Category Archives: Automation

In September of 2020, JPMorgan made headlines by ordering its traders, bankers, brokers and analysts back into the office, touting the beneficial synergy of in-person workplace interactions. Several days later, the bank made headlines again for sending some traders home after an employee tested positive for COVID-19.

As more of the population is vaccinated and returns to offices in pursuit of that synergy JPMorgan CEO Jamie Dimon hopes to regain, employers will want to avoid mandating employees back into workplaces before it is safe to return. Striking the balance between synergy and safety will require corporates to proactively mitigate hygiene risk, and they should do so by using the same approach that increases efficiency and reduces human error in any other business process: automation.

Hygiene risk and human error

Automation is at the forefront of the minds of many leaders who were undertaking a digital transformation heading into 2020 a journey that for many was accelerated by the emergence of the COVID-19 pandemic and subsequent shift to remote work.

The proven benefits of automation reduced errors, lower costs and improved resource allocation are all advantages that can be gained by applying automation to mitigate hygiene risk. Recommendations encouraging handwashing, face masks, ventilation and social distancing are plentiful, but humans are imperfect in following these guidelines, resulting in surging infection rates and additional lockdowns. To ensure a resilient, sustainable return to work, corporate leaders will seek technological solutions, because automation is the antidote for human error.

Spending on workplace hygiene tech is expected to reach $400 million by 2025, and to ensure the best return on that fat investment, corporations will seek automated solutions that perform multiple functions. Some technology monitors various factors at once, such as hand hygiene and temperature checks, while other tools will aim to both monitor and educate.

For instance, Connectome.ais hand-washing system is a screen above the tap that is integrated with a turnstile. The system not only ensures safer entry, but also teaches proper hand hygiene a practice that is very susceptible to human error and imperfection. When observed in public restrooms, only 5% of people washed their hands long enough to kill germs, 33% didnt use soap, and 1 in 10 didnt wash their hands at all. Another study observing adults aged 60+ preparing food in a domestic kitchen found that only 30% properly washed and dried their hands before preparing food; 62% did not rub hands, palms and between fingers when washing hands; and 47% failed to use soap every time they washed.

Given that handwashing has been shown to reduce cases of all respiratory diseases by 20%, and there is global consensus among the medical community that hand hygiene is the most effective first line of defence against COVID-19, it is clear that the educational component of automated solutions is not only necessary, but a sound investment for corporations aiming to mitigate hygiene risk and ensure the health and safety of their employees.

From medical to mainstream

The healthcare industry is already attuned to the benefits of automating hygiene risk, and automation continues to be a popular strategy in hospitals where cost-reduction and efficiency are central to their fiscal goals. Due to its unbiased nature, automated hand hygiene-monitoring systems are especially effective in facilities where a direct observation approach has failed to improve compliance. Other growing industry automation trends include touchless cleaning, with research indicating that UV light disinfection eliminates up to 97.7% of harmful pathogens in operating rooms, and smart HVAC system designs that not only ensure proper air circulation, but also automatically adjust themselves based on custom settings and schedules.

Now that the COVID-19 pandemic has highlighted the importance of hygiene in safeguarding worker health across sectors, these formerly specialised solutions are going mainstream. Workplace hygiene solutions were already on the radar in heavy industries and the pandemic has resulted in creative adaptions of previously developed safety tech. German chemical company Henkel reconfigured sensors designed to prevent forklift crashes into wearable devices that ensure social distancing after a coronavirus outbreak that shut down the plant for two weeks.

The first human trial of a COVID-19 vaccine was administered this week.

CEPI, launched at the World Economic Forum, provided funding support for the Phase 1 study. The organization this week announced their seventh COVID-19 vaccine project in the fight against the pandemic.

The Coalition for Epidemic Preparedness Innovations (CEPI) was launched in 2017 at the Forum's Annual Meeting bringing together experts from government, business, health, academia and civil society to accelerate the development of vaccines against emerging infectious diseases and to enable access to these vaccines during outbreaks.

Coalitions like CEPI are made possible through public-private partnerships. The World Economic Forum is the trusted global platform for stakeholder engagement, bringing together a range of multistakeholders from business, government and civil society to improve the state of the world.

Organizations can partner with the Forum to contribute to global health solutions. Contact us to find out how.

Hygiene risk mitigation was recently in the global spotlight during the 2020 Olympic games in Tokyo, with much discussion about how to prevent the spread of COVID-19 among athletes. Within the Olympic Village, the strategy was based around frequent testing, but some automated tech debuted, such as a digital pin that encouraged the exchange of information while maintaining social distancing.

Wearables are an enduring trend in sports. When the National Basketball Association (NBA) resumed play in 2020, players, coaches and reporters covering the games wore a wristband that sounded an alarm when wearers got too close to each other for two long. So far, hygiene risk strategies in sports are mostly focused on tracking and tracing, but its easy to envision how prevention could be integrated into the sporting experience for instance, in arenas that already incorporate security screenings and ticketing turnstiles, the foundation is in place to integrate handwashing into the entrance experience.

Considering re-entry to offices, there is already widespread speculation on the workplace of the future a vision where automated hygiene risk mitigation technology is seamlessly integrated into the design of the buildings. But, of course, most businesses arent yet breaking ground.

