Collaborate Disseminate
I recently happened to inspect my php-fpm.log and found a lot of suspicious activity that looks like malicious attempts to get access to my host. Here’re some of the logs:
[07-Oct-2018 22:01:31] WARNING: [pool www] child 4… Continue reading php-fpm.log shows a mass of unusual attempts to open primary script with random filenames
In the security news, Russian Hackers use Malware that can survive OS reinstalls, Facebook’s 2-Factor authentication With a phone number isn’t only for security, it’s used for ads ,FBI warns companies about hackers increasingly abusing RDP connections,… Continue reading Linux Bugs, macOS Zero-Day, & Twitter Exposed – Paul’s Security Weekly #577
In the security news, Russian Hackers use Malware that can survive OS reinstalls, Facebook’s 2-Factor authentication With a phone number isn’t only for security, it’s used for ads ,FBI warns companies about hackers increasingly abusing RDP connections,… Continue reading Linux Bugs, macOS Zero-Day, & Twitter Exposed – Paul’s Security Weekly #577
Researchers said the vulnerability “is very easy to exploit.” Continue reading Local-Privilege Escalation Flaw in Linux Kernel Allows Root Access
Security researchers have published the details and proof-of-concept (PoC) exploits of an integer overflow vulnerability in the Linux kernel that could allow an unprivileged user to gain superuser access to the targeted system.
The vulnerability, disc… Continue reading New Linux Kernel Bug Affects Red Hat, CentOS, and Debian Distributions
I have a Linux-based vendor-supplied virtual appliance that uses OpenSSL to manage certificates. The current server certificate is from Symantec so has to be replaced with a DigiCert. DigiCert is offering free replacements … Continue reading OpenSSL Certificate Renewal with same keys and NO CSR
I’m completely new to working with pki and I have spent a couple of days trying to understand how to configure my environment properly (centos 6).
Another group within my organization sent me the following files from an inte… Continue reading How do I trust an intranet site
Referenced from Linux-Audit: To get ClamAV on CentOS installed, we have to use the EPEL repository (Extra Packages for Enterprise Linux). Fortunately, the Fedora project provides this with an easy installation. Unfortunately the default configuration [… Continue reading Installing ClamAV on CentOS 7
ModSecurity blocked access due to the following:
[msg “XSS Filter – Category 3: Javascript URI Vector”] [data “Matched
Data: esrco found within ARGS:as_email:hearsesesrcool@yahoo.com”]
[severity “CRITICAL”]
Why does… Continue reading ModSecurity Rule 973338
I have installed OpenVAS9 on Centos 7 host on Virtual Box 5.2.8.I know the command openvasmd -update updates the database. I need to know the location of the database and change in storage of the database. Is there a command … Continue reading How does OpenVAS 9 update the database?