barrier-2.4.0-1.fc35
Upstream update to 2.4.0
Fixed CVE-2021-42072 (RHBZ 2022094)
BuildDepends added: gmock-devel, gulrak-filesystem-devel
Address the issue from pull request #1, thanks aekoroglu.
barrier-2.4.0-1.fc34
Upstream update to 2.4.0
Fixed CVE-2021-42072 (RHBZ 2022094)
BuildDepends added: gmock-devel, gulrak-filesystem-devel
Address the issue from pull request #1, thanks aekoroglu.
Encryption can keep bad actors from peeking at critical data, but it can also allow them to hide malicious activity from network defenders. That’s why LiveAction, a network visibility company, has introduced ThreatEye NV, a platform that gives SecOps teams powerful tools to find threats and anomalies in encrypted traffic.
“In 2014, about 30% of traffic was encrypted. Now it’s 80% to 90%. By the end of 2025, it will be almost all traffic,” says LiveAction Director of Product Marketing Thomas Pore. “For a network defender, this creates a problem. If you’re unable to get visibility into these encrypted tunnels and connections, how can you identify threats?”
As healthcare organizations digitally transform themselves to better serve a post-pandemic world, the prevailing goal in the past year has been for them to safely extend health services beyond clinical walls. Be it to power everything from pop-up clinics to telemedicine, this is driving the healthcare technology stack out to the edge. And to keep patient care confidential and compliant no matter where data flows, the heavier reliance on edge computing is pushing healthcare organizations to transform their cybersecurity controls and practices in lockstep with innovation.
These were the themes illustrated in this year’s healthcare breakout of the 2022 core AT&T Cybersecurity Insights Report:Securing the Edge. Released this week, AT&T Cybersecurity Insights Report: Securing the Edge-A Focus on Healthcare details the use cases, the risks, the challenges, and the opportunities for healthcare organizations as they work to secure their organizations—from core to edge–in the coming year.
Survey data from the 2022 AT&T Cybersecurity Insight Report found that 74% of healthcare organizations globally are planning, have partially, or have fully implemented edge use cases.
The confluence of events stemming from the pandemic accelerated healthcare edge computing, driving edge momentum across a number of non-traditional clinical settings. For example, virtual care services surged during the pandemic, as they are convenient for consumers and help reduce healthcare costs by providing care in settings such as patients’ homes. Unsurprisingly, analysis of report results showed that among the 43% of organizations that say they’re at the mature stage of deploying to the edge, consumer virtual care is the leading use case.
Meantime, hospital at home use cases are rapidly driving planning and proofs of concept in that mid-stage of edge adoption. Edge computing capabilities such as the processing of data where it is consumed or produced, along with lower latency provided by 5G architectures, will enable other use cases such as tele-emergency medical services and autonomous mobile robots and drones in hospitals to learn from the pioneering healthcare edge computing use cases identified in this report.
As a part of the analysis in this year’s report, survey respondents were asked about the perceived risk of most prevalent industry edge use cases—including self assessment of likelihood of compromise and impact of compromise. Healthcare use cases had the lowest perceived risk among all six industries broken out by the report. This could indicate that the experiences wrought by the transformative pivots during the pandemic, as well as healthcare’s response to increasing cyberattacks—particularly ransomware attacks—in recent years has helped speed up cybersecurity maturity of late.
When it comes specifically to the most common edge use case of virtual care, it has an average perceived risk across all edge cases, but it also has the highest perceived impact from an attack.
The survey from the 2022 core AT&T Cybersecurity Insight Report showed that the hybrid approach is dominating architectures for edge networks and security controls across all industries. Healthcare very much follows this broader trend, as healthcare organizations exhibit an almost 50-50 split between those whose security and network roadmaps combine cybersecurity and network functions in the cloud through frameworks such as secure access service edge (SASE) and Zero Trust and those that do so with on-premises tools such as traditional network and security appliances.
One thing that is clear is that healthcare risks are increasingly clustering around edge and cloud assets. The study shows that while for most other industries ransomware attacks are the number one concern, healthcare sees two other attack vectors as top-of-mind ahead of ransomware: the potential for attacks against servers or data at the network edge and attacks against associated cloud workloads. The study found:
63.8% of healthcare organizations ranked attacks against server/data at the network edge as cyber threats of highest concern to them
63.4% of healthcare organizations said attacks against associated cloud workloads were some of the riskiest future attacks against them
Healthcare respondents rank intrusion and threat detection, multi-factor authentication, data encryption at rest, and endpoint and device monitoring as the most efficient and effective security controls at their disposal.
