Devsecops

!!! info "Architectural Context" Detailed reference for Devsecops in the context of Hardened Infrastructure.

devopszone.info: DevSecOps Explained [COMMUNITY-TOOL]
linkedin: Dear Google, my data has left your building! [COMMUNITY-TOOL]
snyk.io: The State of Open Source Security 2020 [COMMUNITY-TOOL]
kalilinuxtutorials.com: Deploying & Securing Kubernetes Clusters [COMMUNITY-TOOL]
loves.cloud: Creating a fully automated DevSecOps CI/CD Pipeline [COMMUNITY-TOOL]
redhat.com: Balancing Linux security with usability [COMMUNITY-TOOL]
thenewstack.io: Culture, Vulnerabilities and Budget: Why Devs and AppSec Disagree [COMMUNITY-TOOL]
computing.co.uk: CloudBees gets busy with security, visibility and control as DevOps evolves [COMMUNITY-TOOL]
devops.com: How to Successfully Integrate Security and DevOps [COMMUNITY-TOOL]
helpnetsecurity.com: How to make DevSecOps stick with developers [COMMUNITY-TOOL]
blog.christophetd.fr: Shifting Cloud Security Left — Scanning Infrastructure as Code for Security Issues [COMMUNITY-TOOL]
devclass.com: Docker: It’s not dead yet, but there’s a tendency to walk away, security report finds [COMMUNITY-TOOL]
opensource.com: How to adopt DevSecOps successfully [COMMUNITY-TOOL]
devops.com: DevSecOps Trends to Know For 2021 [COMMUNITY-TOOL]
devops.com: From Agile to DevOps to DevSecOps: The Next Evolution [COMMUNITY-TOOL]
permission.site [COMMUNITY-TOOL]
ais.com: Leaping into DevSecOps from DevOps [COMMUNITY-TOOL]
infoq.com: The Defense Department's Journey with DevSecOps [COMMUNITY-TOOL]
amazon.com: Building end-to-end AWS DevSecOps CI/CD pipeline with open source SCA, SAST and DAST tools [COMMUNITY-TOOL]
infoq.com: 9 Trends That Are Influencing the Adoption of Devops and Devsecops in 2021 [COMMUNITY-TOOL]
invensislearning.com: Difference between DevOps and DevSecOps [COMMUNITY-TOOL]
techerati.com: DevSecOps: Eight tips for truly securing software [COMMUNITY-TOOL]
devops.com: SecDevOps is the Solution to Cybersecurity 🌟 [COMMUNITY-TOOL]
redeszone.net: No configurar bien la nube es culpable de la mayoría de vulnerabilidades [COMMUNITY-TOOL]
cybersecuritydive.com: Relationships between DevOps, security warm slowly [COMMUNITY-TOOL]
harness.io: Automated DevSecOps with StackHawk and Harness [COMMUNITY-TOOL]
containerjournal.com: The What and Why of Cloud-Native Security [COMMUNITY-TOOL]
sysdig.com: Top vulnerability assessment and management best practices [COMMUNITY-TOOL]
thenewstack.io: Where Are You on the DevSecOps Maturity Curve? [COMMUNITY-TOOL]
thenewstack.io: The Top 5 Secrets Management Mistakes and How to Avoid Them [COMMUNITY-TOOL]
arsouyes.org: PKCS, pem, der, key, crt,... [COMMUNITY-TOOL]
torq.io: 5 Security Automation Examples for Non-Developers [COMMUNITY-TOOL]
infoq.com: Serverless Security: What's Left to Protect? [COMMUNITY-TOOL]
dqindia.com: Secure your CI/CD pipeline with these tips from experts [COMMUNITY-TOOL]
thenewstack.io: The DevSecOps Skillsets Required for Cloud Deployments [COMMUNITY-TOOL]
devblogs.microsoft.com: You can’t have security for DevOps until you have DevOps for security [COMMUNITY-TOOL]
