#security - June 2019

anyone knows a faster way to setup Vault than described in https://github.com/hashicorp/terraform-aws-vault ?

Fast don't think so. depend on your target config

exim have critical vulnerability
https://www.exim.org/static/doc/security/CVE-2019-10149.txt

good read : https://blog.benjojo.co.uk/post/dell-switch-hacking

“The Chinese government has never in any form participated in or supported any person to carry out the theft of commercial secrets,” it said in a statement to Reuters.

Bahahahahaha, righttttt lol

Is anybody using an IDS/IPS solution in their AWS environment?

We are currently implementing the whole suite of AWS security related products. Macie, GuardDuty, CIS Foundations with CFN, AWS Config with aggregation, AWS Inspector, AWS Security Hub

We use inspector/guard duty/watch/etc, configs pricings off-putting

Thanks. Have you guys heard of Security Onion? Looks like an interesting option and the new VPC mirroring should help with setting it up

AFAIK Guard Duty does not fully qualify as IDS/IPS