• Bhubaneswar India
  • Contact+ 91-9938772605
  • Mon - Sat : 10:00AM - 6:00PM

Tag: research

Tenable Research Reveals Vulnerability in Widely Used Open-Source Software Related to SMB Authentication

New Delhi, October 24, 2024 – Tenable, the exposure management company, has disclosed that its Tenable Cloud Security Research team has discovered a medium-severity Server Message Block (SMB) force-authentication vulnerability that exists in all versions of Open Policy Agent (OPA) for Windows prior to v0.68.0. OPA is one of the most widely used policy engines built on open-source software.

The vulnerability, tracked as CVE-2024-8260, exists because of improper input validation, allowing users to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or one of the OPA Go library’s functions. Successful exploitation can lead to unauthorised access by leaking the Net-NTLMv2 hash – or in lay terms, the credentials – of the user currently logged into the Windows device running the OPA application. Post-exploitation, the attacker could relay authentication to other systems that support NTLMv2 or perform offline cracking to extract the password.

Why It Matters:
Open-source software offers organizations of all sizes the ability to accelerate innovation and software development at little to no cost. However, relying on open-source software to build enterprise-scale applications does carry risk. Two prime examples of this issue are the Log4Shell vulnerability disclosed in December 2021 and the XZ Utils backdoor disclosed earlier this year.

Key Takeaway:
“As open-source projects become integrated into widespread solutions, it is crucial to ensure they are secure and do not expose vendors and their customers to an increased attack surface,” said Ari Eitan, director of Tenable Cloud Security Research, “This vulnerability discovery underscores the need for collaboration between security and engineering teams to mitigate such risks.”

With an inventory of installed software and a robust patch management process, organizations can ensure that vulnerable software on critical systems is updated as soon as a patch becomes available. Proactively managing exposure using a unified asset inventory allows teams to gain a holistic view of their environment and risks, enabling them to prioritise remediation efforts effectively. Additionally, organisations must minimise the public exposure of services unless absolutely necessary to protect their systems.

Styra fixed the issue in the latest release of OPA (v0.68.0). All older instances of OPA v0.68.0 running on Windows are vulnerable and should be patched to prevent exploitation. Organisations that deploy the OPA CLI or the OPA Go package on Windows should update to the latest version.

ZEISS Supports Wildlife Research at the 2024 Annual Seminar by the Wildlife Institute of India

Bengaluru, India 23 October 2024: ZEISS, an internationally leading brand in science of optics and optoelectronics had the honor of participating in the Annual Research Seminar (ARS) 2024. The 34th edition was organized by the prestigious Wildlife Institute of India in Dehradun. The attendees included a diverse group of passionate individuals which included students, scientists, Divisional Forest Officers (DFOs), Chief Wildlife Wardens, and renowned wildlife researchers. It served as a focal point for lively conversations, information exchange, and teamwork because of the shared commitment to wildlife studies and conservation.

ZEISS exhibited a variety of cutting-edge products from its COP SO portfolio, emphasizing how these products help wildlife research institutes and nature preservation organizations gain a deeper understanding of their habitats and enable ongoing observations of animal behavior, population size, and area utilization.

Speaking about the event, Kunal Girotra, Head of Consumer Products, Sport Optics, at ZEISS India said, “At ZEISS India, we’re committed to innovating in response to current needs and are proud to be one of the partners for Annual Research Seminar. With platforms like this we can encourage and support young minds to making a valuable contribution to discussions on wildlife research and nature observation and conservation. To promote beneficial change in conservation, we look forward to carrying on this adventure and collaborating with brighter minds in the future.”

As the official gift sponsor, ZEISS India awarded the winners a range of products that will help improve their future research projects and enable them to produce more accurate work.

Dastur Energy recognized with the Decarbonization Excellence Partner Award

DE's proud moment

01st July 2024: Dastur Energy, a leading clean energy technology company, has been named winner of the “Decarbonization Excellence Partner” award by the Governing Council of The Global Refining & Petrochemicals Congress (GRPC 2024) & Organizers of the Downstream India Excellence Awards 2024.

The Award recognizes Dastur Energy’s significant contributions towards enabling industrial-scale clean energy transformation by offering deep expertise across the industrial decarbonization value chain including – renewable energy, clean fuels like hydrogen, production process changes, and carbon capture, utilization & sequestration. Dastur Energy’s team of industrial decarbonization, technoeconomic, regulatory, and project risk experts deliver – a cost-effective strategic approach that is designed to deliver significant business impact while enabling clean energy transition and carbon management.

The Award, held in association with the Global Refining & Petrochemicals Congress (GRPC 2024), recognizes industry leaders and organizations that have demonstrated excellence in thought leadership, management, research, technology, innovation, and overall operations in the Indian downstream Oil & Gas industry.

Atanu Mukherjee, CEO Dastur Energy, expressed his gratitude for the award, stating, “We are honoured to receive this prestigious award which recognizes our commitment to developing innovative solutions that enable the transition to a sustainable future.”

The award was announced and conferred during the ceremony and networking reception held on June 27, 2024, at Hotel Le Meridien, New Delhi, as part of the 5th edition of the Global Refining & Petrochemicals Congress (GRPC 2024).

