Uptycs at AWS re:Invent 2023: CNAPP & XDR demos at Booth #206! As the festive din of Thanksgiving reverberates through the hearts, yet the echoes fade, a call of duty resonates with the valiant guardians of the cloud frontier. As you bid adieu to Turkey Day, embrace the future of cloud security at AWS re:Invent 2023. Burn off those holiday calories by taking a walk around the expo floor and be...

Incident Response with Detections: Mastering Kubernetes Security #5 As we approach the close of 2023 and head into 2024, we are seeing an increase in Kubernetes attacks varying across all different types of threats and malicious attacks including cryptomining, stolen or exposed credential files and secrets, data exfiltration attacks, and more. In fact, according to the Red Hat State of Kubernetes there was a 7% increase in attacks 37%...

GhostSec offers Ransomware-as-a-Service Possibly Used to Target Israel The hacker collective called GhostSec has unveiled an innovative Ransomware-as-a-Service (RaaS) framework called GhostLocker. They provide comprehensive assistance to customers interested in acquiring this service through a dedicated Telegram channel. Presently, GhostSec is focusing its attacks on Israel. This move represents a surprising departure from their past activities...

Mastering Kubernetes Security eBook: Manage Compliance & Vulnerability Uptycs today released a new eBook, Mastering Kubernetes Security, offering a comprehensive guide to securing Kubernetes environments. The guide is designed to equip cloud security leaders with the knowledge and tools to ensure the...

89% of Workers Use AI–Far Fewer Understand the Risks Most companies are eager to embrace AI, but have little notion of how their employees are using it.

How to Fix CVE-2023-46604: Apache ActiveMQ's Critical Vulnerability Authors:  Siddartha Malladi and Arpit Kataria

How Commonlit Balances Student Security and Employee Privacy A distributed team, a tight audit deadline, and an urgent device trust need.

Optimize Cloud Security with Uptycs: Master Attack Paths & Risks In the intricate world of cloud security, identifying and navigating the Attack Path is crucial to understanding and mitigating potential breaches. Traditional defenses often provide fragmented insights, missing the critical link between initial exposures, like Internet Exposure, and the ensuing Lateral Movement that can occur within cloud infrastructure. Uptycs leads the charge...

How to Fix CVE-2023-22518: Atlassian Confluence Vulnerability Atlassian Confluence users are facing yet another serious threat with the emergence of a new critical vulnerability, CVE-2023-22518. This comes on the heels of the recent...

WinRAR CVE-2023-38831 Vulnerability: Malware Exploits & APT Attacks Authors: Shilpesh Trivedi and Nisarga C M   In April 2023, the cybersecurity community faced a significant challenge with the discovery of CVE-2023-38831, a vulnerability affecting versions of WinRAR prior to 6.23. This security flaw has become a critical concern due to its exploitation by various advanced...

Cloud Security Managed Services: Uptycs Security Graph for Compliance Managing cloud environments across multiple accounts and regions is a challenging endeavor. Without a unified tool like Uptycs, it's akin to navigating a dense forest without a map. Security teams often grapple with massive amounts of data, trying to synthesize fragmented information from diverse tools and systems. This approach is not only time-consuming but also increases...

Uptycs Cloud Discovery: Simplifying Cloud Security Challenges Visualizing complex cloud architecture and resources presents a significant challenge for any security team. This becomes even more daunting when tasked with discovering and understanding the full scope of your environment across various isolated environments (such as AWS accounts, Azure subscriptions, and GCP projects) and geographical locations (including AWS and Azure...

Manage Cloud Computing & AWS Security: Uptycs Risk Prioritization In cloud computing, especially within AWS, managing security risks is essential due to the vast array of services and configurations. Uptycs Risk Prioritization provides a practical solution for this. It helps prioritize risks across all AWS services, a vital step for any AWS ecosystem, from EC2 workloads to broader account management. This tool is...

CVE-2023-46214: the Splunk Remote Code Execution (RCE) Vulnerability Cybersecurity experts have uncovered a critical Remote Code Execution (RCE) vulnerability in Splunk, the data analytics platform that forms the backbone of many corporate IT infrastructures. Identified as CVE-2023-46214, this flaw could potentially allow attackers to infiltrate and seize control of...

Streamlining Authentication: Actionable Notifications on Mobile We've introduced actionable mobile notifications, enabling seamless authentication directly from notifications, eliminating the need to switch apps during the login process

Streamlining Authentication: Actionable Notifications on Mobile We've introduced actionable mobile notifications, enabling seamless authentication directly from notifications, eliminating the need to switch apps during the login process

What Everyone Got Wrong About the MGM Hack The MGM hack showcased a new combination of social engineering and ransomware that's increasingly common and worryingly effective.

How to Tell If CrowdStrike Falcon Sensor Is Running Get in-depth information about the Falcon sensor agent using both generic osquery and Kolide.

Catch missed authorization checks during software development How to perform authorization checks in a golang codebase for cybersecurity

Mastering Kubernetes Security: Blog Series and eBook You too can master Kubernetes security with Uptycs unified CNAPP and XDR.

Mastering Cloud Security: Blog Series Ever felt lost in the cloud security fog? Let Uptycs be your guiding light.

Managed vs Personal Apple IDs in the Workplace: an IT Guide IT teams often wrestle with whether they should require their end-users to use a managed Apple ID instead of their personal ID for their work laptop. This article deeply dives into the pros and cons of the managed approach and Kolide's stance on enforcing this through Checks.

The Risks of End of Life Software and How to Address Them Once a piece of software reaches its End of Life, lay it to rest before it rises from the dead and attacks you.