Collaborate Disseminate
The second episode of The Serverless Show is available above on video as well as on SoundCloud, and […]
The post The Serverless Show, Featuring John Visneski from The Pokémon Company appeared first on Protego.
The post The Serverless Show, F… Continue reading The Serverless Show, Featuring John Visneski from The Pokémon Company
More than a third of companies that use serverless functions are not employing any application security best practices and are not using any tools or standard security methodologies to secure them.
The statistic was revealed as part of our first … Continue reading State of Serverless Security Survey 2018 Results
My two previous blog posts covered one of my favorite topics related to serverless security, the first blog post demonstrated how you can automate SQL Injection testing by using SQLMap together with ‘Lambda-Proxy’, a small utility deve… Continue reading Serverless Security Forensic Data Analysis With PureSec
In our previous blog post we released a new utility called ‘Lambda-Proxy’, which helps SecDevOps teams to perform automated SQL Injection testing for AWS Lambda functions. The tool harnesses the power of SQLMap, the leading SQL Injecti… Continue reading Protecting Your Serverless Functions From Event-Data Injection Attacks In Less Than 2 Minutes
* The work presented in this blog post was done together with Yuri Shapira, Security Researcher at PureSec.
The post Automated SQL Injection Testing of Serverless Functions On a Shoestring Budget (and Some Good Music) appeared first on Secur… Continue reading Automated SQL Injection Testing of Serverless Functions On a Shoestring Budget (and Some Good Music)
We’re pleased to share our first podcast, “The Serverless Show.” In addition to the below summarized article and […]
The post The Serverless Show – Inaugural Podcast appeared first on Protego.
The post The Serverless Show … Continue reading The Serverless Show – Inaugural Podcast
Moving to serverless, including AWS Lambda, makes security both easier and harder, as I outlined in our Serverless […]
The post AWS Lambda Security Best Practices appeared first on Protego.
The post AWS Lambda Security Best Practices appeared fir… Continue reading AWS Lambda Security Best Practices
Today we are releasing a report which details how hackers can now turn a single vulnerable serverless function into a virtual crypto-mining farm by taking advantage of the scaleable nature of serverless architectures.
The post New Attack Vector &#… Continue reading New Attack Vector – Serverless Crypto Mining
Your serverless functions are probably the least secure compute service in your cloud environment.
The post Serverless Security – What Are We Up Against? Our Session at Serverless Days TLV appeared first on Security Boulevard.
Continue reading Serverless Security – What Are We Up Against? Our Session at Serverless Days TLV
Do you ever have that sinking feeling in the pit of your stomach, worrying that you’ve forgotten something? […]
The post 6 Things You’re Probably Doing Wrong Securing Serverless Apps appeared first on Protego.
The post 6 Things You’re… Continue reading 6 Things You’re Probably Doing Wrong Securing Serverless Apps