Does additional SSH access on top of HTTPS improve or harm the security of a self hosted Git server?

We have a self hosted git server in our company. It is reachable over the internet because our developers work together with external consultants, developers and other persons. Between the internet and the internal server is a reverse prox… Continue reading Does additional SSH access on top of HTTPS improve or harm the security of a self hosted Git server?

How to identify the phishing email originates from a compromised account or a compromised server?

We have a whale phishing case, in which the sender is from the insider (we’re using Zimbra email service for some specific user groups). A cursory investigation indicated that this account had probably been compromised.

My concern here i… Continue reading How to identify the phishing email originates from a compromised account or a compromised server?

Is a firewall enough of a security measure for an Ubuntu server that hosts a website?

I recently got a VPS with Ubuntu on it, and I’d like to start creating a very basic website. However, I don’t know what steps I should take to secure this server.

I’m new with Ubuntu, new with security and new with creating websites (the … Continue reading Is a firewall enough of a security measure for an Ubuntu server that hosts a website?