In this Cloud Threat Report, Unit 42 researchers detail how one common access misconfiguration allowed the team to compromise an entire cloud environment and bypass a full set of security controls. The researchers note that 65% of all cloud security incidents are the result of customer misconfigurations like this one. As enterprises move more workloads, ...

Cloud security trends like “shift-left security” and “DevSecOps” refer to new strategies and paradigms that help organizations keep workloads secure in the age of cloud-based, scale-out, constantly changing applications and infrastructure. Many in IT, security, and development probably understand what these concepts mean at a high level. Implementing them in a practical sense, however, may ...

Kubernetes is a many-layered beast-a complex platform that consists of more than half a dozen components. While it offers a handful of native security features, fully securing your environment means addressing various types of potential vulnerabilities across layers of infrastructure. Fortunately, the fact that Kubernetes is a sprawling platform with so many integrations also makes ...

In the State of Cloud Native Security report, learn the practices, tools, and technologies innovative companies are using to overcome the challenges of cloud native architecture, along with methodologies to fully realize the rewards of moving to the cloud. Based on a survey of 3,000 cloud architecture, InfoSec and DevOps professionals across five countries, the ...

In the State of Cloud Native Security report, learn the practices, tools and technologies innovative companies are using to overcome the challenges of cloud native architecture, along with methodologies to fully realize the rewards of moving to the cloud. Based on a survey of 3,000 cloud architecture, InfoSec and DevOps professionals across five countries, the ...

Cloud security trends like “shift-left security” and “DevSecOps” refer to new strategies and paradigms that help organizations keep workloads secure in the age of cloud-based, scale-out, constantly changing applications and infrastructure. Many in IT, security, and development probably understand what these concepts mean at a high level. Implementing them in a practical sense, however, may ...

Kubernetes is a many-layered beast—a complex platform that consists of more than half a dozen components. While it offers a handful of native security features, fully securing your environment means addressing various types of potential vulnerabilities across layers of infrastructure. Fortunately, the fact that Kubernetes is a sprawling platform with so many integrations also makes ...

As the engine that powers business, science, education, government and so many other human endeavors, computing has evolved enormously over the past few decades – and that evolution is accelerating. Today, the focus is less on the hardware underlying computing and more on the application itself. We abstract computing away from the hardware as much ...

The first annual State of Cloud Native Security report examines the practices, tools and technologies innovative companies are using to manage cloud environments and drive cloud native development. Based on a survey of 3,000 cloud architecture, InfoSec and DevOps professionals across five countries, the report surfaces insights from a proprietary set of well-analyzed data.

In the Unit 42 Cloud Threat Report 2H 2020, researchers examined cloud infrastructure threats through the lens of identity and access management (IAM). The report details a Red Team exercise along with analysis from terabytes of data, thousands of cloud accounts, and more than 100,000 GitHub code repositories. Findings indicate that identity misconfigurations are prevalent ...