Academia CloudSec

Public cloud security is a set of procedures and policies that secure public cloud environments like AWS, Azure, and GCP.

Enterprise cloud security is the comprehensive set of practices, policies, and controls used by enterprises to protect their data, applications, and infrastructure in the cloud.

A data risk assessment is a full evaluation of the risks that an organization’s data poses. The process involves identifying, classifying, and triaging threats, vulnerabilities, and risks associated with all your data.

In this guide, we’ll break down why AI governance has become so crucial for organizations, highlight the key principles and regulations shaping this space, and provide actionable steps for building your own governance framework.

Ziad Ghalleb

dezembro 6, 2024

Code vulnerabilities are weaknesses in software that attackers can exploit, potentially compromising security.

Lauren Place

novembro 27, 2024

This article outlines guidelines and best practices for weaving security into every part of your development and DevOps workflows, focusing on practical techniques that are easy to adopt.

In this post, we’ll bring you up to speed on why the EU put this law in place, what it involves, and what you need to know as an AI developer or vendor, including best practices to simplify compliance.

Ziad Ghalleb

novembro 27, 2024

Application security refers to the practice of identifying, mitigating, and protecting applications from vulnerabilities and threats throughout their lifecycle, including design, development, deployment, and maintenance.

Ziad Ghalleb

novembro 26, 2024

Strengthen applications with secure coding to fix injection flaws, enforce access controls, and follow OWASP best practices.

Swaroop Sham

novembro 26, 2024

Explore how IaC security protects cloud environments by embedding protection into code templates to catch vulnerabilities early.

Greg Zemlin

novembro 26, 2024

Build a strong incident response policy to manage cybersecurity crises with clear roles, compliance steps, and hands-on training.

The short answer is no, AI is not expected to replace cybersecurity or take cybersecurity jobs. It will, however, augment cybersecurity with new tools, methods, and frameworks.

Discover key cloud security standards to protect sensitive data and ensure compliance with frameworks like ISO, SOC 2, and NIST.

Melhore os fluxos de trabalho de desenvolvimento com segurança shift left incorporando testes antecipadamente para detectar vulnerabilidades e acelerar a entrega.

Swaroop Sham

novembro 26, 2024

Saiba como uma Lista de Materiais de Software (SBOM) fortalece a segurança rastreando componentes, identificando vulnerabilidades e garantindo a conformidade.

In this article, we’ll discuss typical cloud security pitfalls and how AWS uses CSPM solutions to tackle these complexities and challenges, from real-time compliance tracking to detailed risk assessment.

Shaked Rotlevi

novembro 22, 2024

In this article, we’ll take a closer look at everything you need to know about data flow mapping: its huge benefits, how to create one, and best practices, and we’ll also provide sample templates using real-life examples.

Data security controls are security policies, technologies, and procedures that protect data from unauthorized access, alteration, or loss

Lauren Place

novembro 22, 2024

Cloud IDEs allow developers to work within a web browser, giving them access to real-time collaboration, seamless version control, and tight integration with other cloud-based apps such as code security or AI code generation assistants.

Ziad Ghalleb

novembro 15, 2024

Application detection and response (ADR) is an approach to application security that centers on identifying and mitigating threats at the application layer.

Swaroop Sham

novembro 8, 2024

Secure SDLC (SSDLC) is a framework for enhancing software security by integrating security designs, tools, and processes across the entire development lifecycle.

Lauren Place

novembro 8, 2024

DAST, or dynamic application security testing, is a testing approach that involves testing an application for different runtime vulnerabilities that come up only when the application is fully functional.

Defense in depth (DiD)—also known as layered defense—is a cybersecurity strategy that aims to safeguard data, networks, systems, and IT assets by using multiple layers of security controls.

IAST (Interactive Application Security Testing) is a security testing method that monitors applications in real-time during runtime to detect vulnerabilities by analyzing code behavior and data flow in live environments.