Legacy cybersecurity controls—those with traditional on-premises architectures–still remain at the backbone of healthcare cybersecurity at many organizations. The study found that:
45.7% of healthcare organizations plan to combine cybersecurity and network functions on-premises
37.4% of them will implement cybersecurity with multiple cybersecurity-only functions on-premises
22% will implement cybersecurity utilizing single-function cybersecurity functions on-premises
Given the attention and concern over cloud computing attacks, this heavy emphasis on legacy on-premises cyber controls might come as a surprise. But data from the survey across all industries shows that much on-premises infrastructure remains so for a myriad of reasons, including:
legacy infrastructure that is not yet ready to be retired,
concerns about data residency or regulatory issues, or
lingering prejudices against cloud usage in certain high-risk use cases.
This dynamic, combined with accelerating edge deployments means that healthcare organizations will need to balance network and security controls with flexible architectures that can ensure security in the most complex hybrid scenarios.
One of the heartening thematic threads that wove itself across the body of healthcare data collected for the 2022 AT&T Cybersecurity Insight Report was the fact that healthcare organizations are leading with a security-first mindset when it comes to technology innovation. As hospitals had to open up remote testing sites, remote clinics, telemedicine functions and more during the pandemic, leadership increasingly understood how important security was to enabling business success.
Our study shows that some 44% of healthcare organizations are going to spend somewhere between 11% to 20% of their overall edge use case spend directly to security. That’s a significant investment and it indicates a progress in mindset compared to our studies in previous iterations of this report. The 2021 AT&T Cybersecurity Insights Report focused heavily on the growing importance of shared responsibility models in the age of edge compute, as responsibilities are spread across cloud service providers, 5G carriers, and enterprises. In 2021, survey data revealed many organizations were planning only to use 1% of their total project budgets for security in the planning phase. The results here clearly show that organizations are recognizing they’ll need to invest more to safeguard digital assets all the way to the edge.
The study observed a significant rise in email-based attacks globally in 2021 compared to 2020
A new list of high-risk applications commonly used in the enterprise and an offering to block their use has been released by a domain name security company. DNSFilter posted the list of more than 100 risky apps to its website February 17. At the same time, it announced AppAware, which gives organizations the power to block the apps and includes high-profile file-sharing, remote desktop, and messaging programs.
We are thrilled to announce that Softcat is the AT&T Cybersecurity 2022 Global Partner of the Year for the second year in a row! Softcat aggressively grew their business and achieved truly impressive results in 2021.
At AT&T Cybersecurity we will continue to focus on enhancing our channel programs to provide partners the ability to not only scale their businesses and increase profitability, but most importantly deliver on their infosec promise to their client base. Together we will do so in both a consistent and progressive manner, evolving with the ever-changing security market we all serve. We look forward to another year of success working closely with our partners.
We are proud to recognize not only our Global Partner of the year in Softcat, but also the exceptional partners in seven additional categories. Our complete list of award winners and their reactions below:
Global Partner of the Year: Softcat
We are absolutely delighted to be named AT&T Cybersecurity’s Global Partner of the Year 2022. We are so proud of the collaborative partnership we have developed with them over the last 4 years and this award is a testament to that and the significant growth we have delivered with them during what has been a challenging year. It also reflects our ambition to always provide our customers with the best Managed SIEM solution available in the marketplace.
Matthew Helling | Head of Cyber Security Services | Softcat
—————————————————————-
Growth Partner of the Year: STN Incorporated
I must say our initial reaction was pure excitement! Our sales and service delivery teams have worked tirelessly to build and improve our SIEM practice. Being recognized as the partner of the year validates we are moving in the right direction and will continue to build upon this momentum. We look forward to another successful year of growth in 2022.
Shanelle Frisbie | Vice President of Operations | STN Incorporated
—————————————————————-
New Partner of the Year: Brennan IT
We are pleased to have received this award from AT&T. This, along with other recent award wins reaffirms the significant steps Brennan have taken in maturing our capabilities into a tier 1 security provider. Our teams remain focused on helping customers achieve a secure IT environment in an increasingly challenging cyber and business landscape.
Daniel Hayes | Head of Cybersecurity | Brennan IT
—————————————————————-
Distributor of the Year: CMS Distribution
CMS are delighted to have been announced as AT&T’s Distributor of the Year for 2022! Our partnership continues to grow, and we are pleased to be recognized for our proactive and collaborative approach working with an industry leading vendor such as AT&T and we will continue to build on this award going forwards to accelerate the sales needle.
