Severity: High

17 November, 2008

Summary:

• This vulnerability affects: Firebox X Edge 10.2.3 (and earlier versions)
• How an attacker exploits it: By entering a specially crafted username into the authentication page, or by manually visiting a specific URL
• Impact: A remote attacker can authenticate to your Edge without valid login credentials, in some cases gaining VPN access to your network
• What to do: Install 10.2.4 immediately

Exposure:

In order for you to verify that your users really are who they claim to be, the Firebox X Edge supports various types of user authentication. With user authentication configured, you can create URL filtering or VPN policies that permit or deny data traffic based on who someone is, rather than based on the IP address they come from. You also utilize user authentication when setting up mobile VPN access to your network. The Edge provides a secure HTTPS web page that allows your users to authenticate to your Edge.

Hatfield Chamber Hosts Program on Windows 7

The Hatfield Chamber of Commerce will hold a noon luncheon meeting on Monday, March 22, in the Hatfield Township Community Room. The program that day will be “Windows 7 – What It Can Do For You.” Here’s your chance to get up close and personal with the latest productivity enhancements, as well as safety and security improvements that Microsoft Windows 7 provides. Come find out how Windows 7 helps your business work the way you want. Doing the tasks you do everyday are easier and faster with Windows 7. You can share files and devices easily, find the information you need, stay productive anywhere and protect your data so you can spend more time helping your business grow.

“Windows 7 – What It Can Do For You.” Here’s your chance to get up close and personal with the latest productivity enhancements, as well as safety and security improvements that Microsoft Windows 7 provides. Come find out how Windows 7 helps your business work the way you want. Doing the tasks you do everyday are easier and faster with Windows 7. You can share files and devices easily, find the information you need, stay productive anywhere and protect your data so you can spend more time helping your business grow.

• See a live demo of Windows 7
• Try Windows 7 out for yourself at live demo stations
• Ask Microsoft Partners questions about upgrading your system
• Get a chance to win great prizes

As an attendee of the event and you may be eligible to receive a $150 Technology Deployment Services Voucher to be used towards technology deployment services from a Microsoft partner of your choice to assist you with the installation of Windows 7 when used in conjunction with a purchase of Windows 7 through a Microsoft Volume License Agreement. This program will be presented by Microsoft Community Connections Partner, Bardissi Enterprises of Hatfield. Don’t miss this fun and exciting event.

Type: Education – Workshop
Date: Thursday, April 8, 2010
Time: 2:00pm – 4:00pm
Location: Gywneed-Mercy College Business Fair
Street: 1325 Sumneytown Pike

Severity: High

26 March, 2009
Summary:

• These vulnerabilities affect: All versions of Sun Java Runtime Environment (JRE) and Java Development Kit (JDK) released before 24 March, on Windows, Solaris, and Linux platforms
• How an attacker exploits them: Multiple vectors of attack, including luring your users to a malicious web page containing specially crafted Java
• Impact: Various results; in the worst case, an attacker can gain complete control of your computer
• What to do: Install the appropriate JRE (or JDK) update as soon as possible

WatchGuard is pleased to announce the release of version 10.2.8 for WSM, Fireware, Fireware Pro, and Edge. Version 10.2.8 contains a number of defect fixes for issues reported by WatchGuard customers. Areas affected include High Availability, Mobile VPN with SSL, Single Sign-On, and more. There is also a new Mobile VPN with IPSec client (v10.2) available with this release.

Contained in this release are:

• An enhancement for the Firebox X Edge that allows traffic to be masqueraded via 1 to 1 NAT in IPSec VPN tunnels with IKE KeepAlive
• Fixes to several stability issues on Firebox devices that have the upper four ports (eth4 through eth7) in use
• Several manageability improvements, including reduced configuration save times and better manageability of Firebox devices under heavy load
• Several improvements to Single Sign-On (SSO)
• Several improvements to real-time monitoring, reporting, logging, and notification
• Several improvements to SSL VPN client functionality on Macintosh OS X
• Several High Availability improvements
• Several improvements to Edge Wireless functionality
• Edge networking and stability improvements
• Improved Mobile VPN support for devices with dynamically addressed external interfaces
• Enhancements to the Mobile VPN for IPSec client (v10.2), including support for increased numbers of remote networks

Does This Release Pertain to Me?

10.2.8 is a regularly scheduled maintenance release. If you are impacted by any of the issues outlined above or those contained in the Release Notes, you should consider upgrading to version 10.2.8. Please read the Release Notes before you upgrade, to understand what’s involved.