goteleport.com: Anatomy of a Cloud Infrastructure Attack via a Pull Request [COMMUNITY-TOOL]
cncf/tag-security: CNCF Security Technical Advisory Group 🌟 [COMMUNITY-TOOL]
enterprisersproject.com: 5 DevSecOps open source projects to know [COMMUNITY-TOOL]
Clair [COMMUNITY-TOOL]
thenewstack.io: 10 Steps to Simplify Your DevSecOps [COMMUNITY-TOOL]
redhat.com: 5 ways for teams to create an automation-first mentality [COMMUNITY-TOOL]
devops.com: Transform Mobile DevOps into Mobile DevSecOps [COMMUNITY-TOOL]
softwebsolutions.com: What is DevSecOps and why your business needs it [COMMUNITY-TOOL]
containerjournal.com: Siloscape: The Dark Side of Kubernetes [COMMUNITY-TOOL]
thenewstack.io: Infrastructure-as-Code: 6 Best Practices for Securing Applications 🌟 [COMMUNITY-TOOL]
devops.com: Securing Your Software Development Pipelines [COMMUNITY-TOOL]
thenewstack.io: How GitOps Benefits from Security-as-Code [COMMUNITY-TOOL]
devops.com: Tips for a Successful DevSecOps Life Cycle [COMMUNITY-TOOL]
blog.aquasec.com: Advanced Persistent Threat Techniques Used in Container Attacks [COMMUNITY-TOOL]
thenewstack.io: 5 Misconceptions About DevSecOps [COMMUNITY-TOOL]
thenewstack.io: Why Cloud Native Systems Demand a Zero Trust Approach [COMMUNITY-TOOL]
redhat.com: Getting DevSecOps to production and beyond [COMMUNITY-TOOL]
opensource.com: 5 open source security resources from 2021 [COMMUNITY-TOOL]
redhat.com: Red Hat's approach to DevSecOps [COMMUNITY-TOOL]
thenewstack.io: Open Source Democratized Software. Now Let’s Democratize Security [COMMUNITY-TOOL]
goteleport.com: Why DevSecOps is Going Passwordless [COMMUNITY-TOOL]
thenewstack.io: Want Real Cybersecurity Progress? Redefine the Security Team [COMMUNITY-TOOL]
devops.com: Taking a DevSecOps Approach to API Security [COMMUNITY-TOOL]
devops.com: Continuous Security: The Next Evolution of CI/CD [COMMUNITY-TOOL]
devops.com: How to Seamlessly Transition to DevSecOps [COMMUNITY-TOOL]
research.nccgroup.com: 10 real-world stories of how we’ve compromised CI/CD pipelines [COMMUNITY-TOOL]
thenewstack.io: SecOps in a Post-COVID World: 3 Security Trends to Watch [COMMUNITY-TOOL]
sysdig.com: Triaging a Malicious Docker Container [COMMUNITY-TOOL]
blog.sonatype.com: Python Packages Upload Your AWS Keys, env vars, Secrets to the Web [COMMUNITY-TOOL]
bleepingcomputer.com: Over 900,000 Kubernetes instances found exposed online [COMMUNITY-TOOL]
sysdig.com: How to apply security at the source using GitOps | Eduardo Mínguez 🌟 [COMMUNITY-TOOL]
freecodecamp.org: Authentication vs Authorization – What's the Difference? [COMMUNITY-TOOL]
containerjournal.com: Kubernetes Security in Your CI/CD Pipeline [COMMUNITY-TOOL]
acloudguru.com: Cloud security risks: Why you should make apps Secure by Design [COMMUNITY-TOOL]
hmaslowski.com: macOS Security hardening with Microsoft Intune [COMMUNITY-TOOL]
kubewarden.io: Scanning secrets in environment variables [COMMUNITY-TOOL]
auth0.com: A Passwordless Future! Passkeys for Java Developers [COMMUNITY-TOOL]
