Skip to content

Silicon shortage, is another global crisis coming?

We are drug addicts. Not to green cannabis or MDMA, necessarily, but we do are addicted to some elements scattered around the globe that support the base of the world economy and that we need, like water, so that everything remains in order. The shortage of silicon chips is already one of the most suffocating problems that humanity has to face these days, we tell you about it in this article.

A new world problem: shortage of silicon chips

Perhaps there were some smart people who knew it before, but, for the rest of the mortals, it was in 2021 when the crude dependence that the technology industry has on factories that produce microchips was revealed. Yes, those little things are absolutely essential for the operation of electronic devices.

You can now start trembling with fear, the shortage of semiconductors, of silicon chips, which work as the heads of computing devices, is not good for us. Because, as you may tell, they control everything these days, from your smartphone to your laptop, from your tablet to your new car, from your state-of-the-art washing machine to your kid’s Playstation 5.

What is this semiconductor crisis about?

As it happened with the rest of the markets, the restrictions imposed by the pandemic forced the closure of many of the factories that were devoted to the production of these chips, thus making their production more difficult. And what’s worse, on top of that, the demand for computer devices increased, since everyone was locked up at home, needing to work remotely or entertain themselves with screens so as not to die of disgust making bread or staring at the wall. To all of this we add the inevitable delay in shipments and transport on a global scale, as well as the rise in the price of silicon, an essential element for microchip manufacturing, and other components that were bitterly disputed by the great world powers. As if that were not enough, two large chip producers, Taiwan and China, suffered certain catastrophes that seriously affected the capacity of their factories.

We know that the semiconductor industry fluctuates, that it is fickle and regularly goes through certain cycles of shortage, but all of this happened at the same time: this fluctuating nature, the alteration of demand and supply patterns due to the pandemic, the disagreements between the great powers, and then the catastrophes in the countries with the highest production… Not even done on purpose!

Who has been the worst off because of the shortage?

One of the markets that has been the most affected is the automobile sector. In fact, the AlixPartners financial consultancy recalls that, due to the shortage of chips, the global automobile industry has lost, this past 2021, 210,000 million dollars in revenue. That’s about 7.7 million cars less.

But not only that, the shortage of semiconductors also threatened the availability of smartphones, tablets and other gadgets with microchips in the last months of last year, which is, as you know, when these things are sold more. The Christmas campaign.

In fact, the very Apple, during November, had to choose between its iPads and its iPhones, diverting the chips that were originally destined for the former for the latter, since the iPhones are sold more and they are more lucrative. This meant that many specialist stores in the UK didn’t have stock of the iPad mini or the basic iPad for months.

But now comes perhaps the sector that has defended the problem of silicon, chips, semiconductors and all their ancestors the most: the world of gamers. Because the universe can be sunk with a single click of Thanos but the difficulties to get the brand new PlayStation 5 or the Xbox Series X is inexcusable. Indeed, Sony had it hard. Forced, even, to stop the production of its flagship product, the PS5, because the hundreds of chips that make it up are too difficult to obtain. The same thing happened with the giant Nintendo, which warned, distressed, that they were in serious trouble. They couldn’t keep up with the demand for their new console. Meanwhile, high-end graphics cards for PC gaming are still hard to find. If things continue like this, at any moment gaming lovers will leave the controls of Call of Duty, come out of their burrow and go themselves refine the silicon.

Moving on to the aesthetic spectrum, we note that if you’re bald you might not have noticed, but the Supersonic hair dryer and Airwrap hair styler have been missing for months as tech giant Dyson continues to beg for chips among the few supplies that work selling them worldwide.

Conclusion: What will happen in the near future?

Yes, things are very bad regarding the supply of chips and semiconductor materials. Although, don’t worry, experts warn that the effects of the shortage will only take a year to subside. There will be gradual improvements, although all the demand will probably not be met before 2023.

Many companies, such as Intel, have decided to create new chip factories in Europe, America and Asia to avoid another shortage on such a scale. In the meantime, meditate, exercise, read our articles, check your security system, or try to bring back tug-of-war as an Olympic sport.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Why Log4Shell Remains a Major Risk for Corporate Networks.

Log4Shell is Still Lurking.

What Does it Mean for Corporate Networks?

What is Log4Shell & What Does it Affect?

In December 2021, the Log4j vulnerability, also known as Log4Shell, was made public. Log4j is a logging utility for Java that allows developers to output log messages from their applications to various destinations, such as the console, a file, or a database. Like any software, log4j is susceptible to vulnerabilities that can be exploited by attackers. Logging tools are used by developers to keep track of activity within a certain application.

