Rodislav Moldovan

DockerSpy: Search for images on Docker Hub, extract sensitive information

3

https://caxus.net/ 🚀Terraform and GitLab CI Pipelines: The Ultimate Solution for Infrastructure Management 🚀 1. Total Automation 🤖: With Terraform, you can define your infrastructure as code. This means you can create and manage all your cloud resources automatically and repeatably. 2. Seamless Integration ➡️: Thanks to GitLab CI/CD, every change you make in your code can be automatically reflected in your infrastructure. No more manual deployments prone to errors. 3. Security and Transparency 🔒: All changes in your infrastructure are recorded in your Git repository. This allows for total control and a transparent history of all modifications. 4. Continuous Development 🔄: With GitLab CI Pipelines, you can create pipelines that automatically validate, test, and deploy your Terraform configurations. It has never been easier to ensure that everything works as it should! 5. Guaranteed Scalability 📈: By using these tools, you can quickly scale your infrastructure to deal with traffic spikes or new features. 6. Cost Reduction 💸: By automating infrastructure management, you reduce human errors and optimize resource usage, resulting in lower operating costs. 7. Team Efficiency 🛠️: These tools allow your development and operations teams to work together efficiently, minimizing wait times and improving collaboration. 8. Flexibility and Adaptability 🧩: Adjust and evolve your infrastructure according to business needs without complications, all while using market best practices. 9. Recommended Tools 🛠️: Some tools that can help improve productivity are: VSCode for code editing, Terraform Cloud for remote state management, and Slack for quick and effective communication. At Caxus, we are experts in adopting AWS cloud solutions 🌩️. If you want to optimize your infrastructure using Terraform and GitLab CI Pipelines, contact us and let's take your business to the next level. Contact us by Whatsapp: https://buff.ly/4aSbAWy Contact us today for more information! [email protected] We’d love to discuss how we can save you proyect in the cloud. [email protected] #devops #GitLabCI #aws #automation #terraform #gitlabci #pipelines #caxus #gitlab #DominaTuIndustria #Collaboration #Efficiency #CloudAdoption #Seguridad #Optimizacion #LinkedIn #HerramientasDigitales #AprendizajeContinuo #work #growing #teamwork #creatividad #DevSecOps #machinelearning #security #devsecops #cloud #infrastructure #DataAnalytics #AgileInfrastructure #CloudAdoption #Caxus

2

📡 Open Collaboration: OpenProject + GitLab Integrate A new article on the OpenProject #GitLab integration has been published on OpenSource.net, supported by the Open Source Initiative (OSI). The article tells the open source success story of how Community contributor Benjamin Tey created a GitLab plugin for OpenProject out of his own need. And how – due to immense demand – this plugin was recently integrated into the OpenProject core. We are very happy and proud of our amazing open source Community. Only together we can achieve great things. 💙 https://lnkd.in/dyc28x8K

13

1 commentaire

New Post: How to Validate a Docker Compose YAML File

15

🔒 The Lowdown on Locked Namespaces 🔒 ControlPlane’s Senior Consultant Marco De Benedictis gave a talk at KubeCon EU 2024, where he discussed how namespaces have grown from an optional feature to the cornerstone for several Kubernetes security controls and why you should consider them as a security boundary in your cluster 🔗 To read more about this, click the link below to read Marco’s blog piece 👇

17

The #ApachePaimon PMC officially announces the release of Apache Paimon 0.9.0. This version was developed over the course of four months, with the participation of 80 contributors, resulting in more than 600 commits. Thank you to all contributors for your support! The community has decided that the next version will be 1.0, marking that most functionalities of Apache Paimon have become relatively mature and stable. Version Overview Paimon's long-term plan is to become a unified lake storage format that meets the main requirements for minute level #bigdata: offline batch computing, real-time stream computing, and OLAP computing. Notable changes in this version include: ✔Paimon Branch: The branch functionality is now officially production-ready, and the introduction of the ‘scan.fallback-branch’ feature helps to better unify stream and batch storage for businesses. ✔Universal Format: This version introduces native Iceberg compatibility. You can enable Iceberg compatibility mode, and Paimon will generate Iceberg-compatible snapshots in real-time, allowing you to use the Iceberg ecosystem to read this Paimon table. ✔Caching Catalog: This version introduces the implementation of Caching Catalog by default. Table metadata and manifest files will be cached in the catalog, which can accelerate OLAP query performance. ✔Improvements in Bucketed Append Table Availability: The small file issue has been significantly alleviated, and it can be applied to bucketed joins in Spark, reducing shuffles during joins. ✔Support for DELETE & UPDATE & MERGEINTO in Append Tables: This version introduces support for DELETE, UPDATE, and MERGE INTO in append tables. You can modify and delete records in append tables using Spark SQL, and it also supports Deletion Vectors mode. Read the full release announcement to learn more: https://lnkd.in/gaqrqwfh About Apache Paimon: A lake format that enables building a real-time lakehouse architecture with Flink and Spark for both streaming and batch operations. Innovatively combines lake format and LSM structure, bringing realtime streaming updates into the lake architecture. #BigData #OpenSource #DataEngineering #Streaming

