Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Hello CISO - Episode 7: Secrets management and infrastructure

Secrets management isn't just about usernames and passwords anymore, so how do you protect an infrastructure comprised of physical machines, virtual machines, and people all constantly exchanging secrets? In this episode of Hello CISO, Troy's talking secrets: how to protect them, and why the old way of thinking won't cut it anymore. To learn more about 1Password Secrets Automation, the new way to secure, orchestrate, and manage company secrets, visit 1Password.com/secrets.

Stranger Danger: Your JavaScript Attack Surface Just Got Bigger

Building JavaScript applications today means that we take a step further from writing code. We use open-source dependencies, create a Dockerfile to deploy containers to the cloud, and orchestrate this infrastructure with Kubernetes. Welcome - you're a cloud native application developer! As developers, our responsibility has broadened, and more software means more software security concerns for us to address.

Why BreachWatch is the Best Dark Web Monitoring Tool

Dark web monitoring is an important tool that gives businesses and people insight into what information about them is available on the dark web. A dark web monitoring tool works by scanning thousands of websites, searching for your credentials and personal information. However, not all dark web monitoring tools and services are built the same. Different services offer different features when scanning through lists of stolen credentials and personal data.

The Genesis of Trustwave's Advanced Continual Threat Hunt

Trustwave’s recent revamp of its Advanced Continual Threat Hunt (ACTH) platform was inspired by the need to scale to meet a growing client base amid an ever-increasing threat landscape. Now with a patent-pending methodology, the SpiderLabs Threat Hunt team can conduct significantly more hunts and has an unprecedented ability to find more threats.

How to Introduce a New Service Efficiently Using Clean Architecture

‍ Have you ever built a brand-new service on top of an existing bigger system? Why did you decide not to include new features in the existing system? How quickly did your team manage to implement the MVP? From a time perspective, was it a good choice? Is it possible to deliver fast and still keep good architecture and the highest code quality? I’d like to give you some insight into how we approach such challenges at Egnyte.

Windows Security Event Log Best Practices

If your company is like many others, it probably invested heavily in the Microsoft ecosystem. Microsoft has been around since the 1980s, focusing primarily on business technologies. It has a reputation for compatibility which gives you more purchasing options across devices and accessories. Unfortunately, this reach across corporate IT environments means that malicious actors target everything associated with Microsoft.

Take GitHub threats seriously: The largest code-sharing platform is extending your attack surface

In 2021, GitGuardian scanned over 1 billion data points on GitHub.com, and the results were stunning. More than 6 million secrets – think API keys, database connection strings, and private certificates – were exposed on the platform! Even more striking is the share of secrets and sensitive data exposed on the personal repositories of developers or open-source projects, of which SecOps teams lack visibility and control.

CrowdStrike Announces Expanded Service Integrations with AWS

At AWS re:Invent 2022, CrowdStrike announced expanded service integrations with AWS to provide breach protection across your AWS environment, simplified infrastructure management and security consolidation. On January 31, 2023, AWS announced CloudTrail Lake Partner Integrations, with CrowdStrike signing on as a launch partner. With this integration, organizations get the opportunity for a consistent security posture between on-premises workloads and those running in the AWS cloud.