When one thinks about security, one should think about the little things that have to be done. Patching systems, rebooting. patching all the applications. checking the Access control Lists for new apps and ports. ensuring the web apps are checked not just for bugs, but insecurities. And finally test – and check for open and … Read more
This vulnerability in PHP 5.3.12 and 5.4x before 5.4.2 when configured as a CGI script (php-cgi), a query which lacks and = sign will not be properly handled. So a remote attack may be possible. And the problem will be that one will not know it is on the web server, unless one check … Read more
We are all busy – the department is smaller, as we lost Jim, he retired. John was fired in the last layoffs. But what happened – we soldiered on. We have gotten new servers installed, systems retired taught the users a new program. It is as if we had Jim and John still here. But … Read more
System admin Jim is sitting in a café getting his favorite cappuccino, while waiting for the drink to be prepared he flips open the notebook computer and goes to his favorite website – checking on sports and news. Then of course checks his email with outlook on his desktop. What he did not realize is … Read more
Our Linux admin is a pretty sharp guy, he is working on updating website technology (php version). We have to keep up with patches and new technical abilities. Unbeknownst to him, a hacker somehow placed a “crontab” entry which will run every 60 minutes shutting down defenses and opening other attack avenues. The hacker used … Read more