infracloud.io: How to Prevent Secret Leaks in Your Repositories [COMMUNITY-TOOL]
thenewstack.io: Secured Access to Kubernetes from Anywhere with Zero Trust | Tenry Fu 🌟 [COMMUNITY-TOOL]
rtinsights.com: Implementing Zero Trust for Kubernetes [COMMUNITY-TOOL]
cisecurity.org: Where Does Zero Trust Begin and Why is it Important? [COMMUNITY-TOOL]
thenewstack.io: How Do Authentication and Authorization Differ? [COMMUNITY-TOOL]
osohq.com: Patterns for Authorization in Microservices [COMMUNITY-TOOL]
oauth2-proxy/oauth2-proxy: OAuth2 Proxy 🌟 [COMMUNITY-TOOL]
dev.to/fidalmathew: Session-Based vs. Token-Based Authentication: Which is better? [COMMUNITY-TOOL]
dev.to/irakan: Is JWT really a good fit for authentication? [COMMUNITY-TOOL]
github.com/hygieia/Hygieia 🌟 [COMMUNITY-TOOL]
thenewstack.io: How Kubernetes vulnerabilities have shifted since the first attacks [COMMUNITY-TOOL]
mirantis.com: Introduction to Istio Ingress: The easy way to manage incoming Kubernetes app traffic [COMMUNITY-TOOL]
armosec.io: How to secure Kubernetes Ingress? [COMMUNITY-TOOL]
thenewstack.io: StackRox KubeLinter Brings Security Linting to Kubernetes [COMMUNITY-TOOL]
github.com/yannh/kubeconform 🌟 [COMMUNITY-TOOL]
thenewstack.io: Security Insights into Infrastructure-as-Code [COMMUNITY-TOOL]
Why you should be using Multi-Category Security (MCS) for your Linux containers [COMMUNITY-TOOL]
Using Podman and Containers to make a more secure pipeline [COMMUNITY-TOOL]
thenewstack.io: Project Calico: Kubernetes Security as SaaS [COMMUNITY-TOOL]
Falco.org [COMMUNITY-TOOL]
sysdig.com: Getting started with runtime security and Falco [COMMUNITY-TOOL]
Security Patterns for Microservice Architectures [COMMUNITY-TOOL]
Anchore [COMMUNITY-TOOL]
thenewstack.io: Anchore: Scan Your Container Images for Vulnerabilities from the Command Line [COMMUNITY-TOOL]
Twistlock [COMMUNITY-TOOL]
Threat Stack [COMMUNITY-TOOL]
cloud.google.com: OWASP Top 10 mitigation options on Google Cloud 🌟 [COMMUNITY-TOOL]
thenewstack.io: Latest OWASP Top 10 Surfaces Web Development Security Bugs [COMMUNITY-TOOL]
thenewstack.io: OWASP Top 10: A Guide to the Worst Software Vulnerabilities [COMMUNITY-TOOL]
owasp.org: OWASP API Security Project 🌟 [COMMUNITY-TOOL]
traceable.ai: Use the OWASP API Top 10 To Secure Your APIs [COMMUNITY-TOOL]
cequence.ai: The OWASP API Security Top 10 From a Real-World Perspective [COMMUNITY-TOOL]
github.com/OWASP: OWASP Kubernetes Top 10 🌟 [COMMUNITY-TOOL]
securecoding.com: Code Audit: How to Ensure Compliance for an Application [COMMUNITY-TOOL]
stackrox.com [COMMUNITY-TOOL]
redhat.com: Red Hat to Acquire Kubernetes-Native Security Leader StackRox [COMMUNITY-TOOL]
trivy [COMMUNITY-TOOL]
blog.aquasec.com: A Security Review of Docker Official Images: Which Do You Trust? (with trivy) [COMMUNITY-TOOL]
returngis.net: Buscar vulnerabilidades en imágenes de Docker con Snyk [COMMUNITY-TOOL]
iximiuz.com: The need for slimmer containers. Scanning official Python images with Snyk [COMMUNITY-TOOL]
thenewstack.io: Find Vulnerabilities in Container Images with Docker Scan [COMMUNITY-TOOL]
