Michael's weekly wrap 27 January 2022

I am a few days behind on my weekly wrap. I’ll post more over the weekend.

• Securing GitHub organizations - An excellent guide to securing GitHub organizations.
• I read the federal government’s Zero-Trust Memo so you don’t have to - A good read on the Zero-Trust Memo. Note that encrypted DNS is now a requirement
• IETF Draft: Best practices for password hashing and storage - An IETF draft memo on how to store passwords securely.
• TLS-ALPN-01 issued certificates being revoked - I’ll write about this more next week, but in-short, a mess.
• CVE-2022-0185: Detecting and mitigating Linux Kernel vulnerability causing container escape - An interesting container escape vulnerability.