To take advantage of Log4Shell, all attackers have to do is trick the system into logging a unique piece of code. They can then take over their target’s computer and install malware or launch other types of cyber attacks.

Log4j’s handling of serialized data is one area where it might be vulnerable. An attacker may be able to insert harmful code into serialized data supplied to the log4j library in some versions of log4j. The injected code may be executed if the log4j library deserializes this data, which might provide the attacker access to the system without authorization or enable them to carry out other nefarious deeds.

A year later, the issue still posses’ great risks as was noted by an announcement by both the FBI and the Cybersecurity and Infrastructure Security Agency on a network attack by Iranians at a federal civilian executive branch agency. With the relentless rise of attacks and vulnerabilities dominates the cybersecurity landscape, organizations are coping with a compound threat: the vulnerabilities from prior years that may not have been sufficiently addressed as well as the new ones that surface every year.

How Does Log4Shell Affect Corporate Networks?

What makes the Log4j vulnerability even more dangerous is how ubiquitous the Log4j 2 library is. It can be found in large and small services as well as significant platforms like VMware and Amazon Web Services. Organizations across the industry have included Apache Log4j 2 into a variety of applications because it is one of the most used logging frameworks on the internet. This includes well-known cloud providers like Twitter and Stream as well as platforms like Apple, Google, Microsoft, and Cloudflare.

The vulnerability’s impact is amplified in particular by how simple it is to exploit. The Log4j library manages how code and data are logged by applications. The flaw gives an attacker access to a string, which they can use to fool the application into requesting and executing malicious code they have control over. Attackers can thereby remotely take control of any internet-connected service that makes use of specific versions of the Log4j library, regardless of where in the software stack it is located.

The subject is pertinent to more discussions about the software supply chain and how it is more challenging to find and fix vulnerable code since many firms do not have a complete accounting of all the software they use in their systems. However, even if a company has a record of every piece of software it has purchased or installed, those programs may still contain other software components that the end user isn’t precisely aware of and didn’t intentionally choose. Because of this intricate web of dependencies between the impacted platforms and services, patching can be a challenging and time-consuming process.

Attackers are still actively using Log4Shell everywhere they can, from criminal hackers looking for a way into targets’ systems to attackers with the support of the Chinese and Iranian governments who use the exploit in their espionage operations. Moreover, latest analysis released by Tenable Wednesday revealed that the issue still exists as of October 1, 2022, and that 72% of organizations are still exposed to Log4Shell. Some companies that first mitigated the vulnerability are included in that figure. Tenable conducted the study while gathering information from more than 500 million tests.

How can Companies Mitigate This Vulnerability?

Any company can fall victim to Log4Shell. Previous research and data analysis suggest the importance of continually assessing enterprise environments for the flaw, as well as other critical vulnerabilities.

Companies should update their own applications and infrastructure that use Log4j as well as third-party applications immediately. Corporate networks need enhanced security solutions that can immediately and automatically identify vulnerable systems and their dependencies, and help you prioritize the most critical systems to update first.

Prioritizing Java processes that are accessible via public networks and have the potential to leak critical information to malicious intruders is the most effective strategy for solving this problem. Throughout this process, it is important to keep a list of all known and suspected susceptible assets and what is being done with them.

Since malicious cyber actors may compromise an asset and then patch it to cover their tracks, it is crucial to keep track of patching. In order to determine whether a threat actor may have patched an asset, organizations should maintain a detailed record of the susceptible assets they have patched.

Even with proper record keeping, it is important to verify the success of the mitigation. Use the appropriate tools and techniques to scan the patched asset. Utilize different techniques to confirm that the mitigation was properly implemented while keeping a careful eye on the asset. Look out for updates from vendors to the asset’s software.

For information on known affected products and patches, go check CISA’s Github page the GitHub page for CISA. CISA will keep the repository updated when vendors issue patches.

Given the widespread exploitation of this vulnerability, it is also advisable to conduct hunt procedures. Organizations should assume that their assets have been compromised to simulate incident response procedures. It should involve treating assets as compromised, inspecting and monitoring accounts across your enterprise that exist on or connect to assets that use Log4j. These are among the ways that corporate networks can be protected from the vulnerability.

It goes without saying that all firewalls and intrusion detection systems should be updated. The patches could filter or block LDAP and RMI traffic attempting to reach malicious LDAP servers. It is also useful to ​implement general sanitation practices like multi-factor authentication and strict VPN policies. Finally, it was noted that a design flaw in the JNDI Lookup plugin is primarily to blame for this critical vulnerability. By disabling the Jndi Lookup class, the logger will be unable to take action based on data found in the log. JNDI is however disabled by default in version 2.16.0 of Log4j.