As companies plan for a return to their existing workspaces, they must embrace the automated solutions currently available, because corporations that fail to protect employees health remain exposed to significant risk and will, therefore, not be truly resilient. Not only is this the optimal approach to mitigating hygiene risk, but embracing technology to automate the process enables leaders to reap the efficiency, productivity and cost advantages that automated solutions provide.

The views expressed in this article are those of the author alone and not the World Economic Forum.

See more here:

Automatic handwashing tech can help provide a resilient return to work - World Economic Forum

Ericsson and industry 4.0 partner, Unikie, are collaborating to trial automated factory parking with Ericssons 5G standalone (SA) private network.

Finnish company Unikie develops software for real-time autonomous operation and process management in automotive and industrial solutions, including automated factory parking and valet parking.

At the test facility in Turku, Finland, vehicles are remotely controlled through a secure and reliable Ericsson 5G private network, utilizing edge computing and Unikies Automated Factory Parking (AFP) solution.

As a result, vehicle logistic management at the factory can be fully automated due to reliable connectivity, low latency to meet safety requirements, and the high-security standards of the 5G private network.

As cars roll off the production line, drivers move cars to a parking area before being shipped, which takes approximately 30 minutes. With Unikies AFP solution of sensors and software, automakers can control and monitor the car factory route and automate parking.

Automakers benefit from identifying the exact location of parked vehicles which reduces search time and labor costs. With precision parking, the parking space is optimized by up to 20 percent. An additional benefit is increased safety for onsite staff and minimum vehicle parking accidents. Other possible use cases for the technology include airport parking, shopping malls and logistic hubs.

Vesa Kiviranta, Chief Business Officer, Automotive, Unikie says: Together with Ericsson, we can support the reliability and performance requirements critical for large automotive manufacturers and other industries with vast logistics areas. Controlled autonomous vehicles onsite are efficient and safe not only for the entire automotive production ecosystem but for all logistic ecosystems.

Jan Diekmann, Technical Account Manager, Ericsson says: 5G private networks enable automotive manufacturers to increase productivity, reduce costs, and improve worker safety. Combined with Unikies automated factory parking solution, vehicle logistics are transformed. It is exciting to be a part of this project.

See an Ericsso video of the demo via this link.

Unikie is a Finnish software technology company that develops technologies for protected real-time processes. Our services concentrate on the crossroads of three global macrotrends IoE, 5G, and AI where our technology solutions enable a constant awareness of the surroundings, as well as decision-making and control based on this awareness. Our clients include pioneers of real-time data utilization in the automotive industry as well as other industries and telecommunication companies worldwide.

Founded in 2015, Unikie is one of Finlands fastest growing technology companies. Our turnover in 2020 was 33 million euros. Our goal for the near future is to keep up our rapid international growth pace, because the demand for our AI, deep technology and security solutions is increasing rapidly across the globe. At the end of 2020 we received growth capital from Capman Growth and Tesi. We employ over 400 software developers in Finland, Sweden, Germany, Poland and the United States. Our clients include Sandvik, Nokia, Valmet and Ponsse. http://www.unikie.com

Read the original here:

Ericsson and Unikie optimize factory parking with a 5G private network and automation - Ericsson

This report describes and explains the pharma packaging equipment market and covers 2015 to 2020, termed the historic period, and 2020 to 2025 termed the forecast period, along with further forecasts for the period 2025-2030. The report evaluates the market across each region and for the major economies within each region.

LONDON, Sept. 07, 2021 (GLOBE NEWSWIRE) -- According to The Business Research Companys research report on the pharmaceutical packaging equipment market, automatic packaging machines are increasingly being utilized in the pharmaceutical packaging equipment market. The machine automatically supplies packing materials and contents, and other parts of the packaging process can be done automatically.

For instance, in July 2020, OPTIMA Packaging Group, a Germany based company that designs and builds packaging equipment for pharmaceutical, consumer, nonwovens and life science products launched OPTIMA FPA. It is a unique platform that can assemble pen injectors both fully or semi-automatically. It is especially suitable as an entry-level system. Another new feature of the Optima FPA is the choice of adding a printer connected with 360-degree labeling. This product launch has increased the companys automated packaging solutions portfolio.

Major players in the pharmaceutical packaging equipment industry are Krber AG, Uhlmann Group, Marchesini Group S.p.A., Optima Packaging Group, Romaco Holding GmbH, MG2 s.r.l., Robert Bosch GmbH, Industria Macchine Automatiche S.p.A., Vanguard Pharmaceutical Machinery, Accutek Packaging Equipment Companies, MULTIVAC Group, Bausch + Strbel Maschinenfabrik Ilshofen GmbH + Co. KG, ACG Group, Coesia S.P.A., Syntegon Technology, Trustar Pharma & Packing Equipment, Inline Filling Systems, Dara Pharmaceutical Packaging, ARPAC LLC, Romaco Group, N.K.P. Pharma, Ropack, and Trustar Pharma & Packing Equipment.

In February 2021, ProMach, a US-based packaging machinery company acquired Serpa Packaging Solutions for an undisclosed amount. The addition of Serpa brings automated cartoning systems into ProMachs portfolio and significantly expands ProMachs specialized secondary packaging machinery and line integration capabilities for the rapidly growing pharmaceutical industry. Serpa Packaging Solutions is a US-based company that designs and manufactures pharmaceutical packaging equipment.

