With an ever connected and globalized world, it is not surprising that cybersecurity attacks are on the rise. The repercussions of persistent cybersecurity attacks touch all types of organizations regardless of scale, from huge international companies to small local non-profits…
Tag: DZone Security Zone
How to Master a DevSecOps Pipeline that Devs and AppSec Love
When you became a developer, you didn’t imagine you’d be spending a big chunk of your time parsing vulnerability reports, getting stuck in security review cycles, or rerunning CI jobs because the pipeline flagged a dozen “critical issues,” half of…
Secure DevOps in Serverless Architecture
Serverless computing, app development, and deployment have been completely revolutionized by its unparalleled scalability and cost efficiency. Infrastructure management abstraction, which is provided by serverless platforms like AWS Lambda, Google Cloud Functions, and Azure Functions, allows developers to concentrate on…
How to Achieve SOC 2 Compliance in AWS Cloud Environments
Did you know cloud security was one of the most evident challenges of using cloud solutions in 2023? As businesses increasingly depend on Cloud services like Amazon Web Services (AWS) to host their applications, securing sensitive data in the Cloud…
Why 99% Accuracy Isn’t Good Enough: The Reality of ML Malware Detection
The threat of malware in enterprises is evolving each year. As enterprises expand their digital footprint through remote work and cloud adoption, their attack surface increases, making them more vulnerable to targeted malware campaigns. FBI’s 2023 Internet Crime Report showed…
Mastering Kubernetes Observability: Boost Performance, Security, and Stability With Tracestore, OPA, Flagger, and Custom Metrics
In modern microservices architectures, achieving comprehensive observability is not just an option—it’s a necessity. As applications scale dynamically within Kubernetes environments, tracking performance issues, enforcing security policies, and ensuring smooth deployments become complex challenges. Traditional monitoring solutions alone cannot fully…
Understanding the Fundamentals of Cryptography
Cybersecurity encompasses multiple different domains, including network isolation, platform security and infrastructure security. However, one thing that we less frequently discuss, but use more than often is cryptography. Whether it’s HTTPS, data encryption in databases, disk encryption, or technologies like…
How Security Engineers Can Help Build a Strong Security Culture
In today’s fast-paced world, organizations face increasing cyber threats that can compromise their operational integrity, erode customer trust, and jeopardize financial stability. While it’s crucial to have advanced security technologies in place, many organizations overlook the importance of cultivating a…
Evaluating Similariy Digests: A Study of TLSH, ssdeep, and sdhash Against Common File Modifications
The field of digital forensics often uses signatures to identify malicious executables. These signatures can take various forms: cryptographic hashes can be used to uniquely identify executables, whereas tools like YARA can help malware researchers identify and classify malware samples.…
Secure Your Oracle Database Passwords in AWS RDS With a Password Verification Function
Protecting database access through strong password policies is a cornerstone of security in any environment. When deploying Oracle databases on AWS RDS, enforcing password complexity is essential, but the approach differs slightly from on-premises Oracle environments. AWS provides two primary…
Online Developer Tools a Backdoor to Security Threat
< div tabindex=”0″> Free Online Utilities May Not Be Safe Using online developer utilities, such as a JSON Viewer, can be incredibly convenient for parsing and visualizing JSON data, but they also come with significant risks. The tool, for instance,…
Serverless IAM: Implementing IAM in Serverless Architectures with Lessons from the Security Trenches
When I first began working with serverless architectures in 2018, I quickly discovered that my traditional security playbook wasn’t going to cut it. The ephemeral nature of functions, the distributed service architecture, and the multiplicity of entry points created a…
Secure IaC With a Shift-Left Approach
Imagine you’re building a skyscraper—not just quickly, but with precision. You rely on blueprints to make sure every beam and every bolt is exactly where it should be. That’s what Infrastructure as Code (IaC) is for today’s cloud-native organizations—a blueprint…
Privacy-Preserving AI: How Multimodal Models Are Changing Data Security
Ever had that feeling that your phone is listening to you? You mention something random in conversation, and suddenly you’re bombarded with ads about it. Creepy, right? Privacy concerns surrounding AI have always been there. But something fascinating is happening…
The Rise of Vibe Coding: Innovation at the Cost of Security
Software development teams and professionals are increasingly adopting vibe coding as their preferred approach. Vibe coding involves creating software through instinctual coding methods and minimal planning to achieve quick prototyping or making solutions work immediately. While vibe coding can spark…
Enhancing SQL Server Security With AI-Driven Anomaly Detection
As SQL Server databases become increasingly targeted by cybercriminals, it’s crucial to adopt proactive security measures. Traditional database security mechanisms, such as access controls, role-based permissions, and firewalls, are important but may not be sufficient to detect advanced threats or…
The Synergy of Security and Development: Integrating Threat Models With DevOps
In our digital-first world, security isn’t just important — it’s non-negotiable, especially within DevOps environments. Yes, DevOps brilliantly accelerates development by bridging the gap between development and operations teams. But here’s the catch: that impressive speed sometimes races past essential…
Securing DevOps Pipelines: A Practical Guide to Balancing Speed and Security
Security has been a major concern in today’s world. Security issues lead to data breaches with consequences such as data loss and financial losses. As a result, there is a need to focus on enhancing security. The OWASP top 10…
Enterprise Data Loss Prevention (DLP) Security Policies and Tuning
I’ve worked with a lot of enterprise customers over the years—big ones, too—and a common struggle I see is with their Data Loss Prevention (DLP) policies. Even though they’ve had the product for years, they often face one of two…
When Airflow Tasks Get Stuck in Queued: A Real-World Debugging Story
Recently, my team encountered a critical production issue in which Apache Airflow tasks were getting stuck in the “queued” state indefinitely. As someone who has worked extensively with Scheduler, I’ve handled my share of DAG failures, retries, and scheduler quirks,…