▶️ Read the newest blog from Deepfactor CTO Mike Larkin. In it he discusses the latest OpenSSH security issue— regreSSHion — and covers: 🔸"Yes, and..." —patching is critically important but there's more 🔸 How runtime reachability/SCA can help determine if certain code is even being used 🔸 The right questions to ask (and answer) See comments for link. #CTO #SCA #regreSSHion
Deepfactor’s Post
More Relevant Posts
-
Now that we've all had the chance to freak out about xz, we can think about what we can learn from it, and what we can do about it. Our CTO, Dimitri Stiliadis, thinks is a wake up call for software security. We can't blame maintainers, and we can't stop using open source. Learn about how this attack played out, and what it teaches us about software supply chain security: https://hubs.ly/Q02rpDrZ0
XZ is A Wake Up Call For Software Security, Here's Why | Endor Labs
endorlabs.com
To view or add a comment, sign in
-
The Untamed Security platform just got even better. Happy to announce the new user experience, as well as the #appsec Action Plan. We hand you an Action Plan for remediation on a silver platter. And of course improved experience for #SAST, #SCA, Secrets Detection, Infrastructure as Code Scanning, and Software Bill of Materials (#SBOM). Building something great is hard. Securing it shouldn't be. Secure Untamed. https://untamed.cloud #appsec #informationsecurity #infosec
Untame your Security
untamed.cloud
To view or add a comment, sign in
-
🎉 Founder Spotlight: Cutting-Edge API Protection With Impart Security Inc. Impart Security stands out in the saturated and often misunderstood API security market with a next-generation runtime API security approach. Founded in 2020 by CDN and WAF industry veterans Jonathan DiVincenzo, Marc Harrison, and Brian Joe, Impart Security was born from a vision to combine next-generation runtime protection with a complete understanding of API risk. Their journey began after Fastly, a leading cloud services provider, acquired their previous company, Signal Sciences. There, the co-founders saw first-hand the limits of WAF protection for APIs. These limits led them to develop Impart Security, an API-first runtime protection platform that gives modern security teams total control over their APIs with the following transformative features: ✅ Next-generation runtime protection: Create, manage, and maintain a winning security posture thanks to Impart’s API Firewall. Impart’s API Firewall can automatically prevent malicious API behavior with enforcement operations such as rate limiting, blocking, request decoration, redirects, and more based upon any combination of API endpoint, parameter, or consumer behavior. ✅ API-first understanding: Create tailored security policies that work, instead of ineffective one-size-fits-all policies, by generating a complete catalog of all API endpoints, hosts, and risk insights across all environments and utilizing this catalog natively within any part of the Impart platform at runtime. ✅ Complete security control: Empower security teams with ultimate API control with Impart’s first-class developer experience powered by Web Assembly (WASM)-based rules and Directed Acrylic Graphs (DAG)-based rule dependencies. Also available is a fully featured rule Integrated Development Environment (IDE), which includes rule testing, rule lifecycle management, and Infrastructure as Code (IaC) integrations. ✅ Integrated LLMs: Improve quality of life using Impart’s private AI models to explain and create new rules, optimize existing workflows, and provide valuable insights. Learn how Impart Security’s integrated runtime API security platform can empower security teams with complete control of their APIs. Connect with them on Sagetap today (link in comment), or check out the founder video for additional background information:
Impart Security: The Founder Story
https://www.youtube.com/
To view or add a comment, sign in
-
Co-Founder & CEO at Entro Security | CISO | X-Microsoft | Cyber & Cloud Expert | Revolutionize non-human Identity management & Secrets Security for CISOs and security teams at Entro Security
Best practices play a vital role in helping organizations safeguard their most valuable assets - their secrets. So what are some of the BPs for managing secrets, specifically when it comes to IaC environments? Take a look below, then head on over to read the full blog and learn how you can significantly reduce your attack surface and minimize the impact of potential breaches. https://hubs.la/Q02DRSTZ0 #IaC #NonHumanIdentities
IaC and secrets security - Challenges and Best Practices
https://entro.security
To view or add a comment, sign in
-
Want to implement foundational application & product security controls in minutes? View the demo for free. No meetings, no hassles. Building something great is difficult. Securing it shouldn't be. Secure Untamed. #appsec #sbom #devops #sast #security https://untamed.cloud
Untame your Security
untamed.cloud
To view or add a comment, sign in
-
Helping companies realize positive business outcomes from their Information Technology Investments for over 25 years
#HPE Approach to Zero-Trust Security! 💡 Zero trust is a philosophical approach to protecting data and infrastructure that focuses on verifying identity and managing access. Read this white paper to discover how HPE applies zero-trust principles to compute, software, storage, and networking. To learn more, contact Strictly Tech, LLC.
Industry Overview—HPE Approach to Zero-Trust Security
srudner.lll-ll.com
To view or add a comment, sign in
-
The rise of #kubernetes calls for ironclad security. Explore the world of Kubernetes Ingress and how SSL/TLS can be your shield 🛡️
Why Securing Ingress With TLS Is Key To Achieving Strong Kubernetes Security
appviewx.dsmn8.com
To view or add a comment, sign in
-
The rise of #kubernetes calls for ironclad security. Explore the world of Kubernetes Ingress and how SSL/TLS can be your shield 🛡️
Why Securing Ingress With TLS Is Key To Achieving Strong Kubernetes Security
appviewx.dsmn8.com
To view or add a comment, sign in
-
🎯 With Microsoft Copilot for Security, one thing is for sure: no matter what your skill level, there's room to be more efficient. Learn why and get the stats in our latest research whitepaper: http://msft.it/6042lJYcu #MicrosoftCopilot #SecOps
To view or add a comment, sign in
-
Blog link: https://www.deepfactor.io/were-asking-the-wrong-questions-about-regresshion/