Nick Bailey | Alliance Director | CMS Distribution
—————————————————————-
These awards recognize partners that had the highest sales bookings in each of the 4 regions during last year.
North American Partner of the Year: Binary Defense
We are honored to receive the North American Partner of the Year award from AT&T and look forward to a continued successful partnership in 2022 and beyond. The pairing of AT&T’s USM Anywhere technology with Binary Defense’s experts delivers a best-in-class experience for our customers and keeps them safe from cyberattacks. Together, we help make the world a safer place.
Mike Valentine | Chief Executive Officer | Binary Defense
—————————————————————-
EMEA Partner of the Year: Six Degrees
Six Degrees is delighted to be awarded AT&T Cybersecurity Partner of the Year for a second year in a row!
The Six Degrees team continues to work closely with AT&T to deliver AlienVault solutions and to provide fully managed 24×7 Cyber Security Operations Centre managed services to clients in both the public and private sectors.
It was great to receive recognition as AT&T’s Cybersecurity Partner of the Year for 2021 and through our continued delivery of AlienVault services to again receive this accolade now, in 2022.
A massive thank you to everyone that continues to make our services and solutions great!
Robert Sugrue | Cyber Security Product Director | Six Degrees
—————————————————————-
APAC Partner of the Year: Kordia
Kordia is delighted to be named AT&T Cybersecurity’s APAC Partner of the Year for 2022. We’ve been extremely focused on helping our customers achieve a more robust and responsive approach to cyber security. This award recognises the strength of our partnership, specifically our joint dedication to bringing comprehensive solutions to our market.
Julie Ware | Head of Security Products | Kordia
—————————————————————-
Latin American Partner of the Year: GB Advisors
Working with the outstanding professionals at AT&T Cybersecurity has been one of the joys of this partnership. The care and dedication for ensuring leading edge cybersecurity solutions to help our clients innovate safer has been at the core of our shared success. At GB Advisors we are honored to be named AT&T Cybersecurity LATAM partner of the year for 2022.
Alexander Guedez Barefield | CEO | GB Advisors
—————————————————————-
In January 2022, the Top 10 stayed consistent with the previous month except Snugy returned to the Top 10, while CryptoLocker made its first appearance.
Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation could
reassemble mixed encrypted and plaintext fragments. A physically proximate
attacker could possibly use this issue to inject packets or exfiltrate
selected fragments. (CVE-2020-26147)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly perform access control. An authenticated attacker could possibly
use this to expose sensitive information. (CVE-2020-26558, CVE-2021-0129)
It was discovered that the RPA PCI Hotplug driver implementation in the
Linux kernel did not properly handle device name writes via sysfs, leading
to a buffer overflow. A privileged attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2021-28972)
It was discovered that a use-after-free existed in the Bluetooth HCI driver
of the Linux kernel. A local attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code. (CVE-2021-33034)
Norbert Slusarek discovered that the CAN broadcast manger (bcm) protocol
implementation in the Linux kernel did not properly initialize memory in
some situations. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2021-34693)
马哲宇 discovered that the IEEE 1394 (Firewire) nosy packet sniffer driver in
the Linux kernel did not properly perform reference counting in some
situations, leading to a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2021-3483)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle HCI device initialization failure, leading to a double-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code. (CVE-2021-3564)
Murray McAllister discovered that the joystick device interface in the
Linux kernel did not properly validate data passed via an ioctl(). A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code on systems with a joystick device
registered. (CVE-2021-3612)
It was discovered that the tracing subsystem in the Linux kernel did not
properly keep track of per-cpu ring buffer state. A privileged attacker
could use this to cause a denial of service. (CVE-2021-3679)
It was discovered that the MAX-3421 host USB device driver in the Linux
kernel did not properly handle device removal events. A physically
proximate attacker could use this to cause a denial of service (system
crash). (CVE-2021-38204)
It was discovered that the 6pack network protocol driver in the Linux
kernel did not properly perform validation checks. A privileged attacker
could use this to cause a denial of service (system crash) or execute
arbitrary code. (CVE-2021-42008)
Amit Klein discovered that the IPv6 implementation in the Linux kernel
could disclose internal state in some situations. An attacker could
possibly use this to expose sensitive information. (CVE-2021-45485)