Story continues

The Business Research Companys report titled Pharmaceutical Packaging Equipment Global Market Report 2021 - By Product (Primary Packaging Equipment, Secondary Packaging Equipment, Labelling And Sterilization Equipment), By Packaging Type (Liquids Packaging Equipment, Solid Packaging Equipment, Semi-Solid Packaging Equipment), By Equipment Type (Blenders, Granulators, Tablet Pressers, Tablet Coating Machine, Allied Machines), By Mode of Administration (Injectable Administration, Topical Administration, Oral Administration), COVID-19 Growth And Change covers major pharmaceutical packaging equipment companies, pharmaceutical packaging equipment market share by company, pharmaceutical packaging equipment manufacturers, pharmaceutical packaging equipment market size, and pharmaceutical packaging equipment market forecasts. The report also covers the global pharmaceutical packaging equipment market and its segments.

Request For A Sample Of The Global Pharmaceutical Packaging Equipment Market Report:

https://www.thebusinessresearchcompany.com/sample.aspx?id=5271&type=smp

North America was the largest region in the pharmaceutical packaging equipment market in 2020. Asia Pacific was the second-largest market in the pharmaceutical packaging equipment market. The regions covered in the pharmaceutical packaging equipment market report are Asia-Pacific, Western Europe, Eastern Europe, North America, South America, Middle East and Africa.

The global pharmaceutical packaging market is expected to grow from $7.80 billion in 2020 to $8.81 billion in 2021 at a compound annual growth rate (CAGR) of 13%. The growth in the pharmaceutical packaging equipment market is mainly due to the companies resuming their operations and adapting to the new normal while recovering from the COVID-19 impact, which had earlier led to restrictive containment measures involving social distancing, remote working, and the closure of commercial activities that resulted in operational challenges. The market is expected to reach $13.23 billion in 2025 at a CAGR of 10.7%.

The main types of products of pharmaceutical packaging equipment are primary packaging equipment, secondary packaging equipment, and labeling and sterilization equipment. Primary packaging equipment is in direct contact with the product itself and is referred to as a consumer unit. Primary packaging is what directly encases and contains the drug product. Secondary packaging equipment provides corrugated cardboard packaging print finished to a high standard. Secondary packaging is the exterior packaging of the primary packaging that groups packages and further protects or labels the drug product. Labeling and sterilization equipment is responsible for adding directions of use and sterilizing the packaging environment. The various types of pharmaceutical packaging equipment are blenders, granulators, tablet pressers, tablet coating machines, and allied machines.

Pharmaceutical Packaging Equipment Global Market Report 2021 - COVID-19 Growth And Change is one of a series of new reports from The Business Research Company that provide pharmaceutical packaging equipment market overviews, pharmaceutical packaging equipment market analyze and forecast market size and growth for the whole market, pharmaceutical packaging equipment market segments and geographies, pharmaceutical packaging equipment market trends, pharmaceutical packaging equipment market drivers, pharmaceutical packaging equipment market restraints, pharmaceutical packaging equipment market leading competitors revenues, profiles and market shares in over 1,000 industry reports, covering over 2,500 market segments and 60 geographies.

The report also gives in-depth analysis of the impact of COVID-19 on the market. The reports draw on 150,000 datasets, extensive secondary research, and exclusive insights from interviews with industry leaders. A highly experienced and expert team of analysts and modelers provides market analysis and forecasts. The reports identify top countries and segments for opportunities and strategies based on market trends and leading competitors approaches.

Here Is A List Of Similar Reports By The Business Research Company:

Advanced Packaging Technologies Global Market Report 2021 - By Type (3D Integrated Circuit, 2D Integrated Circuit, 2.5D Integrated Circuit), By Product (Active Packaging, Smart And Intelligent Packaging), By End Use Industry (Automotive And Transport, Consumer Electronics, Industrial, IT And Telecommunication), COVID-19 Growth And Change

Flexible Plastic Packaging Global Market Report 2021 - By Type (Stand-Up Pouches, Flat Pouches, Rollstock, Gusseted Bags, Wicketed Bags, Wraps), By Technology (Flexography, Rotogravure, Digital Printing), By Application (Food, Beverage, Pharms & Health Care, Personal Care & Cosmetics), COVID-19 Growth And Change

Pharmaceutical Drugs And Biologics Logistics Market - By Type Of Service (Cold Chain Logistics, Non-Cold Chain Logistics), By Mode Of Transport (Air Transportation, Ocean Transportation, Land Transportation), By Pharmaceutical Type (Pharmaceutical Drugs, Biologics), By Therapeutic Area (Metabolic Disorders Drugs, Anti-Infective Drugs, Central Nervous System Drugs, Respiratory Diseases Drugs, Cardiovascular Drugs, Musculoskeletal Disorders Drugs, Oncology Drugs, Hematology Drugs, Monoclonal Antibodies (MAbs), Genito-Urinary Drugs, Gastrointestinal Drugs, Therapeutic Proteins, Dermatology Drugs, Vaccines, Ophthalmology Drugs), And By Region, Opportunities And Strategies - Global Forecast To 2030

Interested to know more about The Business Research Company?

The Business Research Company is a market intelligence firm that excels in company, market, and consumer research. Located globally it has specialist consultants in a wide range of industries including manufacturing, healthcare, financial services, chemicals, and technology.

Get a quick glimpse of our services here: https://www.youtube.com/channel/UC24_fI0rV8cR5DxlCpgmyFQ

The Worlds Most Comprehensive Database

The Business Research Companys flagship product, Global Market Model, is a market intelligence platform covering various macroeconomic indicators and metrics across 60 geographies and 27 industries. The Global Market Model covers multi-layered datasets which help its users assess supply-demand gaps.