Open-source software (OSS) software composition analysis (SCA) tools are specialized solutions designed to analyze an application's open-source components and dependencies.

Nicolas Ehrman

novembro 6, 2024

Uma interface de programação de aplicativos, ou API, é um tipo de software que permite a comunicação entre diferentes softwares e serviços.

Shaked Rotlevi

novembro 6, 2024

O gerenciamento de direitos de infraestrutura de nuvem (CIEM) é um processo de segurança que ajuda as organizações a gerenciar e controlar os direitos de acesso aos recursos da nuvem.

With a CNAPP, your team is empowered to pick and choose solutions that best fit your security capability and cost requirements. This article reviews the best open-source CNAPP tools for 2024.

In this post, we’ll find out why the sensitive data discovery process is so important—along with some of the main challenges. We’ll see how companies tackle the daunting task of classifying their data.

Ziad Ghalleb

outubro 31, 2024

Source code security refers to the practice of protecting and securing the source code of an application from vulnerabilities, threats, and unauthorized access.

Swaroop Sham

outubro 30, 2024

Infrastructure as code (IaC) scanning is the process of analyzing the scripts that automatically provision and configure infrastructure.

Uncover the top cloud security issues affecting organizations today. Learn how to address cloud security risks, threats, and challenges to protect your cloud environment.

Shashank Golla

outubro 29, 2024

Cloud security monitoring refers to the continuous observation and analysis of cloud-based resources, services, and infrastructure to detect security threats, vulnerabilities, and compliance risks.

Cloud infrastructure security describes the strategies, policies, and measures that organizations implement to protect cloud-based systems, data, and infrastructure from threats and vulnerabilities.

Ziad Ghalleb

outubro 28, 2024

SecDevOps is essentially DevOps with an emphasis on moving security further left. DevOps involves both the development team and the operations team in one process to improve deployment performance and service customers faster.

Chris Champa

outubro 25, 2024

Open-source software (OSS) incident response (IR) tools are publicly available tools enterprises use to effectively manage and respond to numerous security threats.

Shaked Rotlevi

outubro 25, 2024

Cross-site request forgery (CSRF), also known as XSRF or session riding, is an attack approach where threat actors trick trusted users of an application into performing unintended actions.

Shaked Rotlevi

outubro 25, 2024

Data sprawl refers to the dramatic proliferation of enterprise data across IT environments, which can lead to management challenges and security risks.

Cloud identity security is the practice of safeguarding digital identities and the sensitive cloud infrastructure and data they gatekeep from unauthorized access and misuse.

Shaked Rotlevi

outubro 17, 2024

AI data security is a specialized practice at the intersection of data protection and AI security that’s aimed at safeguarding data used in AI and machine learning (ML) systems.

Open-source intelligence (OSINT) is a framework that involves gathering, analyzing, and interpreting publicly available data to gain insights into cyber threats, adversarial activities, and attack techniques. OSINT identifies innocuous-seeming information that, if analyzed with an attacker’s mindset, could reveal critical loopholes in an enterprise’s security posture.

Vulnerability scanning is an integral component of every vulnerability management program, providing security teams with insights needed to address vulnerabilities before they become attack vectors. When conducted regularly, vulnerability assessments offer asset discovery and visibility, attack surface management, and compliance enforcement.

Greg Zemlin

outubro 14, 2024

Digital forensics is the cybersecurity process of gathering digital evidence and responding to a cyberattack.

Multi Cloud Security is the combination of strategies, controls, and technologies designed to address the complex challenges of a multi cloud environment.

Cloud data security is the comprehensive strategy of preventing data loss or leakage in the cloud from security threats like unauthorized access, data breaches, and insider threats.

The principle of least privilege (PoLP) is a cybersecurity concept in which users, processes, and devices are granted the minimum access and permissions necessary to perform their tasks.

