A10 Networks, Inc’s Post

Our recent ebook is your expert guide to better protecting your data center from debilitating DDoS attacks. You'll learn: 🔀 Attack types that sometimes act in unison 🦾 How attackers strongarm weak points 💨 Diversion, subversion, and smokescreens 🕵️♂️ Detection and mitigation strategies Download your copy for more insights: https://bit.ly/3V1ldwL #DDoS #DataCenter

New AWS Security Blog 🔐 : How to build a Security Guardians program to distribute security ownership #awsnews #aws #blog #newblog #whatsnew #tech #womantech #security #awssecurity

This is awesome! Ran into this today during a training and loved it! So much more intuitive and thus very useful ❤️ #GitHub #GHAS Advanced filtering capabilities for the security overview dashboard https://buff.ly/4cC3gLs

Perfecting Ransomware on AWS: Using ‘keys to the kingdom’ to change the locks <- write up on the encryption of AWS environments https://lnkd.in/ddnQMEWf

Some technical details about the Loophole: Vulnerability: *It concerns the system:authenticated group in GKE. *The group accepts any Google-authenticated account, even those outside the organization Impact: *Exposure of various sensitive data types, including JWT tokens, GCP API keys, AWS keys, Google OAuth credentials, and private keys. *The misconfigured GKE clusters allowed cluster admin permissions to the system:authenticated group #GKE #kubernetessecurity

🔒 #Azure #Kubernetes Bug Exposes Cluster Secrets #Microsoft patched a critical AKS vulnerability allowing attackers to access cluster secrets: ⚠️ The flaw impacted Azure CNI and Network Policy settings, enabling privilege escalation without special permissions. 🔍 Attackers exploited WireServer to gain elevated access using TLS tokens. 💡 Mandiant urges tighter network policies, AKS audits, and secret rotations. 🔐 While fixed, this highlights the need for proactive #cloudsecurity.

New Video Alert! 🚀 Lab Name: Escalate Privileges by IAM Policy Rollback Difficulty: Beginner Focus: Red team In this video, we'll tackle the "Escalate Privileges by IAM Policy Rollback" lab from Pwned Labs. This hands-on exercise sheds light on the risks of leaving overly permissive settings unattended, showcasing how they can pave the way for breaches. Throughout the session, we'll delve into IAM and S3 enumeration techniques, explore password cracking using tools like ziptojohn and johntheripper, and, of course, cover how this breach occurred and discuss security measures. 🔗 Video Link: https://lnkd.in/dwpza_iX If you like this Pwned Lab series, then feel free to share it with people who are interested in cloud security. #aws #pwnedlabs #awssecurity #iam

Securing Your API with Encryption: Best Practices and Tools In today’s digital landscape, securing data is paramount. When integrating APIs into your systems, encryption is a critical measure to protect sensitive information both in transit and at rest. Here are some best practices and tools to ensure your API remains secure: 1. Use HTTPS/TLS for Data in Transit 🔒 Implement SSL/TLS to encrypt data between clients and servers. Tools like Certbot and OpenSSL can help you set this up. 2. Encrypt Data at Rest 🗄️ Utilize built-in database encryption features: MySQL: Transparent Data Encryption (TDE) PostgreSQL: pgcrypto for column-level encryption MongoDB: Encrypted storage engine 3. Employ Strong Cryptographic Algorithms 🔐 Opt for robust algorithms: Symmetric Encryption: AES-256 Asymmetric Encryption: RSA-2048 Hashing: SHA-256 or SHA-3 4. Secure API Endpoints 🛡️ Use strong authentication (OAuth 2.0, JWT) and role-based access control (RBAC). 5. Implement Key Management Practices 🔑 Store and manage keys securely using AWS KMS, Azure Key Vault, or Google Cloud KMS. 6. Monitor and Audit 📊 Regularly audit encryption practices and monitor access to ensure compliance. By following these practices, you can significantly enhance the security of your API and protect sensitive data from potential threats. Stay secure and keep innovating! Follow | DM Sonali Nigade #API #Encryption #CyberSecurity #DataProtection #TechTips

⏩ ⏩ Introducing Forwarders! ⏩ ⏩ Forwarders let you effortlessly send your parsed and enriched data from Coralogix to an external Kafka cluster [starting with AWS Managed Kafka (MSK)], integrating with your existing data pipelines and systems. Forwarders let you tap into specialised analytics tools, comply with data retention policies, and expand your security monitoring setup. The data forwarded is configurable. Users can choose to forward all logs, a specific application/subsystem, or subsets basis customer filters. Moreover, as AWS MSK runs open-source versions of Apache Kafka, you can avoid any platform lock-in. https://lnkd.in/gir3BS_a Coralogix #siem #mdr #cybersecurity #cyberresilience #ciso Amazon Web Services (AWS)

✨ Day 23 of #30dayscloudchallenge..☁ #PEPChallenge...✅ 𝑺𝒕𝒆𝒑𝒔 𝒇𝒐𝒓 𝑼𝒔𝒊𝒏𝒈 𝒂 𝑺𝒆𝒄𝒓𝒆𝒕 𝑴𝒂𝒏𝒂𝒈𝒆𝒓 🚀 ➡️ Set Up the Secret Manager: Initialize your chosen secret manager service. ➡️ Store a Secret: Securely store your secret, such as an API key or password.🔐 ➡️ Access a Secret: Retrieve the secret securely via SDK, CLI, or API.🔍 ➡️ Manage Access Policies: Define and enforce who can access or manage the secrets.🛡️ ➡️ Rotate Secrets: Regularly update and rotate secrets to maintain security.🔄 ➡️ Audit Access: Monitor and audit access logs for security and compliance.📊 #PEPcloudchallenge ☁ #AWS #SecretManager #CloudComputing #30dayscloudchallenge 👩💻 #PEPCloudChallenge #LearningJourney #TechEducation #StJosephsGroup #HandsOnLearning #TechCommunity #30DaysChallenge ✅