Severity: Medium

March 30, 2009

Summary:

• This vulnerability affects: Firefox 3.0.7 (and previous versions) for Windows, Linux, and Macintosh
• How an attacker exploits it: Multiple vectors of attack, including enticing one of your users to visit a malicious web page
• Impact: Various results; in the worst case, an attacker executes code on your user’s computer, gaining complete control of it
• What to do: Upgrade to Firefox 3.0.8

Attackers Target Zero Day PowerPoint Vulnerability
Severity: High

3 April, 2009
Summary:

• This vulnerability affects: All current versions of Microsoft PowerPoint for Windows and Mac computers (also affects PowerPoint Viewer and Office Compatibility Packs)
• How an attacker exploits it: By enticing your users into opening a maliciously crafted PowerPoint presentation
• Impact: An attacker can execute code on your computer, potentially gaining control of it
• What to do: Implement the workarounds described in the Solution Path section of this alert

Severity: High
26 March, 2009

Summary:

• These vulnerabilities affect: Many devices running Cisco IOS
• How an attacker exploits them: Multiple vectors of attack; in the most common, the attacker sends specially crafted network packets
• Impact: Various results; these include many Denial of Service (DoS) vulnerabilities and a privilege elevation flaw
• What to do: Administrators who manage Cisco IOS devices should download, test, and deploy the appropriate Cisco updates as soon as possible

Maliciously Crafted Email Can Pwn Your Exchange Server

Severity: High

10 February, 2009

Summary:

This vulnerability affects: All current versions of Exchange Server

How an attacker exploits it: By sending a specially crafted email (no user interaction necessary)

Impact: An attacker can potentially gain control of your Exchange Server

What to do: Deploy the appropriate Exchange Server patch immediately

Latest Firefox Update Fixes Eight Security Flaws

Severity: Medium

4 February, 2008

Summary:

This vulnerability affects: Firefox 3.0.5 (and previous versions) for Windows, Linux, and Macintosh

How an attacker exploits it: Multiple vectors of attack, including enticing one of your users to visit a malicious web page

Impact: Various results; in the worst case, an attacker executes code on your user’s computer, gaining complete control of it

What to do: Upgrade to Firefox 3.0.6

Exposure:

Late yesterday, the Mozilla Foundation released Firefox 3.0.6, fixing approximately eight security vulnerabilities (based on CVE-IDs) in the popular web browser. We summarize three of the vulnerabilities below:

Castleway Properties, LLC of Lester, Pennsylvania has contracted with Bardissi Enterprises for the provision of Managed Information Technology Solutions service and support.

Castleway Properties, LLC has secured the services of Bardissi Enterprises, LLC for all of its Information Technology needs. Bardissi Enterprises, LLC has completely upgraded the company’s computer network infrastructure to include the upgrade of its IT hardware and their phone system which has now been upgraded to the new AltiGen Voice over IP technology.

Bardissi Enterprises, LLC is pleased to be partnered with Castleway Properties, LLC and to have the opportunity to assist them in making the information technology upgrades that will transform their inner office operations and help them to run smoother giving the company new and increased functionality that will provide a competitive edge which will advance their ability to secure a greater market share in their field of commercial property leasing and building operations at Airport Business Complex with over 2 million square feet of industrial property located in Lester, PA, stated George Bardissi, President of Bardissi Enterprises, LLC.

The Visiting Angels of Jenkintown, Pennsylvania have contracted with Bardissi Enterprises for the provision of Managed Information Technology Solutions as well as upgrading their current phone system to Hosted VoIP Phone System

Visiting Angels of Jenkintown, Pennsylvania have secured the services of Bardissi Enterprises, LLC for the provision of an Hosted VoIP Phone System and Managed Information Technology Solutions. Visiting Angels is the nation’s leading, nationally respected network of non-medical, private duty home care agencies providing senior care, elder care, personal care, respite care and companion care to help the elderly and adults continue to live in their homes across America. The Jenkintown Visiting Angels provide services to Eastern Montgomery County.

