Tips

Improve Kubernetes security to protect cloud instances

Strong Kubernetes security is important to keep out attackers looking to use compromised containers for malicious activities, like bitcoin mining. Expert Dave Shackleford explains. Continue Reading
How to handle configuration management in the cloud without issue

Not handling configuration management in the cloud correctly can unintentionally expose sensitive enterprise data. Expert Ed Moyle explains how to make sure this doesn't happen. Continue Reading
How to prevent an insider data breach of the cloud

Enterprises using the cloud should be particularly careful to avoid an insider data breach. Expert Frank Siemons explains why it's important to stop insider threats in the cloud. Continue Reading
How Microsoft uses secure enclaves to improve cloud security

The use of secure enclaves in the Microsoft Azure confidential computing update aims to improve cloud storage security. Expert Rob Shapland explains how it works. Continue Reading
Ransomware in the cloud: How to handle the threat

Expert Ed Moyle looks at ransomware in the cloud and how it differs from traditional ransomware attacks. Find out how your organization can prepare for both. Continue Reading

Is cloud microsegmentation secure enough for enterprise use?

The use of cloud microsegmentation in enterprises has been met with some hesitation. Expert Dave Shackleford discusses why there are reservations and what the benefits are. Continue Reading
How to use the NIST Cybersecurity Framework for the cloud

Aligning the NIST Cybersecurity Framework with cloud services like AWS and Azure can improve cloud security. Expert Ed Moyle explains how to best use the framework for the cloud. Continue Reading
How a cloud-based Kali Linux system helps with pen testing

Enterprises can use a Kali Linux system in the cloud for penetration testing. Expert Frank Siemons explains how it works and some alternative methods for testing. Continue Reading
Why web application attacks are a growing threat to the cloud

New research found that web application attacks present a significant threat to cloud environments. Rob Shapland explains the risks and what enterprises should do about them. Continue Reading
Understanding VM escape vulnerabilities and how to avoid them

In the last couple of years, VM escape vulnerabilities have popped up and caused problems for enterprises that rely on the cloud. Expert Ed Moyle explains how to handle these issues. Continue Reading
How Docker APIs can be misused to plant malware

Researchers discovered how Docker APIs can be exploited to hide malware. Dave Shackleford explains the attack method and the threat it poses to container and virtual machines. Continue Reading

Why cloud reconnaissance is crucial to a secure cloud environment

Knowledge is power, which is why cloud reconnaissance and enumeration are key when it comes to securing the cloud. Expert Frank Siemons explains why and how to do it. Continue Reading
Ransomware defense isn't necessarily stronger in the cloud

Storing data in the cloud isn't a sure-fire ransomware defense method. Expert Rob Shapland examines how the cloud helps and hurts when it comes to ransomware attacks. Continue Reading
The security risks of HTTPS inspection in the cloud

Cloud service providers can perform HTTPS inspection, despite warnings from US-CERT. Expert Ed Moyle looks at what this technique does and what the security implications are. Continue Reading
How to manage control inheritance in a hybrid cloud environment

Effective management of access control inheritance is important in a hybrid cloud environment. Expert Ravila White explains the challenges involved and how to overcome them. Continue Reading