See the rest here:

Pharmaceutical Packaging Equipment Market Players Invest In Automation Among Latest Trends As Per The Business Research Company's Report On The...

1. Background

a. This Scholarship has been established to provide financial assistance to a PhD student who is undertaking research to develop a practical understanding of how different actions taken by digger-based earth-moving machines effect the dynamic behaviour of the fragmented material being dug up. This is proposed with the intention of benefiting future automation endeavours in construction, mining, and agricultural industries.

b. This Scholarship is funded by an industry project between Technological Resources Pty Ltd and the Australian Centre for Field Robotics at the University of Sydney.

2. Eligibility

a. The Scholarship is offered subject to the applicant having an unconditional offer of admission or being currently enrolled to study full-time in a PhD within the Rio Tinto Centre for Mine Automation, which is part of the Australian Centre for Field Robotics in the School of Aerospace, Mechanical and Mechatronic Engineering, Faculty of Engineering at the University of Sydney.

b. Applicants must be willing to conduct research into mine automation.

c. Applicants must also hold an Honours degree (First Class or Second Class Upper) or equivalent in a relevant discipline.

3. Selection Criteria

a. The successful applicant will be awarded the Scholarship on the basis of:

I. academic merit, andII. area of study and/or research proposal.

b. The successful applicant will be awarded the Scholarship on the nomination of the relevant research supervisor(s), or their nominated delegate(s).

4. Value

a. The Scholarship will provide a stipend allowance equivalent to the University of Sydneys Research Training Program (RTP) Stipend rate (indexed on 1 January each year) (pro-rata) for up to 6 months, subject to satisfactory academic performance. No extension is possible.

b. Periods of study already undertaken towards the degree prior to the commencement of the Scholarship will be deducted from the maximum duration of the Scholarship excluding any potential extension period.

c. The Scholarship is for commencement in the relevant research period in which it is offered and cannot be deferred or transferred to another area of research without prior approval.

d. No other amount is payable.

e. The Scholarship will be offered subject to the availability of funding.

5. Eligibility for Progression

a. The Scholarship is maintained for PhD students by attending and passing the annual progress evaluation and remaining enrolled in their PhD. For PhD students commencing from 2021 onwards, progression also includes completing 12 credit points of HDR coursework units by the end of year 2.

6. Leave Arrangements

a. The Scholarship recipient receives up to 20 working days recreation leave each year (pro-rata) of the Scholarship and this may be accrued. However, the student will forfeit any unused leave remaining when the Scholarship is terminated or complete. Recreation leave does not attract a leave loading and the supervisor's agreement must be obtained before leave is taken.

b. The Scholarship recipient may take up to 10 working days sick leave each year (pro-rata) of the Scholarship and this may be accrued over the tenure of the Scholarship. Students with family responsibilities, caring for sick children or relatives, or experiencing domestic violence, may convert up to five days of their annual sick leave entitlement to carers leave on presentation of medical certificate(s). Students taking sick leave must inform their supervisor as soon as practicable.

7. Research Overseas

a. The Scholarship recipient may not normally conduct research overseas within the first six months of award.

b. The Scholarship holder may conduct up to 12 months of their research outside Australia. Approval must be sought from the student's supervisor, Head of School and the Faculty via application to the Higher Degree by Research Administration Centre (HDRAC), and will only be granted if the research is essential for completion of the degree. All periods of overseas research are cumulative and will be counted towards a student's candidature. Students must remain enrolled full-time at the University and receive approval to count time away.

8. Suspension

a. The Scholarship recipient cannot suspend their award within their first six months of study, unless a legislative provision applies.

b. The Scholarship recipient may apply for up to 12 months suspension of the Scholarship for any reason during the tenure of the Scholarship. Periods of Scholarship suspension are cumulative and failure to resume study after suspension will result in the award being terminated. Approval must be sought from the student's supervisor, Head of School and the Faculty via application to the Higher Degree by Research Administration Centre (HDRAC). Periods of study towards the degree during suspension of the Scholarship will be deducted from the maximum tenure of the Scholarship.

9. Changes in Enrolment

a. The Scholarship recipient must notify HDRAC, and their lead supervisor promptly of any planned changes to their enrolment including but not limited to: attendance pattern, suspension, leave of absence, withdrawal, course transfer, and candidature upgrade or downgrade. If the award holder does not provide notice of the changes identified above, the University may require repayment of any overpaid stipend.

10. Termination

a. The Scholarship will be terminated:

I. on resignation or withdrawal of the recipient from their research degree,II. upon submission of the thesis or at the end of the award,III. if the recipient ceases to be a full-time student and prior approval has not been obtained to hold the Scholarship on a part-time basis, IV. upon the recipient having completed the maximum candidature for their degree as per the University of Sydney (Higher Degree by Research) Rule 2011 Policy,V. if the recipient receives an alternative primary stipend scholarship. In such circumstances this Scholarship will be terminated in favour of the alternative stipend scholarship where it is of higher value, VI. if the recipient does not resume study at the end of a period of approved leave, orVII. if the recipient ceases to meet the eligibility requirements specified for this Scholarship, (other than during a period in which the Scholarship has been suspended or during a period of approved leave).

b. The Scholarship may also be terminated by the University before this time if, in the opinion of the University:

I. the course of study is not being carried out with competence and diligence or in accordance with the terms of this offer,II. the student fails to maintain satisfactory progress, orIII. the student has committed misconduct or other inappropriate conduct.

c. The Scholarship will be suspended throughout the duration of any enquiry/appeal process.

d. Once the Scholarship has been terminated, it will not be reinstated unless due to University error.

