How we investigated an unusual Icinga 2 performance issue with no obvious infrastructure cause. One of the more interesting investigations I have worked on recently started with a puzzling symptom: normal check scheduling was delayed, but there was no apparent reason why. CPU, memory, and disk I/O looked fine. The incident had started shortly after…
Read MoreAs threat analysts, we spend our days dissecting malicious code, tracking infrastructure, and reverse-engineering adversary tactics. But what happens when the threat actor refuses to even let us see the payload? In recent years, the Cyber Threat Intelligence (CTI) landscape has witnessed a massive shift. Adversaries have realized that the best way to protect their…
Read MoreWelcome to version 4.49 of our NetEye Unified Monitoring Platform. As you log in, you’ll be greeted by the Stelvio Pass seen from above, where the road climbs the mountain in a series of tight hairpin bends that seem almost impossible from this height. Forty-eight of them, numbered one by one, twist their way up…
Read MoreResolved issue affecting neteye update We identified and fixed a bug that could cause the neteye update command to fail under specific circumstances. List of updated packages To solve the issue mentioned above, the following packages have been updated for NetEye 4.47:
Read MoreImportant: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.46 Summary The vulnerabilities include an authentication bypass leading to privilege escalation via trusted CA impersonation, a stack-based buffer overflow, and an…
Read MoreImportant: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.47 Summary The vulnerabilities include an authentication bypass leading to privilege escalation via trusted CA impersonation, a stack-based buffer overflow, and an…
Read MoreImportant: NagVis security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the nagvis and icingaweb2-module-nagvis packages is now available for NetEye 4. Security Fix for NetEye 4.48 Summary The vulnerabilities include two livestatus injections in dynmaps and a XSS via WYSIWYG editor. For details on how to…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.48 CVEs Elasticsearch Kibana Most of the 15 CVEs are Denial of Service vulnerabilities affecting Elasticsearch (ES|QL, EQL, search-query parsing) and Kibana…
Read MoreFix Soft States Some checks that were actually failing showed up as green/OK in Icinga. The cause: two parts of the system stored the same status in different formats, so the web interface misread it and hid early-stage problems. A fix aligns the formats, List of updated packages To solve the issue mentioned above, the…
Read MoreCloud Security Posture Management describes a category of tools that inspect cloud environments for configuration problems like public storage, overly broad IAM permissions, disabled logging, and missing encryption. The category includes open-source projects like Prowler and ScoutSuite, as well as commercial platforms. Despite different pricing models and interfaces, they solve the same underlying problem in…
Read MoreThe View from the SOC From inside the SOC, authentication traffic never really stops. Most of it is ordinary business: people signing in, services renewing sessions, or developers moving between tools. Mixed into that stream is something far less ordinary: repeated, automated attempts to become someone else. That’s why identity work sits so close to…
Read MoreIf I start with a generic opening like “In the AI age” or “AI is changing software development,” I’d have lost your interest already. You’ve likely read phrases like those a bazillion times in the last month alone. You probably also already have a strong opinion, either in favor of or against AI-generated code. And…
Read MoreFix Director self-service api We fixed the uncaught exception on bad Basic autm but in doing so we introduced a 302 redirect for API requests as well. Net result: a curl client expecting a 401 gets redirected to the login page instead, and the machine on the other end has no browser to follow it….
Read MoreIn this blog post, I’d like to share insights into the implementation of a NetEye disaster recovery (DR) environment that we recently successfully deployed for a customer. As many of you probably know, integrating IT applications into a disaster recovery environment is often not straightforward. Challenges can arise from various factors such as complex database…
Read MoreWith the NetEye 4.49 release, we’re extending the coverage of our NetEye Extension Packs (NEPs) by introducing a new package specifically focused on Audiocodes device monitoring, implemented through Centreon plugins over SNMP. This article explains: Availability The new NEP for Audiocodes will be released and supported starting with: It’s distributed via the official NEP repository,…
Read More