Tag: Security and privacy
-
NGINX ingress controller hardening guide
Posted on November 27, 2022, Level intermediate Resource Length short
This guide describes, what of the different configurations described in those guides is already implemented as default in the nginx implementation of kubernetes ingress. By @kubernetes.github.io.
Tags devops-and-ci-cd security-and-privacy cloud-and-infrastructure architecture-and-apis
-
NGINX WAF and Kubernetes WAF options (App Protect vs. open-appsec)
Posted on November 26, 2022, Level intermediate Resource Length short
Until 2022, NGINX supported the well-known ModSecurity open-source WAF solution and OWASP Core RuleSet Signatures. However, following Trustwaves End-of-Life notice about ModSecurity, and possibly related also to the acquisition of NGINX by F5, NGINX announced in May 2022 that it will end of life ModSecurity, leaving NGINX open-source with no open-source security solution. By Christopher Lutat.
Tags security-and-privacy devops-and-ci-cd cloud-and-infrastructure
-
Service exhaustion floods — HTTP/HTTPS flood, HTTP pipelining, and SSL renegotiation DDoS attack
Posted on November 25, 2022, Level beginner Resource Length medium
On 1 June 2022, a Google Cloud Armor customer was hit with a Distributed denial-of-service (DDoS) attack over the Hypertext Transfer Protocol Secure (HTTPS) protocol that reached 46 million requests per second (RPS), making it one of the largest ever recorded Layer 7 DDoS attacks reported this year. By Debashis Pal.
Tags security-and-privacy product-and-design cloud-and-infrastructure leadership-and-career devops-and-ci-cd
-
Three reasons why CISOs need to understand domain security
Posted on November 16, 2022, Level beginner Resource Length medium
Domain name abuse is one of the most dangerous and under-regulated issues in digital business security today. An attack on a web domain can lead to the redirection of a company's website, domain spoofing, phishing attacks, network breaches, and business email compromise (BEC). By cscdbs.com.
Tags leadership-and-career frontend-and-mobile product-and-design security-and-privacy
-
Building a secure SaaS application with Amazon API Gateway and Auth0 by Okta
Posted on November 8, 2022, Level beginner Resource Length long
Most applications require a form of identity service to manage, authenticate, and authorize users. In software-as-a-service (SaaS) applications, multi-tenancy adds specific challenges to this task that are important aspects to consider when designing a multi-tenant identity management service. By Humberto Somensi.
Tags architecture-and-apis security-and-privacy cloud-and-infrastructure product-and-design frontend-and-mobile
-
Block ads on every device in your house with a Raspberry Pi and Pi-hole
Posted on October 29, 2022, Level intermediate Resource Length long
Stress and burnout are having a massive impact on cybersecurity teams, leaving people and businesses more vulnerable than ever. Cybersecurity professionals are "reaching their breaking point" as ransomware attacks increase and create new risks for people and businesses. By Owen Hughes.
Tags security-and-privacy cloud-and-infrastructure business-and-emerging-tech frontend-and-mobile product-and-design
-
Cybersecurity teams are reaching their breaking point. We should all be worried
Posted on October 28, 2022, Level beginner Resource Length long
Stress and burnout are having a massive impact on cybersecurity teams, leaving people and businesses more vulnerable than ever. Cybersecurity professionals are "reaching their breaking point" as ransomware attacks increase and create new risks for people and businesses. By Owen Hughes.
Tags security-and-privacy cloud-and-infrastructure leadership-and-career frontend-and-mobile product-and-design
-
Exploring the JWT attacks landscape
Posted on October 22, 2022, Level intermediate Resource Length medium
Due to its popularity, JWT attacks are one of of the most exploited vulnerability by attackers. Each JWT contains base64 encoded JSON objects. By Aamir Ahmed.
Tags security-and-privacy devops-and-ci-cd frontend-and-mobile product-and-design
-
What is a Web3 browser and how does it work?
Posted on October 20, 2022, Level beginner Resource Length medium
Web3 browsers like Brave allow users to access DApps, integrate cryptocurrencies and surf over the decentralized web with greater privacy and security. The phrase "Web3" is used to characterize multiple evolutions of web interaction and usage along various paths, including creating a geospatial web, utilizing artificial intelligence tools and making content available through numerous non-browser apps or Web3 browsers. By Onkar Singh.
Tags miscellaneous business-and-emerging-tech security-and-privacy
-
What are 4 golden signals for monitoring Kubernetes?
Posted on October 19, 2022, Level intermediate Resource Length medium
Golden Signals are the meaningful data insights that we use for monitoring and observability of a system. They are the signals vs. noise that can help guide us towards what's affecting the health of the environment. By Roland Wolters.
Tags devops-and-ci-cd security-and-privacy product-and-design
-
Bridging security gaps in WFH and hybrid setups
Posted on October 16, 2022, Level beginner Resource Length short
Hybrid and work-from-home (WFH) arrangements take employees from the safety of the more secure and monitored environment of the office. These arrangements blur the division between enterprise and home networks while subsequently expanding the attack surface for both environments. How can these security gaps be bridged? By trendmicro.com.
Tags security-and-privacy leadership-and-career product-and-design
-
Cryptocurrency tech is vulnerable to tampering, DARPA analysis finds
Posted on October 8, 2022, Level beginner Resource Length medium
Whether prices are up or down, for many investors in cryptocurrency, the real appeal is that there's nobody in charge. But a new report finds that the decentralized system might not be working as well as many crypto enthusiasts assume.or a one-time activity like creating a cluster, but not for continuous tasks like app delivery and configuration management.
Tags miscellaneous business-and-emerging-tech security-and-privacy leadership-and-career