4276 articles
4276 ARTICLES
A new exploit method targeting CVE-2022-41080 and CVE-2022-41082 vulnerabilities in Exchange servers, which can bypass previous workarounds, has been discovered and exploited in the wild. Organizations should patch urgently.
How to mock Prisma Client with Vitest and vitest-mock-extended so you can unit test database code without a real database. Verified on Prisma ORM 7.8.
Read all about the important cloud security updates from re:Invent 2022.
This article will explore Kubernetes NetworkPolicy by creating an example network policy and examining its core parameters. Then, we’ll look at some common NetworkPolicy use cases and learn how to monitor them using kubectl. Finally, we’ll discover how to implement Container Network Interface (CNI) using third-party Kubernetes extensions.
Wiz enhances its Dynamic Scanner to detect publicly exposed, unauthenticated APIs
Software bill of materials (SBOMs) are important tools to make software supply chain security easier? But are they effective? We did some research to find out.
Learn about Chainguard Labs, Chainguard’s research division, with a focus on software development and vulnerability research.
Explore the Prisma Client API to send database queries and Prisma Migrate worklfows to evolve your database schema in an interactive environment.
On December 8th, Clinton Herget and Simon Maple, Field CTOs at Snyk, had the opportunity to chat with Corey Quinn, Chief Cloud Economist at The Duckbill Group, podcast host, curator of “Last Week in AWS”, and snarky Twitter personality. Their conversation took a lot of fun turns, from ranting about the hour-long line to get coffee at AWS re:Invent, to Corey proclaiming that “SBOMs are a fantasy” (there’s more context to that… keep reading). We’ll be covering a few of the biggest highlights in this blog, but if you want to hear every Corey Quinn-ism from this conversation, watch the whole panel here.
In the spirit of the holiday season, we’re laying out an application security “battle plan” for keeping out attackers — à la Kevin McAllister.
Easily detect dangling domains to reduce the risk of phishing campaigns and cookie harvesting of organization’s customers.
Congratulations to Cloud Security Podcast for being given DMA’s “Podcast of the Year” award!