Mohammed Yasir Hashmi’s Post

Update pfsense 23.09: Lots of work done to get to the supported version of OpenSSL 3 now the that OpenSSL version 1 is EOL & no longer supported. This is something other projects are still struggling with because moving to the new OpenSSL removes a large number of deprecated encryption and digest algorithms. This primarily affects OpenVPN. #pfsense #firewall #security https://lnkd.in/dcqN67Rc

The disclosure of a high-severity Kubernetes vulnerability that can enable the takeover of Windows nodes underscores the complexities within the cloud environment, especially regarding container orchestration and multi-platform deployments. - Prioritize the immediate patching of known vulnerabilities within Kubernetes clusters, and establish a process for regular updates. - Adopt container security best practices, including network segmentation and least privilege access control within the Kubernetes environment. - Implement comprehensive monitoring to detect anomalous activities that could suggest an attempted exploitation or an ongoing breach. #KubernetesSecurity #ContainerOrchestration #CloudVulnerability #RemoteCodeExecution #CyberRiskManagement

Are you curious about how to secure your Kubernetes cluster? In this article on Kubernetes Network Policy, you will learn why implementing security policies is crucial and how they impact network flow within the cluster. Discover how to apply a network policy and control traffic based on namespaces. Plus, gain clarity on key network concepts like Ingress, Egress, and Container Network Plugin (CNI). Check out my article for all the details! Link: https://lnkd.in/eJt5yWnu #kubernetes #security #networkpolicy #containersecurity #containers #blog #devblogit

The suspected attack vector were servers in thier inventory they physicaliy relocated to the datacenter, after which dormant malicious code was activated once it detected juicier targets. Lessons: 1. Don't trust the integrity of an IT asset just because it is in your physical possession. 2. have a well established process for on boarding new (or old) systems onto your network. 3. A robust NAC platform can be an essential part of your enterprise network architecture.

Are you curious about how to secure your Kubernetes cluster? In this article on Kubernetes Network Policy, you will learn why implementing security policies is crucial and how they impact network flow within the cluster. Discover how to apply a network policy and control traffic based on namespaces. Plus, gain clarity on key network concepts like Ingress, Egress, and Container Network Plugin (CNI). Check out my article for all the details! Link: https://lnkd.in/eJt5yWnu #kubernetes #security #networkpolicy #containersecurity #containers #blog #devblogit Credit to : Muhammad Badawy

Are you curious about how to secure your Kubernetes cluster? In this article on Kubernetes Network Policy, you will learn why implementing security policies is crucial and how they impact network flow within the cluster. Discover how to apply a network policy and control traffic based on namespaces. Plus, gain clarity on key network concepts like Ingress, Egress, and Container Network Plugin (CNI). Check out my article for all the details! Link: https://lnkd.in/eJt5yWnu #kubernetes #security #networkpolicy #containersecurity #containers #blog #devblogit

A recent near-miss event that could have had serious consequences. A root server, a critical component of the internet's core infrastructure, malfunctioned for four days. Let's unpack this a bit. Root servers act like the internet's phone book, directing users to the websites they're trying to reach. If root servers become out of sync, it can cause major issues with internet stability and security. In this case, a root server maintained by Cogent Communications was out of sync with the other root servers for four days. While the outage was resolved, the cause remains unknown, which is concerning. While the article doesn't explicitly discuss the security ramifications, a root server outage could have had a number of potential security implications. For instance, it could have allowed malicious actors to redirect users to phishing sites or inject malware into websites. It's a stark reminder of the importance of robust cybersecurity measures at all levels of the internet infrastructure. We need to be constantly vigilant and invest in measures to ensure the stability and security of the internet. Here are some additional thoughts and questions to consider: What steps can be taken to improve the resiliency of the root server system? How can we better detect and mitigate future outages? What role can internet service providers (ISPs) and other stakeholders play in improving internet security? https://lnkd.in/eYZnpXyj #internet #security #infrastructure #rootservers

Our analysis of shared SSH host keys identified a surprising number of vulnerabilities. https://lnkd.in/eRfnJ62F Recommended reading for anybody with Internet-visible SSH servers. #cybersecurity #exploit #infosec #security

Thanks to Antoine, SecOps at Padok Security, learn how to easily restrict network traffic between your pods in a #kubernetes cluster using #NetworkPolicies. 👉 https://bit.ly/49FvAub

Important Update for NGINX Users! A new vulnerability associated with the HTTP/2 protocol is impacting NGINX products. Given the extensive use of NGINX across numerous websites, it's crucial to address this issue promptly. Understanding the Vulnerability: A loophole in HTTP/2 stream resets allows malicious entities to exploit and overwhelm the server, leading to potential denial of service. NGINX users, especially those with custom configurations exceeding the default settings, should take note. The Solution: Ensure your keepalive_requests are set to 1000 and http2_max_concurrent_streams does not exceed 128. NGINX is resilient under the default settings, but configurations beyond these can heighten vulnerability. Read More: https://lnkd.in/grXCPiRX #NGINX #Cybersecurity #WebSecurity #http2 #ddos