Cloud Security
When you start using a new reverse engineering platform for the first time, it can be hard to get used to it. It’s too much information. I don’t know what I should be looking at. A window is a place where you can look out and see what
Cloud Security
Let’s dive into the interesting details, breaking down the general ideas into 18 concrete container security best practices that you can apply in your DevOps workflows. A complex stack Containers’ success is often fueled by two really useful features: * They are a really convenient way to distribute and execute
Cloud Security
Summary: In this article we will demonstrate how to trigger an automated end to end data loading, transformation and visualization process using Google Cloud Platform. At the end of this exercise a Cloud Data Fusion Pipeline execution will be trigger automatically with a Cloud Function every time a new data
Cloud Security
On December 20, Citizenlab published “The Great iPwn”, detailing how “Journalists [were] Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit”. Of particular interest is the following note: “We do not believe that [the exploit] works against iOS 14 and above, which includes new security protections”. Given that it is also
Cloud Security
* VPCs by default use the Amazon-provided DNS which can be used to bypass some network-level protection mechanisms (e.g. NACLs or SGs) or monitoring (e.g. VPC Flow Logs). * Recently a new service has been released: the Route 53 Resolver DNS Firewall which allows for blocking and monitoring DNS queries
Cloud Security
The client, a global leader in the import and marketing of high-quality tires, offers wholesale tire dealers with services in over 55 countries. The firm is committed to providing high-quality services and goods to its clients and believes in investing extensively in its employees to ensure that each employee understands
Cloud Security
* VPCs by default use the Amazon-provided DNS which can be used to bypass some network-level protection mechanisms (e.g. NACLs or SGs) or monitoring (e.g. VPC Flow Logs). * Recently a new service has been released: the Route 53 Resolver DNS Firewall which allows for blocking and monitoring DNS queries
Cloud Security
Late in 2019, I was hired at a streaming service focused on short form content to help build the data platform. One key component of this streaming service was the focus on mobile consumption, and this necessitated that our data platform handle late arriving data gracefully. I used the example
Cloud Security
Summary The REvil ransomware (a.k.a Sodinokibi) is a threat group that operates in the RaaS (Ransomware-as-a-Service) model, where the infrastructure and the malware are supplied to affiliates, who use the malware to infect target organizations. On July 2, the REvil threat group launched a supply chain ransomware attack
Cloud Security
The process of writing code and delivering it to AWS Lambda is as straightforward as making a cake (depending on the type of cake). From providing to scalability, Lambda takes care of the heavy lifting. However, where is the magic taking place and how does it work in practice? Together,
Cloud Security
According to a cybersecurity specialist who responded to the attack, the hack that brought down the country’s major fuel pipeline and caused shortages across the East Coast was the consequence of a single hacked password. On April 29, hackers acquired access to Colonial Pipeline Co.’s networks using a
Cloud Security
VMware is actively exploiting a vulnerability with a severity rating of 9.8 out of 10. At least one valid exploit has been made public, and successful efforts to hack servers running the vulnerable software have been made in the wild. VMware product vulnerability gets a severity rating of 9.