%term

Vulnerability Remediation for Servers: Beyond Just Patching

Dec 21, 2023 By John Gates In CalCom

To understand vulnerability remediation one must first understand remediation in cyber. Remediation refers to the process of addressing and resolving security vulnerabilities or incidents that could potentially pose a threat to an organization’s information systems, data, or network.

Read Post

CalCom

Read more about Vulnerability Remediation for Servers: Beyond Just Patching

The Challenges for License Compliance and Copyright with AI

Dec 21, 2023 By Jeff Martin In Mend

So you want to use AI-generated code in your software or maybe your developers already are using it. Is it too risky? Large language model technology is progressing at rapid speeds, and policy makers are ill-equipped to catch up quickly. Anything resembling legal clarity may take years to come about. Some organizations are deciding not to use AI at all for code generation, while others are using it cautiously — but everyone has questions.

Read Post

Mend

Read more about The Challenges for License Compliance and Copyright with AI

Multi-Cluster Dashboard For Velero User

Dec 20, 2023 By CloudCasa In CloudCasa

Think about it, you need SaaS or Self-hosted version, and you can sign up and test here:
https://cloudcasa.io/kubernetes-backup/

View Video

CloudCasa

Read more about Multi-Cluster Dashboard For Velero User

Under the hood of CVE patching

Dec 19, 2023 By Oshrat Nir In ARMO

Addressing Common Vulnerabilities and Exposures, known as CVE patching, is a practice of applying updates to software (patching) to address security vulnerabilities. CVE patching is your shield against the threat of malicious actors exploiting such weaknesses and is of crucial importance for every organization’s cybersecurity. This post will cover the basics of CVE patching: the roles and stakeholders, the step-by-step process, and common mistakes to avoid.

Read Post

ARMO

Read more about Under the hood of CVE patching

The New Frontier in Cybersecurity: Embracing Security as Code

Dec 15, 2023 By Guest Expert In GitGuardian

Security as Code (SaC) is a term often used with DevSecOps, but what does it mean exactly? Learn best practices and key components for a more secure and efficient development process.

Read Post

GitGuardian

Read more about The New Frontier in Cybersecurity: Embracing Security as Code

N-Day Hijack: Analyzing the lifespan of package hijacking attacks

Dec 14, 2023 By Yair Mizrahi In JFrog

Software package hijacking has become a prominent concern for individuals, businesses, and the cybersecurity community at large. We’ve seen this new threat trend rise over the past couple of years, with the potential to severely impact the software supply chain by attackers exploiting software packages to execute malicious code. This blog post details a case study conducted by our security research team, in an effort to trace the typical time before a package hijack is detected.

Read Post

JFrog

Read more about N-Day Hijack: Analyzing the lifespan of package hijacking attacks

Is Santa an insider threat?

Dec 14, 2023 By Ben Arent In Teleport

Is Santa an insider threat? He breaks into your home, consumes cookies, drinks milk/whisky and leaves a collection of items hidden behind highly decorated wrapping paper. Rumor has it that he can tell if you’re naughty or nice and is actively tracked by NORAD. Can we trust Santa with his elevated access? The answer is, of course, Yes, because we are all Santa. Santa is ultimate trusted Certificate Authority, entrusting intermediate trust to parents worldwide.

Read Post

Teleport

Read more about Is Santa an insider threat?

Managing Multi Account AWS Console and CLI Access with Teleport

Dec 14, 2023 By Teleport In Teleport

Are you using multiple AWS accounts to separate your environments like many of the engineering teams we work with? If you are, you may be looking for a better way to access those accounts. Join us for a session, in which Nivathan Somasundharam, Implementation Engineer at Teleport, and Ashok Mahajan, Senior Partner SA at AWS, discuss some common challenges that arise when using multiple AWS accounts to separate cloud environments and how to use Teleport to solve these issues. Some of the most common issues people face include.

View Video