Collaborate Disseminate
Kubernetes changed how we structure, deploy, and run our applications and became a de-facto standard for running infrastructure at scale. With the rapid adoption of container-based technologies, organizations are increasingly concerned about the securi… Continue reading 3 key elements to protect a Kubernetes cluster
I’ll start by saying I’m not sure which stack community I’d ask my question, but I’m looking into using ACLs to manage file access on our server because of specific IT security requirements.
We mostly get by using regular Linux user/group … Continue reading ACL management (file access) & security
I’m learning about linux hardening and I’m creating a sudoers file. My idea is to separate things. There will be a user to see log files, another that can sudo to manage system processes, another for network managements, and so on and so f… Continue reading Linux access control policies sudoers
I’m learning about linux hardening and I’m creating a sudoers file. My idea is to separate things. There will be a user to see log files, another that can sudo to manage system processes, another for network managements, and so on and so f… Continue reading Linux access control policies sudoers
SecZetta shared a research that demonstrates a clear misalignment between the strategies organizations currently use and what is actually required to protect them from cyberattacks due to third-party vulnerabilities. Monitor third-party identities and … Continue reading Manage and monitor third-party identities to protect your organization
As far as I understand, the rolling-jam attack involves eavesdropping, signal blocking and replaying.
Does that qualify it as an MITM attack?
Could one say that the attacker is controlling the traffic?
Continue reading Is the rolling jam attack considered a MITM attack
There is a great deal of emphasis placed on the zero-trust approach with respect to access. Looking beyond authentication (the act of verifying that someone is who they say they are), evaluating authorization is just as important as it determines what … Continue reading 4 steps for building an orchestrated authorization policy for zero trust
Brivo released a report which reveals that cloud-based access control and high-quality physical security data are paramount when it comes to unlocking a resilient hybrid work plan. The report offers insights into the state of hybrid work and how securi… Continue reading How to unlock a resilient hybrid work plan
I have a React/Express application, I want to fully secure it. I’m looking for best practices for these features:
data encryption/decryption
end-to-end communication
access control
role management
authentication
threat detection
file prot… Continue reading how to fully secure web/mobile/desktop application connected the same backend server [closed]
Hyper-growth startups face a unique set of challenges when it comes to secure data access. Their priority is to drive rapid innovation, scale their customer base and grow revenue. Their data footprint is increasing exponentially, with new first-party a… Continue reading Top data governance challenges and strategies for high-growth startups