Hello and welcome to the Monday, July 13th, 2006 edition of the Sands Internet Storm Center's Stormcast.

My name is Johannes Ulrich, recording today from Washington, DC.

And this episode is brought you by the Sands.edu master's degree program in information security

engineering.

If you are a user of the Progress Share File server made by Progress Software, you probably

received an email in the last couple days stating, and I quote here from the email,

you must manually shut down the server hosting your storage zone controllers. This is a critical

additional step to ensure the safety of your data, end quote. Essentially what they're saying

is that if your shareield storage zone controller is exposed

to the internet, there is a credible external security threat, as they're calling it, that

targets these kind of systems.

And yes, your best bet is to shut things down.

And it also then states that you can expect to hear from us in the next

24 hours. Well, this email was sent more than 24 hours ago, so I'm not sure if anybody

has received the email since then. At least I haven't seen anything publicly posted. There's nothing really on the Progress website.

There is on the status website for a share file.

Note that there's an unresolved issue, but again, it's still marked as unresolved.

So nothing really seems to be released here in the terms of like a patch, a fix or a configuration update or anything like that.

Remember that progress software has been at the center of a number of significant ransomware incidents in the past.

So certainly they have been targeted, and I would highly recommend

that you follow their advice. And binaw published a blog post with details regarding

several vulnerabilities in the U-Boot bootloader. Now, U-Boot is a very popular bootloader,

...