Mastodon

C.Guide to Interpreting Security Incident <a href="https://mindly.social/tags/Announcements" class="mention hashtag" rel="nofollow noopener" target="_blank">#Announcements</a>:"extremely sophisticated attack" : The attackers put more time into the attack than we spent designing our defences."no evidence customer <a href="https://mindly.social/tags/data" class="mention hashtag" rel="nofollow noopener" target="_blank">#data</a> was accessed" : We lack audit records and the logs have been rotated out."due to a misconfiguration issue" : We deployed with default <a href="https://mindly.social/tags/insecure" class="mention hashtag" rel="nofollow noopener" target="_blank">#insecure</a> settings."possible for only a short window" : We didn't dig too deep to determine how far back the bug existed."crafted invalid request data" : We forgot to add input <a href="https://mindly.social/tags/validation" class="mention hashtag" rel="nofollow noopener" target="_blank">#validation</a>."supplementary fix" : We didn't understand the problem as well as we thought, so our previous fix was insufficient."may have been exploited" : We're positive they got away with data, but they deleted our <a href="https://mindly.social/tags/logs" class="mention hashtag" rel="nofollow noopener" target="_blank">#logs</a>."multiple threat actors" : Everyone was in our systems before we noticed."most customers are unaffected" : There are corner cases that aren't as <a href="https://mindly.social/tags/vulnerable" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerable</a>."error in a third-party component" : We forgot to update our dependencies."could lead to remote code execution" : You're <a href="https://mindly.social/tags/p0wned" class="mention hashtag" rel="nofollow noopener" target="_blank">#p0wned</a>."malicious activity has been observed" : The issue has already appeared in the press."review equipment inventory to verify if devices require other mitigations" : You need to buy new stuff."remotely exploited to allow authentication bypass" : We forgot to require <a href="https://mindly.social/tags/login" class="mention hashtag" rel="nofollow noopener" target="_blank">#login</a> for this function."not aware of any exploits in the wild" : The attackers aren't bragging on darkweb fora yet.<a href="https://mindly.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://mindly.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mindly.social/tags/incident" class="mention hashtag" rel="nofollow noopener" target="_blank">#incident</a> <a href="https://mindly.social/tags/obsolete" class="mention hashtag" rel="nofollow noopener" target="_blank">#obsolete</a> <a href="https://mindly.social/tags/vendor" class="mention hashtag" rel="nofollow noopener" target="_blank">#vendor</a> <a href="https://mindly.social/tags/system" class="mention hashtag" rel="nofollow noopener" target="_blank">#system</a> <a href="https://mindly.social/tags/configuration" class="mention hashtag" rel="nofollow noopener" target="_blank">#configuration</a>

Albert CardonaOf the top 20 "404"s of my personal website, 18 are for WordPress pages. My blog is entirely static, i.e., these failed requests are attempts at hacking. The other two are for ".git" and for ".env".Be careful out there. If you use WordPress at all, the likelihood you've let something open is high; lots of surface of attack. Read the manual.<a href="https://mathstodon.xyz/tags/WebMaster" class="mention hashtag" rel="nofollow noopener" target="_blank">#WebMaster</a> <a href="https://mathstodon.xyz/tags/hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#hacking</a> <a href="https://mathstodon.xyz/tags/p0wned" class="mention hashtag" rel="nofollow noopener" target="_blank">#p0wned</a>

Jay Little<a href="https://mastodon.seattlematrix.org/@mousey" class="u-url mention" rel="nofollow noopener" target="_blank">@mousey</a> <a href="https://mastodon.social/@arstechnica" class="u-url mention" rel="nofollow noopener" target="_blank">@arstechnica</a> Well shit I do love a good George Carlin quote...<a href="https://fosstodon.org/tags/p0wned" class="mention hashtag" rel="nofollow noopener" target="_blank">#p0wned</a>

España PiparraJAAAAAJAJAJAJ <a href="https://mastodon.social/tags/p0wned" class="mention hashtag" rel="tag">#p0wned</a>

Recent searches

Search options

Administered by:

Server stats:

#p0wned