Security Resources

Securing Secrets: A Guide To Implementing Secrets Management in DevSecOps Pipelines

Secure secrets management in DevSecOps is crucial to prevent breaches. Implement best practices, automate rotation, and use tools for robust security.

May 9, 2024

by Josephine Eskaline Joyce, Ph.D

CORE

· 8,845 Views · 6 Likes

Is RBAC Still Relevant in 2024?

Explore the state of Role-Based Access Control (RBAC), why and how developers should use it, and what are the best practices to implement it in applications.

May 7, 2024

by Gabriel L. Manor

· 2,486 Views · 2 Likes

The Role of Kubernetes Security in the Immediate Future of Computing

As the leading container orchestration tool in the cloud infrastructure today, Kubernetes security must be taken seriously when using container infrastructure.

May 7, 2024

by Joseph Chukwube

· 3,076 Views · 2 Likes

Magic CAPTCHA: Outperforming Google reCAPTCHA by 2,567 Times

Google reCAPTCHA is fundamentally broken. It downloads 1.7MB of blocking JavaScript, and therefore completely destroys your website.

May 7, 2024

by Thomas Hansen

CORE

· 2,780 Views · 3 Likes

Implementing EKS Multi-Tenancy Using Capsule (Part 4)

Take a deep dive into security policy verification use cases by configuring security policy engines like Kyverno or Open Gatekeeper.

May 6, 2024

by Phani Krishna Kollapur Gandla

· 2,615 Views · 2 Likes

Five Ways To Reveal Your Security Practices

Here are the top five ways to ensure the development of a secure product and make the project safer. Read some valuable tips from the Sigma Software team.

May 6, 2024

by Den Smyrnov

· 3,051 Views · 1 Like

DevSecOps With Open Source Tools

DevSecOps: Integrating speed and security seamlessly. Conducts static and dynamic checks with each code update. Streamline processes without sacrificing safety.

May 3, 2024

by Yusuf Tezcan

· 1,985 Views · 1 Like

Microsoft Reveals Phi-3: First in a New Wave of SLMs

Phi-3, Microsoft's innovative small language model, boosts efficiency, affordability, and performance with quicker deployment.

May 3, 2024

by Dileep Kumar Pandiya

· 3,689 Views · 1 Like

Securing the Generative AI Frontier: Specialized Tools and Frameworks for AI Firewall

In this article, you will learn about specialized tools and frameworks for prompt inspection and protection or AI firewalls.

May 3, 2024

by Vidyasagar (Sarath Chandra) Machupalli FBCS

CORE

· 3,938 Views · 4 Likes

Preventing Account Takeover Through Open and Centralized Compromised Credential Index

Account Takeover frauds cause billions of dollars to people and companies. An open security standard could prevent this across software applications.

May 2, 2024

by Chetan Honnenahalli

· 1,875 Views · 2 Likes

Seccomp, eBPF, and the Importance of Kernel System Call Filtering

Learn about attacks that affect user space security products and how popular technologies such as Seccomp and eBPF can be used in such a way that avoids these issues.

May 2, 2024

by Bill Mulligan

· 9,094 Views · 3 Likes

Integrating SSPM and DevOps for Maximum Project Security

Enhance project security with SSPM and DevOps integration. Discover the power of combining tools for maximum protection.

May 1, 2024

by Ryan Kh

· 1,301 Views · 1 Like

Exploring FAPI 2.0: The Latest in API Security Technology

This post explores FAPI standards, which enhance secure data exchange in high-risk sectors, evolving from OAuth 2.0-based FAPI 1.0 to the more secure FAPI 2.0.

May 1, 2024

by Hideki Ikeda

· 2,837 Views · 2 Likes

How To Detect Living-Off-The-Land (LOTL) Attacks

A living-off-the-land attack occurs when cybercriminals exploit legitimate tools and features to gain access. These tips will help detect LOTL attacks.

May 1, 2024

by Zac Amos

· 1,687 Views · 1 Like

Implementing RSA From Scratch in Python (Part 2)

In Part 2 of this Python series, explore a discussion about Random Prime Numbers and the Fibonacci Number Calculation when implementing RSA from scratch.

April 29, 2024

by Traven West

· 1,366 Views · 1 Like

When APIs Go Wrong: Neglecting Rate Limiting

Authentication is important, though not a complete defense. Rate-limiting policies add an extra line of protection to reduce the impact on compromised APIs.

April 29, 2024

by Hugo Guerrero

CORE

· 2,236 Views · 1 Like

Revisiting Observability: A Deep Dive Into the State of Monitoring, Costs, and Data Ownership in Today’s Market

Explore insights into the current challenges in monitoring, highlighting issues with instrumentation, pricing models, and data ownership.

April 26, 2024

by Mike Moore

· 2,997 Views · 3 Likes

The Case for Choosing Between TCP and UDP for Data Transmission

The article compares TCP and UDP for data transmission, weighing reliability and sequential delivery of packets or fast speed and packet delivery in a stream.

April 26, 2024

by John Ejiofor

· 3,179 Views · 1 Like

Abusing Kubernetes Resources to the Moon

This article provides a practical guide to enforcing resource constraints and monitoring resource abuse in cloud-native workloads.

April 25, 2024

by Nigel Douglas

· 2,078 Views · 3 Likes

Is Your Roadmap Prioritizing Memory-Safe Programming Languages?

Cybersecurity agencies around the world put out a plea for developers to use memory-safe programming languages. Is your roadmap ready?

April 24, 2024

by Greg Bulmash

· 1,638 Views · 1 Like

The Latest Security Topics