In this article, we will explore the challenges of managing permissions, the risks associated with improper access controls, and how major cloud providers handle permissions. We’ll also take a look at best practices and advanced solutions like cloud infrastructure entitlement management (CIEM).

In this blog post, we’ll explore security measures and continuous monitoring strategies to prevent these leaks, mitigating the risks posed by security vulnerabilities, human error, and attacks.

In this article, we’ll explore what cloud risk management entails and take an in-depth look at the tools that can keep your systems safe.

Defense in depth is often considered a basic concept in any effective security strategy.

Ziad Ghalleb

outubro 4, 2024

Secrets detection is the process of identifying and managing sensitive information like API keys, passwords, and tokens within codebases to prevent unauthorized access and data breaches.

A varredura de vulnerabilidades é o processo de detectar e avaliar falhas de segurança em sistemas, redes e softwares de TI.

Cloud workload security protects workloads as they move across cloud environments through monitoring, access controls, encryption, and segmentation.

LLM models, like GPT and other foundation models, come with significant risks if not properly secured. From prompt injection attacks to training data poisoning, the potential vulnerabilities are manifold and far-reaching.

Greg Zemlin

setembro 27, 2024

A threat intel feed, or threat intelligence feed, provides a continuous incoming flow of data related to cyber threats and risks.

Greg Zemlin

setembro 24, 2024

In this blog post, we’ll shine a light on the top OSS threat intelligence platforms and tools that enterprises can integrate into their security stack.

Shaked Rotlevi

setembro 22, 2024

Data security compliance is a critical aspect of data governance that involves adhering to the security-centric rules and regulations set forth by supervisory and regulatory bodies, including federal agencies.

Ziad Ghalleb

setembro 20, 2024

The top 14 open-source application security tools—including SCA, secrets scanning, and application security testing tools—to help you streamline the critical process of securing your apps from threats and vulnerabilities.

A guide on the 9 best OSS API security tools that protect sensitive data, infrastructure, and business logic from unauthorized access, data theft, and other attacks.

Shaked Rotlevi

setembro 19, 2024

Data leakage is the unchecked exfiltration of organizational data to a third party. It occurs through various means such as misconfigured databases, poorly protected network servers, phishing attacks, or even careless data handling.

Swaroop Sham

setembro 18, 2024

Software supply chain security describes the set of processes that ensure the integrity, authenticity, and security of software components throughout their lifecycle.

Nicolas Ehrman

setembro 18, 2024

Open Policy Agent (OPA) is an open-source, versatile policy engine that facilitates unified and context-aware policy enforcement across various cloud environments.

Swaroop Sham

setembro 16, 2024

Cloud app security involves ensuring that both cloud-native and cloud-based apps are protected from vulnerabilities through the use of proper tools and practices.

Chris Champa

setembro 13, 2024

An incident response plan (IRP) is a detailed framework that provides clear, step-by-step guidelines to detect, contain, eradicate, and recover from security incidents.

Ziad Ghalleb

setembro 13, 2024

NIST’s Secure Software Development Framework (SSDF) is a structured approach that provides guidelines and best practices for integrating security throughout the software development life cycle (SDLC).

Shaked Rotlevi

setembro 13, 2024

ChatGPT security is the process of protecting an organization from the compliance, brand image, customer experience, and general safety risks that ChatGPT introduces into applications.

Shaked Rotlevi

setembro 12, 2024

Vulnerability prioritization is the practice of assessing and ranking identified security vulnerabilities based on critical factors such as severity, potential impact, exploitability, and business context. This ranking helps security experts and executives avoid alert fatigue to focus remediation efforts on the most critical vulnerabilities.

Ziad Ghalleb

setembro 12, 2024

Application security posture management entails continuously assessing applications for threats, risks, and vulnerabilities throughout the software development lifecycle (SDLC). 

Shaked Rotlevi

setembro 11, 2024

AI risk management is a set of tools and practices for assessing and securing artificial intelligence environments. Because of the non-deterministic, fast-evolving, and deep-tech nature of AI, effective AI risk management and SecOps requires more than just reactive measures.

