Blog Entries

14. 06. 2022 Mirko Ioris Red Team, SEC4U

How People Reacted to Follina, the New 0-day

Zero-day vulnerabilities pose a serious threat in the field of cybersecurity. These flaws are usually discovered and exploited by criminals before security researchers even know of their existence. Because of this, we call them 0-day. It indicates the amount of time the “good people” have had to study and solve the problem. So if this…

Read More
13. 06. 2022 Giovanni Davide Saccá NetEye, Unified Monitoring

NeDi:  Troubleshooting NeDi Discovery and Configuration File Backup

A customer with a NetEye installation to which I had added the NeDi module asked me if I could integrate the saved configuration files of “discovered” network devices with NeDi. NeDi, for those who are not yet familiar with it, is a Network Discovery tool based on many different network protocols. The first action NeDi…

Read More
13. 06. 2022 Giovanni Davide Saccá ITOA, NetEye, Unified Monitoring

Grafana for nTop: Realizing a Dashboard

A customer with a NetEye installation to which I had added the nTop module asked me if I could integrate nTop’s Grafana Dashboards, so they could view them by consulting NetEye’s ITOA Menu. The installation and configuration of nTop for this client, a task I had already conducted some time ago, was a matter of…

Read More
10. 06. 2022 Attilio Broglio Development, NetEye, Unified Monitoring

Monitor Cisco’s APIC FAULT (Application Policy Infrastructure Controller) in NetEye 4

Introduction As introduced in a previous post, Cisco’s APIC is a core component for several of our customers; it’s a complex solution that every user can employ to fully customize their configuration. There I explained how to monitor the APIC at a high level, summarizing the fault information tenant by tenant. Some customers needed to…

Read More
09. 06. 2022 Damiano Chini Bug Fixes, NetEye

Bug Fixes for NetEye 4.24

We fixed a bug for which the El Proxy blockchain verification command was taking a long time to complete. To speed up the verification, El Proxy now verifies batches of the blockchain in parallel and further optimizations were introduced inside the verify command itself. The verification is now 100% faster by default and fine-tuning the…

Read More
09. 06. 2022 Damiano Chini Bug Fixes, NetEye

Bug Fixes for NetEye 4.23

We fixed a bug for which the El Proxy blockchain verification command was taking a long time to complete. To speed up the verification, El Proxy now verifies batches of the blockchain in parallel and further optimizations were introduced inside the verify command itself. The verification is now 100% faster by default and fine-tuning the…

Read More
09. 06. 2022 Damiano Chini Bug Fixes, NetEye

Bug Fixes for NetEye 4.22

We fixed a bug for which the El Proxy blockchain verification command was taking a long time to complete. To speed up the verification, El Proxy now verifies batches of the blockchain in parallel and further optimizations were introduced inside the verify command itself. The verification is now 100% faster by default and fine-tuning the…

Read More
01. 06. 2022 Benjamin Gröber Downloads / Release Notes, NetEye, Unified Monitoring

NetEye 4.24 Release Notes

Welcome to version 4.24 of our NetEye v4 Unified Monitoring Solution. In this release, NetEye hiked over the Seceda mountain, placed in Val Gardena/Grödental, to admire a wonderful view of the Fermeda pinnacles at sunrise. The Fermeda pinnacles, the southernmost ridge of the Odle group, offers an ideal environment to climbers, especially for ascents on…

Read More
27. 05. 2022 Alessandro Romboli ITOA, NetEye

The Flux Language Inside ITOA

ITOA ITOA is the NetEye component which represents time series data using the Grafana graphics engine. Data is usually collected by Telegraf agents and stored into an InfluxDB specialized non-relational database. Flux In order to manipulate the time series data, Grafana usually adopted a relational language: InfluxQL. The relational approach has had a number of…

Read More
26. 05. 2022 Mattia Codato Bug Fixes, NetEye

Bug Fixes for NetEye 4.23

We fixed a problem that did not allow special characters to be displayed correctly in the monitoring section. We fixed security vulnerabilities also related to the file permissions. icinga2, icinga2-autosetup, icinga2-bin, icinga2-ido-mysql, icinga2-neteye-config, icinga2-resources, icinga2-common, icinga2-selinux to version 2.11.9_neteye1.48.4-1 icingaweb2-module-assetmanagement-autosetup, icingaweb2-module-assetmanagement to 1.21.2-1

Read More
26. 05. 2022 Ajay Sharma Bug Fixes, NetEye

Bug Fixes for NetEye 4.22

We fixed security vulnerabilities related to the file permissions. icingaweb2-module-assetmanagement-autosetup, icingaweb2-module-assetmanagement to 1.21.2-1

Read More
24. 05. 2022 Ajay Sharma Bug Fixes, NetEye

Bug Fixes for NetEye 4.22

We fixed security vulnerabilities related to the file permissions. For NetEye 4.22 we updated the following packages: icingaweb2-module-auditlog and icingaweb2-module-auditlog-autosetup to 1.9.1.3

Read More
24. 05. 2022 Ajay Sharma Bug Fixes, NetEye

Bug Fixes for NetEye 4.23

We fixed security vulnerabilities related to the file permissions. For NetEye 4.23 we updated the following packages: icingaweb2-module-auditlog and icingaweb2-module-auditlog-autosetup to 1.9.1.3

Read More
23. 05. 2022 Mirko Morandini Cloud, Service Management

Office365/Google Mail Users: Migrate Your EriZone/OTRS Mail Accounts to OAuth2 Authentication NOW!

Both Microsoft and Google will terminate within summer/autumn 2022 the possibility of accessing POP and IMAP mailboxes using usernames and passwords! In the course of the year 2022 Microsoft and Google will terminate support for Basic Auth (the authentication with username and password) for some web services and pass to a more secure method, often…

Read More
19. 05. 2022 Mattia Codato ctf-writeups, Development

Cyber Apocalypse CTF 2022 – Red Island Writeup

The Cyber Apocalypse CTF is back with the 2022 edition. It’s a Jeopardy-style competition organized by Hack The Box and is open to everyone. Together as a security-focused guild (a concept taken from the Spotify model) we here at Würth Phoenix participated in this challenge and in particular I focused on the web challenges. After…

Read More

Archive