bookmark_borderBitcoin and Crypto* events in Dubai

Looking for meeting other people who are into crypto*? Wants to find the best place to start your blockchain business? Awalcon and the HODLbag project shares the best places to get started. If you are an enthusiast, already have a project, looking for investors or just a beginner who wants to learn and meet interesting people: this is what you need to know.

EcoX Networking Events

Every Tuesday, you have the chance to meet people from different backgrounds, many of them are into crypto*. Just get there and be brave to start discussions with people you do not know yet!

Find the flyers on Instagram: https://www.instagram.com/ecoxdubai/

Website: https://www.ecox.pro/

Crypto Mondays

Crypto* people in the space! Mostly for beginner, but you can meet some big names there. Last Monday, we had Tone Vayes and Gary Sheynkman with us.

For the next meetup, make sure to follow: https://twitter.com/CryptoMondaysSJ

You can also join the cryptoDubai group on Signal where we keep posting about the events. Contact: https://linktr.ee/awalcon

Dubai allows crypto businesses to set up in free zone

Just as the heading says, things are moving on in the free zone.

An economic free zone in Dubai has opened for businesses that are offering, issuing, listing and trading crypto assets. The Dubai Multi Commodities Center (DMCC) signed the initial agreement with the Securities and Commodities Authority (SCA) to allow licensing for firms that deal with crypto assets.

Find more details on this link:

https://www.arabnews.com/node/1828681/business-economy

bookmark_border4 Microsoft Exchange Server vulnerabilites

March is not a good month for Microsoft in 2021. At the beginning of March, Microsoft has given out warnings about critical unpatched Exchange Server vulnerabilities.

These vulnerabilities can infect tens of thousands of businesses, government entities in the U.S., in Asia, and in Europe. In addition, the number of targeted attacks have increased.

Outside of U.S, the malware also infected services in Norway, the Czech Republic, and the Netherlands. Attackers scan offensively Microsoft’s email servers, which represent high-value. This time the numbers of attacks were higher compared to last December’s SolarWinds hacking spree. The vulnerability allows breaking into Microsoft Exchange Servers and allows the installation of unauthorized web-based backdoors to facilitate long-term access.

Awalcon recommends updating or disconnecting the affected Exchange Servers immediately.

The vulnerability CVE-2021-26855 allows the bypass of authentication of an on-premises Microsoft Exchange Server that’s able to receive untrusted connections from an external source on port 443. The next vulnerabilities are CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065: these allow malicious parties to gain remote access to the vulnerable systems. It is an interesting fact that both CVE-2021-26855 and CVE-2021-27065 were reported in October 2020.

On March 12, 2021 Microsoft released an emergency patch for all the four security issues. As always, the bad news for the affected businesses: installing the patches is not enough if you have already been backdoored.

bookmark_borderGoogle Chrome zero-day vulnerability

Google has introduced an update to the Chrome browser and released a second patch within a month that fixes five vulnerabilities, including a zero-day vulnerability. One of the most important bugs can be traced as CVE-2021-21193 and affects the Windows, Linux, OS X versions of the browser.

This vulnerability was detected by an anonymous user, and through this bug an attacker can execute arbitrary code on the target system. The measuring of this error is  8.8 out of 10 on the CVSS scale. To avoid this security issue, update your Google Chrome browser at Settings -> Help -> About.

Why the browsers?
Browsers tend to evolve faster in many organizations than other applications, and browsers are a great way to reap the benefits, and attackers continue to target them because they continue to be excellent entry points for endpoint threats within the organization. In addition, the extensions are usually updated less frequently and require hardening to prevent further attacks.

What is a zero-day vulnerability?
Timing is most important here. The moment the flaw becomes known, hackers around the world can try to exploit it. Overall, programmers have zero days to find a solution to the issue, henceforth the term “zero-day vulnerability”.

This can take almost any form, such as missing data encryption, buffer overflows, missing permissions, SQL injection, broken algorithms, URL redirects, errors, or password security issues.

How protect yourself?
Here are some tips to help protect your business from these types of attacks:

Be informed: pay attention to software vendor spending, it may be time to take advantage of security measures or respond to threats before taking advantage of them

Take additional security measures: consider seeking the assistance of an experienced professional, as the safety measures mentioned above are not sufficient to fully protect you.

Keep your system up to date: make sure your software platforms are up to date. The best solution is to allow automatic updates so that the software is updated regularly without any manual intervention.