Ziad Ghalleb

setembro 9, 2024

SAST (Static Application Security Testing) analyzes custom source code to identify potential security vulnerabilities, while SCA (Software Composition Analysis) focuses on assessing third-party and open source components for known vulnerabilities and license compliance.

Ziad Ghalleb

setembro 7, 2024

Static Application Security Testing (SAST) is a method of identifying security vulnerabilities in an application's source code, bytecode, or binary code before the software is deployed or executed. 

Ziad Ghalleb

setembro 7, 2024

In this Academy article, we'll dig into SAST and DAST security testing methods, exploring how they work and their core aspects

Ziad Ghalleb

setembro 7, 2024

In this article, we’ll explore the step-by-step process of code scanning, its benefits, approaches, and best practices.

In this article, we’ll explore the top 9 OSS CSPM tools available today, each with its unique capabilities and benefits for helping organizations identify cloud misconfigurations, prevent security breaches, and ensure compliance with industry standards.

Shashank Golla

setembro 5, 2024

Database security is the process of identifying, assessing, and mitigating risks that can compromise the confidentiality, integrity, and availability of data.

Greg Zemlin

setembro 5, 2024

Most incident response teams measure both MTTD and MTTR to not only shorten attackers’ dwell times in their systems but also to gauge the team’s readiness to combat future security incidents and then optimize response times.

Chris Champa

setembro 3, 2024

An incident response playbook is a document outlining clear steps for security teams to follow when responding to and resolving security incidents such as malware infections, unauthorized access, denial-of-service attacks, data breaches, or insider threats.

The vulnerability management lifecycle consists of six key stages: identification and assessment, prioritization, remediation and mitigation, verification and validation, reporting, and monitoring and improvement.

Nicolas Ehrman

agosto 30, 2024

Exposure management is when companies identify, assess, and mitigate the risk posed by exposed resources, such as networks, applications, data, and other assets.

Adversarial artificial intelligence (AI), or adversarial machine learning (ML), is a type of cyberattack where threat actors corrupt AI systems to manipulate their outputs and functionality.

A vulnerability management program is a structured, continuous approach to identifying, evaluating, and mitigating security weaknesses across an organization's IT ecosystem.

Chris Champa

agosto 28, 2024

Cloud incident response is a strategic approach to detecting and recovering from cyberattacks on cloud-based systems with the goal of minimizing the impact to your workloads and business operation accordingly.

An incident response team is a specialized security unit within an organization whose primary duties involve responding to cyber incidents and addressing compromised systems, applications, and data.

Greg Zemlin

agosto 23, 2024

Attack path analysis (APA) is a cybersecurity technique that identifies and maps how potential attackers could infiltrate your network and systems

SecOps is the collaborative integration of IT security and operations teams to protect and manage an organization's digital assets more efficiently.

Chris Champa

agosto 19, 2024

Cloud threat modeling is a systematic approach designed to uncover, evaluate, and rank the potential security vulnerabilities and dangers unique to cloud-based systems and infrastructure.

Nicolas Ehrman

agosto 19, 2024

Linux security ensures the confidentiality, integrity, and availability of Linux-based systems and protects them from hackers, brute-force attacks, and other cyber threats.

Nicolas Ehrman

agosto 16, 2024

A Kubernetes cluster consists of a group of node machines designed to run applications within containers.

Chris Champa

agosto 11, 2024

Cloud security logs are formatted text records that capture events and activities as they occur in a cloud environment, providing insight into what’s happening within that environment in real time.

Ziad Ghalleb

agosto 11, 2024

Open-source security is the collection of tools and processes used to secure and manage the lifecycle of open-source software (OSS) and dependencies from development to production.

A security operations center (SOC) team is a group of highly skilled professionals responsible for scanning IT environments and identifying and remediating cybersecurity threats and incidents

Cloud network security is a combination of tools, processes, and policies that protect your cloud environments.

