BSides Austin 2024: Balancing AI Safety and Real-World Risks
At BSides Austin 2024, experts shared solutions for AI safety, cloud logging, systemic security planning, and effective executive collaboration strategies.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
GitGuardian
Introducing GitGuardian's New Auto-ignore False Positive Playbook
We are proud to announce our new Auto-ignore false positive playbook. We've added this new automated Playbook to the GitGuardian Secret Detection platform to eliminate false positives from your incident queue and help you focus on actionable alerts. In the summer of 2024, we released FP remover, our internal machine learning model, that can significantly reduce false positives by understanding code context and semantics. In our testing it eliminates up to 80% of false positives.
The Ultralytics Supply Chain Attack: Connecting the Dots with GitGuardian's Public Monitoring Data
On December 4, 2024, the Ultralytics Python module was backdoored to deploy a cryptominer. Using GitGuardian’s data, we reconstructed deleted commits, connecting the dots with the initial analysis. This investigation highlights the value of GitGuardian’s data in understanding supply chain attacks.
GitGuardian Launches Comprehensive Non-Human Identities Security Strategy
By bringing order to fragmented secrets ecosystems, GitGuardian secures the lifecycles of Non-Human Identities across environments.
Solving Secrets Management Challenges for NHIs with GitGuardian Multi-Vault Integrations
Struggling with fragmented secrets management and inconsistent vault practices? GitGuardian new multi-vault integrations provide organizations with centralized secrets visibility, reduce blind spots, enforce vault usage and fight against vault sprawl.
Introducing The Next Step in GitGuardian's NHI Security Approach
Discover how GitGuardian is redefining non-human identity (NHI) security with comprehensive secrets security and governance solutions to protect against modern threats.
How to Handle Secrets in CI/CD Pipelines
Securely managing secrets within the CI/CD environment is super important. Mishandling secrets can expose sensitive information, potentially leading to unauthorized access, data breaches, and compromised systems.
A Deep Dive into Celery Task Resilience, Beyond Basic Retries
How to make your Celery tasks more resilient with best practices to prevent workflow interruptions and handle various failure scenarios.
The Hidden Challenges of Automating Secrets Rotation: Why Automatic Credential Rotation Isn't a One-Click Solution
Automating secrets rotation requires maturity and planning. Let's look at how to inventory, scope, and secure credentials without risking downtime or vulnerabilities.
MLOps Done Right: GitGuardian's Battle-Tested Open-Source Stack
Our stack to go from experimenting to production won't have any more secrets for you.