Secrets Security

28 Aug Why Docker-compose.yml Is a Security Risk Surface?

Posted at 13:29h in Secrets Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

25 Aug Exit Code -1 After a Git Push? It Might Be Your Secrets or Vulnerable Code

Posted at 12:03h in Secrets Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

08 Aug How a Simple Format String Bug Can Lead to Memory Corruption (and How to Spot It in Your Code)

Posted at 14:25h in Secrets Security by Stefano Gasperi 0 Comments

Discover how GitHub games, unblocked games, and GitHub io games can hide malware. Learn how to stay secure while exploring open repos....

Read More

08 Aug How to Stop Source Code Leakage Before It Becomes an Intellectual Property Disaster

Posted at 13:49h in Secrets Security by Stefano Gasperi 0 Comments

Discover how GitHub games, unblocked games, and GitHub io games can hide malware. Learn how to stay secure while exploring open repos....

Read More

07 Aug Security Misconfiguration: The Silent Risk in Your Stack

Posted at 15:58h in Code Security, Secrets Security by Fátima Said 0 Comments

Fix security misconfiguration vulnerability fast. Prevent OWASP security misconfiguration, secure containers, and protect CI/CD pipelines. ...

Read More

07 Aug CTF Tokens, CSRF Mistakes, and Leaked Secrets

Posted at 11:14h in Secrets Security by Stefano Gasperi 0 Comments

Discover how GitHub games, unblocked games, and GitHub io games can hide malware. Learn how to stay secure while exploring open repos....

Read More

01 Aug Dosfuscation: The Hidden Denial-of-Service Threat in Your Dependencies

Posted at 11:15h in Secrets Security by Stefano Gasperi 0 Comments

Learn how generative AI supports cybersecurity remediation and why AI won’t replace security teams anytime soon. ...

Read More

31 Jul How Attackers Use Crackshash for Password Cracking (And How to Stop Them)

Posted at 17:06h in Secrets Security by Stefano Gasperi 0 Comments

Learn how generative AI supports cybersecurity remediation and why AI won’t replace security teams anytime soon. ...

Read More

30 Jul How to Stop Hardcoding Secrets with HashiCorp Vault

Posted at 14:26h in Secrets Security by Fátima Said 0 Comments

Avoid hardcoding with secrets management and HashiCorp Vault. Learn secure practices for developers and CI/CD pipelines....

Read More

22 Jul Why the Single Responsibility Principle Matters for Secure Code?

Posted at 15:21h in Code Security, Open-Source Security, Secrets Security, Software Supply Chain by Stefano Gasperi 0 Comments

Learn how to check for malware, how to get rid of malware, and see real malware examples targeting DevOps pipelines. ...

Read More

22 Jul Sniffing Application: A Hidden DevSecOps Supply Chain Risk

Posted at 11:14h in Code Security, Open-Source Security, Secrets Security, Software Supply Chain by Stefano Gasperi 0 Comments

Learn how to check for malware, how to get rid of malware, and see real malware examples targeting DevOps pipelines. ...

Read More

22 Jul Barracuda Attack: What It Means for Your CI/CD Security?

Posted at 09:18h in Code Security, Open-Source Security, Secrets Security, Software Supply Chain by Stefano Gasperi 0 Comments

Learn how to check for malware, how to get rid of malware, and see real malware examples targeting DevOps pipelines. ...

Read More