CloudInsidr

Cyber security, infotech

  • Subscribe!
  • Privacy Policy
  • Legal
  • Contact Us

Join us on Twitter: @CloudInsidr

  • news & alerts
    • events
    • industry analysis
    • industry gossip
    • people
  • cloud, edge & co.
    • AWS
    • administration & orchestration
      • web servers in the cloud
      • mail servers
      • databases
  • cybersec & warfare
    • encryption
  • blockchain
Home Archives for cybersecurity and cyber warfare
A quick introduction to SSL/TLS encryption: understanding certificates and key pairs

Cloud Insidr 2017-10-20 Leave a Comment

A quick introduction to SSL/TLS encryption: understanding certificates and key pairs

Confused about SSL/TLS certificates? Here is a quick and dirty introduction to SSL/TLS encryption.

[Read more…]

Filed Under: cybersecurity and cyber warfare, encryption, Uncategorized Tagged With: encryption, SSL, TLS

A cybersec showdown of the clouds: cyber security on AWS versus Microsoft Azure

Cloud Insidr 2017-10-08 Leave a Comment

A cybersec showdown of the clouds: cyber security on AWS versus Microsoft Azure

[Updated May 16, 2018] AWS and Microsoft, the two leaders in the race for the best cloud infrastructure, have recognized cyber security as a barrier of adoption. Cyber security professionals are weary of migrating workloads into public cloud environments as it may carry significant risks. Thus, Amazon and Microsoft have developed specialized services to help safeguard users’ cloud infrastructure and data.

This post discusses ways to mitigate cyber threats and launch a cyber defense on AWS and Azure.

[Read more…]

Filed Under: administration and orchestration, cloud, edge and everything in between, cybersecurity and cyber warfare, encryption Tagged With: AWS, AWS CloudHSM, AWS EBS, AWS EFS, AWS IAM, AWS KMS, AWS RedShift, AWS S3, Azure, Azure AD, Azure SSE, Azure Key Vault, certificate, cybersecurity, edge devices, MFA

How to verify the remaining validity of your letsencrypt certificates

Cloud Insidr 2017-04-30 Leave a Comment

How to verify the remaining validity of your letsencrypt certificates

In order to figure out how many days your letsencrypt certificates have left, you could check an online services such as:

https://www.ssllabs.com/ssltest/index.html

However, that won’t work for a mail server that’s not also running a web server using the same certificate.

In this case, your best bet is to check the certificate file directly using the openssl command as follows:

openssl x509 -noout -dates -in /etc/letsencrypt/live/smtp.yourmailserverdomainname.com/cert.pem

Filed Under: administration and orchestration, cloud, edge and everything in between, cybersecurity and cyber warfare, encryption, Linux, mail servers Tagged With: letsencrypt, OpenSSL

Maximize your PHP session security by fixing errors and closing the session adoption vulnerability that allows session fixation attacks

Cloud Insidr 2017-02-20 Leave a Comment

Maximize your PHP session security by fixing errors and closing the session adoption vulnerability that allows session fixation attacks

When the server can’t write to the session data directory, if will use /var/cache/nginx/fastcgi_temp/ and complain in the error log. You don’t want any of these errors, but a setting considered insecure will not even be reported as such. Here is how to bolster your PHP 7 session security with NGINX and php-fpm.

[Read more…]

Filed Under: cybersecurity and cyber warfare, NGINX, php-fpm, web servers in the cloud Tagged With: NGINX, permissions, PHP 7, php-fpm, session, session adoption, session fixation

IBM’s China connection and the betrayal of America: how Chinese government hackers manage to remain undetectable

Cloud Insidr 2017-01-01 Leave a Comment

IBM’s China connection and the betrayal of America: how Chinese government hackers manage to remain undetectable

“You know, if you have something really important, write it out and have it delivered by courier, the old-fashioned way. Because I’ll tell you what: No computer is safe (…) I don’t care what they say.”

President-Elect Donald Trump

 

In the waning days of the fading Obama presidency, plenty of questions surfaced about Russia’s involvement with the hacks of the DNC and election systems. Electronic evidence can be easily manipulated.

There is more to it than just electronic evidence.

[Read more…]

Filed Under: cybersecurity and cyber warfare, industries, industry analysis, news, Uncategorized Tagged With: China, cryptography, cyber defense, cybersecurity, hacking, IBM, Intel, intrusion detection

  • « Previous Page
  • 1
  • …
  • 3
  • 4
  • 5
  • 6
  • 7
  • …
  • 10
  • Next Page »

Subscribe

SSL/TLS Certificate Square (250 x 250)

Pearson Education (InformIT)

SSL/TLS Certificate Medium Rectangle (300 x 250)

©2022 CybrAnalytiqa OÜ

  • Content purchasing and syndication