Security Leftovers
-
5 Simple Tips to Secure Your Linux Server - Make Tech Easier
Linux servers are the backbone of the modern Internet. Today, nearly every website and service that you can access through a web browser runs on a Linux distribution. Here we show you how you can secure your Linux server.
-
OpenSSL Issues Security Updates for Two Critical Vulnerabilities: CVE-2022-360 and CVE-2022-3786 [Ed: This headline is clueless misinformation; neither is critical]
In the last week of October 2022, OpenSSL Project revealed two vulnerabilities found in the OpenSSL library. Both CVE-2022-360 and CVE-2022-3786 have been labeled "High" severity issues with a CVSS score of 8.8, only 0.2 points lower than what they’d need to be considered "Critical".
The issue lies in the verification process of certificates that OpenSSL performs for certificate-based authentication. The exploitation of the vulnerabilities could allow an attacker to launch a Denial of Service (DoS) or even a Remote Code Execution attack. Patches for the two weaknesses found in OpenSSL v3.0.0 to v3.06 have now been released.
-
Authoritative Guide on Linux Disk Encryption | LinuxSecurity.com
Digital security is getting stronger, so criminals and law enforcement alike may be more willing to physically take your laptop or storage device to gain access to your data. It's possible, however, to protect yourself against this invasion of privacy thanks to encryption.
This article will discuss disk encryption, its uses and types, and its advantages and disadvantages. We will also show you how to encrypt a Linux hard drive and the various Linux encryption methods at your disposal.
-
Microsoft Releases November 2022 Security Updates | CISA
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an affected system.
-
VMware Releases Security Updates | CISA
A remote attacker could exploit one of these vulnerabilities to take control of an affected system.
-
Citrix Releases Security Updates for ADC and Gateway | CISA
A remote attacker could exploit one of these vulnerabilities to take control of an affected system.