11. Misconduct

a. Where during the Scholarship a student engages in misconduct, or other inappropriate conduct (either during the Scholarship or in connection with the students application and eligibility for the Scholarship), which in the opinion of the University warrants recovery of funds provided, the University may require the student to repay payments made in connection with the Scholarship. Examples of such conduct include and without limitation; academic dishonesty, research misconduct within the meaning of the Research Code of Conduct (for example, plagiarism in proposing, carrying out or reporting the results of research, or failure to declare or manage a serious conflict of interests), breach of the Code of Conduct for Students and misrepresentation in the application materials or other documentation associated with the Scholarship.

b. The University may require such repayment at any time during or after the Scholarship period. In addition, by accepting this Scholarship, the student consents to all aspects of any investigation into misconduct in connection with this Scholarship being disclosed by the University to the funding body and/or any relevant professional body.

Continued here:

Postgraduate Research Scholarship in Mine Automation - Scholarships - News - The University of Sydney

As part of the Imperva Research Labs we have the opportunity to examine various security scenarios. In this post, we will consider database security on SQL Server.

One standard method that security practitioners use to protect databases is deploying honeypots and waiting for hackers to take the bait. Honeypots are very useful because they enable us to analyze various attacks and get more insights about the methods and techniques that bad actors use to attack databases.

Here we provide a glimpse into todays Database Attack Landscape. This is a follow-up to Imperva Research Labs research done in 2018 on SQL Server. To see those findings, check out A Deep Dive into Database Attacks [Part II]. In that piece, you can see how little the attack landscape has changed in the past 3 years.

We will explore the methods and techniques attackers use to deploy malware, gain persistence, and take over the system to join the server into massive botnets, or escalate privileges in order to infiltrate an organizations network.

While other articles concentrate on the malware itself, we are going to focus on the database side of the attack, the dangerous functions, and the power that is stored inside the SQL Server to interact with other components of the Windows OS called COM objects. Some examples are processes like WMI, XML, HTTP, WScript, VBScripts and more.

Hackers use attack methods that will have the most chance to succeed. Core features that are defined in multiple versions are the ultimate target. This is one reason why we see hackers using the same methods with slight changes over the years; exploits recycling is very common. The database attack landscape hasnt changed a lot over the years and exploitation techniques are being reused over the years.

SQL Server OLE Automation is one example of such a target as it is a built-in feature for many SQL Server versions. We will inspect some of the techniques in depth and explain the ways to prevent similar attacks on your SQL Server in the future.

Before we dive into the depth of the attacks, we need to understand some Windows terms, Specifically the OLE and COM objects.

OLE stands for Object Linking and Embedding. It is a technology developed by Microsoft that allows one application to link objects into another application. Later, the OLE evolved and reimplemented on top of COM. Component Object Model (COM) is a binary-interface standard for software components. Simply put, COM allows for one application to expose its functionality to other applications.

SQL Server OLE Automation Procedures enables the SQL Server to leverage OLE to interact with other COM objects. Data security-wise, this increases the attack surface.

There are excellent examples out there for leveraging COM objects to perform lateral movement.

All of this power is granted simply by enabling a small but dangerous database configuration, the OLE Automation Procedures. In addition, SQL Server provides multiple extended procedures to link and interact with the COM objects.

Extended Procedure simply means the ability to execute code from external sources. The OLE Automation Procedures use odsole70.dll to interact with COM objects.

The below procedures contain everything we need to carry out a highly sophisticated attack interact with other COM objects:

sp_OACreate Creates an instance of an OLE object.sp_OAMethod Calls a method of an OLE object.sp_OAGetProperty Gets a property value of an OLE object.sp_OASetProperty Sets a property of an OLE object to a new value.sp_OADestroy Destroys a created OLE object.sp_OAGetErrorInfo Obtains OLE Automation error information.sp_OAStop Stops the server-wide OLE Automation stored procedure execution environment.

Here are a couple of examples for practical usage of attacks using the OLE Automation.

In A Deep Dive into Database Attacks [Part II], we saw how it is possible to write files by interacting with the filesystemobject.

But the filesystemobject COM object allows us to do much more than that, we can copy files, manage drives, and much more.

For the full list of the filesystemobject methods from Microsoft documentation click here.

The below example describes a method used by the attacker to copy executables in different names and locations in order to avoid detection. This technique allows the attacker to stay under the radar in the case that there is a security policy in place. Also, it makes the post mortem analysis more complicated:

Figure 1: copy http://ftp.exe and cacls.exe executables with different name and location.

ScriptControl allows us to actually run a scripting language such as VBScript or JavaScript from within our SQL Server. This is one of the strongest abilities of the COM objects.

More information about the ScriptControl COM object, methods and properties can be found here.

Here are two practical examples of using the ScriptControl method. The first to create an account and the second is to download malware:

In the example below, the attacker uses JavaScript to create an account, change its password and add the new account to the administrators group:

Figure 2: Attacker creates a Windows account, changes its password and adds it to the administrators group.

The next example shows how to download malware from a remote server, save it to a file, and execute it:

Figure 3: Attacker downloads malware from remote server.