Ziad Ghalleb

agosto 9, 2024

Security as Code (SaC) is a methodology that integrates security measures directly into the software development process. It involves codifying security policies and decisions, and automating security checks, tests, and gates within the DevOps pipeline.

The OWASP DevSecOps Maturity Model (DSOMM) is a framework for assessing and improving DevSecOps practices.

Chris Champa

agosto 5, 2024

Cloud forensics is a branch of digital forensics that applies investigative techniques to collecting and evaluating critical evidence in cloud computing environments following a security incident.

Shaked Rotlevi

agosto 5, 2024

LLM jacking is an attack technique that cybercriminals use to manipulate and exploit an enterprise’s cloud-based LLMs (large language models).

Credential access is a cyberattack technique where threat actors access and hijack legitimate user credentials to gain entry into an enterprise's IT environments.

Shaked Rotlevi

agosto 2, 2024

Prompt injection attacks are an AI security threat where an attacker manipulates the input prompt in natural language processing (NLP) systems to influence the system’s output.

Nicolas Ehrman

agosto 1, 2024

Helm Charts streamline the deployment of applications by providing a packaging format that includes all necessary Kubernetes resources.

As cloud adoption grows, the only way to mitigate risks and access the full spectrum of cloud capabilities is to prioritize visibility. Read on to learn more about cloud visibility—and how to achieve it.

Incident response is a critical aspect of enterprise cybersecurity that involves identifying and responding to cyberattacks, threats, and data breaches.

Chris Champa

julho 23, 2024

Security operations centers (SOCs) are centralized facilities and functions within an enterprise’s IT ecosystem that monitor, manage, and mitigate cyber threats.

Nicolas Ehrman

julho 20, 2024

A container engine is a software tool that automates the process of running applications in isolated, lightweight environments called containers.

eBPF provides deep visibility into network traffic and application performance while maintaining safety and efficiency by executing custom code in response to the kernel at runtime.

An incident response framework is a blueprint that helps organizations deal with security incidents in a structured and efficient way. It outlines the steps to take before, during, and after an incident, and assigns roles and responsibilities to different team members.

Nicolas Ehrman

julho 16, 2024

File integrity monitoring (FIM) is a set of security practices that continuously verify the authenticity of file systems, operating system components, applications, and databases.

Data poisoning is a kind of cyberattack that targets the training data used to build artificial intelligence (AI) and machine learning (ML) models.

A resposta a incidentes é uma abordagem estratégica para detectar e responder a ataques cibernéticos com o objetivo de minimizar seu impacto em seus sistemas de TI e nos negócios como um todo.

Shaked Rotlevi

julho 10, 2024

AI-SPM (AI security posture management) is a new and critical component of enterprise cybersecurity that secures AI models, pipelines, data, and services.

Dark AI involves the malicious use of artificial intelligence (AI) technologies to facilitate cyberattacks and data breaches. Dark AI includes both accidental and strategic weaponization of AI tools.

Ziad Ghalleb

julho 9, 2024

Policy as code (PaC) is the use of code to define, automate, enforce, and manage the policies that govern the operation of cloud-native environments and their resources.

CIS benchmarks are publicly available security roadmaps offering core recommendations to guide organizations on hardening their IT systems against cyber threats.

Ziad Ghalleb

julho 2, 2024

While DevOps delineates collaboration and automation practices that emphasize infrastructure provisioning and continuous monitoring, GitOps extends its concepts by employing Git as the single source of truth for both application and infrastructure settings.

Greg Zemlin

julho 1, 2024

MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a cybersecurity framework that helps enterprises fortify themselves against cyber threats.

Nicolas Ehrman

julho 1, 2024

Kubernetes namespaces divide a given cluster into virtual clusters, helping to separate and manage resources while still keeping them within the same physical cluster. By segregating workloads and applying policies per namespace, you can create boundaries that keep your multi-tenant environments safe and organized.