deepfence/YaraHunter [COMMUNITY-TOOL]
Securing Kubernetes With Anchore [COMMUNITY-TOOL]
Anchore: Secure Container Based CI/CD Workflows [COMMUNITY-TOOL]
Jenkins Plugin: Anchore Container Image Scanner [COMMUNITY-TOOL]
Notary [COMMUNITY-TOOL]
Cosign: Container Signing [COMMUNITY-TOOL]
infracloud.io: Enforcing Image Trust on Docker Containers using Notary [COMMUNITY-TOOL]
infracloud.io: How to Secure Containers with Cosign and Distroless Images [COMMUNITY-TOOL]
github.blog: Safeguard your containers with new container signing capability in GitHub Actions (cosign) [COMMUNITY-TOOL]
chrisns/cosign-keyless-demo: Cosign Keyless GitHub Action Demo [COMMUNITY-TOOL]
blog.chainguard.dev: How To Verify Cosigned Container Images In Amazon ECS [COMMUNITY-TOOL]
sysdig.com: How to secure Kubernetes deployment with signature verification [COMMUNITY-TOOL]
itnext.io: Securing Kubernetes Workloads: A Practical Approach to Signed and Encrypted Container Images [COMMUNITY-TOOL]
GitHub security: what does it take to protect your company from credentials leaking on GitHub? 🌟 [COMMUNITY-TOOL]
forbes.com: DevOps Drives Pentesting Delivered As A Service [COMMUNITY-TOOL]
keycloak.org [COMMUNITY-TOOL]
Authorizing multi-language microservices with Louketo Proxy [COMMUNITY-TOOL]
developers.redhat.com: A deep dive into Keycloak [COMMUNITY-TOOL]
blog.getambassador.io: Step-by-Step Centralized Authentication for Kubernetes with Keycloak and the Ambassador Edge Stack [COMMUNITY-TOOL]
blog.sighup.io: How to run Keycloak in HA on Kubernetes [COMMUNITY-TOOL]
developers.redhat.com: Authentication and authorization using the Keycloak REST API [COMMUNITY-TOOL]
openshift.com: Geographically Distributed Stateful Workloads - Part 3: Keycloak [COMMUNITY-TOOL]
blog.flant.com: Running fault-tolerant Keycloak with Infinispan in Kubernetes [COMMUNITY-TOOL]
dev.to: KeyCloak with Nginx Ingress [COMMUNITY-TOOL]
Git Credential Manager Core [COMMUNITY-TOOL]
Git Credential Manager Core: Building a universal authentication experience [COMMUNITY-TOOL]
blog.gitguardian.com: Secrets in source code (episode 2/3). Why secrets in git are such a problem [COMMUNITY-TOOL]
harness.io: Managing Secrets in CI/CD Pipelines 🌟 [COMMUNITY-TOOL]
smallstep.com: How to Handle Secrets on the Command Line 🌟 [COMMUNITY-TOOL]
cloud.google.com: Analyze secrets with Cloud Asset Inventory [COMMUNITY-TOOL]
sops: Simple and flexible tool for managing secrets 🌟 [COMMUNITY-TOOL]
jenkins-x.io: Setting up the secrets for your installation [COMMUNITY-TOOL]
fpcomplete.com: Announcing Amber, encrypted secrets management [COMMUNITY-TOOL]
github.com/keilerkonzept/aws-secretsmanager-files [COMMUNITY-TOOL]
youtube: Which of your Kubernetes Apps are accessing Secrets? 🌟 [COMMUNITY-TOOL]
jenkins-x/gsm-controller [COMMUNITY-TOOL]
GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp: Google Secret Manager Provider for Secret Store CSI Driver [COMMUNITY-TOOL]
devops.com: DevOps Teams Struggling to Keep Secrets [COMMUNITY-TOOL]
thorsten-hans.com: Encrypt your Kubernetes Secrets with Mozilla SOPS [COMMUNITY-TOOL]
