Tools

Cybersecurity defenses are composed of several protective layers, each providing a unique set of capabilities to detect and mitigate threats. Security Orchestration, Automation, and Response (SOAR) systems and Security Information and Event Management (SIEM) systems are interconnected parts of an organization's layered security strategy, though they each fill a unique piece of the cybersecurity puzzle.…

While container security tools can identify vulnerabilities and enforce compliance, they can also result in alert fatigue, difficult integrations, and security gaps across disparate environments. The debate isn’t whether to use these tools — it’s how to use them smarter in increasingly intricate setups. We’re breaking down what tools are available and their best use…

To what extent do organizations need fine-grained access control? Or is broader coverage over cloud infrastructure a bigger immediate risk to manage? Which aligns better with GDPR? SOC 2? To counter immediate risk? And is combining these cloud tools just a path to duplicate coverage? Those are all good questions that point to the reality…

Kubernetes is a multi-layered environment. Highly dynamic clusters can be spun up and taken down quickly, making it difficult to track potential threats in real time. But Kubernetes doesn’t exist in a vacuum — it orchestrates containers that run on a complex infrastructure, where misconfigurations, Identity and Access Management (IAM), and network security all come…

Cybersecurity vulnerabilities have been tracked since 1999, when the Internet Category of Attack (ICAT) toolkit began compiling attack scripts and made them available to developers to look up easily. ICAT evolved into the National Vulnerability Database (NVD) of today, holding over 150,000 vulnerabilities and adding tens of thousands more annually. Beyond the basics, we’re going…

From fine-tuning identity and access management (IAM) to scaling as usage grows, there are plenty of operational and security challenges for teams already committed to working in Amazon’s public cloud. Most revolve around managing scalability with multi-region and multi-cloud security. We’ve addressed the specifics of EC2 security and Lambda security. Now we’re looking at AWS…

When the non-profit MITRE organization began compiling its compendium knowledge base called ATT&CK (Adversarial Tactics, Techniques, & Common Knowledge, pronounced ‘attack’) in 2013, it made cyber security attacks and vocabulary accessible free to government, enterprises, and the public looking to understand known behaviors — from the standpoint of adversarial behaviors. In this article we will…

CWPP is a cloud security solution that protects workloads with near real-time monitoring in cloud-native and hybrid environments. We’re going beyond the basics to situate this tool in your arsenal. In a world where technological advancements have enabled both connectivity and growing numbers of cyber attacks, security tools like CWPP have evolved to help organizations…

The use of open source software (OSS) is commonplace in cloud security, but it can also present unique security challenges. This article will dive into OSS vulnerability management, highlighting the potential need for commercial vulnerability management solutions over open source vulnerability management tools.  What are OSS Vulnerability Management Tools? Open-source vulnerability management tools refer to…