I encountered a challenge today where a linux server was compromised. The server is sitting directly on the internet, no firewall, iptables, anything… It’s that way for a reason.. Had email notification of a succesful login been in place, we’d have known earlier that something was amuck… At any [...]