Windows Management Instrumentation (WMI) is the infrastructure for management data and operations on Windows-based operating systems.

In the next example, the attacker allows full access to everyone to use Windows Script Host, which allows them to execute scripts in a variety of languages.

Note that since this action is performed from inside the SQL Server process, the action will have the SQL Server security context.

The steps taken by the attacker to achieve full access:

The description of the SE_DACL_PRESENT permission from msdn:Indicates an SD that has a DACL. If this flag is not set, or if this flag is set and the DACL is NULL, the SD allows full access to everyone.

In this case the DACL is not set on creation, therefore the security descriptor will allow full access on wscript.exe to everyone.

Figure 4: Attacker leverages WMI to set permission on executable.

For more information about the SWbemLocator, SWbemServices and SecurityDescriptor.

It is recommended to disable the option to use those SQL Server abilities:

Figure 5: Disable the OLE Automation features of SQL Server.

Another method to make sure that those powerful procedures are not being used is just dropping them:

Figure 6: Revoke EXECUTE permission on dangerous functions of SQL Server.

Since OLE Automation is a built-in feature, there is no actual way to prevent the activation of the feature. It is recommended to add monitoring for the events of re-enabling the configuration & recreating the extended procedures and granting execution on the procedures.

Once an attacker gains access to the database it wont necessarily stop there.

Many known cases are published where after exfiltrating data from one database the attackers decided to become residents inside the organization network, make a lateral movement and exfiltrate data from more than just one database. Learn more about attacker types and data breaches in my blog Know your enemy! The four types of cyber attackers trying to breach your security today and the white paper Lessons Learned From Analysis of 100 Data Breaches.

We saw how the attacker was able to change the executables permission on the OS, copy and manipulate OS files to stay undetected and finally deploy malware and execute scripts on the victim server. The attacker made everything from inside the SQL Server service without actually having access to the OS, but still had a deep impact on the underlying OS configuration.

The OLE Automation is a very powerful feature, which makes it very dangerous. If you are not using OLE Automation, it needs to be disabled. Disabling unnecessary features in the database will reduce the attack surface.

Imperva offers different products to help our customers to protect against database attacks, for on-premises and cloud services. For more information visit the following link.

The post How to Exploit SQL Server Using OLE Automation appeared first on Blog.

*** This is a Security Bloggers Network syndicated blog from Blog authored by Ofir Shaty. Read the original post at: https://www.imperva.com/blog/how-to-exploit-sql-server-using-ole-automation/

See more here:

How to Exploit SQL Server Using OLE Automation - Security Boulevard

Wednesday, 8 September 2021, 12:29 pmPress Release: MHM Automation

New Zealand Listed Company MHM Automation today announcedits decision to pay shareholders a special dividend of 1.5cents per share.

Continued growth in global demand forautomated solutions and the sale of its New Plymouthworkshop saw the company report a strong financialperformance at the release of its 2021 financial results andAnnual Report last month.

MHM Automation reported anafter-tax profit of $4.1 million, which was a 339% increaseon the previous years result. Revenue for the year was$50.9m, a 6.1% increase on 2020, and the full year EBITDAincreased by 50% to $3.73m. The growth was primarily drivenby a strong performance from its Milmeq chilling andfreezing business as well as a one-off gain of $1.9 millionfrom the sale of its New Plymouth engineeringworkshop.

This performance would not have beenpossible without the support of our shareholders. The boardof directors considers it appropriate to pay the one-offdividend to shareholders in recognition of the strongtrading performance weve had over the last year. Thefunds for this dividend are coming from the proceeds of thesale of the New Plymouth property, CEO Richard Rookessaid.

I am pleased to see the momentum weve beenbuilding over the past few years continue and we remainedfocused on strengthening our automation business while alsoimproving profitability, he added.

MHM Automationservices the global dairy, meat, horticulture and foodprocessing sectors.

Rookes said the COVID-19 pandemichad meant its customers were increasingly looking toautomation to ease the challenges of social distancing andensure compliance with food safety standards, as well asaddressing labour shortages and health and safety concerns.But delivering projects during the pandemic had beenchallenging, due to resource constraints and restrictions oninternational travel, particularly the MIQsystem.

Achieving this high level of performance ina COVID-19 world is testament to our team, and the strengthand relevance of the products and solutions we design anddeliver, he said.

Looking ahead, MHM Automation isforecasting good workflows right through the 2022 financialyear and beyond. The automation business has ordersscheduled for delivery into 2023, and all areas of thebusiness are running at or near capacity for the remainderof the 2021 calendar year.

The company remainscognisant of opportunities for additional futureacquisitions to align with its technology-ledfuture.

Demand for automated solutions is forecast tocontinue to increase.

With our portfolio ofindustry-leading solutions, we are well positioned tocontinue our trend of growth. The next 12 months will befocused on the execution of current work, improving margins,and building a sustainable pipeline of new opportunitiesglobally, Rookessaid.

Scoop Media

Become a member Find out more

See the original post:

MHM Automation announces special dividend after record year - Scoop.co.nz

The Farm Progress Show is this week in Decatur,where the agriculture industry comes together totalk about the latest and greatest techniques and technology. Wetalked about the past, present and future of automation on the farm with the Chief Scientist at the Illinois Autonomous Farm, the Director of Strategic Initiativesfrom Raven Applied Technology, and the Editorial Director from Farm Progress.

