Automated Vulnerability Scanning for Cloud Resources: A Checklist
In March, a fintech client called us at 2 AM because an attacker had pulled 14GB of customer records from an S3 bucket that nobody on their team remembered creating. T…
6 min read
Docker Container Security: 15-Checkpoint Audit
It is 2:47 AM. Your SIEM fires a privilege escalation alert on a production Linux host. You pull the process tree and find the origin: a Docker container launched six…
15 min read
DevSecOps Best Practices: A Pipeline Walkthrough
During an incident response engagement last year, we pulled the deployment logs for a mid-sized financial services company and found something that should have stopped…
8 min read