Cyber Security

Cyber Security
CoGuard and API Security

Let's take a dive into API security. In this article we explore the history of APIs, available tooling, and all the components-not just the endpoints-that need to be considered to set up and maintain secure APIs.

Cyber Security
Healthy Configurations for HIPAA Compliance

Compliance with the Health Insurance Portability and Accountability Act (HIPAA) is a must for organizations that handle protected health information (PHI). This article addresses how to ensure that your application(s) and the surrounding infrastructure is (and stays) compliant with examples of what can go wrong.

Cyber Security
Protect Your Business from Ransomware: Addressing the Root Causes

Ransomware remains a top threat for organizations, yet many still treat symptoms rather than tackling the root causes. Microsoft research reveals that over 80% of ransomware attacks stem from common configuration errors, therefore, hardening your configurations is the best protection.

Cyber Security
The Rise of Configuration Files… What you need to know about Fedramp Rev 5

FedRAMP Revision 5 introduces a new requirement in Section CA-7: monthly scans of configuration files. In this blog, we'll break down what this update means and provide quick tips on how to meet this new requirement efficiently.

Cyber Security
Are AWS Account IDs secrets?

Uncover the Truth: Are AWS Account IDs Secrets? Learn Crucial Insights for ECR Security and Prevention. Essential Reading for IT Managers and Administrators!

Cyber Security
Decoding Web3: Navigating the Crucial Role of Infrastructure - A Case Study

Uncover the Billion Dollar Web3 Exploit: Learn how overlooking Web2 security in blockchain infrastructure led to massive losses. Explore the case study with insights on vulnerabilities, server practices, and preventive measures.

Cyber Security
Differences between Including Software Libraries vs Containers

Navigating Libraries vs. Containers - Insights on Versioning, Code Scanning, and Configuration Safeguards for Developers and Security Teams

Cyber Security
The Evolution of Static Analysis: From Blue Screens to Secure Infrastructures

History of static analysis and static application security testing (SAST) including the recent additions for infrastsructure, IaC and containers.

Cyber Security
Implementing Strong Cross-Tenant Security Boundaries

Do you run your secured workloads in the cloud? Countermeasures to prevent unauthorized access to ensure strong security boundaries to mitigate potential cross-tenant vulnerabilities in SaaS/PaaS applications

Cyber Security
Shared Responsibility Model for PaaS - A Look at Pantheon

Learn about the shared responsibility model for Platform as a Service (PaaS) using Pantheon as an example. A CoGuard scan of a Pantheon MySQL instance revealed various security concerns, highlighting the need for proactive configuration checks when using PaaS providers.

Cyber Security
Faster White-Box Penetration Testing Through Static Analysis of Configuration Files

The article discusses penetration testing – methods to identify and patch vulnerabilities in an organization's systems and how technology has evolved to make in depth white box penetration testing possible.

Cyber Security
The different flavours of Docker image security

This article focuses on outlining the difference between some of the common image security scanners out there, what they are scanning for, and what the major differences are.

Cyber Security
Setting Up CloudFront? You may have forgotten this commonly left out step

The security headers in the CloudFront responses is one of the top 10 OWASP security recommendations that we see missing in 75% of login portals we look at. Why is this?

Cyber Security
Services are allowed to run in an insecure way. Why is that, and what can we do about it?

From our experience, it takes teams at least three times longer to set up a service in a secure way compared to the initial “just make it work” setup, but it doesn't have to stay this way!

© 2021-2024 All rights reserved Heinle Solutions Inc.