GUESTS:

Dr. Girish Chowdhary

Associate Professor of Agricultural and Biological Engineering and Computer Science atthe University of Illinois at Urbana-Champaign and Chief Scientist at the Illinois Autonomous Farm

Dominic Walkes

Director of Strategic Initiatives for Raven Applied Technology

Willie Vogt

Editorial Director for Farm Progress

Prepared for web by Owen Henderson

Help shape our coverage on The 21st by joining our texting group and answering weekly questions. To join,text TALK to217-803-0730or sign up with your phone number below:

Visit link:

The Present And Future Of Farm Automation - WILL News - Illinois Public Media

DUBLIN--(BUSINESS WIRE)--The "Global Automated Guided Vehicle Market, By Product Type (Tow Vehicles, Others), By Battery Type (Lead, Others), By Navigation Technology (Laser, Others), By Application (Assembly, Others), By End User Industry, Estimation & Forecast, 2017 - 2027" report has been added to ResearchAndMarkets.com's offering.

The global automated guided vehicle market held a market value of USD 2,931.8 Million in 2020 and is forecasted to reach USD 5,519.1 Million by the year 2027. The market is anticipated to witness a growth rate of 10.3% over the forecast period.

The market volume in 2020 was about 1,09,400 Units and this volume is expected to grow at a rate of 9.5% till 2027.

Automated guided vehicles are wheel-based and computer-controlled load carriers, which can travel on a facility's floor without an onboard driver or operator. A combination of sensor-based guidance systems and software directs their movement.

The market is anticipated to grow owing to the growing demand for automation in materials across the handling processes in various industries. Furthermore, the advanced material technology coupled with the growing demand for AGV from the retail sector is also expected to boost market growth.

The high installation, maintenance, and switching costs are expected to negatively impact the market growth. Due to these high costs, manufacturers are likely to not choose the automated guided vehicles, which restrain the market growth. During the COVID-19 pandemic, the automated guided vehicles market faced huge losses due to the closure of manufacturing facilities and low or negligible demand from the end-users in the industry.

Growth Influencers:

Growing demand for automated guided vehicles from the retail sector

The e-commerce industry globally is growing at a fast pace, especially in areas such as online retailing combined with high urban density and elevated customer expectations for shorter delivery times. Due to the increasing customer demands, retail companies and manufacturers are shifting to novel material handling and automated solutions. Automated guided vehicles ease the rising pressure faced by online retailers for shipping customer orders efficiently with reduced fulfillment costs. This is anticipated to fuel the growth in the market.

Increasing demand for automation in material across handling processes in various industries

The increasing need for high efficiency in healthcare, automotive, food & beverages, and e-commerce industries, among others is boosting the demand for automated guided vehicles. Industrial facilities benefit from the AGV-enabled automation, which can meet the requirements related to the reduction of production time and improving the material handling capacity. It also is likely to reduce the chances of human errors and enhance the safety of individuals, while ensuring production volumes and also increasing repeatability and accuracy. Using automated guided vehicles also allows for computerized control of receiving assembled parts, just in time delivery of raw materials, and also the accurate tracking of shipped goods. Therefore, this is increasing the demand for automation in materials across handling processes in various industries, hence fuelling the market growth.

The global Automated Guided Vehicle market report provides insights on the below pointers:

The global Automated Guided Vehicle market report answers questions such as:

Key Topics Covered:

Chapter 1. Research Framework

Chapter 2. Research Methodology

Chapter 3. Executive Summary: Global AGV Market

Chapter 4. Global AGV Market Overview

Chapter 5. AGV Market Analysis, By Product Type

Chapter 6. AGV Market Analysis, By Battery Type

Chapter 7. AGV Market Analysis, By Navigation Technology

Chapter 8. AGV Market Analysis, By Application

Chapter 9. AGV Market Analysis, By End-user Industry

Chapter 10. AGV Market Analysis, By Region/Country

Chapter 11. North America AGV Market Analysis

Chapter 12. Europe AGV Market Analysis

Chapter 13. Asia Pacific AGV Market Analysis

Chapter 14. Japan AGV Market Analysis

Chapter 15. Middle East & Africa AGV Market Analysis

Chapter 16. South America AGV Market Analysis

Chapter 18. Company Profile

Companies Mentioned

For more information about this report visit https://www.researchandmarkets.com/r/ffwwyx

Read the rest here:

Global Automated Guided Vehicle Market 2017 - 2027 to Witness Significant Growth Due to Increased Demand for Automation - ResearchAndMarkets.com -...

DUBLIN--(BUSINESS WIRE)--The "Global Automated Guided Vehicle (AGV) Market" report has been added to ResearchAndMarkets.com's offering.

Increase in demand of material handling equipment to improve operational efficiency in industrial processes will drive the market growth.

Market Drivers

Increase in adoption of AGVs due to its benefits such as reduced labor costs, increased productivity, reduced product damage and scale to support automation processes which is expected to boost the global automated guided vehicle (AGV) market growth.

Furthermore, increase in collaboration and partnership activities in retail and logistics related companies will have the positive impact on market growth.

Moreover increase in demand for automation in material handling processes across industries will have the positive impact on market growth during this forecast period.

Market Restraints

However, high installation, maintenance, and switching cost is the major challenging factor which is expected to hinder the global automated guided vehicle (AGV) market growth. Also, increase in use of mobile robots in retail and e-commerce industries will obstruct the market growth during this analysis period.