Nicolas Ehrman

junho 27, 2024

Understanding the nuances of Linux containers is crucial for building robust, secure applications. This blog post provides insights into the practical implementation of containers, focusing on both their strengths and potential pitfalls.

Swaroop Sham

junho 23, 2024

Secret scanning is the practice of running automated scans on code repositories, execution pipelines, configuration files, commits, and other data sources to prevent potential security threats posed by exposed secrets.

Writing your IR plan from scratch? Not sure where to begin? Get a head start with these free templates and examples.

Greg Zemlin

junho 20, 2024

MITRE ATT&CK®, a publicly available security toolkit that helps enterprises overcome cyber threats, defines defense evasion as a way for malicious actors to evade detection during an attack.

Greg Zemlin

junho 14, 2024

Threat hunting involves a systematic, continuous search to find and eliminate malicious activity within an organization’s environment.

Nicolas Ehrman

junho 12, 2024

7 essential best practices that every organization should start with

Greg Zemlin

junho 10, 2024

Cloud investigation and response automation (CIRA) harnesses the power of advanced analytics, artificial intelligence (AI), and automation to provide organizations with real-time insights into potential security incidents within their cloud environments

Security by design is a software development approach that aims to establish security as a pillar, not an afterthought, i.e., integrating security controls into software products right from the design phase.

Two major formats dominate the SBOM ecosystem: Software Package Data Exchange (SPDX) and CycloneDX (CDX). Let’s review!

Greg Zemlin

junho 5, 2024

Threat detection and response (TDR) is a set of continuous processes that proactively search for cyberattacks and respond to them in real time.

Greg Zemlin

junho 3, 2024

Cloud detection and response is the process of identifying and mitigating security threats or incidents in cloud environments through monitoring, analysis, and automated or manual actions.

Nicolas Ehrman

junho 3, 2024

Docker containers leverage the Docker Engine (a platform built on top of Linux containers) to simplify the software development process.

Nicolas Ehrman

maio 29, 2024

Kubernetes runtime security refers to the measures and practices implemented to protect Kubernetes clusters and the applications running within them during their operational phase.

Nicolas Ehrman

maio 29, 2024

In Kubernetes, a security context defines privilege and access control settings for a Pod or Container. It allows you to specify security configurations such as user and group IDs, filesystem permissions, and capabilities.

This article offers an extensive examination of Azure environments’ most pressing security risks along with suggested approaches for effectively mitigating these challenges.

Learn about the most pressing security risks shared by all AI applications and how to mitigate them.

Remote code execution refers to a security vulnerability through which malicious actors can remotely run code on your systems or servers.

Cloud sprawl is a phenomenon that involves the unmanaged growth of cloud-based resources and services.

Discover the similarities between CSPM and DSPM, what factors set them apart, and which one is the best choice for your organization’s needs.

Nicolas Ehrman

maio 12, 2024

Container monitoring is the process of collecting, analyzing, and reporting metrics and data related to the performance and health of containerized applications and their hosting environments.

Data exfiltration is when sensitive data is accessed without authorization or stolen. Just like any data breach, it can lead to financial loss, reputational damage, and business disruptions.

Shashank Golla

maio 10, 2024

Cloud migration security is a facet of cybersecurity that protects organizations from security risks during a transition to cloud environments from legacy infrastructure, like on-premises data centers.

Nicolas Ehrman

maio 7, 2024

Kubernetes role-based access control (RBAC) serves as a foundational security layer within Kubernetes. It is essential for regulating access to the K8s API and its resources, allowing organizations to define user roles with specific permissions to effectively control who can see or interact with what resources within a cluster.

Greg Zemlin

maio 6, 2024

Wade through the alphabet soup of detection and response technologies to understand where they overlap and how they differ.

Uma plataforma de proteção de carga de trabalho em nuvem (CWPP) é uma solução de segurança que fornece monitoramento contínuo de ameaças e proteção para cargas de trabalho em nuvem em diferentes tipos de ambientes de nuvem.