80

1 commentaire

➡️ Based on some of the phishing kits harvested by StalkPhish.io last week, here are 5️⃣ new PhishingKit Yara Rules: Rules for detection of #phishing kits targeting customers of: ✅ Kraken Digital Asset Exchange ✅ Société Générale ✅ ANTAI - Agence nationale de traitement automatisé des infractions ✅ Telstra ✅ Microsoft Office365 👉 Use these rules for a better detection of #phishing threats targeting your brand. -- 📩 Contact and follow us if you need help fighting hashtag #phishing and #brand impersonation... we have tools, data and knowledge to help!

7

🚨 A recently discovered malicious package, "fabrice," exploited the trust in the popular "fabric" SSH library on PyPI, designed to steal AWS credentials from developers. With over 37,000 downloads since 2021, fabrice mimics the trusted "fabric" library, used by millions, to exfiltrate sensitive credentials and create backdoors using platform-specific payloads for Linux and Windows systems. On Linux, fabrice employs the linuxThread() function, which downloads, decodes and executes scripts stored in hidden directories. It begins by creating a concealed folder, ~/.local/bin/vscode, where the malicious scripts are saved. The server URL it contacts is obfuscated and points to a VPN endpoint at "89.44.9.227," masking its activity. The function’s malicious process involves: - Creating hidden directories to host downloaded scripts, making detection difficult. - Downloading malicious code, parsing it into multiple parts and storing each as a separate shell script. - Executing these scripts with elevated permissions, establishing a foothold on the compromised system and enabling further attacks. On Windows, fabrice uses winThread() with two encoded payloads, vv and zz, to establish persistence and remote command execution: - The vv variable decodes into a VBScript (p.vbs) that initiates a hidden Python script (d.py) in the Downloads folder. This VBScript enables d.py to run discreetly, launching further payloads as needed. - The zz variable decodes into a Python script that downloads an additional executable file (chrome.exe) from the attacker's server and saves it in the Downloads folder. It sets up a scheduled task to execute every 15 minutes, ensuring ongoing control. Finally, zz removes the initial d.py, concealing evidence of its actions. The main objective of fabrice is to steal AWS credentials using the boto3 library, which it uses to gather and exfiltrate AWS access and secret keys to the attacker's server: - The malware initiates a boto3 session to gather AWS credentials stored in the environment. - These credentials are then sent to the attacker’s server, which, by using a VPN endpoint, masks the location of the attackers while giving them access to sensitive cloud resources. - The test() function in fabrice adapts to the operating system, launching either the Linux or Windows thread based on the detected platform. This cross-platform approach broadens fabrice’s reach, impacting both Linux and Windows users. To guard against such threats: - Update and thoroughly audit dependencies, focus on high-risk typosquatted names. - Utilize security tools to monitor repositories for potentially harmful dependencies. - Apply strict credential management and access controls, safeguard sensitive information like AWS keys. - Enable Multi-Factor Authentication (MFA). The fabrice package has since been removed from PyPI. Stay vigilant! Source: https://lnkd.in/daCRfszx

7

IAM Just-In-Time (JIT) Access introduces a paradigm shift in managing user permissions. Ditch Static Access! Our guide explores IAM Just-In-Time (JIT) Access on AWS: overcoming challenges, ideal workflow & how Cloudanix's solution simplifies it. #iamjit #identitymanagement #accessmanagement #cloudaccess #accesscontrol #iamjustintime #ycombinator #cloudsecurity #cloudanix Read more: https://lnkd.in/gq8AarVY

6

What learning strategies commonly used by primary school teachers can help us in our daily activities as developers? Check out this overview by ☁️ Tim Mamo ☁️! Join us in 2024 ➡️ https://devopsdays.pl/ #DevOpsDays #Warsaw #DODWarsaw #DevOps #DevOpsCommunity #ITconference

