Application Security

5/9/2018
04:00 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Black Box Debuts New Secure KVM Switches

PITTSBURGH, May 09, 2018 -- Black Box Corporation now offers a comprehensive line of Secure KVM Switches that safeguard against accidental transfer, unauthorized access or compromise of critical data.

“Black Box was a pioneer in KVM technology back in the 1990s and has continued to lead the KVM market over the quarter-century since,” said John Hickey, R&D & KVM Systems Director, at Black Box. “It’s a natural evolution in our history that we’re bringing to market new secure KVM switches with cybersecurity features that customers have been demanding but that didn’t previously exist.”

New features meet customer demands for secure KVM switching

Examples of innovations that will be soon available from Black Box include secure KVM switches with up to 16 direct computer connections controlled from a single user console. These come with DVI-I, DisplayPort, or HDMI video supporting 4K Ultra HD resolution, stereo audio, USB and an optional smart card reader (CAC-Port).

The secure KVM switches provide complete mechanical, electrical and optical signal isolation to ensure that absolutely no data is leaked between the ports. Each connection uses its own isolated data channel excluding the outside world. For added security, the switches also feature an always-on tamper-proof hardware design, including external hologram tamper-evident seals and long-life internal anti-tampering batteries, as well as keyboard/internal cache wiping and non-reprogrammable ROM.

Secure access solution for information assurance

All Black Box secure KVM switches comply with PSS PP v3.0 (Protection Profile for Peripheral Sharing Switch, Version 3.0) and are being certified by the National Information Assurance Partnership (NIAP), making them suitable for use in government, medical, banking, insurance, secure control rooms, educational administration, corporate, industrial and other environments with cyber-security, hacking and data leakage concerns. They are TAA compliant and made in the U.S.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
More Than Half of Users Reuse Passwords
Curtis Franklin Jr., Senior Editor at Dark Reading,  5/24/2018
Is Threat Intelligence Garbage?
Chris McDaniels, Chief Information Security Officer of Mosaic451,  5/23/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-11506
PUBLISHED: 2018-05-28
The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer.
CVE-2018-11507
PUBLISHED: 2018-05-28
An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long loop in image_load_pnm in image/image-pnm.cpp.
CVE-2018-11505
PUBLISHED: 2018-05-26
The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat output.
CVE-2018-6409
PUBLISHED: 2018-05-26
An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter.
CVE-2018-6410
PUBLISHED: 2018-05-26
An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.