Hugo | DevOps | Cybersecurity 🇱🇻
@hugovalters.bsky.social
Tech Lead & DevSecOps. 🛡️ Cybersecurity | 💻 IT Tutorials | 🏴☠️ Ethical Hacking | ⚙️ Tech Reviews. Learn, secure, and explore cutting-edge IT solutions! 👇
https://www.valtersit.com/links
https://www.valtersit.com/links
Pinned
CVE Intelligence API — api.valtersit.com
Real-time CVE data with pending_fields transparency. Pay per credit or subscribe. Try the sandbox instantly — no signup.
www.valtersit.com
Built a CVE API that's honest about its own data lag.
Every response includes pending_fields — which fields NVD hasn't filled on that CVE yet. Plus exploit tracking + Sigma/YARA/Wazuh/Elastic rules, one call instead of five.
10 real CVEs, no signup: www.valtersit.com/cve/pricing/ #CVE #cybersecurity
Every response includes pending_fields — which fields NVD hasn't filled on that CVE yet. Plus exploit tracking + Sigma/YARA/Wazuh/Elastic rules, one call instead of five.
10 real CVEs, no signup: www.valtersit.com/cve/pricing/ #CVE #cybersecurity
Scraping NVD means rate limits, pagination, and schema drift you own forever. The ValtersIT CVE API returns normalized CVE, vendor, and exploit data in one call: curl https://valtersit.com/api/cve/CVE-2024-3094 Pricing: https://www.valtersit.com/cve/pricing/
September 16, 2026 at 3:20 AM
Scraping NVD means rate limits, pagination, and schema drift you own forever. The ValtersIT CVE API returns normalized CVE, vendor, and exploit data in one call: curl https://valtersit.com/api/cve/CVE-2024-3094 Pricing: https://www.valtersit.com/cve/pricing/
173 lines of Python that turns sample JSON into a reusable schema. Handy for microservices and data pipelines validating payloads. Run: python3 schema_gen.py --input samples.json https://www.valtersit.com/python/json-schema-generator-from-sample-data/
#python #json #devtools
#python #json #devtools
September 16, 2026 at 3:20 AM
173 lines of Python that turns sample JSON into a reusable schema. Handy for microservices and data pipelines validating payloads. Run: python3 schema_gen.py --input samples.json https://www.valtersit.com/python/json-schema-generator-from-sample-data/
#python #json #devtools
#python #json #devtools
Audit AWS IAM for ISO 27001 A.9: Bash + AWS CLI + jq to flag access keys older than 90 days, unrotated creds, and missing MFA. Outputs a structured JSON https://www.valtersit.com/vault/aws-iam-risk-assessment-automation-for-iso-27001-a9-access-c-316b3c/ #aws #iam #ValtersIT
September 16, 2026 at 2:50 AM
Audit AWS IAM for ISO 27001 A.9: Bash + AWS CLI + jq to flag access keys older than 90 days, unrotated creds, and missing MFA. Outputs a structured JSON https://www.valtersit.com/vault/aws-iam-risk-assessment-automation-for-iso-27001-a9-access-c-316b3c/ #aws #iam #ValtersIT
34.131.81.26 is hitting our feeds as mixed abuse, hosted on Google Cloud infra. Hosting-org abuse often means easy rotation, so block it before it moves. Confidence only 45, but one feed already tracks it. https://www.valtersit.com/threat-ip/34.131.81.26/
#ThreatIntel #InfoSec
#ThreatIntel #InfoSec
September 16, 2026 at 2:21 AM
34.131.81.26 is hitting our feeds as mixed abuse, hosted on Google Cloud infra. Hosting-org abuse often means easy rotation, so block it before it moves. Confidence only 45, but one feed already tracks it. https://www.valtersit.com/threat-ip/34.131.81.26/
#ThreatIntel #InfoSec
#ThreatIntel #InfoSec
Random 502s from Traefik usually mean it picked the wrong Docker network IP. Here's the fix for containers on multiple networks.
https://www.valtersit.com/guides/docker/traefik-reverse-proxy-and-the-docker-502-bad-gateway-mysticism/
#traefik #docker #devops
https://www.valtersit.com/guides/docker/traefik-reverse-proxy-and-the-docker-502-bad-gateway-mysticism/
#traefik #docker #devops
September 16, 2026 at 2:20 AM
Random 502s from Traefik usually mean it picked the wrong Docker network IP. Here's the fix for containers on multiple networks.
