Cybersecurity Essentials: Protecting Internet-Facing Assets from Attacks

By /

Listen to this Post

Featured Image

Introduction

The recent cyberattack on The Washington Post, which compromised journalists’ email accounts, underscores the critical need for robust cybersecurity practices. Neglecting basic protections—such as HTTPS enforcement, DNS security, and server hardening—leaves organizations vulnerable to breaches. This article provides actionable steps to secure internet-facing assets, including verified commands and configurations to mitigate risks.

Learning Objectives

  • Understand the importance of HTTPS and how to enforce it.
  • Learn how to audit and secure DNS configurations.
  • Implement server hardening techniques to reduce attack surfaces.
  • Detect and mitigate common vulnerabilities in internet-facing assets.
  • Apply threat intelligence to monitor and defend against attacks.

You Should Know

1. Enforcing HTTPS with Let’s Encrypt

Command (Linux):

sudo certbot --apache -d yourdomain.com

Step-by-Step Guide:

1. Install Certbot:

sudo apt install certbot python3-certbot-apache

2. Run Certbot to obtain and install an SSL certificate.

3. Verify auto-renewal is enabled:

sudo systemctl status certbot.timer

Why It Matters: HTTPS prevents data interception and ensures content integrity.

2. Auditing DNS Security with DNSSEC

Command (Linux):

dig +dnssec yourdomain.com

Step-by-Step Guide:

  1. Check if DNSSEC is enabled for your domain.
  2. Configure DNSSEC via your DNS provider (e.g., Cloudflare, AWS Route 53).

3. Validate signatures:

delv @8.8.8.8 yourdomain.com

Why It Matters: DNSSEC prevents DNS spoofing and cache poisoning.

3. Hardening Web Servers with Security Headers

Apache Configuration:

Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains" 
Header set X-Content-Type-Options "nosniff" 
Header set X-Frame-Options "DENY"

Step-by-Step Guide:

1. Edit your Apache or Nginx configuration file.

  1. Add security headers to mitigate XSS, clickjacking, and MIME sniffing.

3. Test headers using:

curl -I https://yourdomain.com

Why It Matters: Security headers reduce client-side exploitation risks.

4. Detecting Open Ports with Nmap

Command (Linux/Windows):

nmap -sV -T4 yourdomain.com

Step-by-Step Guide:

  1. Install Nmap (sudo apt install nmap or download from nmap.org).

2. Scan for open ports and services.

3. Close unnecessary ports (e.g., FTP, Telnet).

Why It Matters: Unnecessary open ports are common attack vectors.

5. Mitigating Email Attacks with DMARC/DKIM/SPF

DNS Record Example (SPF):

v=spf1 include:_spf.google.com ~all

Step-by-Step Guide:

1. Configure SPF to authorize legitimate email senders.

2. Set up DKIM for email signing.

3. Enforce DMARC policies (`p=quarantine` or `p=reject`).

Why It Matters: Prevents email spoofing and phishing attacks.

6. Securing SSH Access

Command (Linux):

sudo nano /etc/ssh/sshd_config

Key Configurations:

PermitRootLogin no 
PasswordAuthentication no 
AllowUsers your_username

Step-by-Step Guide:

1. Disable root login and password authentication.

2. Use SSH keys (`ssh-keygen -t ed25519`).

3. Restart SSH:

sudo systemctl restart sshd

Why It Matters: Reduces brute-force and credential-based attacks.

7. Monitoring Logs for Intrusions

Command (Linux):

sudo journalctl -u sshd --since "1 hour ago"

Step-by-Step Guide:

1. Check failed login attempts.

2. Set up automated alerts (e.g., Fail2Ban).

  1. Centralize logs with SIEM tools (e.g., Splunk, ELK Stack).

Why It Matters: Early detection prevents further exploitation.

What Undercode Say

  • Key Takeaway 1: Basic security hygiene (HTTPS, DNS hardening, SSH security) prevents 90% of breaches.
  • Key Takeaway 2: Proactive monitoring and threat intelligence are critical for resilience.

Analysis: The Washington Post breach highlights systemic failures in securing internet-facing assets. Organizations must adopt a zero-trust approach, ensuring encryption, access controls, and continuous monitoring. Cyber resilience is not optional—it’s a necessity in an era of state-sponsored and criminal threats.

Prediction

Future attacks will increasingly exploit overlooked vulnerabilities (e.g., misconfigured APIs, legacy protocols). Organizations that prioritize foundational security will mitigate risks, while those that delay will face reputational and operational damage.

IT/Security Reporter URL:

Reported By: Andy Jenkinson – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

Join Our Cyber World:

💬 Whatsapp | 💬 Telegram

Related Posts: