CI/CD container security considerations
Containers are heavily used in the CI/CD environments. There are various phases, where security needs to be taken care of in a CI/CD pipeline. The developers...
Article Archive
Bandook malware: What it is, how it works and how to prevent it
Bandook malware is a remote access trojan (RAT) first seen in 2007 and active for several years.
Bandook RAT, written in both Delphi and C++, was first seen...
Quantum cyberattacks: Preparing your organization for the unknown
Quantum computing has been a buzzword for several years. And while it’s still the early days, several industries have been showing progress, and 2020 brought...
Vulnerability scanning inside and outside the container
With the wide acceptance of the concept of containerized applications due to the benefits they bring, one should not overlook the security in container environments....
Security+ and the DoD 8570 [updated 2021]
The Department of Defense document DoD 8570.01-M (11/10/2015) provides guidance and procedures for the training, certification and management of the DoD workforce...
An Introduction to asymmetric vs symmetric cryptography
Most people are aware of the basic idea behind cryptography — hiding a message with a code that can only be decoded by your intended recipient. However, this...
How Docker primitives secure container environments
Docker makes heavy use of Linux kernel features. One of the fundamental aspects that containers make use of from Linux Kernel are namespaces and cgroups. This...
Top 4 Zapier security risks
Zapier is a platform that allows you to integrate web apps across an organization. It can make fast work of data from various web applications; however, it...
Common container misconfigurations and how to prevent them
Docker is a containerization software that comes with a great set of features that make it easy to build and run containers. With the great features Docker...
Security+ exam domain #2: architecture and design [updated 2021]
Architecture and Design is a core component of a successfully managed Information Security environment. Not only is it a logical conclusion that Architecture...