Dastur Energy, a subsidiary of M. N. Dastur & Co. (P) Ltd., has been successfully delivering industrial-scale clean energy transition and carbon management solutions for companies in the ‘hard to abate’ sectors in North America, the Middle East, and India. In addition, the company has been closely associated as a partner and thought leader enabling pioneering projects funded by governmental entities like – NITI-Aayog, the United States Department of Energy, United States Trade and Development Agency.

Esri India Achieves 1 Million Users Milestone

New Delhi – May 6, 2024: Esri India, the leading provider of Geographic Information System (GIS) software and solutions in India, today announced that it has reached the 1 million users mark. The achievement is a testament to the trust and loyalty of its wide customer base spread across diverse industries around the country.

With encouragement from the Geospatial Data Guidelines 2021, Esri India, as an Indian entity now offers more than 900 layers of geospatial data through the Indian edition of ArcGIS Living Atlas. These data layers are available through Indo ArcGIS to all its users. Indo ArcGIS also provides 200+ solution products for solving various India-centric challenges. Increased usage of these products in the country has led to the culmination of the 1 million user base.

ESRI

Agendra Kumar, Managing Director, Esri India said, “As we celebrate this momentous accomplishment, I want to extend my deepest gratitude to each one of our users who has helped Esri India achieve this milestone of having a million users of Esri technology in India. This increased user base is a testament to the fact that Indian government organizations and industries are widely harnessing the potential of geospatial technologies to achieve exemplary outcomes in their respective fields. The raised awareness along with conducive policies announced by the Government of India in 2021 and 2022 have encouraged users in government, academia, and the private sector to adopt GIS to address mission-critical challenges and build applications that can be collaboratively used by a large number of people in the organizations. We aim to constantly work with the geospatial community and help the users achieve time & cost optimization in their work through effective GIS workflows. These savings will positively impact India’s economic growth, helping it to become a developed nation by 2047.”

Esri India counts the central government, various state government departments including forest and water resource departments, about 200 municipal corporations, smart cities, and other urban local bodies; national mapping agencies; leading manufacturing and telecommunication companies; utilities, and over 800 degree-granting colleges and universities amongst its customer base of more than 6,500 organizations. The company is poised to add many more credible names to its customer base in the years to come.

Esri India enjoys association with a wide network of partners across the country. It has partnered with leading private and government cloud infrastructure providers to deliver affordable, scalable, and robust GIS solutions to its users. It also offers a complete portfolio of managed services – on premise or on cloud for meeting the users’ enterprise GIS needs. Globally, Esri reinvests 30% of its annual revenue into research and development.

DSC Hosts 28th Annual Convocation, unveils ‘Maverick of the Year’ Award

New Delhi, April 24th, 2024: The Delhi School of Communication (DSC) hosted its 28th Annual Convocation ceremony, today, at Alliance Francaise, Lodhi Estate, New Delhi. The event marked the culmination of the two-year Post Graduate Diploma Programme in Communication (PGDPC) for Batch XXVIII, celebrating the student’s academic achievements and their transition into professional life. The convocation ceremony witnessed the presence of esteemed guests, including Mr. Amit Mishra, CEO of MSL South Asia, as the Chief Guest, and Mr. Chetan Mahajan, Founder & CEO, of The Mavericks was the Guest of Honor.

Mavericks & DSC Launch _Maverick of the Year Award_ 2

In a significant move, DSC unveiled the ‘Maverick of the Year Award,’ a new accolade instituted by The Mavericks, a leading communications firm, to identify and celebrate individuals who have demonstrated remarkable proficiency in harnessing the power of communication. The award seeks to honor the best performer based on various parameters of excellence, including academic performance, internships, projects, presentations, overall discipline, and interpersonal skills.

Mr. Chetan Mahajan expressed his enthusiasm for the initiative, stating, “DSC has been at the forefront of breeding integrated thinking and blended communications approaches in its pedagogy. At Mavericks, we believe in true integration to build, grow, and sustain brand reputation. It is an absolute honour and privilege to partner with DSC in further fostering the culture of integration by strengthening the link between theory and practice and an orientation that will allow the students to future-proof their careers.”

He added, “Be overprepared for every opportunity that comes your way. Take your own path —- Be a Maverick!”.

The prestigious award entails a cash prize of Rs. 75,000, accompanied by a Certificate of Merit and an offer to join The Mavericks. It provides an exceptional opportunity for the recipient to further their professional journey.

Prof. Ramola Kumar, Dean of DSC, emphasized the institution’s dedication to exploring cutting-edge avenues of communication. “At DSC we navigate the complexities of the modern world, and we realize that it’s imperative for us to explore unconventional means of interaction and teaching technology. Communication has evolved today and represents a fascinating frontier in human connection, and we believe it deserves recognition and celebration,” she said.

During the event, graduating students were awarded certificates and recognized with various accolades, including medals and subject-specific awards.

The prestigious bronze medal went to Rwitika Ghosh, the silver medal was awarded to Rainee Kaur, and the gold was bagged by Mahek Sheikh. The Surojit Lahiri Memorial Award for Holistic Excellence went to Atharva Sardeshpande.

As DSC’s Batch XXVIII embarks on their professional journeys, the institution continues its tradition of securing placements for its graduates in premier marketing, digital marketing, media management, research, PR, and advertising agencies, further solidifying its reputation as a breeding ground for talent in the communications industry.