News for hackers. Stuff that matters.

A comment on Certificate Transparency Log Compromised via Salt Vulnerability. Parent comment

Re:Certificate Transparency Log Compromised via Salt Vulnera... by adrr on Sunday May 03, 2020 @10:07PM (#23063857)
Or you just don’t expose these services externally. Even with Ansible, why open up sshd to publicly facing interfaces. Use a jumpbox or VPN. Why increase your threat surface?
[ Parent | on HN ]
Re:Certificate Transparency Log Compromised via Salt Vulnera... by ddevault on Sunday May 03, 2020 @10:09PM (#23063873)
This attitude is what turns a relatively minor breach into 100,000 credit cards being sold to the highest bidder. Ever heard of "lateral movement"?
[ Parent | on HN ]