developers.redhat.com: Protect secrets in Git with the clean/smudge filter [COMMUNITY-TOOL]
kubeopsskills/cloud-secret-resolvers: Cloud Secret Resolvers (CSR) [COMMUNITY-TOOL]
thenewstack.io: Managing Secrets in Your DevOps Pipeline [COMMUNITY-TOOL]
thenewstack.io: Kubernetes Secrets Management: 3 Approaches, 9 Best Practices [COMMUNITY-TOOL]
commjoen/wrongsecrets: OWASP WrongSecrets [COMMUNITY-TOOL]
aws/secrets-store-csi-driver-provider-aws: AWS Secrets Manager and Config Provider for Secret Store CSI Driver [COMMUNITY-TOOL]
unixarena.com: Terraform – Source credentials from AWS secret Manager [COMMUNITY-TOOL]
pyca/bcrypt [COMMUNITY-TOOL]
argon2-cffi [COMMUNITY-TOOL]
docs.python.org: scrypt (standard library) [COMMUNITY-TOOL]
cryptography.io: scrypt (cryptography) [COMMUNITY-TOOL]
git-secret.io [COMMUNITY-TOOL]
git-cipher [COMMUNITY-TOOL]
hashicorp/vault [COMMUNITY-TOOL]
hashicorp/vault-csi-provider: HashiCorp Vault Provider for Secrets Store CSI Driver [COMMUNITY-TOOL]
vaultproject.io [COMMUNITY-TOOL]
github.com/kelseyhightower: Serverless Vault with Cloud Run [COMMUNITY-TOOL]
confluent.io: How to Manage Secrets for Confluent with Kubernetes and HashiCorp Vault [COMMUNITY-TOOL]
digitalvarys.com: Simple Introduction to HashiCorp Vault [COMMUNITY-TOOL]
thenewstack.io: HashiCorp Releases HCP Vault to Combat ‘Secrets Management’ Fatigue [COMMUNITY-TOOL]
datadoghq.com: Monitor HashiCorp Vault metrics and logs [COMMUNITY-TOOL]
thenewstack.io: Reasons to Implement HashiCorp Vault and Other Zero Trust Tools [COMMUNITY-TOOL]
testdriven.io: Running Vault and Consul on Kubernetes [COMMUNITY-TOOL]
devopscube.com: How to Setup Vault in Kubernetes- Beginners Tutorial 🌟 [COMMUNITY-TOOL]
devopscube.com: Vault Agent Injector Tutorial: Inject Secrets to Pods Using Vault Agent [COMMUNITY-TOOL]
piotrminkowski.com: Vault on Kubernetes with Spring Cloud [COMMUNITY-TOOL]
alexandre-vazquez.com: How To Inject Secrets in Pods To Improve Security with Hashicorp Vault in 5 Minutes 🌟 [COMMUNITY-TOOL]
harness.io: Tutorial: How to Use the New Vault Agent Integration Method With Harness [COMMUNITY-TOOL]
docs.microsoft.com: Azure Key Vault [COMMUNITY-TOOL]
azure.github.io: Azure Key Vault Provider for Secrets Store CSI Driver [COMMUNITY-TOOL]
akv2k8s.io: Azure Key Vault to Kubernetes akv2k8s 🌟 [COMMUNITY-TOOL]
Azure Key Vault to Kubernetes [COMMUNITY-TOOL]
Neoteroi/essentials-configuration-keyvault [COMMUNITY-TOOL]
techcommunity.microsoft.com: In preview: Azure Key Vault secrets provider extension for Arc enabled Kubernetes clusters [COMMUNITY-TOOL]
vcloud-lab.com: Create Azure Key Vault Certificates on Azure Portal and Powershell [COMMUNITY-TOOL]
ansible.com: Simplifying secrets management with CyberArk and Red Hat Ansible Automation Platform [COMMUNITY-TOOL]
ansible.com: Automating Security with CyberArk and Red Hat Ansible Automation Platform [COMMUNITY-TOOL]
conjur.org [COMMUNITY-TOOL]
infracloud.io: Securing Kubernetes Secrets with Conjur 🌟 [COMMUNITY-TOOL]
dev.to: Manage your secrets in Git with SOPS for Kubernetes 🌟 [COMMUNITY-TOOL]