Swaroop Sham

maio 2, 2024

A segurança de código, também conhecida como codificação segura, refere-se às práticas, metodologias e ferramentas projetadas para garantir que o código escrito para aplicativos e sistemas esteja protegido contra vulnerabilidades e ameaças.

Shaked Rotlevi

maio 2, 2024

13 essential best practices for every organization + the common tools and services that can support them

Uma Plataforma de Proteção de Aplicativos Nativa da Nuvem (CNAPP) é uma solução de segurança que unifica todos os recursos de segurança na nuvem para proteger ambientes de nuvem.

Nicolas Ehrman

abril 29, 2024

Container runtime security is the combination of measures and technology implemented to protect containerized applications at the runtime stage.

Lateral movement is a cyberattack technique used by threat actors to navigate a network or environment in search of more valuable information after gaining initial access.

Nicolas Ehrman

abril 29, 2024

Common security risks associated with Terraform and the 6 essential best practices for terraform security.

Greg Zemlin

abril 29, 2024

Cryptojacking is when an attacker hijacks your processing power to mine cryptocurrency for their own benefit.

Credential stuffing is a type of cyberattack where automated tools are used to repeatedly inject stolen username/password combinations into various services to gain access to legitimate users’ accounts in addition to those that were originally breached.

8 open-source vulnerability management tools and their features, categorized by use case

Nicolas Ehrman

abril 24, 2024

Container orchestration involves organizing groups of containers that make up an application, managing their deployment, scaling, networking, and their availability to ensure they're running optimally.

This blog explores the significance of security in Azure environments and provides an overview of native as well as third-party security tools available to improve an organization’s Azure security stance.

10 native tools for IAM, data protection, network security, threat detection, and compliance management.

Cross-site scripting (XSS) is a vulnerability where hackers insert malicious scripts inside web applications with the aim of executing them in a user’s browser.

Nicolas Ehrman

abril 21, 2024

The primary function of admission controllers is the enforcement of custom policies on incoming requests, ensuring that only valid and compliant API requests are executed.

A man-in-the-middle (MitM) attack is a type of cyberattack where a hacker intercepts data transferred between two parties.

Nicolas Ehrman

abril 14, 2024

At their core, containers encapsulate the application code and runtime, system tools, dependencies, and settings that enable it to operate in the same way across multiple environments.

Nicolas Ehrman

abril 10, 2024

A Kubernetes secret is an object in the Kubernetes ecosystem that contains sensitive information (think keys, passwords, and tokens)

Nicolas Ehrman

abril 10, 2024

Containerization encapsulates an application and its dependencies into a container image, facilitating consistent execution across any host operating system supporting a container engine.

In a nutshell, containers and virtual machines (VMs) are two inherently different approaches to packaging and deploying applications/services in isolated environments.

Nicolas Ehrman

abril 8, 2024

Kubernetes as a service (KaaS) is a model in which hyperscalers like AWS, GCP, and Azure allow you to quickly and easily start a Kubernetes cluster and begin deploying workloads on it instantly.

A brute force attack is a cybersecurity threat where a hacker attempts to access a system by systematically testing different passwords until a correct set of credentials is identified.

We cover the top container security tools across 7 common use cases, including image scanning, compliance, secrets management, and runtime security.

Nicolas Ehrman

abril 2, 2024

Kubernetes monitoring involves collecting, analyzing, and acting on performance data and metrics across your clusters.

This post discusses CSPM and SSPM in depth to reveal their respective use cases. You'll also learn how CSPM and SSPM complement each other to strengthen your overall security posture.

This article examines common AWS security challenges, including identity and access control gaps, data exposure risks, and monitoring blind spots.

In this article, we'll compare CIEM and IAM to explain how these crucial techniques help reduce your attack surface.

Shadow data is any data that is created, stored, or shared outside of an organization's formal IT environment and management policies.

