Veridify Security’s Post

RedHat 9 SSH vulnerability. Analysis from Redhat. https://lnkd.in/d5Z5reZG

This course was very informative learning more about Wireshark, a crucial tool for network analysis. Just finished the course “Wireshark Essential Training” by Lisa Bock! Check it out: https://lnkd.in/e7d3P5-M #wireshark.

What's the best Key Derivation Function? Well, Argon 2 is better than scrypt and PBKDF2. Argon2 is defined in RFC 9106 and is entitled as, "Memory-Hard Function for Password Hashing and Proof-of-Work Applications". and is used for password hashing, key derivation and proof-of-work. The main variant is Argon2id and is optimised for x86 architectures. It has two subvarients: Argon2d and Argon2i. Overall, Argon2d uses a data-dependent memory access method. This is useful for cryptocurrencies and proof-of-work applications and does not have any threats for side-channel timing attacks. Alternatively, Argon2i uses data-independent memory access, and can be used for password hashing and password-based key derivation (KDF). https://lnkd.in/e9uxSd9j

Argon2 is defined in RFC 9106 and is entitled as, "Memory-Hard Function for Password Hashing and Proof-of-Work Applications". and is used for password hashing, key derivation and proof-of-work. The main variant is Argon2id and is optimized for x86 architectures. It has two subvarients: Argon2d and Argon2i. Overall, Argon2d uses a data-dependent memory access method. This is useful for cryptocurrencies and proof-of-work applications and does not have any threats for side-channel timing attacks. Alternatively, Argon2i uses data-independent memory access, and can be used for password hashing and password-based key derivation (KDF). https://lnkd.in/e9uxSd9j

F5 BIG-IP AWAF 26. F5 AWAF Logging website: https://lnkd.in/dvRRx3nz YouTube: https://lnkd.in/dWAFQwxy This section will cover the logging capabilities of F5 AWAF, including remote logging to capture security events on a remote server, response logging to track web application response traffic, and content events logging, which ensures that application security events are logged in “/var/log/asm”. These logging features are essential for effective security monitoring and incident response.

These cases will safeguard your #HPE Edgeline servers. They're impervious to the elements, letting you set up computing power wherever needed. 🌦 There are also accessories available to help you customize your cases and protect your equipment. Omni Africa recommends reading this document to learn more.

F5 BIG-IP AWAF 26. F5 AWAF Logging website: https://lnkd.in/dEZK5PGm YouTube: https://lnkd.in/dt673DHh This section will cover the logging capabilities of F5 AWAF, including remote logging to capture security events on a remote server, response logging to track web application response traffic, and content events logging, which ensures that application security events are logged in “/var/log/asm”. These logging features are essential for effective security monitoring and incident response. 

CVE Update - Happy New Year! I am a week late but better than never. I didn't see any new data for 2024 but I prepared the sheet for the new data when it becomes available. The last 2 months of the year added nearly 3,000 records as the mad dash to reporting CVEs for the bell rang. Not much a change to any of the network providers I list on the graph. Please remember there is more to the information than just these charts. You have the COMPLETE list of CVEs regardless of the vendor. You can very easily just search each of the year using the find function in #GoogleSheets. All of the data is listed and sources are on the ReadMe tab at the end. I hope everyone has a fantastic year ahead of them. Stay safe and secure and remember to patch those systems!! Thanks Google Workspace for providing the platform to post this information. https://lnkd.in/duzTmhTz

Terratec dmx_6fire USB 1.23.0.02 Unquoted Service Path: Terratec dmx_6fire USB version 1.23.0.02 suffers from an unquoted service path vulnerability.