https://www.valtersit.com/guides/docker/traefik-reverse-proxy-and-the-docker-502-bad-gateway-mysticism/
#traefik #docker #devops
https://www.valtersit.com/guides/docker/traefik-reverse-proxy-and-the-docker-502-bad-gateway-mysticism/
#traefik #docker #devops
Your ZimaBoard's Celeron N3450 will choke on Docker if you let it. Here's how to tune Linux and every container for brutal efficiency on 4 cores.
https://www.valtersit.com/guides/zima/zimaboard-home-server-setup-pushing-the-celeron-to-its-limits/
#ZimaBoard #HomeServer #Linux
https://www.valtersit.com/guides/zima/zimaboard-home-server-setup-pushing-the-celeron-to-its-limits/
#ZimaBoard #HomeServer #Linux
September 16, 2026 at 1:50 AM
Your ZimaBoard's Celeron N3450 will choke on Docker if you let it. Here's how to tune Linux and every container for brutal efficiency on 4 cores.
https://www.valtersit.com/guides/zima/zimaboard-home-server-setup-pushing-the-celeron-to-its-limits/
#ZimaBoard #HomeServer #Linux
https://www.valtersit.com/guides/zima/zimaboard-home-server-setup-pushing-the-celeron-to-its-limits/
#ZimaBoard #HomeServer #Linux
Probe SMTP auth + STARTTLS with blackbox_exporter: connect to 587, read banner, EHLO, negotiate TLS, EHLO again inside the tunnel to verify AUTH. Full config https://www.valtersit.com/vault/smtp-authentication-and-starttls-capabilities-probe-f2b421/
#blackbox #smtp #ValtersIT
#blackbox #smtp #ValtersIT
September 16, 2026 at 1:50 AM
Probe SMTP auth + STARTTLS with blackbox_exporter: connect to 587, read banner, EHLO, negotiate TLS, EHLO again inside the tunnel to verify AUTH. Full config https://www.valtersit.com/vault/smtp-authentication-and-starttls-capabilities-probe-f2b421/
#blackbox #smtp #ValtersIT
#blackbox #smtp #ValtersIT
Restricting Dangerous Pub/Sub Commands via Configuration Hardening
Disables or renames potentially dangerous or noisy Pub/Sub pattern matching commands within the server configuration file.
https://www.valtersit.com/vault/restricting-dangerous-pubsub-commands-via-configuration-hard-590492/
Disables or renames potentially dangerous or noisy Pub/Sub pattern matching commands within the server configuration file.
https://www.valtersit.com/vault/restricting-dangerous-pubsub-commands-via-configuration-hard-590492/
September 16, 2026 at 1:21 AM
Restricting Dangerous Pub/Sub Commands via Configuration Hardening
Disables or renames potentially dangerous or noisy Pub/Sub pattern matching commands within the server configuration file.
https://www.valtersit.com/vault/restricting-dangerous-pubsub-commands-via-configuration-hard-590492/
Disables or renames potentially dangerous or noisy Pub/Sub pattern matching commands within the server configuration file.
https://www.valtersit.com/vault/restricting-dangerous-pubsub-commands-via-configuration-hard-590492/
VestaCP died and left a million servers exposed. HestiaCP is the lean fork that survived. A look at why it's the sane pick over cPanel bloat and https://www.valtersit.com/guides/hosting/hestiacp-the_minimalists_revenge_and_the_true_heir_to_vestacp/ #hestiacp #linux #sysadmin
September 16, 2026 at 1:20 AM
VestaCP died and left a million servers exposed. HestiaCP is the lean fork that survived. A look at why it's the sane pick over cPanel bloat and https://www.valtersit.com/guides/hosting/hestiacp-the_minimalists_revenge_and_the_true_heir_to_vestacp/ #hestiacp #linux #sysadmin
Lock down Chaos Monkey with an IAM least-privilege policy. Allow EC2/ASG discovery, but gate TerminateInstances behind opt-in tags so only tagged instances https://www.valtersit.com/vault/provisioning-aws-iam-leastprivilege-policy-for-chaos-monkey--f492a8/
#aws #iam #chaos
#aws #iam #chaos
September 15, 2026 at 9:50 PM
Lock down Chaos Monkey with an IAM least-privilege policy. Allow EC2/ASG discovery, but gate TerminateInstances behind opt-in tags so only tagged instances https://www.valtersit.com/vault/provisioning-aws-iam-leastprivilege-policy-for-chaos-monkey--f492a8/
#aws #iam #chaos
#aws #iam #chaos
186.96.194.192 shows mixed malicious activity at 45% confidence, tracked by one feed. For firewall rules: block it or log it, don't ignore it. Details: https://www.valtersit.com/threat-ip/186.96.194.192/ #ThreatIntel #InfoSec
