netsectoday

12 ms·

1. 121.▲
   by netsectoday 7y ago

   You can run your own private Docker registry but you will still depend upon the base images pulled from hub.docker.com in your deploy chain unless you make sure to clone the base image Dockerfile from github and build it yourself. Even with
2. 122.▲
   by netsectoday 7y ago

   * this idiot claimed "Ansible was used to keep the attacker in the system" which in all reality Ansible did what it was supposed to by altering the correct authorized_keys file and the attacker leveraged an old default in the sshd
3. 123.▲
   by netsectoday 7y ago

   > Application Firewall that detects this hijinx (haven't explored this yet - anyone know of a good one?) 1. Make sure your app requests are logged with the source IP and configure fail2ban to block the really bad offenders. 2. Set u