Network Break 291: F5 Patches Severe Vulnerability; Senate Bill Aims To Weaken Encryption

Take a Network Break! F5 patches a severe vulnerability in its Big-IP ADC, Palo Alto Networks also fixes a critical PAN-OS flaw, and VMware acquires Datrium for SaaS-based disaster recovery. Three Republican US Senators have proposed a bill that would compel service providers and device makers to assist law enforcement in decrypting data, Silver Peak and Kentik partner on network visibility, Amazon Web Services launches the Aerospace and Satellite Solutions business unit, and Apple continues to stake out privacy as a competitive differentiator. Sponsor: Service Express Service Express are leaders in third-party data center maintenance. Lower your post-warranty support costs, take control of your hardware refresh cycle, and extend the life of your server, storage, and network equipment. Visit serviceexpress.com/packetpushers to learn how you can win a $50 Amazon gift card. Show Links: PoC exploits released for F5 BIG-IP vulnerabilities, patch now! – Bleeping Computer CVE-2020-5902 – NIST K52145254 – TMUI RCE vulnerability CVE-2020-5902 – F5 K43638305 – BIG-IP TMUI XSS vulnerability CVE-2020-5903 – F5 CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication – Palo Alto Networks Breaking: VMware Announces Intent to Acquire Datrium to Provide Disaster Recovery-as-a-Service for Hybrid Cloud Environments – VMware Datrium to be Acquired by VMware – Datrium VMware to Acquire Datrium – Architecting IT Graham, Cotton, Blackburn Introduce Balanced Solution to Bolster National Security, End Use of Warrant-Proof Encryption that Shields Criminal Activity – United States Senate Committee on the Judiciary ‘Lawful access’ bill would allow feds to legally bust into encrypted devices – NBC I’m Concerned For The Future Of An Open Internet – Packet Pushers Kentik and Silver Peak Partner on Advanced SD-WAN Visibility for Optimized Network and Business Performance – Silver Peak