So organisations need to protect their cloud applications while considering the special characteristics of public cloud environments and the security challenges that they pose.
Tag: IT risk & security
Fastly Next-Gen WAF’s edge deployment option protects business-critical applications and APIs
Fastly is executing on its strategy to provide security anywhere, making it an important choice for organizations needing a flexible WAF that protects business-critical apps and APIs in a breadth of deployment options.
6 Best Practices For Securing the CI/CD Pipeline to Prevent Data Leakage
The CI/CD pipeline, like any system, can be vulnerable to data leakage, and security steps must be taken to prevent this wherever possible.
However, this level of automation and the speed with which the pipeline develops can leave it vulnerable to data leakage, which is why it’s crucial to ensure the CI/CD pipeline is secure.
How zero trust security will revolutionize DevSecOps
DevOps and DevSecOps have created controlled, easily deployable, secure and automated development-to-production processes that allow software updates multiple times per day with less risk.
Because enterprise network security relies on static firewall rules that can only be updated in maintenance windows after a change approval process, securely deploying applications in an automated way will not work in dynamic cloud environments
Blockchains: Use Cases In Cybersecurity
We are starting to see alternative use cases emerge for blockchain technology, especially in areas such as cybersecurity identity management, food industry supply chains, healthcare, property records and digital voting.
Best Practices for Application Security in the Cloud
AppSec teams may need to coordinate with security and ops teams from cloud service providers (CSPs) to ensure proper coverage and to adapt cloud-specific best practices.
Azure DDoS Protection—2021 Q3 and Q4 DDoS attack trends
In November, Microsoft mitigated a DDoS attack with a throughput of 3.47 Tbps and a packet rate of 340 million packets per second (pps), targeting an Azure customer in Asia.
Attack vectors were UDP reflection on port 80 using Simple Service Discovery Protocol (SSDP), Connection-less Lightweight Directory Access Protocol (CLDAP), Domain Name System (DNS), and Network Time Protocol (NTP) comprising one single peak, and the overall attack lasted approximately 15 minutes.