1

Terraform 🌍 What It Is: Terraform is a tool for provisioning and managing cloud infrastructure using code. It allows you to define resources and infrastructure in a declarative manner. Key Features: Declarative Language 📝: Define the desired state of your infrastructure, and Terraform figures out the details. State Management 📊: Keeps track of your infrastructure’s state with a state file. Provider Support ☁️: Works with many cloud providers and services (AWS, Azure, GCP, etc.). Modularization 🧩: Create reusable modules to organize and share configurations. Use Cases: Provisioning cloud resources (e.g., VMs, networks, databases). Managing complex infrastructure setups. Ensuring consistency across multiple environments. Ansible ⚙️ What It Is: Ansible is an automation tool for configuration management and application deployment, using YAML for defining tasks. Key Features: Declarative Language 📝: Describe what you want to achieve, and Ansible does the work. Agentless 🚫: Uses SSH to communicate with target machines, no need for agents. Playbooks 📜: YAML files that describe the tasks and configurations. Extensibility 🔌: Supports a wide range of modules and plugins for different tasks. Use Cases: Configuring servers and applications (installing software, updating settings). Orchestrating multi-step workflows and deployments. Managing system state and enforcing compliance. Integrating Terraform and Ansible 🤝 Terraform 🌍 handles provisioning infrastructure (e.g., creating VMs, networks). Ansible ⚙️ configures the provisioned infrastructure (e.g., installing software, setting up services). Workflow Example: Terraform 🌍: Define and provision the infrastructure. Ansible ⚙️: Configure and deploy applications on the provisioned infrastructure. By using Terraform and Ansible together, you get the best of both worlds: efficient infrastructure provisioning and detailed configuration management.

6

𝗛𝗲𝗿𝗲'𝘀 𝘄𝗵𝘆 𝗔𝗽𝗽𝘀𝗺𝗶𝘁𝗵 𝗥𝗲𝘃𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝗶𝘇𝗲𝘀 𝗘𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗟𝗼𝘄-𝗖𝗼𝗱𝗲 𝗗𝗲𝘃𝗢𝗽𝘀: 🏗️ 🔐 For enterprises and regulated industries, control and security are key, so Appsmith delivers: - Self-hosted deployment on YOUR infrastructure - Full integration with existing CI/CD pipelines - Compatibility with all major cloud providers - Enhanced data security and compliance 🏢 𝗪𝗵𝘆 𝗱𝗼𝗲𝘀 𝘁𝗵𝗶𝘀 𝗺𝗮𝘁𝘁𝗲𝗿 𝗳𝗼𝗿 𝗲𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲𝘀? - Maintain complete control over your data - Leverage existing security protocols - Streamline development workflows - Accelerate application delivery while ensuring compliance 🎥 Watch our video to learn how Appsmith can transform your internal development processes, making it the ideal choice for enterprises that demand both innovation and security. 𝗔𝗽𝗽𝘀𝗺𝗶𝘁𝗵 𝗶𝘀 𝗰𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝘁 𝘁𝗼: ✅ SOC2 ✅ HIPAA ✅ GDPR https://lnkd.in/eg9J_pn9 #Appsmith #LowCode #DevOps #EnterpriseIT #CICD #CloudComputing #EnterpriseSoftware

4

A new week starts, so let's have a look at the contributions from Bootlin engineers last week! - Alexis Lothoré continues his effort, sponsored by the eBPF Foundation, of converting Linux kernel BPF tests to the test_progs infrastructure. He submitted a v2, v3 and v4 of the conversion of test_dev_cgroup: https://lnkd.in/eMgCQ_nJ, and a first iteration of another patch converting 3 other tests: https://lnkd.in/entyhJ7v - Thomas Bonnefille continued his work on enabling the ADC on the Sophgo RISC-V processor, with a v3: https://lnkd.in/eVdCSKwb - Louis Chauvet sent a v9 of his series improving the Linux kernel VKMS driver, which he has been desperately trying to get in for several months: https://lnkd.in/e53azWyD - Herve Codina submitted a large patch series extending the QMC and TSA drivers that he contributed a while ago, to also cover the MPC8321 PowerPC processor: https://lnkd.in/eMxdrJm4. He also contributed some fixes to his fsl_qmc_hdlc driver: https://lnkd.in/eshYVQMB, https://lnkd.in/eVuBAS97 - Théo Lebrun took advantage of the recent release of 6.11-rc1 to resend his pending series enabling clocks, resets and pinctrl on Mobileye EyeQ5 platforms: https://lnkd.in/eibxwdyA, https://lnkd.in/eHTGUvWr, https://lnkd.in/eWr5fxv9 - Thomas Perrot updated OpenSBI to 1.5.1 in OpenEmbedded: https://lnkd.in/eSFXCc_a - Miguel Gazquez saw his two The Zephyr Project pull requests merged: one adding a driver for the STMicroelectronics lsm9ds1 sensor (https://lnkd.in/e9AE3K9j), one adding support for display on STMicroelectronics stm32l562e-dk (https://lnkd.in/eYQEQbiE) - Thomas Bonnefille improved the Buildroot ffmpeg package to support Jack as an optional dependency: https://lnkd.in/eFdVh_93 - Thomas Petazzoni also contributed to Buildroot: he reviewed/merged over 130 patches, and contributed fixes for GCC, ODB, bcusdk, and more.

22

1 commentaire

#StarWind_how_to Exploring #GitSubmodules in #AzureDevOps? Part II of our series by Didier Van Hoye for #StarWind provides clear instructions on how to add, update, and clone submodules, ensuring a smoother workflow for your projects. Read more here: https://starwind.com/s/2X

126