Ask HN: How are you protecting your apps and infra after recent vulnerabilities?

2 points__warlord__2 comments

Recently, there has been a rise in major security incidents, hacks, and zero-day vulnerabilities.

Are you actively doing something to prevent your systems from being exploited, and how are you ensuring you haven't already suffered a data breach?

To be honest, I'm scrambling my head thinking about all the possibilities, and it's making me a bit anxious.

View on HN

I don't think anything unique should be done now, solutions are the same as always: keep your infra and software up-to-date. Configure dependabot or similar, make updates weekly, enforce 2FA everywhere, instruct the team to be more responsible, make backups (and probably backups of backups) and be consistent in all these boring chores.

I still believe that majority of recent incidents were related to human factor, all these "we'll update it somewhere next sprint or next year" kind of people sitting on Python 2.7 / PHP 7 just paid for their irresponsibility, unfortunately. These days it's just easier to reach these vulnerable places

Patching

Reply on news.ycombinator.com