Security Misconfiguration
Understand common security misconfigurations such as default passwords and overly broad server listening. Learn practical steps to secure admin logins, reduce attack surfaces, and enforce strong password hygiene to protect distributed systems.
We'll cover the following...
Admin logins
How many times have you typed “admin/admin” as a login? It may seem ridiculous, but default passwords are a serious problem. Attackers have entered applications, network devices, and databases by using the default, out-of-the-box admin login. This is just one kind of security misconfiguration.
Security misconfiguration usually takes the form of omission. Servers enable unneeded features by default. We forget (or don’t know) to disable them and thereby leave an unconfigured, unmonitored entry point open. Admin consoles are a common source of problems. Seek them out and force good password hygiene. Never allow a default password on a production server. Cast a wary eye on containers, especially if building on an image that includes applications. ...