Blog Section
Welcome to a new series of articles dedicated to protecting personal workstations using the Check Point SandBlast Agent solution and the new cloud management system — SandBlast Agent Management Platform. We discussed SandBlast Agent in articles regarding malware analysis and the features of the new E83.10 version, and we have long promised to publish a comprehensive series of articles on deployment and administration […]
FreeBSD has implemented changes that allow for lockless lookup operations in VFS. Optimizations have been made for the TmpFS, UFS, and ZFS file systems, but do not yet extend to ACL, Capsicum, access to file descriptors, symbolic links, and ".." in paths. For the specified capabilities, the old file determination mechanism is being rolled back. A test conducted on TmpFS measured […]
An update is available for three main OS Alt versions 9.1 based on the Ninth ALT platform (p9 Vaccinium): "Alt Workstation 9," "Alt Server 9," and "Alt Education 9." The most significant change is the further expansion of the list of supported hardware platforms. The Alt OS is available for eight Russian and foreign hardware platforms: 32-/64-bit x86 and ARM processors, Elbrus processors (v3 and […]
Eight vulnerabilities have been identified in the GRUB2 bootloader. The most dangerous issue (CVE-2020-10713), codenamed BootHole, allows for the bypassing of the UEFI Secure Boot mechanism and enables the installation of unverifiable malicious software. A notable feature of this vulnerability is that simply updating GRUB2 is insufficient for resolution, as an attacker can utilize a boot medium with an old vulnerable version, certified by a digital signature. […]
We launched new services, traffic increased, we replaced servers, connected new sites, and revamped the data centers – now we will tell you this story, which we first introduced to you five years ago. Five years is a significant time for interim results. Therefore, we decided to share the development of our infrastructure, which has gone through an incredibly interesting journey over these five years, of which we […]
When development first begins, it's often unclear which packages will actually go into the target rootfs. In other words, it's too early to grab onto LFS, buildroot, or yocto (or anything else), but you need to start already. For those with ample resources (I have 4GB eMMC on the pilot samples), there is a solution to provide developers with a distribution that will quickly deliver whatever is missing in this […]
We will use Gitlab CI and manual GitOps to implement and utilize Canary deployment in Kubernetes. Articles in this series: (this article) Canary Deployment using ArgoCI, Canary Deployment using Istio, Canary Deployment using Jenkins-X, Istio Flagger. We will perform Canary deployment manually through GitOps and create/modify core Kubernetes resources. This article is intended for the first […]
Cisco StealthWatch is a security analytics solution that provides comprehensive threat monitoring across a distributed network. The operation of StealthWatch is based on collecting NetFlow and IPFIX from routers, switches, and other network devices. As a result, the network becomes a sensitive sensor, allowing the administrator to peek into areas inaccessible to traditional network protection methods, such as Next Generation […]
Continuing our series of articles on NGFW for small businesses, I would like to remind you that we are examining the new 1500 series model range. In the first part of the series, I mentioned one of the most useful options when purchasing an SMB device — the provision of gateways with built-in Mobile Access licenses (from 100 to 200 users, depending on the model). In this article, we […]
Malicious code has been discovered in the Perl package Module-AutoLoad distributed via the CPAN catalog, designed for on-the-fly automatic loading of CPAN modules. The malicious insertion was found in the test code 05_rcx.t, which has been included since 2011. Notably, concerns about loading suspicious code were raised on Stackoverflow as early as 2016. The malicious activity involves attempts to load and execute code from external […]
The release of the specialized Tails 4.9 distribution (The Amnesic Incognito Live System), based on the Debian package base and designed to ensure anonymous internet access, has been formed. Anonymous access in Tails is provided by the Tor system. All connections, except traffic through the Tor network, are blocked by the packet filter by default. User data storage in data preservation mode between sessions is implemented with […]
Firefox 79 is now available. The password manager has learned to export saved passwords (in CSV format). A page with experimental features has been added to the settings dialog. To see it, you must use the setting browser.preferences.experimental. The about:support page now features a 'Clear Launch Cache' button. Prediction of partially entered search queries is enabled (browser.urlbar.richSuggestions.tail). For example, if a user types 'hobbit holes for sale in l', the search engine might […]