Tag: Security and privacy
-
Hardening Amazon EKS security with RBAC, secure IMDS, and audit logging
Posted on July 25, 2021, Level intermediate Resource Length medium
Misconfigurations in infrastructure as code (IaC) can be just as dangerous as vulnerabilities in code. Small mistakes in configuration can lead to the sensitive data being readable on the internet. By Kamil Potrec.
Tags security-and-privacy leadership-and-career cloud-and-infrastructure devops-and-ci-cd
-
Ransomware payouts in review. Highest Payments, trends & stats
Posted on July 24, 2021, Level intermediate Resource Length medium
Ransomware has come to be a customary instrument in the arsenal of cybercriminals who routinely attack individuals and organizations. Under such circumstances, their victims experience financial damage either by owning up to large ransomware payouts or by bearing the price of recovering from attacks. By Alina Georgiana Petcu.
Tags security-and-privacy leadership-and-career data-and-analytics cloud-and-infrastructure
-
Getting started with static code analysis
Posted on July 7, 2021, Level beginner Resource Length medium
Static code analysis is the practice of examining application's source, bytecode, or binary code without ever executing the program code itself. Instead, the code under review is analyzed to identify any defects, flaws, or vulnerabilities which may compromise the integrity or security of the application itself. By John Vester, Sr. Architect, CleanSlate Technology Group.
Tags product-and-design frontend-and-mobile devops-and-ci-cd software-engineering security-and-privacy
-
Top 5 auth solutions for React Native
Posted on June 29, 2021, Level beginner Resource Length long
Get to know 5 auth providers for React Native to get a head start with your Authentication flow. By Viduni Wickramarachchi.
Tags security-and-privacy frontend-and-mobile product-and-design
-
SRE fundamentals 2021: SLIs vs SLAs vs SLOs
Posted on June 7, 2021, Level intermediate Resource Length medium
A big part of ensuring the availability of your applications is establishing and monitoring service-level metrics—something that our Site Reliability Engineering (SRE) team does every day here at Google Cloud. By Adrian Hilton, Customer Reliability Engineer, SRE.
Tags product-and-design devops-and-ci-cd leadership-and-career cloud-and-infrastructure software-engineering security-and-privacy
-
Cloud account takeovers present serious security risk to enterprises
Posted on May 31, 2021, Level beginner Resource Length short
Cloud account compromises cost organisations millions of dollars every year, with many IT professionals stating takeovers are a significant risk to their organisations. By Catherine Knowles.
Tags cloud-and-infrastructure security-and-privacy leadership-and-career
-
Introducing Kubewarden, an open source policy engine
Posted on May 28, 2021, Level intermediate Resource Length medium
Security has always been a wide and complex topic. A recent survey from StackRox about the state of containers and Kubernetes security provides some interesting data on these topics. By Flavio Castelli.
Tags cloud-and-infrastructure devops-and-ci-cd software-engineering security-and-privacy
-
SSL with Spring WebFlux and Vault PKI
Posted on May 24, 2021, Level beginner Resource Length short
In this article, you will learn how to configure the Vault PKI engine and integrate it with Spring WebFlux. By Piotr Minkowski.
Tags security-and-privacy backend-development software-engineering
-
Bad bot traffic breaks records in 2020
Posted on May 18, 2021, Level beginner Resource Length short
Bad bots have long been a major illness plaguing the internet. As internet traffic reached new heights throughout the global pandemic, unfortunately so did bot traffic. By Erez Hasson.
Tags ai-and-machine-learning security-and-privacy data-and-analytics frontend-and-mobile software-engineering
-
Best practices for Node.js security
Posted on May 15, 2021, Level beginner Resource Length medium
Like any other programming language or framework, Node.js is susceptible to every type of web app exposure. Although the basis of Node.js is secure, third-party packages may need more security standards to safeguard your web app. The study says that 14% of the NPM (Node Package Manager) ecosystem is impacted and 54% of the NPM ecosystem is about to be impacted indirectly. By Kiran Malvi.
Tags security-and-privacy frontend-and-mobile backend-development
-
Defenseless: UVA engineering computer scientists discover vulnerability affecting computers globally
Posted on May 7, 2021, Level beginner Resource Length medium
In 2018, industry and academic researchers revealed a potentially devastating hardware flaw that made computers and other devices worldwide vulnerable to attack. Since Spectre was discovered, the world's most talented computer scientists from industry and academia have worked on software patches and hardware defenses, confident they've been able to protect the most vulnerable points in the speculative execution process without slowing down computing speeds too much. By Audra Book @virginia.edu.
Tags security-and-privacy leadership-and-career miscellaneous software-engineering cloud-and-infrastructure business-and-emerging-tech
-
How to establish a DevSecOps organization
Posted on April 29, 2021, Level intermediate Resource Length long
DevSecOps integrates automated security checks and hardening into every stage of the software development and deployment process. Practitioners aim to have risk-checked applications fully developed and into production at the speed the business needs, making continuous incremental improvements. By Chris Buijs.
Tags security-and-privacy devops-and-ci-cd leadership-and-career