GitOps secret management with bitnami-labs Sealed Secret and GoDaddy Kubernetes External Secrets 🌟 [COMMUNITY-TOOL]
aws.amazon.com: Managing secrets deployment in Kubernetes using Sealed Secrets 🌟 [COMMUNITY-TOOL]
blog.container-solutions.com: The Birth of the External Secrets Community [COMMUNITY-TOOL]
itnext.io: Secrets injection at runtime from external Vault into Kubernetes — POC [COMMUNITY-TOOL]
jx-secret-postrenderer 🌟 [COMMUNITY-TOOL]
thenewstack.io: Managing Kubernetes Secrets with AWS Secrets Manager 🌟 [COMMUNITY-TOOL]
K8s Vault Webhook 🌟 [COMMUNITY-TOOL]
thenewstack.io: Walkthrough: Bitwarden’s New Secrets Manager [COMMUNITY-TOOL]
morey.tech: Bitwarden and External Secrets [COMMUNITY-TOOL]
10 Serverless security best practices [COMMUNITY-TOOL]
thehackernews.com: Docker Images Containing Cryptojacking Malware Distributed via Docker Hub [COMMUNITY-TOOL]
sysdig.com: 12 Container image scanning best practices to adopt in production [COMMUNITY-TOOL]
infracloud.io: The Ten Commandments of Container Security [COMMUNITY-TOOL]
sysdig.com: Sysdig 2021 container security and usage report: Shifting left is not enough 🌟 [COMMUNITY-TOOL]
itnext.io: Hardening Docker and Kubernetes with seccomp 🌟 [COMMUNITY-TOOL]
redhat.com: Improving Linux container security with seccomp 🌟 [COMMUNITY-TOOL]
openshift.com: Signing and Verifying Container Images 🌟 [COMMUNITY-TOOL]
redhat.com: Introducing Red Hat Vulnerability Scanner Certification [COMMUNITY-TOOL]
docs.microsoft.com: Introduction to Azure Defender for container registries [COMMUNITY-TOOL]
techbeacon.com: 17 open-source container security tools 🌟 [COMMUNITY-TOOL]
GoogleContainerTools/container-structure-test [COMMUNITY-TOOL]
dynatrace.com: Container security: What it is, why it’s tricky, and how to do it right [COMMUNITY-TOOL]
sigstore.dev [COMMUNITY-TOOL]
youtube: Hands-on Introduction to sigstore | Rawkode Live [COMMUNITY-TOOL]
opensource.com: Sign and verify container images with this open source tool (sigstore) [COMMUNITY-TOOL]
sysdig.com: Container security best practices: Ultimate guide 🌟 [COMMUNITY-TOOL]
infracloud.io: Kubernetes Pod Security Policies with Open Policy Agent [COMMUNITY-TOOL]
blog.nody.cc: Verify your Kubernetes Cluster Network Policies: From Faith to Proof [COMMUNITY-TOOL]
DevSecOps – Static Analysis SAST with Jenkins Pipeline [COMMUNITY-TOOL]
europeclouds.com: Implementing Aqua Security to Secure Kubernetes [COMMUNITY-TOOL]
Pomerium [COMMUNITY-TOOL]
fluentbit.io [COMMUNITY-TOOL]
falco.org: Detect Malicious Behaviour on Kubernetes API Server through gathering Audit Logs by using FluentBit - Part 2 [COMMUNITY-TOOL]
kubearmor.io [COMMUNITY-TOOL]
itnext.io: Protecting Your Kubernetes Environment With KubeArmor [COMMUNITY-TOOL]
itnext.io: Helm 3 — Secrets management, an alternative approach 🌟 [COMMUNITY-TOOL]
itnext.io: Manage Auto-generated Secrets In Your Helm Charts 🌟 [COMMUNITY-TOOL]
hashcat [COMMUNITY-TOOL]
intezer.com: New Attacks on Kubernetes via Misconfigured Argo Workflows [COMMUNITY-TOOL]
devops.com: How to Automate PKI for DevOps With Open Source Tools [COMMUNITY-TOOL]