What is the Future for Log4Shell & Cybersecurity

Recognizing the problem is the first step in solving a complicated issue like cybersecurity vulnerabilities. Just a few years ago, security breaches were a taboo subject that was rarely addressed outside of the computer sector, and firms that had experienced them were unwilling to reveal and provide specifics. The latest round of public hacks has elevated cybersecurity to the level of board discussion for many businesses. Additionally, customers can now evaluate businesses based on how they choose to handle these incursions.

Another hopeful aspect is the fact that cybersecurity education is becoming more mainstream. Degree programs in cybersecurity are currently available from many prestigious colleges, including Stanford, MIT, and University of California, Berkeley. Similar initiatives are being made in the tech and cybersecurity sectors. There will be a record number of highly skilled professionals in the security sector. They also gain knowledge from the intrusions and weaknesses. News stories from today become case studies and precedents in the law of tomorrow.

It is also encouraging to see that vendors are building new technology with security in mind. While not all technologies will benefit from this, and the environments won’t be future-proofed, it represents a significant shift from decades of development practices. Although it will take time for these modifications to take effect, keep in mind that the choices that led to the creation of Log4Shell were made years ago.

Seeing more public-private partnerships being formed is a step in the right direction. Companies and governmental organizations are working together to exchange knowledge about vulnerabilities and incursions. Organizations are sharing technical information and more comprehensive strategic lessons learned for the good of everybody. In order to respond and address these problems more quickly and effectively, this happens at numerous levels and across a variety of teams.

These are positive moves the security sector sorely needs to take. It raises the possibility that the world will have considerably more robust and resilient cyber defenses in future.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

Hard Disk Types

Hard disk types: Get to know the main ones!

Do you need to buy hard disks? All right, we all have needs in life.

Are you clear about what you need them for? Great, that’s where it starts.

Don’t you have a clear choice of hard disk types? Maybe we can give you some clues…

The choice of hard disks depends, specially, on the use you are going to make of them. You may need them for servers or databases, or for high-performance environments. But it is also possible that you only want them to save on your home computer Petabytes of videos of the dancing parrot.

In this article we are going to know the main types of hard disk that exist nowadays. Let’s go!

Hard disk types. A brief introduction

Before going into greater depths we have to say that hard disks are basically divided into 2 categories: HDD and SSD.

When distinguishing between classes of hard disks, these can also be distinguished depending on the type of connectors they use. Thus, we talk about modalities such as SATA, SCSI or SAS, among others.

In fact, we could even use other criteria to classify the types of hard disk, such as where they are (internal or external) or even what they are used for, but in this article we are going to keep the first two.

Next we will see what each type of hard disk consists of. However, one thing to keep in mind is that both HDDs and SSDs will be able to use different types of connectors.

Hard Disk Types: HDD and SSD

HDD Hard Disks

We know by HDD (Hard Drive Disk) the traditional mechanical hard disks that record information magnetically on one or several platters. HDDs are made up of mechanical parts; they basically consist of one or more hard disks that rotate at high speed (thousands of RPMs) around an axle, inside a box. On each disc, a head reads or records data on each of its faces.

So that you can visualize it simply, it would be something like a small turntable stored inside a box (saving distances).

HDDs have been the most widely used discs in recent decades. More economical, durable, and with ever-increasing storage capacities, HDDs have reigned as storage devices for decades, and even though they have been a tough competitor in SSDs, they are still widely accepted.

Solid State Disks (SSD)

They are a recent novelty, and every day they have more followers. Actually, when we talk about SSD (Solid State Drive), we’re not talking about a “hard drive” as such. However, since they share their primary purpose, which is to store data, they are also often called “hard drives”.

The structure of SSD devices has little or nothing to do with the classic HDD, so they are only called “hard drives” because they are dedicated to similar functions. SSDs are not, in fact, disks, and lack mechanical parts; on the contrary, they have their own microprocessor (called a “controller”) that takes care of data reading/writing tasks, and stores the data in microchips that have interconnected flash memories.

For the last few years SSD hard drives have been very successful thanks to their higher speed. However, they also have some disadvantages, such as their price and lower storage capacity. So some people go for the solution of using an SSD hard drive to run the operating system and use an HDD for data storage.

Types of hard disk according to their connectors

Serial ATA (SATA) hard disks

In its different versions, the most current is version III, these are the most common hard drives in home computers, if you are accessing this article through a laptop or desktop computer is likely to be the type of hard drive that is working in your computer.

