Simplifying Kubernetes Compliance in Dynamic Environments Maintaining compliance in dynamic Kubernetes environments is a formidable challenge that compliance officers and security managers face in today's ever-evolving technology landscape.

For Databricks, Zero Trust Means Putting End Users First Michael Tock talks with Kolide's CEO about why transparency is key to security.

Atlassian Confluence Server Zero-Day Vulnerability Analysis/Mitigation Atlassian recently divulged a zero-day vulnerability in its Confluence Server application, which is now actively being targeted, even by sophisticated nation-state threat actors. What makes this vulnerability stand out is its simplicity: with just three HTTP requests, an unauthorized attacker can effortlessly craft a new administrator account on any...

KubeCon North America 2023: Unleash Your Inner Superhero with Uptycs Hello, future superheroes of cloud-native security! The realm of Kubernetes and container security awaits your exploration at KubeCon North America 2023. Swing by Booth D1 to join forces with Uptycs and transform into the modern defender the digital realm needs.

Uptycs Quarterly Threat Bulletin Details WinRAR Zero-Day Vuln and More The Uptycs Threat Research Team released its latest Quarterly Threat Bulletin today, covering the tactics, techniques and procedures (TTPs) of the most prevalent malware and threat actor groups.

Quasar RAT Leverages DLL Side-Loading Techniques Coauthored by Tejaswini Sandapolla and Karthickkumar Kathiresan of Uptycs Threat Research Team

How Clio Practices Security With a Culture of Trust Clio's IT team anticipates both security needs and end user priorities.

Combat Cybersecurity Alert Fatigue with a Priority Matrix Cybersecurity teams continue to struggle with the challenge of alert fatigue. SOC staff, detection engineers, and CSIRT/DFIR professionals struggle to determine the true significance and severity of alerts or detections. On one side, detection engineers constantly innovate methods to catch threat actors. On the other side, SOC and CSIRT staff are inundated with numerous...

How Audio Deepfakes Trick Employees (And Moms) For bad actors, using synthetic voices is easy, cheap, and worryingly effective.

Watershed Thinks Big to Keep a Small Team Secure Startups have the agility to lead the way on security.

CVE-2023-4911 Looney Tunables Exploit: Linux GLIBC Vulnerability Coauthored by Arpit Kataria of Uptycs Threat Research Team

Authorization, Access & Secrets: Mastering Kubernetes Security Part 4 In the dynamic world of container orchestration, Kubernetes (K8s) stands as a beacon of efficiency. However, the ease of managing and deploying applications comes with security challenges, particularly in access control. Role-Based Access Control (RBAC) alone is not enough to secure access to your K8s, especially when managing sensitive data or "secrets." The...

Synergizing Security, Compliance & Efficiency: Kevin Paige CISO In a recent episode of the Cybersecurity Standup podcast, we had the chance to delve into the insightful world of Kevin Paige, our newly appointed Chief Information Security Officer (CISO) and Vice President of Product Strategy. The conversation traversed through an array of cybersecurity terrains,...

Forrester Security and Risk 2023: Shift Up with Uptycs at Booth #16 Embark on a journey from risk to resilience with Uptycs at Forrester's Security & Risk Forum 2023. Uptycs, with its trailblazing unified CNAPP and XDR platformhttps://www.uptycs.com/, is thrilled to be a Gold Tier Sponsor at this...

Uptycs at AWS re:Invent 2023: CNAPP & XDR demos at Booth #206! As the festive din of Thanksgiving reverberates through the hearts, yet the echoes fade, a call of duty resonates with the valiant guardians of the cloud frontier. As you bid adieu to Turkey Day, embrace the future of cloud security at AWS re:Invent 2023. Burn off those holiday calories by taking a walk around the expo floor and be...

Incident Response with Detections: Mastering Kubernetes Security #5 As we approach the close of 2023 and head into 2024, we are seeing an increase in Kubernetes attacks varying across all different types of threats and malicious attacks including cryptomining, stolen or exposed credential files and secrets, data exfiltration attacks, and more. In fact, according to the Red Hat State of Kubernetes there was a 7% increase in attacks 37%...

GhostSec offers Ransomware-as-a-Service Possibly Used to Target Israel The hacker collective called GhostSec has unveiled an innovative Ransomware-as-a-Service (RaaS) framework called GhostLocker. They provide comprehensive assistance to customers interested in acquiring this service through a dedicated Telegram channel. Presently, GhostSec is focusing its attacks on Israel. This move represents a surprising departure from their past activities...

Mastering Kubernetes Security eBook: Manage Compliance & Vulnerability Uptycs today released a new eBook, Mastering Kubernetes Security, offering a comprehensive guide to securing Kubernetes environments. The guide is designed to equip cloud security leaders with the knowledge and tools to ensure the...

89% of Workers Use AI–Far Fewer Understand the Risks Most companies are eager to embrace AI, but have little notion of how their employees are using it.

How to Fix CVE-2023-46604: Apache ActiveMQ's Critical Vulnerability Authors:  Siddartha Malladi and Arpit Kataria

How Commonlit Balances Student Security and Employee Privacy A distributed team, a tight audit deadline, and an urgent device trust need.

Optimize Cloud Security with Uptycs: Master Attack Paths & Risks In the intricate world of cloud security, identifying and navigating the Attack Path is crucial to understanding and mitigating potential breaches. Traditional defenses often provide fragmented insights, missing the critical link between initial exposures, like Internet Exposure, and the ensuing Lateral Movement that can occur within cloud infrastructure. Uptycs leads the charge...

How to Fix CVE-2023-22518: Atlassian Confluence Vulnerability Atlassian Confluence users are facing yet another serious threat with the emergence of a new critical vulnerability, CVE-2023-22518. This comes on the heels of the recent...