With Docker vulnerabilities in the news of late, it makes sense to have a look at hardening your deployments, especially any that are exposed to the Internet.Doomsday Docker security hole article on ZDNetThings you can do to protect yourself, as with any system exposed to the Internet include: Patching
The Center for Internet Security has free guides that will help you secure your systems. A typical corporate environment may have a broad array of systems, including routers, switches, and firewalls from vendors such as Juniper and Cisco, and operating systems like Microsoft Windows, Mac OS X, Linux, and BSD.
Here are a few resources that will greatly help you in securing your operating system(s) and network for free! STIG Viewer Unified Compliance Framework's (UCF's) Security Technical Implementation Guides (STIG's) provide a down and dirty check-list style guide to securing a mulititude of operating systems and network devices. Sarah
Disqus, recommended by Ghost and used by many, including this blog, hacked Disqus, a provider of comment features for many blogs, including this one, has announced a hack. Information on people who used Disqus between 2007 and 2012 is at risk. Information compromised includes: email addresses Disqus user names sign-up
Offensive Security announced a new, free Kali Linux Certified Professional Course and Certification Have you been looking to learn how to Penetration Test? Muts and crew have announced a new, free course and certification called Kali Linux Certified Professional. The KLCP can be your stepping stone to a career in
Brian Krebs breaks story that Avanti, a self-service food kiosk vendor, was hacked. Avanti Markets, a vendor with "micro markets" in many corporate offices throughout the United States, has had a data breach believed to involve credit card and biometric data. See more from Brian's article. An interesting