September 15, 2026 at 9:30 PM
186.96.194.192 shows mixed malicious activity at 45% confidence, tracked by one feed. For firewall rules: block it or log it, don't ignore it. Details: https://www.valtersit.com/threat-ip/186.96.194.192/ #ThreatIntel #InfoSec
Most IT folks still haven't tried NTFY. It's free, it kills clunky alert setups, and it gives you your time back. If you scrolled past this one, circle back: https://www.youtube.com/watch?v=NtlztHT-sRw
September 15, 2026 at 9:30 PM
Most IT folks still haven't tried NTFY. It's free, it kills clunky alert setups, and it gives you your time back. If you scrolled past this one, circle back: https://www.youtube.com/watch?v=NtlztHT-sRw
Windows: 125 CVEs, 6 critical, avg CVSS 7.23, 29% unpatched. Biggest OS attack surface on earth. Patch faster. https://www.valtersit.com/vendors/windows/ #cybersecurity #infosec #Windows
September 15, 2026 at 8:50 PM
Windows: 125 CVEs, 6 critical, avg CVSS 7.23, 29% unpatched. Biggest OS attack surface on earth. Patch faster. https://www.valtersit.com/vendors/windows/ #cybersecurity #infosec #Windows
CVE-2026-80981 Linux kernel use-after-free in net/smc smc_llc_srv_add_link. CVSS N/A, patch status unknown. Update your kernel now. https://www.valtersit.com/cve/CVE-2026-80981/ #CVE #infosec #Linux
September 15, 2026 at 8:50 PM
CVE-2026-80981 Linux kernel use-after-free in net/smc smc_llc_srv_add_link. CVSS N/A, patch status unknown. Update your kernel now. https://www.valtersit.com/cve/CVE-2026-80981/ #CVE #infosec #Linux
GlusterFS arbiter volumes: 2 data bricks + 1 metadata-only arbiter brick prevents split-brain without tripling storage. Provisioning walkthrough for RHEL https://www.valtersit.com/vault/provisioning-replicated-volume-with-arbiter-to-prevent-split-35bf35/ #glusterfs #storage #ha
September 15, 2026 at 8:00 PM
GlusterFS arbiter volumes: 2 data bricks + 1 metadata-only arbiter brick prevents split-brain without tripling storage. Provisioning walkthrough for RHEL https://www.valtersit.com/vault/provisioning-replicated-volume-with-arbiter-to-prevent-split-35bf35/ #glusterfs #storage #ha
Your containers can make hundreds of syscalls they never need. That's how escapes start. This guide shows AppArmor and seccomp profiles https://www.valtersit.com/guides/security/apparmor-and-seccomp-profiles-restricting-container-system-calls/ #AppArmor #seccomp #Kubernetes
September 15, 2026 at 7:50 PM
Your containers can make hundreds of syscalls they never need. That's how escapes start. This guide shows AppArmor and seccomp profiles https://www.valtersit.com/guides/security/apparmor-and-seccomp-profiles-restricting-container-system-calls/ #AppArmor #seccomp #Kubernetes
180 lines of Python using great-expectations to validate datasets against YAML rule sets and output reports. For data engineers who want checks in CI without building a https://www.valtersit.com/python/data-quality-rules-engine/ #python #dataengineering #greatexpectations
September 15, 2026 at 7:50 PM
180 lines of Python using great-expectations to validate datasets against YAML rule sets and output reports. For data engineers who want checks in CI without building a https://www.valtersit.com/python/data-quality-rules-engine/ #python #dataengineering #greatexpectations
73.43.203.154 is flagged as a mixed threat with low confidence (45), tracked by one independent feed. Location unknown. Check your logs: https://www.valtersit.com/threat-ip/73.43.203.154/ #ThreatIntel #InfoSec #Cybersecurity
September 15, 2026 at 7:50 PM
73.43.203.154 is flagged as a mixed threat with low confidence (45), tracked by one independent feed. Location unknown. Check your logs: https://www.valtersit.com/threat-ip/73.43.203.154/ #ThreatIntel #InfoSec #Cybersecurity
Configuring Client-to-ProxySQL and Proxy-to-Backend TLS Encryption
ProxySQL acts as an intermediate TLS endpoint, terminating SSL/TLS connections from frontend application clients and
https://www.valtersit.com/vault/configuring-clienttoproxysql-and-proxytobackend-tls-encrypti-dc0f8e/
ProxySQL acts as an intermediate TLS endpoint, terminating SSL/TLS connections from frontend application clients and
