CloudLinux - Igor Seletskiy - CloudLinux Blog - Page 2
Bloggers

CloudLinux is on a mission to make Linux secure, stable, and profitable, and Igor Seletskiy is at the helm of this undertaking. He is the CEO and founder of the company, and an innovator responsible for the strategic direction of the company and all products within the CloudLinux brand.

Igor is an accomplished technology guru focusing on Linux, kernel development, and the hosting industry. He is a frequent speaker at industry events, and has a successful track record of more than 15 years of delivering innovative products to market.

How to stop playing Whack-A-Mole with malware and actually protect servers from attacks

How to stop playing Whack-A-Mole with malware and actually protect servers from attacks

How to stop playing Whack-A-Mole with malware and actually protect servers from attacks
Software vulnerabilities are constantly being exploited and monetized, and organized crime now consist of large development teams with substantial budgets. It has become a profitable industry that has seen rapid growth, fueled by ransomware schemes and cryptomining exploits, all without dire consequences. Malware is used by attackers to steal data,...
Continue reading
  3249 Hits
  2 Comments
CloudLinux and GDPR
Tags:

CloudLinux and GDPR

CloudLinux and GDPR
The General Data Protection Regulation ( GDPR ) (EU) 2016/679 is a regulation in the EU law on data protection and privacy for all individuals within the European Union. It also addresses the export of personal data outside the EU. The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulat...
Continue reading
  5086 Hits
  0 Comments
Imunify360 Protects Customers Against Highly Critical Drupal Exploit

Imunify360 Protects Customers Against Highly Critical Drupal Exploit

Imunify360 Protects Customers Against Highly Critical Drupal Exploit
Drupal has recently patched a critical remote code execution exploit SA-CORE-2018-002/CVE-2018-7600 . This vulnerability may result in Drupal sites to be completely compromised. Imunify360 protects against this vulnerability using built-in Web Application Firewall (WAF) as well as the intelligent botnet protection. Our team has pushed out updates w...
Continue reading
  3294 Hits
  0 Comments
KernelCare fixes Meltdown and Spectre without reboots!

KernelCare fixes Meltdown and Spectre without reboots!

KernelCare fixes Meltdown and Spectre without reboots!
KernelCare now live patches Meltdown and Spectre (spectre-v1) that exploit critical vulnerabilities in modern processors. The list of supported distributions is available below. Free trial supports updates too. By now, you might have thought that the topic of Meltdown and Spectre vulnerabilities is taking a backstage in the news. Not so, as the imp...
Continue reading
Recent Comments
Alexandre Parubochyi
Please follow https://cloudlinux.com/cloudlinux-os-blog/entry/intel-cpu-bug-kernelcare-and-cloudlinux... Read More
Tuesday, 06 February 2018 19:30
Alexandre Parubochyi
Microcode updates can often be applied without reboots - it really depends on hardware manufacturers. There is a microcode_ctl com... Read More
Friday, 09 February 2018 08:01
Irina Semenova
Meltdown and Spectre fixes were patched for OpenVZ
Thursday, 24 May 2018 12:12
  8867 Hits
  19 Comments
Intel CPU Bug - Meltdown and Spectre - KernelCare and CloudLinux

Intel CPU Bug - Meltdown and Spectre - KernelCare and CloudLinux

Intel CPU Bug - Meltdown and Spectre - KernelCare and CloudLinux
Update [May 29, 2018 12:25am PT] Meltdown fixes for Ubuntu 16.04 are now on test. To deploy them: edit /etc/sysconfig/kcare/kcare.conf Add: PREFIX=test Run: kcarectl --update TAGNAME: update-2018-05-29-test-1 ubuntu-xenial:   CVE-2017-5754: Systems with microprocessors utilizing speculative execution and     indirect branch predictio...
Continue reading
Recent Comments
Igor Seletskiy
sorry, corrected the upgrade instructions.
Thursday, 04 January 2018 23:38
Igor Seletskiy
Do you have it configured for CloudLinux hybrid kernel? https://docs.cloudlinux.com/index.html?hybrid_kernel.html... Read More
Thursday, 04 January 2018 23:33
Igor Seletskiy
Our version (same as redhat) doesn't have any of these dmesg messages. so - pti_enabled is the official way to check a patch appl... Read More
Friday, 05 January 2018 18:30
  93851 Hits
  148 Comments
The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare
Tags:

