Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

salt security

API Security Best Practices Guide

Feb 1, 2023 By Salt Security
API security has emerged as a key priority for protecting vital data and services. It's also an area where many companies lack expertise. Salt Security has compiled this list of API security best practices, drawn from field experience and customer feedback, to help guide you on your API security journey. These API security best practices fall into multiple focus areas, including: Download this guide to obtain a comprehensive list of best practices and guidance to secure your APIs throughout their lifecycle.
Get Guide
cyberark

Securing The Enterprise's Cloud Assets on Amazon Web Services (AWS)

Feb 1, 2023 By CyberArk
Regardless of where enterprises are in their cloud journey, CyberArk's goal is to enable enterprises to protect their assets in AWS by providing powerful solutions for securing privileged access at each stage of their journey. Download this white paper to learn how CyberArk Identity Security solutions can be deployed with CyberArk's automation capabilities and used to proactively protect privileged access and detect threats in real-time in AWS environments.
Get White Paper
netskope

An Overview of the Netskope AWS CloudTrail Lake Integration

Jan 31, 2023 By David Willis In Netskope

Following the recent AWS CloudTrail Lake announcement, this blog will guide you through how to configure a Netskope Cloud Exchange instance to send Netskope user access logs to AWS CloudTrail Lake using the Cloud Log Shipper (CLS) module and the CLS plugin developed for CloudTrail Lake. Cloud Exchange (deployed in Amazon ECS on Fargate) can be obtained from the AWS Marketplace.

Read Post
appknox

Ultimate Guide to OWASP API Top 10

Jan 31, 2023 By John Iwuozor In Appknox

The OWASP API Top 10 is a list of common vulnerabilities found in APIs. OWASP created it as a resource for developers, testers, and security professionals to help them understand how to protect against API threats. Many people think that APIs are just another type of web application, but they're not; they have their own set of risks and challenges that need to be addressed. A simple API call can result in a data breach that could have lasting consequences for your business.

Read Post
CrowdStrike

How Adversaries Can Persist with AWS User Federation

Jan 30, 2023 By Vaishnav Murthy - Joel Eng In CrowdStrike

In recent incident response investigations, CrowdStrike Services has observed adversaries use the sts:GetFederationToken API call to create federated sessions from IAM users. In this scenario, the federated session inherits permissions from the base IAM user. Perhaps surprising to many incident responders, the privileges and access of the federated session are not revoked when the base IAM user’s credentials are deactivated.

Read Post

Two-Factor Authentication (2FA) Setup on iOS

Jan 27, 2023 By Keeper In Keeper
Introduction For added security on supported websites and apps, use Keeper to store two-factor authentication codes. When setting up 2FA on a site or app, Keeper for iOS can serve as your time-based one-time password or “TOTP” generator. This video will review how users can easily add a two-factor verification setup code or secret key from a website or app to a new or existing Keeper record.
View Video

Wallarm - Addressing CISOs Priorities In 2023: Wallarm API Security Democast

Jan 26, 2023 By Wallarm In Wallarm
Modern API security needs to be able to protect against modern challenges. Whether you are protecting brand-new APIs or legacy web apps, Wallarm provides key components to secure your business against emerging threats. Join Tim Ebbers, Field CTO, and Stepan Ilyin, Co-Founder, for a demo of the Wallarm platform, to learn more about the key components and recent feature enhancements.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.