Authentication Archives - Page 2 of 2

Kobalos Linux malware targets high performance cluster computers

Authentication, Cybersecurity Attacks, Malware / Frank Crast / February 3, 2021 / 2FA, AIX, BSD, ESET, HPC, Kobalos, Linux, Solaris, SSH

A complex Linux malware dubbed Kobalos is targeting high performance cluster (HPC) computers around the globe.

Kobalos Linux malware targets high performance cluster computers Read More »

Sudo privilege escalation vulnerability (CVE-2021-3156)

Authentication, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / January 29, 2021 / CVE-2021-3156, Linux, Privilege escalation, sudo, Unix

A vulnerability in open-source sudo utility could allow regular users to gain root privileges on vulnerable Linux hosts without authentication.

Sudo privilege escalation vulnerability (CVE-2021-3156) Read More »

High risk vulnerability in Zyxel firewalls and AP controllers exploited in the wild

Authentication, Network Security, Vulnerabilities & Exploits / Frank Crast / January 11, 2021 / CVE-2020-29583, Firewall, VPN, ZyXEL

Security experts have warned about a high risk hardcoded credential vulnerability in Zyxel firewalls and AP controllers. Some sources have confirmed that bad actors have already ramped up exploits against the vulnerability.

High risk vulnerability in Zyxel firewalls and AP controllers exploited in the wild Read More »

NSA: New guidance to eliminate obsolete TLS protocols

Authentication, Configuration Management, Cryptography, Cybersecurity Articles, Vulnerabilities & Exploits / Frank Crast / January 9, 2021 / CNSA, DES, DHE, ECDH, ECDH/ECDHE, encryption, IDEA, NIST SP 800-52, NSA, NULL, RC2, RC4, SSL, TDES/3DES, TLS, TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3

The National Security Agency (NSA) has issued new guidance to eliminate obsolete Transport Layer Security (TLS) protocol configurations (such as TLS 1.0, TLS 1.1, SSLv2, SSLv3 and weak ciphers).

NSA: New guidance to eliminate obsolete TLS protocols Read More »

NIST SP 800-52 Rev. 2: Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations

Authentication, Cryptography, Standards & Guidelines / Frank Crast / August 29, 2019 / NIST

The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 800-52 Rev. 2: Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations.

NIST SP 800-52 Rev. 2: Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations Read More »