The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare

The Symlink Protection patchset is available for free for CentOS 6 & 7, even if you are not running KernelCare
A few weeks ago we released the KernelCare "Extra" Patchset with the security fixes and the symlink protection available to all KernelCare customers running CentOS kernels. Today we are pleased to share that you can get the Symlink Protection Patchset for CentOS 6 and 7 at no cost, even if you don’t have licenses of KernelCare. We’ve been discussin...
Continue reading
Recent Comments
Igor Seletskiy
sorry, it should have been: kcarectl --set-patch-type free
Thursday, 05 October 2017 00:49
Igor Seletskiy
I am sorry, I don't know what you mean.
Thursday, 05 October 2017 21:35
Igor Seletskiy
CloudLinux kernel has it built in out of the box / it is not needed on CloudLinux servers.
Friday, 06 October 2017 14:18
  28292 Hits
  108 Comments
Backup Survey: What Backup Solution Do You Use?

Backup Survey: What Backup Solution Do You Use?

Backup Survey: What Backup Solution Do You Use?
Today I’d like to ask for your help in this short but an important survey . We’d like to know more about your server backup solutions and preferences - it will help us better understand the needs of the hosting market and our product direction. It will take less than a minute to complete as it contains only a few questions. This survey will not ask...
Continue reading
  3005 Hits
  0 Comments
The KernelCare "Extra" Patchset for CentOS 6 & 7 with symlink protection is here

The KernelCare "Extra" Patchset for CentOS 6 & 7 with symlink protection is here

The KernelCare "Extra" Patchset for CentOS 6 & 7 with symlink protection is here
The KernelCare extra patchset includes all the security fixes from KernelCare for CentOS 6 and CentOS 7, as well as the symlink protection against a symlink race. A symlink race attack is often used against shared hosting servers. It allows a malicious user to serve files that belong to other users by creating a symbolic link to those files. It is ...
Continue reading
Recent Comments
Igor Seletskiy
Make sure you have the latest version of kernelcare. Do yum update kernelcare --> it should help.
Wednesday, 23 August 2017 02:07
Igor Seletskiy
It is only for CentOS. CloudLinux OS doesn't need that patch, as it is already included into native kernel.
Wednesday, 23 August 2017 02:08
Igor Seletskiy
kcarectl --set-patch-type default
Wednesday, 23 August 2017 12:12
  14407 Hits
  17 Comments
New privilege escalation vulnerability found in Linux kernel

New privilege escalation vulnerability found in Linux kernel

New privilege escalation vulnerability found in Linux kernel
A race condition in Linux kernel was disclosed today, August 3rd, 2017 (see CVE-2017-7533 ). It can be exploited to allows an unprivileged local user to gain root access to the server. Currently, there is an existing working exploit allowing privileges escalation for 32 bit kernels. It is unclear whether such exploit exists for 64 bit kernels, but ...
Continue reading
  6076 Hits
  0 Comments
LibCare, a toolset for livepatching of user space software, is now available as Open Source on GitHub
Tags:

LibCare, a toolset for livepatching of user space software, is now available as Open Source on GitHub

LibCare, a toolset for livepatching of user space software, is now available as Open Source on GitHub
I am super thrilled to let you know that we have published a toolset for livepathing of user space software , called LibCare, to GitHub. It is released under the GPL2 license and allows software developers to develop and apply patches to their running software without the need to restart it. Similar to our commercially available KernelCare service,...
Continue reading
  4350 Hits
  1 Comment