securetty @securetty@infosec.exchange

~Open Source Security Tool of the Day~

#osstotd

Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container. It also checks the config and Docker files for misconfigurations. This tool can be used as part of a Windows container review on local copies of the containers, and on the host itself to enhance security.

https://github.com/nccgroup/whalescan

If you have a .org domain name: go renew it now. For the full 10 years.

Registration rights for .org were just bought by a private equity firm. And as part of that contract, the price caps were removed.

Anything in .org will get much more expensive, soon.

A ten year renewal will cost you a bit over a hundred bucks. Which is probably less than one year will cost you in the very near future.

https://www.theregister.co.uk/2019/11/20/org_registry_sale_shambles/