Blog
SSH Excessive Keys Risk - Do You Have Too Many SSH Keys?
Do you have too many SSH keys on Linux? Probably. Having too many SSH keys on Linux accounts presents a credential theft and backdoor risk. Besides not knowing who can login with an account that has…
SSH Authorized Keys2 Backdoor Attack
SSH has a little known way to leave behind backdoor keys, and that is by using the deprecated authorized_keys2 file. Many Linux users are unaware of this feature and what risks it poses. In this…
Risky Business Snake Oilers Interview with Sandfly Security
Join us for an interview on the Risky Business Snake Oilers segment where we talk about agentless Linux security and Sandfly. We cover the problem of Linux security monitoring with traditional EDR…
Default User SSH Authorized Key Risks on Linux
Default Linux users with SSH authorized keys are a way for attackers to hide backdoor accounts that can avoid detection for some time. In this video we discuss and demonstrate the threat, why it's…
Unsecured and Unencrypted SSH Private Key Threats on Linux
Unsecured and unencrypted SSH private keys are a major security threat on Linux. In this video we go over how easy unsecured SSH private keys can be stolen by intruders to use for lateral movement.…
Linux Obsolete Password Hash Risks
Obsolete password hashes on Linux expose users to brute force attack. Legacy password hashes have included MD5 which can have billions of attempts a second tried against it by GPU based crackers.…