoom plugin for Hozion 5.10.2

 

Print Friendly and PDF
Share/Bookmark

Windows 10 21H2 on VMware VDI Horizon 8 Version 2111 ESB with Cisco Jabber

The following combination will be consider more stable and hit less bugs so far:

 

VMware Agent – 8.4.0-18964730

VMware Horizon Client - 8.4.1-19480429

 

Cisco Jabber 14.1.1 (14.1.1.56904 Build 306904)

Cisco Jabber JVDI agent 14.1.1

Cisco Jabber JVDI Client 14.1.1

 

 

Print Friendly and PDF
Share/Bookmark

Saturday, April 30, 2022

VMware horizon client upgrade and reinstall handling when you using Cisco JVDI client

  1. If you upgrade Horizon client from 5.x to 8.x, no action is required on Cisco JVDI client
  2. If you uninstall/reinstall Horizon client, you need to reinstall Cisco JVDI client after the Horizon client being uninstall / reinstall.

 

Print Friendly and PDF
Share/Bookmark

Tuesday, April 26, 2022

After upgrade to VMware 8 (2111)- Zoom on VDI - need to upgrade zoom VMware media plugin on the physical machine

VMware Horizon 8 2111 is an Extended Service Branch (ESB), after you upgrade the infra, if you upgrade your horizon client from 5.x (Horizon 7), to 8.x (e.g. 8.41 (2111)) or 8.5 (2203)). You need to also upgrade your Zoom Plug-in on client for VMware Horizon. Otherwise, your Zoom running on your VDI have many malfunctioning.

 

Zoom Plug-in on client for VMware Horizon

https://zoom.us/download/vdi/5.10.2/ZoomVmwareMediaPlugin.msi

 

Print Friendly and PDF
Share/Bookmark