The latest in tech, SysOps, personal growth, scripting, servers, virtualization and databases curated for you daily.
…here is some more technical information about HSTS in IIS, and other security headers… Learn how to enable HTTP Strict-Transport-Security (HSTS) in Windows Server IIS and enhance your website’s security….
…Security Update KB4557968 NT AUTHORITY\SYSTEM 5/13/2020 12:00:00 AM DESKTOP-JS… Security Update KB4560366 NT AUTHORITY\SYSTEM 6/10/2020 12:00:00 AM DESKTOP-JS… Security Update KB4561600 NT AUTHORITY\SYSTEM 6/10/2020 12:00:00 AM DESKTOP-JS… Security Update KB4566785…
…Policy Object Network Security: Extended Protection for Authentication available at: Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options. Enable this one. Extended Protection for Authentication GPO Hardened UNC Paths Enabling Hardened UNC…
…Generating Your Security Keys (SK) Generating Standard Security Keys Now it’s (finally) time to generate your Security Key (sk) key pairs. Of course you have more than one YubiKey, so…
…clients (set to $false) on # your virtual FTP Site in IIS. #> Set-WebConfigurationProperty -Filter /system.ftpserver/security/ipsecurity -Name allowUnlisted -Value “True” -PSPath ‘IIS:’ Set-WebConfigurationProperty -Filter /system.ftpserver/security/ipsecurity -Name allowUnlisted -Value “False” -PSPath…
…fan of security by obscurity (are you?), removing common server response headers is often advised by security experts. Attackers might gain a lot of information about your server and network,…
Windows Hello Security: Touch your security key
…To open up the Windows Defender Firewall with Advanced Security GUI, press the Start button and type ‘app:firewall‘. Start Windows Defender Firewall with Advanced Security as Administrator Choose Run as…
…= New-Object System.Security.Principal.NTAccount(“LOCAL_USER_NAME”) $strSID = $objUser.Translate([System.Security.Principal.SecurityIdentifier]) $strSID.Value These use the System.Security.Principal.NTAccount class of .NET. Using Get-CimInstance / WMI, you can use: Get-CimInstance -ClassName Win32_UserAccount | ?{$_.Name -eq “USER_NAME”} | Select-Object SID #…
…enable HTTP Strict-Transport-Security (HSTS) on IIS, HTTP Strict Transport Security (HSTS) is a web security policy mechanism which is necessary to protect secure HTTPS websites against downgrade attacks, and which…
…example in my post String Replace on all WordPress Posts in MySQL. As always, be careful with this! Hardening with HTTP Strict-Transport-Security (HSTS) The HTTP Strict-Transport-Security (HSTS) response header is…
…modern security requirements are shifting toward Elliptic Curve Cryptography (ECC). ECC offers stronger security with much smaller key sizes, which results in faster SSL handshakes and lower CPU overhead. To…
…’/configuration/system.webServer/security‘ ); if( $xmlnodes->length > ) { $security_node = $xmlnodes->item( ); $security_node->appendChild( $ipsecurity_node ); } else { $security_node = $doc->createElement( ‘security‘ ); $security_node->appendChild( $ipsecurity_node ); $xmlnodes = $xpath->query( ‘/configuration/system.webServer’ );…
…effectively. Implement IP whitelisting for wp-login.php to restrict access and improve security. Always verify your Apache version to utilize the best security practices for WordPress .htaccess security. Did you like…
…Limits attack surface: Prevents your application from making unauthorized or unintended network connections. Improves security: Mitigates the risk of unauthorized access to your resources, including databases. Aligns with security best…
…encountered this as the result outcome of a security scan. Security by obscurity is one reason to hide the file extension in URLs, if you don’t want others to know…
…While these methods help, they are not foolproof; additional security measures are necessary. Defeating WordPress security plugins can be easy, which is why blocking PHP files is an essential step….
Easily send your DevOps reporting by email with this PowerShell function, because the Send-MailMessage cmdlet is obsolete. Of course you’ll be using StartTLS and authenticated SMTP as additional security. Important:…
Start Windows Defender Firewall with Advanced Security as Administrator
Lego security officer keeping your sites secure