Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

DevOps

ReBAC to the Future! Building Policy on Neo4j Data with Enterprise OPA

Relationship-based Access Control (ReBAC) is a common requirement when applying Policy as Code controls in modern applications. Consider sharing a document with a collaborator in a different organization. As the collaborator is in another organization, it might be hard to grant them a pre-defined internal role without granting more permissions than needed – if indeed an external identity can be bound to an internal role at all. This is where ReBAC comes in.

How Dynamic Analysis Helps You Enhance Automation for DevSecOps

DevSecOps, also known as secure DevOps, represents a mindset in software development that holds everyone accountable for application security. By fostering collaboration between developers and IT operations and directing collective efforts towards better security decision-making, development teams can deliver safer software with greater speed and efficiency. Despite its merits, implementing DevSecOps can introduce friction into the development process.

Kubernetes 1.29: The Security Perspective

Kubernetes 1.29 will be the last release from the Kubernetes team for 2023. The new release has 49 enhancements, with a multitude of beta and stable ones in addition to a high number of bug fixes. As Kubernetes security professionals, we explored the release to find the most notable security-centric features and improvements. This blog is tailored for those with a keen eye for security, aiming to break down how these changes will impact and enhance the security posture of Kubernetes clusters.

Autumn's Arrival: Unpacking CloudCasa's Innovative Feature Update

As the season shifts, we at CloudCasa are excited to share a fresh batch of updates with you. This autumn, we’re rolling out new features designed to bring more power and flexibility to your data protection strategy. From the convenience of our new Self-Hosted option to the seamless integration with Velero, our latest offerings are tailored to support enterprises in strengthening their data resilience.

Have Your Secrets Leaked? It's time to find out!

We understand the struggle of securing sensitive data—API tokens, cloud credentials, and database URLs have a knack for slipping into the public eye, be it in code repositories, CI job logs, or unexpected corners like Jira tickets. We've been championing this cause since 2017, scouring over a billion public GitHub commits last year alone and uncovering a staggering 10 million in 2022. We've gone beyond reports, beyond thought leadership, to unveil a real solution: HasMySecretLeaked!

Teleport OSS will relicense to AGPLv3

We began working on Teleport with a vision to make trusted computing a reality for everyone, even for people without large budgets. That’s why we open sourced Teleport in 2015. Achieving this lofty goal takes a lot of work, which in turn requires capital. That is why we founded Teleport as a company and started to offer premium features required by enterprises. Thus, we must strike a delicate balance between benefiting the community and succeeding as a business.