The rise in global connectivity and usage of cloud services have augmented cyber attacks. Cybercriminals are getting smarter by the day. Businesses can no longer depend exclusively on cyber security solutions like anti-virus software and firewalls. It is now crucial to put in place a highly advanced cyber security strategy to fortify your digital assets.
Access Permission
While cloning a new Drupal project in my local machine using ubuntu terminal, I got an error message like, "WARNING: UNPROTECTED PRIVATE KEY FILE!, Permissions 0664 for '/home/user/.ssh/id_rsa' are too open". I found a solution for this type of error like change the file permission of id_rsa file.
I came across with an issue in one of the Drupal site that if an anonymous users knows the path of the file(example.org/sites/default/files/file1), he can view as well as download the file without any access to site. This looked strange as the sites files are been traced out by anonymous users and can breakout site admin credentials which are private.