Market Key Players

Various key players are discussed in this report such as Toyota Industrial Equipment Manufacturing Inc., Bastian Solutions LLC, Daifuku CO. Ltd., Dematic GMBH & Co. KG, Egemin Automation Inc., EK Automation, Frog AGV Systems B.V., JBT Corporation, and Kollmorgen

Key Questions Addressed by the Report

Key Topics Covered:

1 Introduction

1.1 Objective of the Study

1.2 Market definition

1.3 Market Scope

2 Research Methodology

2.1 Data Mining

2.2 Validation

2.3 Primary Interviews

2.4 List of Data Sources

3 Executive Summary

4 Global Automated Guided Vehicle (AGV) Market Outlook

4.1 Overview

4.2 Market Dynamics

4.2.1 Drivers

4.2.2 Restraints

4.2.3 Opportunities

4.3 Porters Five Force Model

4.4 Value Chain Analysis

5 Global Automated Guided Vehicle (AGV) Market, By Type

5.1 Y-o-Y Growth Comparison, By Type

5.2 Global Automated Guided Vehicle (AGV) Market Share Analysis, By Type

5.3 Global Automated Guided Vehicle (AGV) Market Size and Forecast, By Type

5.3.1 Unit Load Carrier

5.3.2 Two Vehicles

5.3.3 Pallet Trucks

5.3.4 Assembly Line Vehicles

5.3.5 Others

6 Global Automated Guided Vehicle (AGV) Market , By Industry Vertical

6.1 Y-o-Y Growth Comparison, By Industry Vertical

6.2 Global Automated Guided Vehicle (AGV) Market Share Analysis, By Industry Vertical

6.3 Global Automated Guided Vehicle (AGV) Market Size and Forecast, By Industry Vertical

6.3.1 Retail

6.3.2 Logistics

6.3.3 Food & Beverages

6.3.4 Healthcare

6.3.5 Automotive

6.3.6 Others

7 Global Automated Guided Vehicle (AGV) Market, Application

7.1 Y-o-Y Growth Comparison, Application

7.2 Global Automated Guided Vehicle (AGV) Market Share Analysis, Application

7.3 Global Automated Guided Vehicle (AGV) Market Size and Forecast, Application

7.3.1 Transportation

7.3.2 Distribution

7.3.3 Storage

7.3.4 Assembly

7.3.5 Packaging

7.3.6 Others

8 Global Automated Guided Vehicle (AGV) Market, By Region

8.1 Global Automated Guided Vehicle (AGV) Market Share Analysis, By Region

8.2 Global Automated Guided Vehicle (AGV) Market Share Analysis, By Region

8.3 Global Automated Guided Vehicle (AGV) Market Size and Forecast, By Region

Companies Mentioned

For more information about this report visit https://www.researchandmarkets.com/r/n0xsto

Go here to see the original:

Global Automated Guided Vehicle (AGV) Markets Report 2021: Focus on Unit Load Carriers Two Vehicles, Pallet Trucks & Assembly Line Vehicles -...

MILWAUKEE --News Direct-- Rockwell Automation

Photo courtesy of American Red Cross

MILWAUKEE, September 2, 2021 /3BL Media/ - Rockwell Automation has made a $50,000 donation to the American Red Cross to support the organizations Hurricane Ida disaster relief efforts and humanitarian relief efforts for military, veterans, and evacuees following the recent unrest in Afghanistan.

The Red Cross is working across four southern states following the heartbreaking damage left behind by Hurricane Ida as its remnants threaten more than 60 million people from the Mid-Atlantic to New England with potential flash flooding. More than one million schools, homes, and businesses in Louisiana, Mississippi, and Alabama remain without power as heat advisories remain in effect in some areas. The Red Cross is working non-stop to provide safe shelter and comfort for the tens of thousands of people whose lives have been forever changed by these disasters.

It is tragic to see so much of our country impacted by this powerful storm including families evacuated from their homes with only a few personal belongings, said Rockwells Patricia Contreras, vice president, Public Affairs. We embrace our longstanding relationship with the Red Cross and the opportunity to support their front-line efforts to help so many who are in need.

Additionally, hundreds of Red Cross volunteers have responded to the needs of U.S. citizens and others who have evacuated Afghanistan. This includes onsite volunteers at Fort Bliss in Texas, Fort McCoy in Wisconsin, and Joint Base Dix-McGuire-Lakehurst in New Jersey to assist with basic human needs and providing health and mental health services. The Red Cross expects to care for the thousands of evacuees for possibly up to two months and more are expected in the coming days. The Red Cross is also working closely with the Department of Veteran Affairs to assist military and veteran families.

Learn more about how the Red Cross is supporting Afghanistan needs and Hurricane Ida disaster relief. Rockwells latest donation follows a recent $15,000 contribution to support Haiti earthquake relief efforts. Additionally, the company will use its internal Red Cross microsite as a portal for its employees to support the non-profits various relief efforts.

View additional multimedia and more ESG storytelling from Rockwell Automation on 3blmedia.com

View source version on newsdirect.com: https://newsdirect.com/news/rockwell-automation-50-000-donation-supports-red-cross-efforts-following-hurricane-ida-and-afghanistan-events-435132633

Visit link:

Rockwell Automation $50,000 Donation Supports Red Cross Efforts Following Hurricane Ida and Afghanistan Events - Yahoo Finance