Let’s get some self-respect back
I see a lot of arguments between people who have no clue about the truth behind the topics and points being argued. I miss the old days of the internet being solely for cat videos and pictures of…
Month: January 2017
How to enable Authentication on your MongoDB instance
This is a quick post on enabling authentication on your MongoDB instance, but the first thing you should do is bring the MongoDB inside your network if possible. If it is not exposed externally, there is a far lower…
MRIT – MongoDB Ransom Investigation Tool released on GitHub
I have written a simple multithreaded application used to Shodan exports for open MongoDB instances and report on ransom demands. This tool is on GitHub and is released for free use. The only caveat is that you may…
STOP AND GO SECURE YOUR DATA… NOW!
After doing some research into MongoDB for the company I currently work for, I started looking around at some servers online. What I found was amazing. Database servers almost never need to be exposed on the perimeter of a network, but…
Do your MongoDB admins know what they are doing?
Note: This was originally posted to LinkedIn, but I have moved it over here to go along with the update I posted about the explosion of malicious ransom demands. MongoDB by default does not have very good security…
MongoDB Ransomware Explosion
Recently I posted an article on LinkedIn about MongoDB security… well, it turns out that this has exploded into a big issue. Over the last two weeks malicious hackers have been going crazy with extortion schemes. Hackers are…