cybersecsi/HOUDINI: Hundreds of Offensive and Useful Docker Images for Network Intrusion [COMMUNITY-TOOL]
itnext.io: Top 6 Threat Detection Tools for Containers [COMMUNITY-TOOL]
thenewstack.io: AWS Open Sources Security Tools [COMMUNITY-TOOL]
sentinelone.com: Reducing Human Effort in Cybersecurity | Why We Are Investing in Torq’s Automation Platform [COMMUNITY-TOOL]
pkg.go.dev/knative.dev/security-guard [COMMUNITY-TOOL]
developer.ibm.com: Secure microservices by monitoring behavior [COMMUNITY-TOOL]
Microservices Security in Action [COMMUNITY-TOOL]
sysdig.com: Mitigating CVE-2021-20291: DoS affecting CRI-O and Podman [COMMUNITY-TOOL]
sysdig.com: Mitigating log4j with Runtime-based Kubernetes Network Policies [COMMUNITY-TOOL]
github.com/aws-samples: Apache Log4j2 CVE-2021-44228 node agent [COMMUNITY-TOOL]
proferosec/log4jScanner [COMMUNITY-TOOL]
Apache Log4j Security Vulnerabilities [COMMUNITY-TOOL]
cloud.redhat.com: Log4Shell: Practical Mitigations and Impact Analysis of the Log4j Vulnerabilities [COMMUNITY-TOOL]
edition.cnn.com: The Log4j security flaw could impact the entire internet. Here's what you should know [COMMUNITY-TOOL]
yahoo/check-log4j [COMMUNITY-TOOL]
welivesecurity.com: Lo que todo líder de una empresa debe saber sobre Log4Shell [COMMUNITY-TOOL]
genbeta.com: "Internet está en llamas": Cloudflare ha detectado más de 24.600 ataques por minuto que explotaban la vulnerabilidad Log4Shell [COMMUNITY-TOOL]
dynatrace.com: Log4Shell vulnerability [COMMUNITY-TOOL]
Maelstromage/Log4jSherlock [COMMUNITY-TOOL]
cyberscoop.com: The Log4j flaw is the latest reminder that quick security fixes are easier said than done [COMMUNITY-TOOL]
vpnranks.com: Belgian Defense Ministry Under Cyber Attack Due to Log4j Vulnerability [COMMUNITY-TOOL]
dynatrace.com: Log4Shell vulnerability discovery and mitigation require automatic and intelligent observability [COMMUNITY-TOOL]
thenewstack.io: Yet Another Log4j Security Problem Appears [COMMUNITY-TOOL]
cisagov/log4j-scanner [COMMUNITY-TOOL]
google/log4jscanner [COMMUNITY-TOOL]
thehackernews.com: Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities [COMMUNITY-TOOL]
zdnet.com: Log4j: Google and IBM call for list of critical open source projects [COMMUNITY-TOOL]
it.slashdot.org: And the Top Source of Critical Security Threats Is...PowerShell [COMMUNITY-TOOL]
therecord.media: UK government plans to release Nmap scripts for finding vulnerabilities [COMMUNITY-TOOL]
thenewstack.io: WAF: Securing Applications at the Edge [COMMUNITY-TOOL]
zdnet.com: Google releases new open-source security software program: Scorecards [COMMUNITY-TOOL]
tryhackme.com: Metasploit: Introduction [COMMUNITY-TOOL]
socket.dev: Introducing Socket [COMMUNITY-TOOL]
deepfence/ThreatMapper 🌟 [COMMUNITY-TOOL]
github.com/goauthentik/authentik [COMMUNITY-TOOL]
github.com/openappsec/openappsec [COMMUNITY-TOOL]
Microsoft Security Copilot [COMMUNITY-TOOL]
github.com/prowler-cloud/prowler 🌟🌟 [COMMUNITY-TOOL]

52 KiB Raw Blame History Unescape Escape

Devsecops

52 KiB

Raw Blame History