Collaborate Disseminate
I manage some websites and one of them got a poor security rating (from sec scorecard). I have a managed server, so I asked the IT guys to help, but also would like to understand this issue a little more.
The problem is, there are old TLS1… Continue reading Remove old Cipher Suites [migrated]
I’m using Apache Airflow and I was troubleshooting built-in smtp setup. A mass email occurred on "ops@myexample.com". It was used as a "From:" email in a mass email attack.
Chronology: Started docker by running an exten… Continue reading Malicious Mass Email Attack Occurred, Do I Still Have Problem?
I’m new to PHP and Apache. I come from Node.js/Java backends and I’m new to this tech stack (PHP, CGI, Apache etc). My site currently uses ckeditor to handle user uploads and has high traffic. Often, someone, somehow just changes the names… Continue reading PHP website getting hacked – dir names changed [closed]
I have this version of Apache installed:
ApacheFriends XAMPP (Basispaket) version 1.6.8
Apache 2.2.9
MySQL 5.0.67 (Community Server)
PHP 5.2.6 + PHP 4.4.9 + PEAR
OpenSSL 0.9.8i
The ssl certificate was enabled, but I get this error on bro… Continue reading I get ERR_SSL_VERSION_OR_CIPHER_MISMATCH on apache server (installed with xampp on windows) [migrated]
I’m wondering if anyone knows how to approach this predicament I am facing using .htaccess.
I have a website that is accessible using 2 different domains. For one of the domains, I only want the website to be accessible to a subset of IPs … Continue reading Restrict access to specific http_host with .htaccess
Vulnerabilities like Log4j remain responsible for security breaches a full year after the discovery of the flaw. In the months after widespread reporting about the vulnerability, 40% of Log4j downloads remained vulnerable to exploitation. Rapid Response — by Both Security Teams and Hackers What made this exposure so damaging was how widespread this piece of […]
The post With 40% of Log4j Downloads Still Vulnerable, Security Retrofitting Needs to Be a Full-Time Job appeared first on Security Intelligence.
Besides some other hacking attempts, I am seeing the following kind of log entries in my Apache logs which I cannot fully understand.
5.188.x.x – – [10/Feb/2023:14:40:14 +0100] "GET http://5.188.x.x/echo.php HTTP/1.1" 200 2691 &q… Continue reading Malicious httpd log entry
I am getting the occasional message from our Fortigate Fortinet firewall, indicating that there is a yaSSL.Buffer.Overflow attack. The log from the Fortinet is:
Description: Subject: attack:MySQL.yaSSL.Buffer.Overflow
Device: cid7543-chi-… Continue reading Need help deciphering these logs regarding YASSL attack on MySQL
In late 2021, the Apache Software Foundation disclosed a vulnerability that set off a panic across the global tech industry. The bug, known as Log4Shell, was found in the ubiquitous open-source logging library Log4j, and it exposed a huge swath of applications and services. Nearly anything from popular consumer and enterprise platforms to critical infrastructure […]
The post Log4j Forever Changed What (Some) Cyber Pros Think About OSS appeared first on Security Intelligence.
Continue reading Log4j Forever Changed What (Some) Cyber Pros Think About OSS
Looking to serve your java apps from a user-friend web application? Look no further than Tomcat. Find out how to easily install this powerful app server on Ubuntu Linux.
The post How to deploy Apache Tomcat on Ubuntu Server appeared first on TechRepubl… Continue reading How to deploy Apache Tomcat on Ubuntu Server