https://www.valtersit.com/vault/configuring-clienttoproxysql-and-proxytobackend-tls-encrypti-dc0f8e/
September 15, 2026 at 7:21 PM
Configuring Client-to-ProxySQL and Proxy-to-Backend TLS Encryption
ProxySQL acts as an intermediate TLS endpoint, terminating SSL/TLS connections from frontend application clients and
https://www.valtersit.com/vault/configuring-clienttoproxysql-and-proxytobackend-tls-encrypti-dc0f8e/
ProxySQL acts as an intermediate TLS endpoint, terminating SSL/TLS connections from frontend application clients and
https://www.valtersit.com/vault/configuring-clienttoproxysql-and-proxytobackend-tls-encrypti-dc0f8e/
CVE-2026-80979 Linux kernel net/smc: use-after-free via smc_conn_free() when lgr termination races conn teardown. CVSS N/A, no patch confirmed. Verify your kernel build and update immediately. https://www.valtersit.com/cve/CVE-2026-80979/ #CVE #infosec #Linux
September 15, 2026 at 7:20 PM
CVE-2026-80979 Linux kernel net/smc: use-after-free via smc_conn_free() when lgr termination races conn teardown. CVSS N/A, no patch confirmed. Verify your kernel build and update immediately. https://www.valtersit.com/cve/CVE-2026-80979/ #CVE #infosec #Linux
Block unsafe images at the API server. Register a ValidatingWebhookConfiguration so Aqua checks scan status, CVEs, and signatures before Pods are https://www.valtersit.com/vault/configuring-kubernetes-admission-controller-webhook-for-imag-83a7ce/ #kubernetes #aqua #ValtersIT
September 15, 2026 at 6:30 PM
Block unsafe images at the API server. Register a ValidatingWebhookConfiguration so Aqua checks scan status, CVEs, and signatures before Pods are https://www.valtersit.com/vault/configuring-kubernetes-admission-controller-webhook-for-imag-83a7ce/ #kubernetes #aqua #ValtersIT
Clicking dedup in Proxmox or TrueNAS feels like free disk space. Then the DDT eats your RAM and IOPS flatline. Here is how ZFS dedup really works and https://www.valtersit.com/guides/databases/zfs-deduplication-the-fastest-way-to-murder-your-servers-ram/ #ZFS #Proxmox #sysadmin
September 15, 2026 at 6:20 PM
Clicking dedup in Proxmox or TrueNAS feels like free disk space. Then the DDT eats your RAM and IOPS flatline. Here is how ZFS dedup really works and https://www.valtersit.com/guides/databases/zfs-deduplication-the-fastest-way-to-murder-your-servers-ram/ #ZFS #Proxmox #sysadmin
Waits for Docker Compose services to actually be healthy, not just created. 177 lines, intermediate. Handy in deploy pipelines.
https://www.valtersit.com/python/docker-compose-health-checker/
#python #docker #deployment
https://www.valtersit.com/python/docker-compose-health-checker/
#python #docker #deployment
September 15, 2026 at 6:20 PM
Waits for Docker Compose services to actually be healthy, not just created. 177 lines, intermediate. Handy in deploy pipelines.
https://www.valtersit.com/python/docker-compose-health-checker/
#python #docker #deployment
https://www.valtersit.com/python/docker-compose-health-checker/
#python #docker #deployment
Still Running SMBv1? You're Basically Inviting WannaCry to Dinner — hands-on guide for sysadmins. #cybersecurity #networking #windows
https://www.valtersit.com/guides/security/still-running-smbv1-you_re-basically-inviting-wannacry-to-dinner/
https://www.valtersit.com/guides/security/still-running-smbv1-you_re-basically-inviting-wannacry-to-dinner/
September 15, 2026 at 6:00 PM
Still Running SMBv1? You're Basically Inviting WannaCry to Dinner — hands-on guide for sysadmins. #cybersecurity #networking #windows
https://www.valtersit.com/guides/security/still-running-smbv1-you_re-basically-inviting-wannacry-to-dinner/
https://www.valtersit.com/guides/security/still-running-smbv1-you_re-basically-inviting-wannacry-to-dinner/
138.124.102.188 is flagged as a scanner by one feed, confidence 55, location unknown. Scanner activity often clusters by region, so watch your logs for repeats. Details: https://www.valtersit.com/threat-ip/138.124.102.188/ #ThreatIntel #InfoSec
September 15, 2026 at 5:50 PM
138.124.102.188 is flagged as a scanner by one feed, confidence 55, location unknown. Scanner activity often clusters by region, so watch your logs for repeats. Details: https://www.valtersit.com/threat-ip/138.124.102.188/ #ThreatIntel #InfoSec