The Serial ATA uses a serial connector for data transmission and in its version III reaches speeds of about 600 Mb/s.

As we said, these are the hard drive connectors that have been most popular in recent years. Both their price and their data transmission speed have made them very popular.

SCSI or SAS hard disks

These are professional hard drive connectors that are typically found in high performance environments.

They are usually installed in RAID and are inside racks or blades.

One of their main features is that they are able to replace other similar hard disks (which, for example, have broken down), without having to shut down the computer, which will help the service to continue operating without an interruption.

Let’s get monitoring!

And now that we’ve seen some of the main hard disk types out there, how about taking a few minutes to discover something as important as system monitoring?

Monitoring systems are responsible for monitoring computer systems (hardware, networks and communications, operating systems or applications, for example) in order to analyse their operation and performance, and to detect and warn of possible errors.

And if we talk about monitoring, of course, we should talk about Pandora FMS. Pandora FMS is a flexible monitoring software, capable of monitoring devices, infrastructures, applications, services and business processes.

Of course, one of the things that Pandora FMS can monitor are the hard disks of your computers.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Safetica prevents data leaks for Voltamp Transformers

VOLTAMP TRANSFORMERS OMAN SAOC is a manufacturer of transformers based in Oman, and data security is one of their top priorities. The company replaced their previous DLP solution with Safetica because it offers the features the company needs to protect its sensitive data, such as client lists, manufacturing processes and R&D prototypes. Using Safetica brings Voltamp peace of mind and reduces their data security costs.

The problem

Their previous DLP solution, TrendMicro, lacked features like OCR blocking, specific path leakage prevention, file-extension based data protection, signature based prevention, etc.

The company decided to use Safetica because it checked all the boxes for DLP and insider threat protection. With help from Salama Integrated Technologies, Safetica ONE was implemented in under a month. It included security Audit, endpoint data protection, security automation, enterprise features and performance monitoring.

Benefits of Safetica

Voltamp’s company data was classified based on importance and criticality, and policies were developed for users and computers to prevent data leakage. After implementing Safetica, both internal data security and security risk level improved as a result of the periodic reviews of actual data leakage.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Safetica
Safetica is to provide small and mid-sized companies with the same quality data protection that corporations have – affordably, and without any additional IT administration or disruptions in operation.

Municipality of Avezzano chose Awingu to solve their remote working challenge

The Municipality of Avezzano is a small town in the province of L’Aquila (Abruzzo) and its territory extends over 100 square kilometers. It is made up of the main town and some hamlets and has more than 40.000 inhabitants. The IT service of the municipality consists of 4 people, who directly provide support and maintain the infrastructure for the approximately 200 employees equipped with IT tools.

During the 2020 pandemic lockdown, the municipality’s ICT service faced the challenge of “smart working” in order to allow their employees to continue in their valuable work of service to citizens and institutions. The classic equipment of municipal employees were desktop devices, posing an additional challenge to the Municipality’s ITC team: since it was not possible to equip each employee with a laptop, they were looking for a way to allow connections from the outside via the employees’ personal devices. The challenge was especially daunting considering the heavy security requirements an institution such as Avezzano has to adhere to.

Connecting to desktops in the municipal office

"Our partner IFIConsulting suggested Awingu to us, and we immediately identified simplicity and ease of use - combined with a high level of security - as the key elements of the solution. In a short time we installed and configured Awingu, enabling the security of two-factor authentication and thus allowing our users to connect securely from home to their PC located at the municipal offices, using any device they had at home."
Alberto Di Berardino

Awingu was installed on a VMWare virtual machine and was configured by enabling the MFA function and then connecting the various desktop machines with RDP.  On the devices used by remote users, the software for the management of USB keys for the digital signature of documents was configured and integrated into Awingu, which was another critical element indispensable for the proper performance of the public officials’ work.

In addition, a whole set of security features were configured in Awingu to prevent the presence of administration data on local devices.

All the work was carried out independently by the IT department of the municipality: “even the integration with LDAP and in general, all the configuration was easy and fast”.

"All users were very satisfied with the adopted solution and we didn't find any complaints, not even from users using limited bandwidth connections."
Giacomo Calisse

The key role played by our technology partner IFIConsulting allowed us to identify the solution to our challenge in a very short time. IFIConsulting’s constant presence and collaboration were invaluable in addressing existing issues and were crucial in defining our future needs in terms of resources and performance.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Parallels 
Parallels® is a global leader in cross-platform solutions, enabling businesses and individuals to access and use the applications and files they need on any device or operating system. Parallels helps customers leverage the best technology available, whether it’s Windows, Linux, macOS, iOS, Android or the cloud.