Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
The Kinsing malware is now actively breaching Kubernetes clusters by leveraging known weaknesses in container images and misconfigured, exposed PostgreSQL containers. . While these tactics aren't novel, Microsoft's Defender for Cloud team reports they have seen an uptick lately, indicating that the threat actors are actively looking for specific entry points. Kinsing is a Linux malware with a history of targeting containerized environments for crypto mining, using the breached server's hardware resources to generate revenue for the threat actors. The threat actors behind Kinsing are known for exploiting known vulnerabilities like Log4Shell , and, more recently, an Atlassian Confluence RCE to breach targets and establish persistence. . Cybercriminals are taking advantage of PostgreSQL deployments in Kubernetes, leveraging Kinsing malware for nefarious access.. Kubernetes Security, Linux Malware, Kinsing Threat, Container Exploit. . Brittany Day
This describes how to set up ssl certificates to enable encrypted connections from PgAdmin on some client machine to postgresql on a server machine. The assumption is that postgresql (compiled with ssl support) and openssl are already installed and functional on the server (Linux). PgAdmin is already installed on the client (either Windows or Linux).. On the server, three certificates are required in the data directory. CentOS default is /var/lib/pgsql/data/: root.crt (trusted root certificate) server.crt (server certificate) server.key (private key) The link for this article located at HowtoForge is no longer available. . On the server, three certificates are required in the data directory. CentOS default is /var/lib/pgs. describes, certificates, enable, encrypted, connections, pgadmin. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.