Explore common security missteps in detail and learn actionable recommendations to help organizations strengthen their GCP environments.

Nicolas Ehrman

março 21, 2024

Containers as a service (CaaS) is a cloud service model that allows users to manage, upload, scale, run, and terminate containers using a service provider's API or web portal.

Nicolas Ehrman

março 18, 2024

20 essential security best practices every DevOps team should start with

Greg Zemlin

março 15, 2024

Privilege escalation is when an attacker exploits weaknesses in your environment or infrastructure to gain higher access and control within a system or network.

Nicolas Ehrman

março 15, 2024

Take a deep dive into the world of container images and learn their essential role in cloud security.

Nicolas Ehrman

março 14, 2024

Kubernetes vulnerability scanning is the systematic process of inspecting a Kubernetes cluster (including its container images and configurations) to detect security misconfigurations or vulnerabilities that could compromise the security posture of the cluster.

The shared responsibility model is a framework establishing cloud security responsibilities between cloud service providers (AWS, GCP, Azure) and customers.

Serverless security is the extra layer of protection designed for applications built on a serverless architecture. In this type of cloud computing, you write the code (functions) but the cloud provider handles the servers. This creates a different security approach.

A cloud operating model is a set of practices and procedures that organizations follow for effective management of their cloud resources.

A cloud security strategy is the combination of the measures, tools, policies, and procedures used to secure cloud data, applications, and infrastructure.

A rootkit is a suite of software designed to grant a cyberattacker privileged access while disguising the invasion to evade detection.

Nicolas Ehrman

março 8, 2024

Container architecture is a way to package and deploy applications as standardized units called containers.

Shaked Rotlevi

março 7, 2024

Cloud Security Posture Management (CSPM) descreve o processo de detecção e correção contínua de riscos em ambientes e serviços de nuvem (por exemplo, buckets S3 com acesso público de leitura). As ferramentas CSPM avaliam automaticamente as configurações de nuvem em relação às melhores práticas do setor, requisitos regulatórios e políticas de segurança para garantir que os ambientes de nuvem sejam seguros e gerenciados adequadamente.

Nicolas Ehrman

março 7, 2024

External Attack Surface Management (EASM) refers to the process of identifying, analyzing, and managing an organization's external attack surface.

Nicolas Ehrman

março 1, 2024

9 essential best practices to securing your Kubernetes workloads

Nicolas Ehrman

março 1, 2024

8 no-brainer container security best practices + the key components of container architecture to secure

Risk-based vulnerability management is a vulnerability management approach that prioritizes vulnerabilities that pose the greatest risk to an organization.

Nicolas Ehrman

março 1, 2024

A container registry is a service that stores, manages, and distributes application images. Its architecture is designed to ensure availability by providing a centralized resource for container image discovery, distribution, and deployment.

In this guide, we'll look at a variety of Docker alternatives that provide different benefits for your workloads—such as daemonless operation, a simplified management experience, improved container security, and enhanced scalability and orchestration for production environments.

Swaroop Sham

fevereiro 28, 2024

This article will refresh your knowledge of AWS and S3 security basics and then move into the best practices you need to get started with S3 security.

Swaroop Sham

fevereiro 26, 2024

DevSecOps, which stands for Development, Security, and Operations, is a software development practice that emphasizes integrating security considerations throughout the entire development lifecycle, from initial design to deployment and ongoing maintenance.

Nicolas Ehrman

fevereiro 26, 2024

A segurança de contêineres é o processo de proteger o pipeline do contêiner, o conteúdo executado dentro dos contêineres e a infraestrutura na qual os contêineres são executados.

This blog post explores the world of container orchestration tools beyond Kubernetes, highlighting cloud provider tools and open-source alternatives that promise to redefine how we deploy and manage applications.

A reverse shell attack is a type of cyberattack where a threat actor establishes a connection from a target machine (the victim's) to their machine.