architecture - #cybertechtalk

Redundant Array of Independent Disks (RAID)

July 30, 2023 by andriejsazanowicz

Redundant Array of Independent Disks or RAID would be a very good way to backup your data. But the data in a RAID array is not a copy of your data. It is the data that you are actively retrieving or storing. And because of that, you have to keep in mind that RAID is … Read more

Kubernetes distributed alert management with Prometheus Operator and Flux Notification Controller

July 4, 2023 by andriejsazanowicz

Distributed alert management (DAM) allows automatically identify a non-compliance of service level objectives and any risky activities inside a cluster and GitOps infrastructure. In my previous post, I presented a redundant monitoring infrastructure based on variety of tools such like Grafana, Prometheus, Loki and Thanos. This article focuses on a way to integrate continuous monitoring … Read more

Simple message queue with RabbitMQ and EasyNetQ on .Net Core

June 28, 2023 by andriejsazanowicz

RabbitMQ is one of the most popular open source message brokers and a critical component of distributed applications and platform based on microservice pattern, like online trading, order processing software and booking hubs. Some customers choose RabbitMQ for its feature richness, active community support, and broad range of supported clients and frameworks. However, RabbitMQ message … Read more

Building redundant EKS monitoring and alerting stack

October 8, 2023June 21, 2023 by andriejsazanowicz

As Kubernetes containers are actually Linux processes, we can use our favorite tools to monitor and log cluster performance. In Kubernetes, application monitoring does not depend on a single monitoring solution. Each organization is unique in form of requirements to monitoring sensitivity and log ingestion, analysis and persistence. This is very important building our own … Read more

Build high-performance Document Management System with SenseNet as a service.

June 17, 2023 by andriejsazanowicz

Document management system (DMS) is a document-oriented content management tool; an IT tool that allows you to process all forms of documents created in organizations. There are many DMS systems that allow you to handle documents in the right way, like fast data archiving, easy searching for documents by metadata or even content, or visualization … Read more

TheHackersNews.com

New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks
Researchers have discovered a new security vulnerability stemming from a design flaw in the IEEE 802.11 Wi-Fi standard that tricks victims into connecting to a less secure wireless network and eavesdrop on their network traffic. The SSID Confusion attack, tracked as CVE-2023-52424, impacts all operating systems and Wi-Fi clients, including home and mesh networks that are based on
North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign
The North Korea-linked Kimsuky hacking group has been attributed to a new social engineering attack that employs fictitious Facebook accounts to targets via Messenger and ultimately delivers malware. "The threat actor created a Facebook account with a fake identity disguised as a public official working in the North Korean human rights field," South Korean cybersecurity company Genians
Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines
Security researchers have disclosed almost a dozen security flaws impacting the GE HealthCare Vivid Ultrasound product family that could be exploited by malicious actors to tamper with patient data and even install ransomware under certain circumstances. "The impacts enabled by these flaws are manifold: from the implant of ransomware on the ultrasound machine to the access and manipulation of
Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks
The Microsoft Threat Intelligence team said it has observed a threat actor it tracks under the name Storm-1811 abusing the client management tool Quick Assist to target users in social engineering attacks. "Storm-1811 is a financially motivated cybercriminal group known to deploy Black Basta ransomware," the company said in a report published on May 15, 2024. The
Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability
Google has rolled out fixes to address a set of nine security issues in its Chrome browser, including a new zero-day that has been exploited in the wild. Assigned the CVE identifier CVE-2024-4947, the vulnerability relates to a type confusion bug in the V8 JavaScript and WebAssembly engine. It was reported by Kaspersky researchers Vasily Berdnikov and Boris

DevOps.com

Building Toward Unified Observability
Observability, AI and automation can help organizations achieve proactive IT management and eschew traditional monitoring. Here’s what’s involved.
The Gift That Keeps On Giving
When one person's code is another person's nightmare.
Three Reasons DevOps Should Consider Rocky Linux 9.4
The new version of Rocky Linux includes security improvements, better cloud images, and the latest developer tools. All those features should interest any DevOps pro.
Advancing Sustainable Practices in Data Centers: Insights from Platform.sh
The environmental impact of data centers is becoming increasingly critical. These facilities, essential to our digital infrastructure, consume vast amounts of energy and contribute significantly to carbon emissions. Clearly, recognizing the urgency of this issue, Platform.sh is pioneering sustainable solutions to mitigate their environmental footprint. By incorporating renewable energy, cutting-edge cooling systems, and robust carbon offset
No Country for No-Code: Are We Heading Towards a Wild West of Software Security?
The specter of an untrained employee creating applications is alarming: No-code/low-code platforms empower employees with no application security knowledge to develop programs that security teams don’t know exist.