Jimi Wikman

Armed with only one word -- Tenet -- and fighting for the survival of the entire world, the Protagonist journeys through a twilight world of international espionage on a mission that will unfold in something beyond real time.

According to Henry Huang, a Taiwanese security researcher, there are still hundreds of thousands of QNAP NAS systems that have yet to be patched for no less than three bugs. This allow an attacker to exploit the three bugs to take full control over QNAP devices. These bugs was found last year and Henry Huang reported it to QNAP last June. QNAP issues a patch in November last year to fix these bugs and still, 6 months later there are hundreds of thousands of unpatched units online. These bugs are: CVE-2019-7192 (CVSS 9.8) (Photo Station bug) CVE-2019-7194 (CVSS 9.8) (Photo Station bug) CVE-2019-7195 (CVSS 9.8) (Photo Station) The bugs that are connected to the Photo Station app are in themselves not a big issue. It is when chained together they can bypass authentication (bug #1), insert malicious code in the Photo Station app PHP session (bug #2), and then install a web shell on unpatched QNAP devices (bug #3). Henry Huang have written detailed information regarding the bugs in an article on Medium. He also strongly advice users to patch their QNAP NAS as soon as possible. If that is not possible then he suggest that you take it off the Internet as it can be used for malicious purposes or you could attract a ransomware gang. This is of course the official recommendation from QNAP as well.

Atlassian has announced that they have acquired Halp. Halp is an interesting take on support for Slack that allow you to create support tickets directly from conversations in Slack. As Halp can also be integrated with Jira Service Desk it makes sense for Atlassian to make the investment to purchase Halp to further strengthen their service portfolio on the support side. Halp have made a bit of an impact in its only 12 months life span and with the simplicity of just posting an emote in Slack to create separate support tickets it has been a hit. Good integrations with Jira Service Desk and Zendesk has of course been a big part and now with integrations to Microsoft Teams it is even better. Not only will Halp make it so much easier to keep track of support questions in Slack, but by integrating with other tools such as Jira Service Desk, then you have a powerhouse. It will update on both sides of the integration allowing you to meet your clients where they feel most comfortable and still maintain proper workflows. You can even connect it to Confluence or Slack messages to create knowledge bases. This is of course another step to connect closer to Slack that purchased the rights to Atlassians previous chat products. Naturally Slack is very happy about this acquisition: In the future we will see deeper integrations with Jira Service Desk and Confluence for sure, but there are hints forr new integrations with OpsGenie and Trello for example. It will undoubtedly be an interesting journey to follow in the future.