#security - June 2019 | Slack Archive

security

14 messages

Archive: https://archive.sweetops.com/security/

May 2019

June 2019

Jul 2019

Bogdanover 6 years ago

anyone knows a faster way to setup Vault than described in https://github.com/hashicorp/terraform-aws-vault ?

Mebover 6 years ago

Fast don't think so. depend on your target config

Igor Rodionovover 6 years ago

exim have critical vulnerability
https://www.exim.org/static/doc/security/CVE-2019-10149.txt

Issifover 6 years ago

good read : https://blog.benjojo.co.uk/post/dell-switch-hacking

Maciek Strömichover 6 years ago

https://thehackernews.com/2019/06/linux-vim-vulnerability.html

Erik Osterman (Cloud Posse)over 6 years ago

https://news.google.com/articles/CBMipwFodHRwczovL3d3dy5yZXV0ZXJzLmNvbS9hcnRpY2xlL3VzLWNoaW5hLWN5YmVyLWNsb3VkaG9wcGVyLXNwZWNpYWwtcmVwb3Ivc3BlY2lhbC1yZXBvcnQtaW5zaWRlLXRoZS13ZXN0cy1mYWlsZWQtZmlnaHQtYWdhaW5zdC1jaGluYXMtY2xvdWQtaG9wcGVyLWhhY2tlcnMtaWRVU0tDTjFUUjFES9IBNGh0dHBzOi8vbW9iaWxlLnJldXRlcnMuY29tL2FydGljbGUvYW1wL2lkVVNLQ04xVFIxREs?hl=en-US&gl=US&ceid=US%3Aen

Mike Nockover 6 years ago

“The Chinese government has never in any form participated in or supported any person to carry out the theft of commercial secrets,” it said in a statement to Reuters.

Bahahahahaha, righttttt lol

Erik Osterman (Cloud Posse)over 6 years ago

https://news.google.com/articles/CAIiEJebMNIYfADl-dProQMtB6sqFQgEKg0IACoGCAowxIECMOBMMMOpHg?hl=en-US&gl=US&ceid=US%3Aen

Igorover 6 years ago

Is anybody using an IDS/IPS solution in their AWS environment?

Erik Osterman (Cloud Posse)over 6 years ago

We are currently implementing the whole suite of AWS security related products. Macie, GuardDuty, CIS Foundations with CFN, AWS Config with aggregation, AWS Inspector, AWS Security Hub

chrismover 6 years ago

We use inspector/guard duty/watch/etc, configs pricings off-putting

Igorover 6 years ago

Thanks. Have you guys heard of Security Onion? Looks like an interesting option and the new VPC mirroring should help with setting it up

Igorover 6 years ago

AFAIK Guard Duty does not fully qualify as IDS/IPS

Erik Osterman (Cloud Posse)over 6 years ago

https://aws.amazon.com/about-aws/whats-new/2019/06/introducing-amazon-ec2-instance-connect/

May 2019 Browse by date July 2019