Operations | Monitoring | ITSM | DevOps | Cloud

Detecting the Sudo Baron Samedit Vulnerability and Attack

On January 26th, 2021, Qualys reported that many versions of SUDO (1.8.2 to 1.8.31p2 and 1.9.0 to 1.9.5p1) are vulnerable (CVE-2021-3156) to a buffer overflow attack dubbed Baron Samedit that can result in privilege escalations. Qualys was able to use this vulnerability to gain root on at least Ubuntu 20.04 (Sudo 1.8.31), Debian 10 (Sudo 1.8.27), and Fedora 33 (Sudo 1.9.2), some of the most modern and widely used Linux operating systems.

InfluxData is SOC 2 Certified

At InfluxData, we focus on our customers’ productivity — time to awesome, as we call it. Usually this is about product capabilities — InfluxDB’s features, speed, scalability, etc. But for some, your project will grow in size to the point where you need to purchase InfluxDB. And in some cases, you’ll need your compliance and/or security teams to sign off on the purchase.

SLA vs SLI vs SLO: Know the differences between them.

SLA basically means a Service Level Agreement. It’s a formal agreement between you and your customer. It basically describes the reliability of your product/service so you can have a formal agreement which basically says our product will be online 99 percent of the time annually and if we fail to achieve that objective we will give 30% of your annual license fee back. SLA’s also include penalties in the contract.

How PA Server Monitor Can Monitor CPU Temperature

High CPU temperature is a common issue with laptops and desktops, and it shouldn’t be ignored. If a computer system routinely generates high temps—above 80°C is usually considered undesirable—it can begin experiencing poor system performance. Over time, heat may progressively damage CPU components in addition to causing the system to lock up or shut down.

Track Session Data with Sentry for JavaScript

It’s January 2021 and you’ve probably broken five out of six New Year’s Resolutions. I don’t want to be the reason for breaking your last one, so I’ll cut right to the chase. We just released an update to our JavaScript SDK with the ability to track the health of your releases and support for Web Assembly. Still with me? Great.

VirtualMetric stepped into a partnership with OCS Distribution, the leading broadline technology distributor in Russia

VirtualMetric, an all-in-one monitoring solution, announces a partnership with OCS Distribution, the leading broadline* technology distributor in Russia. This partnership will provide over 7000 resellers throughout Russia with access to the VirtualMetric monitoring suite. With over two decades of experience and 26 offices across Russia, OCS Distribution became one of the leading distributors in the Russian IT market.

How to get started quickly with the new synthetic monitoring feature in Grafana Cloud

We recently launched synthetic monitoring, which helps you understand your users’ experience and improve website performance by proactively monitoring your services. This feature, which surfaces the powerful capabilities of Prometheus blackbox exporter, is the next iteration of worldPing.

Managing Compliance Drift: Break the endless scan-fix-drift cycle

In the first post of this series, we provided guidance for managing the many facets of a compliance program — taming the “compliance beast.” While there are many factors to consider, I’d argue that none is more essential than a reliable means of enforcement.

Is Alert Fatigue Hindering Your DevOps Work?

This year, you tell yourself, you are going to be prepared! You will arm yourself with a new status page, and create web monitoring for every important service in your arsenal. Like the proverbial Eye of Sauron, nothing will escape your omnipotence. But too many tools in your set can contribute to alert fatigue. Alert fatigue occurs when your team starts to feel like they are always on call. They might already secretly feel this way.