Cloud Security
For companies running their own datacenter, setting up internal DNS infrastructure is essential for performance and ease of maintenance. Setting up a single DNS server for occasional requests is pretty straightforward, but scaling and distributing requests across multiple data centers is challenging. In this post, we’ll describe the evolution
Cloud Security
Cloudflare Tunnel allows you to connect applications securely and quickly to Cloudflare’s edge. With Cloudflare Tunnel, teams can expose anything to the world, from internal subnets to containers, in a secure and fast way. Thanks to recent developments with our Terraform provider and the advent of Named Tunnels it’
Cloud Security
Prosus, the company which develops online programming education programmes, said that it has inked a deal to buy Stack Overflow, an online community for software professionals, in anticipation of increased demand for online programming instruction. Stack Overflow is based in New York, though it is privately owned. The firm uses
Cloud Security
I recently came across Staying safe with .NET containers on Hacker News. It’s an excellent post that goes into how the .NET Docker image publishing team thinks about: * The pedigree and provenance of the .NET Docker images they publish * The process by which they build and publish the images
Cloud Security
To be able to trust cloud computing, you need to be able to trust it less. Here’s a look at the cloud/trust paradox, and what your business can take away from it. At their core, many discussions about cloud security—and, in fact, cloud computing—ultimately distill to
Cloud Security
The pandemic has turned 2020 into a year of medicine and information technology. The remarkable surge in the criticality level of medical infrastructure, coupled with feasible across-the-board digitalization, led to many of our last year’s predictions coming true much sooner than expected. As we foresaw, there has been an
Cloud Security
2021 has started with a sudden change in how IT and computing work. Remote work culture and business assessments based on the changing trends have enabled another paradigm shift in computing. The evolution of cloud computing standards and security associated with the entirety of this evolution is sending ripples in
Cloud Security
Engineers configuring security groups and firewalls tend to focus on inbound/ingress rules to restrict the networks from which requests to their applications can originate. A common best practice has long been to prevent the use of the 0.0.0.0/0 CIDR — and aliases for it — that would
Cloud Security
If there is a single best practice for container security, it is to avoid running containers as root. Rootless containers are making this much easier – almost effortless, even. In this blog, I’ll talk about why you should be avoiding root in containers, what rootless containers are, and how they
Cloud Security
Basic Authentication in GKE Until GKE 1.12, the default behavior for new GKE clusters was to generate a new set of credentials with cluster-admin access to the cluster. The username is hardcoded as admin, and the password was dynamically generated. This Stackoverflow Post from 2014 around the time of
Cloud Security
Cloud identity permissions are complex. So complex, that innocent looking permissions provided to 3rd party vendors can lead to unintended exposure of all of your data. The Wiz Research team conducted extensive research of permissions provided to 3rd party vendors in cloud environments and the results should be a wake-up
Cloud Security
As a Google Cloud Administrator planning your IAM strategy for how to best use the built-in Google Kubernetes Engine (GKE) IAM Roles, there are a few details that might be confusing and/or surprising that could have unintended consequences. Clarifying the GKE Predefined IAM Roles Here’s a listing of