TLDR; * For organizations before investing in threat hunting or Red teaming, blue teaming or Purple teaming, understand your threat landscape, your security maturity, and have threat detection capabilities via different tooling. * Certifications like soc. Two hipaa, et cetera are a good foundation, but invest in continuous security risk assessment. * For
February 24, 2023
TLDR; * For managed kubernetes hyper scalers are sort of responsible for control plane, key value store like, etc. But when it comes to security of the workloads or worker notes, it’s the user’s responsibility. * In case of Kubernetes, like securing. Kubernetes best practice is to implement a few
February 17, 2023
TLDR; * For incident response. Always prepare a plan and socialize that within the organization and perform tabletop or fire drill exercises to check for the preparedness of those. * Avoid social engineering and doxing attacks. MFA is a must. And on top of that, use onetime passcode based or the hardware
February 10, 2023