Horizon3.ai has just published Veeam Backup and Replication CVE-2023-27532 Deep Dive and a new proof of concept (POC) allowing an unauthenticated user with access to the Veeam backup service (TCP 9401 by default) to extract cleartext user names and passwords.
The Veeam platform provides data recovery in the event of ransomware attacks on multi‑cloud infrastructure. Which means that this POC is a huge problem.
Horizon3.ai Exploit Developer James Horseman said:
“CVE-2023-27532 allows an unauthenticated user with access to the Veeam backup service to request cleartext credentials. We have examined the vulnerable port, reverse engineered the Veeam Backup Service, and constructed a WCF client using .NET core. We have also shown how to extract credentials from the Veeam database by invoking the CredentialsDbScopeGetAllCreds and CredentialsDbScopeFindCredentials endpoints. Finally, we have released our POC on Github, which is built on .NET core and capable of running on Linux, making it accessible to a wider audience. It is important to note that this vulnerability should be taken seriously and patches should be applied as soon as possible to ensure the security of your organization.”
He also notes that others, including Huntress, Y4er, and CODE WHITE, have provided insight into this vulnerability. Horizon3.ai published its post and POC to offer additional insights.
You can read the deep dive here.

68% Of Canadian Media & Entertainment Organizations Added New Revenue Streams Last Year: Salesforce
Posted in Commentary with tags Salesforce on March 23, 2023 by itnerdSalesforce today released its Media & Entertainment Industry Insights Report that shares key trends from industry decision-makers across seven counties, on how organizations in the streaming/studio, brand advertiser, advertising agency, gaming, and other media and entertainment sectors are evolving amid digital-first customer expectations and economic headwinds.
Key Canadian insights of this year’s Media & Entertainment Industry Insights Report include:
Despite Economic Headwinds, Customer Experience Remains Paramount. Today’s media and entertainment market is saturated, and many customers are re-evaluating their subscriptions, upping the ante for media and entertainment companies to prove their value. But hurdles make this an onerous task. The top two industry priorities in Canada are ‘improving operational efficiency’ and ‘experience innovations’, while ‘increased costs’ are the top industry challenge.
New Realities Spark Revenue Diversification. Diversified revenue streams are key for media and entertainment companies moving forward as they seek to increase average revenue per user. Sixty-four per cent of media and industry companies in Canada partner with influencers, and 52% have a fully defined Web3 strategy.
A Pursuit of Efficiency Hinges on Automation, Data, and Budgets. With advertising spend forecasted to decrease in the near term, efficiency is paramount to media and entertainment company strategies. Automation, AI, and data integration are seen as key to this pursuit. Employee productivity, closely followed by employee experience, are the top reported automation benefits among media and entertainment companies in Canada.
Methodology
Data in this report is from a double-anonymous survey of industry decision-makers conducted from December 14–29, 2022. The survey generated 350 responses from a range of media and entertainment professionals with a title of director or higher across Australia, Canada, France, Germany, India, the United Kingdom, and the United States. Cultural bias impacts survey results.
For more information:
Leave a comment »