Jason Baron’s Post

Important Update for NGINX Users! A new vulnerability associated with the HTTP/2 protocol is impacting NGINX products. Given the extensive use of NGINX across numerous websites, it's crucial to address this issue promptly. Understanding the Vulnerability: A loophole in HTTP/2 stream resets allows malicious entities to exploit and overwhelm the server, leading to potential denial of service. NGINX users, especially those with custom configurations exceeding the default settings, should take note. The Solution: Ensure your keepalive_requests are set to 1000 and http2_max_concurrent_streams does not exceed 128. NGINX is resilient under the default settings, but configurations beyond these can heighten vulnerability. Read More: https://lnkd.in/grXCPiRX #NGINX #Cybersecurity #WebSecurity #http2 #ddos

Happy New Year! 🎉 I just wrote an article about how to configure #apache to get an A+ rating on SSL Labs, including the use of the latest and most secure cipher suites. If you're looking to improve your website's #security and performance, check it out! 🔒🚀 Hope it helps! 😊

What steps can be taken to safeguard an origin server? Discover everything you need to know in this comprehensive guide. Cyber Writes Discover more: https://lnkd.in/g7FV837c The origin server stores a website’s or application’s content and data. As the starting point for all requests made to a website, the origin server’s main responsibility is to access the requested resource from the server’s file system and send it back to the client. #cybersecurity #informationsecurity #websecurity #networksecurity #serverprotection

What steps can be taken to safeguard an origin server? Discover everything you need to know in this comprehensive guide. Cyber Writes Discover more: https://lnkd.in/gNBvAvCN The origin server stores a website’s or application’s content and data. As the starting point for all requests made to a website, the origin server’s main responsibility is to access the requested resource from the server’s file system and send it back to the client. #cybersecurity #informationsecurity #websecurity #networksecurity #serverprotection

Read my comprehensive guide on Securing Nginx: https://lnkd.in/gmD7kVkC Explore More of My Articles at the Following Links: https://rjhaikal.my.id/ #nginx #devsecops #security

#NewBlogPost | The meaning of Domain Fronting by Alexandre REYNAUD 📌 Delve into the world of Domain Fronting, a technique used to bypass censorship and network defenses. Explore the concepts of virtual hosts, TLS, SNI, and how HTTP interacts with Domain Fronting. Learn more ➡ https://lnkd.in/e-UCKt-X 📌 Feel free to contact us if you have any questions. #CyberSolutions #Thales #Belgium #excellium #CSIRT #CERT #domainfronting #TLS #SNI #cybersecurity

HTTP/2 CVE issue affecting systems worldwide. The vulnerability is more of a protocol issue than an individual product issue. Clients can overload http/2 systems by rapidly opening and resetting streams. The server needs to process this whereas the client need not process a response. Learn more about the vulnerability and how to mitigate it with NetScaler. #HTTP2 #NetScaler #CyberSecurity

The maintainers of the Cacti addressed several vulnerabilities, out of which three received critical or high severity. CVE-2024-25641 is an arbitrary file write vulnerability and CVE-2024-31445 is an SQL injection flaw, both affecting versions before 1.2.27. CVE-2024-29895 is a command injection vulnerability affecting the dev versions 1.3.x, which have been patched and according to Wiz data do not exist in cloud environments as of May 15, 2024. It is recommended to upgrade Cacti to a patched version. #security #cve #sqlinjection https://lnkd.in/eJma3a3Z

Securing Your Origin Server is crucial in today's digital age!🛡️💻 Discover essential insights and techniques to safeguard your digital assets against malicious threats and cyber attacks. Learn why origin server protection matters and how to implement robust security measures effectively. Stay ahead of evolving cyber threats and ensure uninterrupted service availability for your organization. Check out this comprehensive guide on origin server protection and keep your digital assets safe! #server #cybersecurity #dataprotection #staysecure https://lnkd.in/gt3nkdxZ

This is a great resource to learn what is DNS and for what it is used. https://lnkd.in/enwGzzdH #cybersecurity #hacking #bugbounty #dns #pentest #pentesting