CentOS Web Panel News

How to install TLS for FTP – Control WebPanel Wiki

As now all is moving to https it’s also good to enable SSL/TLS for FTP to protect plain text login credentials.Our instruction will guide you to install and configure pure-ftpd to use SSL/TLS. Requirements: Hostname certificate already installed, check that these files exist:/etc/pki/tls/private/hostname.key/etc/pki/tls/certs/hostname.crt Create Certificate File for pure-ftpd cat /etc/pki/tls/private/hostname.key Continue Reading

Squarespace OCSP Stapling Implementation

We’re excited that Squarespace has decided to protect the millions of sites they host with HTTPS! While talking with their team we learned they were deploying OCSP Stapling from the get-go, and we were impressed. We asked them to share their experience with our readers in our first guest blog Continue Reading

A Brazilian Trojan Using A Jar File, VB Scripts And A DLL For Its Multi-Stage Infection

As part of Fortinet’s continued efforts to protect its customers, we carry out a variety of tests to improve the detection of malicious content, whether it’s file or network related. While checking out some HTTPS phishing websites last month, one URL stood out. It wasn’t a phishing site, but it Continue Reading

Fortinet at HPE Protect (Sept. 13-16, 2016)

I’m excited to be at Protect 2016, HPE’s largest security event of the year! Over 2,000 security professionals at the event will explore an integrated approach to security and risk management, and learn how to make effective security simple. At Fortinet, we hold similar values. The modern response to increasingly Continue Reading

How the Consumer Product Safety Commission is (Inadvertently) Behind the Internet’s Largest DDoS Attacks

The mission of the United State’s Government’s Consumer Product Safety Commission (CPSC) is to protect consumers from injury by products. It’s ironic then that the CPSC is playing an unwitting role in most of the largest DDoS attacks seen on the Internet. To understand how, you need to understand a Continue Reading

Q&A: Today’s Cyber Threat Landscape – 3rd Party Testing and Sandboxes

Sandbox technology and the ongoing effort to defend and protect against cyber threats continues. Independent testing offers organizations valuable insight into what solutions are best for their use case. Below we discuss this maturing technology and the role of testing with Fortinet’s David Finger. I saw the announcement from NSS Continue Reading

Protect your server from HTTPOXY

Protect your server from HTTPOXY – ISPConfig The HTTPOXY vulnerability that has been found recently is a vulnerability that affects web applications that run in cgi or cgi-like environments. This is not a vulnerability in ISPConfig itself but it affects software that is used on most ISPConfig servers, so it Continue Reading