enterprise linux security

Enterprise Linux Security Episode 82 – In the Name of the Law

by
Play

Podcast: Play in new window | Download (Duration: 45:57 — 84.2MB)

Subscribe: Apple Podcasts | Spotify | RSS

When a threat actor breaks into a router and adds firewall rules that the owner didn’t approve of, that’s considered hacking. But when the FBI does it… …it isn’t?! In this episode Jay and Joao discuss a recent story where the FBI did exactly that, and they’ll also discuss how Microsoft has become the biggest “face palm” discussed on the podcast so far.

Thanks to TuxCare for sponsoring the Enterprise Linux Security podcast. Check out their awesome services to see how they can simplify Linux administration!

Relevant Articles

Download links

Enterprise Linux Security Episode 81 – The VMware Graveyard

by
Play

Podcast: Play in new window | Download (Duration: 49:12 — 90.2MB)

Subscribe: Apple Podcasts | Spotify | RSS

Here we are, yet again, with an industry problem caused by the decision of just one software vendor. This time it’s VMware that’s causing a ruckus. In recent news, it’s been reported that VMware will be killing off 56 (yes, 56) of their stand-alone products, and that’s on top of the news that broke late last year regarding changes in their licensing model. In this episode, Jay and Joao discuss these recent VMware-related shenanigans.

Thanks to TuxCare for sponsoring the Enterprise Linux Security podcast. Check out their awesome services to see how they can simplify Linux administration!

Related Articles

Download Links

Enterprise Linux Security Episode 80 – Stop Paying Threat Actors!

by
Play

Podcast: Play in new window | Download (Duration: 41:33 — 76.2MB)

Subscribe: Apple Podcasts | Spotify | RSS

In this episode, Jay and Joao will discuss an update on the GTA source code theft, how much threat actors are making from ransomware, and more!

Thanks to TuxCare for sponsoring this podcast! Check out how they can make managing Linux servers much easier.

Episode-Specific Links

Download Links

Enterprise Linux Security Episode 79 – Top Ten Security Misconfigurations

by
Play

Podcast: Play in new window | Download (Duration: 44:23 — 81.3MB)

Subscribe: Apple Podcasts | Spotify | RSS

In this episode, Jay and Joao will discuss a report earlier this year that reveals the “top 10 cybersecurity misconfigurations”. These ten common mistakes can make it trivial for a threat actor to gain access to your infrastructure, so it’s definitely a list everyone should pay close attention to.

Thanks to TuxCare for sponsoring this podcast! Check them out to see how they can help you level up your Linux administration!

Relevant Article

Download Links

Enterprise Linux Security Episode 78 – Mirai: The Untold Story

by
Play

Podcast: Play in new window | Download (Duration: 44:13 — 81.0MB)

Subscribe: Apple Podcasts | Spotify | RSS

The Mirai botnet brought the entirety of the internet to its breaking point back in 2016, taking down many prominent web sites. Now, an article from Wired has emerged that reveals the full story behind the scenes – how the threat actors got started, how the events played out, as well as what they’re up to these days. Join Jay and Joao as they discuss this very interesting story!

Thanks to TuxCare for sponsoring this podcast! Check them out to see how they can help you level up your Linux administration!

Relevant Article

Download Links

Enterprise Linux Security Episode 77 – Security News Sync

by
Play

Podcast: Play in new window | Download (Duration: 42:14 — 77.4MB)

Subscribe: Apple Podcasts | Spotify | RSS

In this episode, Jay and Joao catch up on recent stories. Among the topics they’ll discuss another version of CentOS going end of life (and why upgrading isn’t so straight-forward), the recent curl vulnerability, and more!

Thanks to TuxCare for sponsoring this podcast! Check out their Extended Lifecycle Support solution to keep your CentOS 7 installations supported with continued security updates while you plan your migration!

Video-specific links

Download Links

Enterprise Linux Security Episode 75 – RepoJacking

by
Play

Podcast: Play in new window | Download (Duration: 36:47 — 67.4MB)

Subscribe: Apple Podcasts | Spotify | RSS

We’ve talked about Supply Chain Attacks on this podcast before, and in this episode Jay and Joao discuss another form of this popular attack vector – RepoJacking! RepoJacking occurs when a repository (such as one hosted on Github) changes information, and due to a link between the old repository info and the new – threat actors can take advantage of this. Join Jay and Joao for a discussion on this attack vector.

Thanks to TuxCare for sponsoring this episode! Check them out to see how they can help take your Linux Administration game to the next level.

Relevant Articles

Download Links

Enterprise Linux Security Episode 74 – Unlucky in Vegas

by
Play

Podcast: Play in new window | Download (Duration: 41:52 — 76.7MB)

Subscribe: Apple Podcasts | Spotify | RSS

There’s a multitude of ways you can lose money in Las Vegas, but this time it’s not from gambling. In this episode, Jay and Joao will discuss a recent and still developing story where MGM was the target of what appears to be a ransomware attack.

Thanks to TuxCare for sponsoring this podcast! Check them out and make your life as a SysAdmin much easier!

Relevant Articles

Download Links

Enterprise Linux Security Episode 73 – TruffleHog and CVSS version 4.0

by
Play

Podcast: Play in new window | Download (Duration: 43:19 — 79.4MB)

Subscribe: Apple Podcasts | Spotify | RSS

In this episode, Jay and Joao will discuss a recent discovery by Truffle Security that has found 4,500 websites that have exposed a very critical directory. In addition, the upcoming Common Vulnerability Scoring System (CVSS) update, which will bring to version 4.0 – along with some important changes you’ll need to understand.

Relevant Articles

Download Links

Enterprise Linux Security Episode 72 – Surveillance Facepalm

by
Play

Podcast: Play in new window | Download (Duration: 39:32 — 72.5MB)

Subscribe: Apple Podcasts | Spotify | RSS

Imagine needing to ask your government permission in order to perform tasks such as installing a security patch, implementing an Intrusion Detection System, updating firmware or upgrading your operating system? If this sounds too ridiculous to be true, then you’re right – it is ridiculous, but unfortunately it’s a real proposal. In the U.K., Investigatory Powers Act 2016 (IPA) has had an adjustment proposed that could potentially make securing your systems more difficult than it’s ever been. In this episode, Jay and Joao discuss how these potential changes will complicate pretty much everything.

Relevant Articles

Download Links