Tag: Security and privacy
-
Facelift Kurun for Kubernetes event tunneling
Posted on April 8, 2022, Level intermediate Resource Length medium
Kurun is a multi-tool to help Kubernetes developers. We can summarize one of its features in a short sentence: just like go run main.go but executed inside Kubernetes with one command. By Sándor Lovász.
Tags leadership-and-career security-and-privacy devops-and-ci-cd
-
A new security approach for the new age of multi-cloud
Posted on April 7, 2022, Level beginner Resource Length short
Most organizations today deploy web applications across multi-cloud and hybrid environments. However, existing models for application security are obsolete and no longer up to the task of providing high-grade, consistent, and frictionless application security across clouds. By Eyal Arazi.
Tags leadership-and-career security-and-privacy cloud-and-infrastructure
-
Build a secure e-commerce app with SuperTokens and Hasura GraphQL
Posted on April 6, 2022, Level intermediate Resource Length long
This tutorial will show you how to develop a secure e-commerce store using SuperTokens authentication in a React.js app. We'll use a modern stack that includes React, Hasura GraphQL, and SuperTokens. By Ankur Tyagi.
Tags product-and-design security-and-privacy frontend-and-mobile data-and-analytics architecture-and-apis
-
Exploring Windows UAC bypasses: Techniques and detection strategies
Posted on February 9, 2022, Level beginner Resource Length long
Malware often requires full administrative privileges on a machine to perform more impactful actions such as adding an antivirus exclusion, encrypting secured files, or injecting code into interesting system processes. By @sbousseaden.
Tags leadership-and-career security-and-privacy miscellaneous data-and-analytics
-
DevSecOps: Why you should care and how to get started
Posted on February 7, 2022, Level beginner Resource Length long
The increasing popularity of DevOps software development methodologies has led to shorter and more agile life cycles, in which software is released and deployed in minutes or hours rather than the days, weeks, or even months required under traditional practices. However, many development teams still experience delays in getting releases into production due to the security considerations that are traditionally brought to bear at the end of the life cycle. To address this, organizations are more and more frequently adopting a DevSecOps approach. By Katrina Novakovic, Chris Jenkins.
Tags devops-and-ci-cd cloud-and-infrastructure product-and-design security-and-privacy
-
Enabling transparent data encryption for Microsoft SQL with Vault
Posted on February 3, 2022, Level intermediate Resource Length medium
Learn how HashiCorp Vault can help secure data in Microsoft SQL Server using a defense-in-depth encryption strategy. By Narayan Iyengar.
Tags data-and-analytics security-and-privacy cloud-and-infrastructure
-
Securing IoT with Quantum Cryptography
Posted on January 25, 2022, Level intermediate Resource Length short
The Internet of Things (IoT) is a growing technology that continues to gain traction year after year. On the one hand, it can be helpful, but on the other hand, it carries many security threats. These threats include scalable remote attacks, side-channel attacks on cryptography, DDoS attacks, data breaches, malware, and others. By Roland Atoui.
Tags cloud-and-infrastructure leadership-and-career security-and-privacy business-and-emerging-tech
-
Privacy fines: GDPR sanctions in 2021 exceeded $1 billion
Posted on January 20, 2022, Level beginner Resource Length medium
Privacy regulators in Europe last year imposed known fines totaling more than 1 billion euros ($1.2 billion) under the EU's General Data Protection Regulation, bolstered in part by two record-breaking sanctions, according to the law firm DLA Piper. But sanctions approach varies widely across 31 countries complying with privacy law. By Mathew J. Schwartz.
Tags security-and-privacy leadership-and-career frontend-and-mobile miscellaneous data-and-analytics
-
What identity management teaches CSOs/CDOs about data-centric security
Posted on January 19, 2022, Level beginner Resource Length medium
At the turn of the 21st century, the identity management discipline within IT Security was born of necessity. Advancements in computer technology meant that every area, function, and discipline within organizations was turning to automation to gain a competitive advantage. A computer was placed on every desk, and servers, mini-computers, and mainframes were being deployed to automate every area of the business. By Chris Olive.
Tags data-and-analytics security-and-privacy architecture-and-apis leadership-and-career how-to
-
JWT authentication in microservices
Posted on January 11, 2022, Level intermediate Resource Length medium
As with any Web Service, the microservices need to be protected from unauthorized access. So how do you protect each of your services? How does one share the token that is received from the Auth service?. By Anu Viswan.
Tags architecture-and-apis security-and-privacy devops-and-ci-cd
-
Choosing a cyber incident management platform
Posted on December 18, 2021, Level beginner Resource Length long
Efficiently dealing with an incident or crisis weighs heavily on three main factors; preparation, process and the tools you have to hand. The latter can greatly influence your incident management process and a cyber incident management platform should make the implementation of your incident response quick and easy rather than hinder it. By Cheryl.
Tags security-and-privacy leadership-and-career miscellaneous
-
Zero days explained: How unknown vulnerabilities become gateways for attackers
Posted on December 17, 2021, Level beginner Resource Length medium
A zero day is a security flaw for which the vendor of the flawed system has yet to make a patch available to affected users. You can't patch these holes—but you can still protect yourself. By Josh Fruhlinger.
Tags security-and-privacy product-and-design frontend-and-mobile devops-and-ci-cd leadership-and-career