Severity: Medium

4 November, 2008

Summary:

§ This vulnerability affects: Adobe Reader and Acrobat 8.1.2 and earlier, on Windows, Mac, *nix computers

§ How an attacker exploits it: Multiple vectors of attack, including enticing your users into viewing a maliciously crafted PDF document

§ Impact: Various results; in the worst case, an attacker can execute code on your computer, potentially gaining control of it

§ What to do: Upgrade to Acrobat Reader 9 (or 8.1.3) or Acrobat 8.1.3

Severity:High

23 October, 2008

Summary:

• These vulnerabilities affect: All current versions of Windows
• How an attacker exploits them: By sending specially crafted network traffic
• Impact: Attacker gains complete control of your Windows computer
• What to do: Install the appropriate Microsoft patches immediately

Join us for a Webinar on October 17 11:00AM – 12:00PM EST

Attend this exciting preview event exclusively for key business decision makers like you. Be one of the first to see how this affordable and integrated server solution helps you protect your business data, and increase your employees’ productivity. See first-hand how Windows Small Business Server 2008 can help to: • Protect your vital business information from loss by automatically backing up the computers and servers in your network, and enabling you to recover accidentally deleted files • Work with existing technology, built on Microsoft best practices, and delivers a comprehensive network solution at an affordable price • Give you highly secure access to business contacts, calendars, e-mail, files, and other important desktop resources from any Internet-connected computer, virtually anywhere at any time, so you can be productive while you’re away from the office or on the road Register Today!

Join us for a Webinar on October 24 11:00 AM – 12:00 PM

Attend this exciting preview event exclusively for key IT and business decision makers like you. Be one of the first to see how this integrated platform, designed and priced specifically for midsize businesses, can propel your company forward by reducing IT complexity and improving business efficiency. See first-hand how Windows Essential Business Server 2008 can help to: • Simplify your daily activities with a Centralized Administration Console that gives you a single point of access to your IT environment • Proactively manage your environment, reduce your IT complexity, and help give you back control of your systems • Increase the predictability and reliability of your systems and reduce typical errors that can occur when standalone products are deployed • Increase productivity by working both in and away from the office with remote access, anti-spam, and anti-virus protection, and improved messaging technologies Register Today!

SOUTHBOROUGH, MA. – October 7, 2008 – Double-Take® Software (NASDAQ: DBTK), today announced the release of its netBoot/i™ and sanFly™.  Together, they can provide a centralized means of booting and managing servers and desktops from iSCSI storage area networks (SANs). These products give IT administrators the flexibility to streamline workload management across both physical and virtual environments, and the cost efficiency of ‘greener IT’ through reduced power consumption and energy costs.  Double-Take® for Windows, the company’s flagship product, is known for its non-disruptive, affordable, hardware agnostic solutions. The addition of these new product offerings combined  with existing capabilities such as continuous full server wide area replication build upon Double-Take Software’s objective to be the leader in Dynamic Infrastructure; that is, to move workloads, for whatever purpose, whenever needed, affordably and non-disruptively.

The latest version of PlateSpin’s disaster recovery hardware appliance includes SAN integration, support for 64-bit Windows workloads and multiple recovery points for greater flexibility and workload integrity. This on-demand webinar discusses how PlateSpin Forge 2.0 provides a quicker, smarter and more economical way to deploy, test and manage a disaster recovery environment. Hear how the PlateSpin Forge appliance, available in either a 10 or 25 workload protection model, provides affordable, out-of-the-box protection for both physical and virtual server workloads in the data center.

• bulletView the Webinar Replay: Introducing PlateSpin Forge 2.0
• bulletLearn more about PlateSpin Forge

September, 2008

Excel Homes of Camphill, Pennsylvania, the leaders in modular home design creation, building and installation has secured the services of Bardissi Enterprises, LLC to provide and install the newest TomTom GPS Navigation & Tracking technology for all their service vehicles.

With the addition of the new TomTom Works GPS Navigation Technology, Excel Homes has taken their vehicle fleet to the next generation of fast and efficient, directional accuracy with added functionality which cannot be found in most over the counter GPS systems.

PRESS RELEASE

September, 2008

The Montgomery Country Sheriff’s Department has contracted with Bardissi Enterprises, LLC for the provision of new TomTom GPS Technology.

The Montgomery County Sheriff’s Department has contracted with Bardissi Enterprises for the purchase and installation of 40 TomTom One 130 GPS Navigation Unit with Windshield Mounts.

With the partnership between TomTom Works and Bardissi Enterprises, comes the newest and more powerful GPS Technology, which the Montgomery County Sheriff’s Department will now have in its vehicles.

The Sheriff’s Department will have increased functionality with the new GPS Technology, which will provide them with faster and more accurate direction targeting as well as increased communication between base operations and their vehicles while in the field.