VSHN.timer #239: Raising privacy and security

Welcome to another VSHN.timer! Every Monday, 5 links related to Kubernetes, OpenShift, CI / CD, and DevOps; all stuff coming out of our own chat system, making us think, laugh, or simply work better.

In a world where everything’s online, keeping our privacy and security intact has never been more crucial. With cyber threats constantly changing, we need to stay sharp and adapt. Today we dive into the latest incidents and breakthroughs in privacy and security, sharing how these challenges are tackled and what you can do to boost your digital safety.

1. CrowdStrike apology gift card
   In response to the widely publicised disruption we wrote about last week, CrowdStrike offered a $10 (!) gift voucher to affected partners as an apology – a gesture they say is aimed at improving customer relations and acknowledging the inconvenience caused. We’re sure the $10 was adequate compensation!
   https://techcrunch.com/2024/07/24/crowdstrike-offers-a-10-apology-gift-card-to-say-sorry-for-outage
   
2. OpenSSH vulnerability discovered
   The Hacker News highlights a newly discovered vulnerability in OpenSSH, a widely used tool for secure remote login. This security flaw could potentially allow attackers to execute unauthorized commands on affected systems. Regular security updates and vigilance are critically needed, even when using widely adopted open-source tools, as demonstrated in the report:
   https://thehackernews.com/2024/07/new-openssh-vulnerability-discovered.html
   
3. Twilio’s Authy app breach
   Another report from The Hacker News reveals a security breach in Twilio’s Authy app, a popular two-factor authentication tool. The breach exposed sensitive user data, raising concerns about the security of even well-regarded security applications. This incident underscores the importance of strong security measures and ongoing monitoring to safeguard user information:
   https://thehackernews.com/2024/07/twilios-authy-app-breach-exposes.html
   
4. Access to deleted and private GitHub Repo Data
   TruffleSecurity’s blog exposes a critical flaw in GitHub’s handling of deleted and private repository data. This vulnerability allows unauthorized access to sensitive information that was presumed to be secure. Unfortunately, many seem to have thought wrong!
   https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github
   
5. Proton Docs privacy-focused Editor
   The Verge reviews Proton Docs, a new document editor from Proton designed with privacy at its core. Unlike mainstream alternatives, Proton Docs ensures that user data remains private and secure, addressing growing concerns over data privacy in cloud-based applications. This tool represents a significant step forward in providing secure, privacy-centric productivity solutions​:
   https://www.theverge.com/2024/7/3/24190732/proton-docs-document-editor-privacy-google

How confident are you in the privacy and security measures of the software and platforms you use daily? What steps do you take to ensure your data remains secure when using online services and applications?In light of recent security breaches, do you believe companies are doing enough to protect user information? What improvements would you suggest? Get in touch with us, and see you next week for another edition of VSHN.timer.

PS: check out our previous VSHN.timer editions on security: #8, #17, #22, #27, #32, #44, #54, #62, #76, #84, #93, #106, #117, #128, #142, #145, #164, #169, #182, #203, #223, #227, #228, #231

PS²: do you prefer reading VSHN.timer in your favorite RSS reader? Subscribe to this feed.

PS³: would you like to receive VSHN.timer every Monday in your inbox? Sign up for our weekly VSHN.timer newsletter.