General Security Discussion

Discussion and thought leadership on the cloud security industry

7 Topics

Grant Martin
Grant MartinCommunity Manager
posted in Hack'd Resources

Hack'd discussion and resources

Hack’d is a learning series run by Lacework that’s geared to help raise the global tide around cybersecurity awareness. Led by security experts like Úlfar Erlingsson, Lea Kissner and Niels Provos, the coursework is built to replicate and facilitate and share across the industry. Use the resources below to run your owh Hack’d session at your place of work, download content for your upcoming Lacework-led session or simply browse through the content on your own. Click the links below to review and download content:Hack’d facilitation guide: use this to facilitate a Hack’d session at your own place of work Hack’d homework template   NotPetya Solarwinds 

1
Grant Martin
10 days ago
CISO Tim
Lacer
CISO TimLacer
posted in Cloud Security In Practice

Could letting employees access personal email on work computers create security vulnerabilities? Yes. Should it be banned? Maybe

I found the recent information that Okta released about their latest breach to be interesting. According to the report, the employee accidentally saved a service account password to his personal email, and then his personal email my have been compromised which gave the attackers access inside Okta. First, don’t we think that is a stroke of luck that the attack managed to find the one user that saved a password incorrectly, and then managed to compromise that account?  Food for thought. In my CISO experience, we do need controls around personal email and other SaaS services.  It’s a data exfiltration method that we need to be concerned about. It doesn’t mean that they have to be blocked per se, but there should be a process in place to monitor for services used on a device and data that leaves. Blocking strictly can cause problems: 1- users get really, really mad and tend to find workarounds and 2 - It gets tough considering so many companies use services like Google that have both an e

0
CISO Tim
Lacer
5 months ago
J
Lacer
juliensobrierLacer
posted in Cloud Security In Practice

Understanding the latest curl vulnerabilities: CVE-2023-38545 and CVE-2023-38546

We have published a blog post on the latest curl vulnerabilities:https://www.lacework.com/blog/understanding-the-latest-curl-vulnerabilities-cve-2023-38545-and-cve-2023-38546/ These vulnerabilities requires a very specific set of conditions to be exploited, such as the use of a SOCKS5 proxy or local access to the machine. AgentN/APlatformUsing Lacework/OperationalizingCloudN/A

0
J
Lacer
6 months ago
J
Lacer
juliensobrierLacer
posted in Cloud Security In Practice

How to remediate CVE-2023-4863

We have posted a blog post about CVE-2023-4863 (libwebp out-of-bounds memory write): https://www.lacework.com/blog/how-to-detect-cve-2023-4863-a-libwebp-out-of-bounds-memory-write/ This vulnerability is being exploited through Desktop applications (Chrome, iMessage), but the library is present in many Linux applications. Lacework provides a list of hosts an containers affected by this vulnerability. 

0
J
Lacer
6 months ago
CISO Tim
Lacer
CISO TimLacer
posted in Cloud Security In Practice

How do you quantify risk?

Risk is a hard thing to quantify at times.  But I think having a good understanding of your security risk can elevate the conversation at the executive level. It can tie security problems to business outcomes, which can ultimately help make a stronger security program and get more budget.   How do people quantify risk in your organization? AgentN/APlatformUsing Lacework/OperationalizingCloudN/A

8
jth
7 months ago
Merritt Baer
Lacer
Merritt BaerLacer
asked in Cloud Security In Practice

What frameworks do you find helpful for Zero Trust?

Since zero trust is not a concrete thing it’s a conceptual framework, what have you found useful for operationalizing the concept?

1
Ben Sherman
Lacer
7 months ago
CISO Tim
Lacer
CISO TimLacer
asked in What's Next in Security

LMM and Security

I know that GenAI is a very popular topic in the security industry right now.  But I am curious, how does everyone see this technology becoming useful in the security (or even more specifically the cloud security) world?  To me, it’s about helping security teams do more with less.  Using the technology to automate response to tasks that take up the time of engineers. Or it could be the first level of triage for an alert that can response and know a specific action to take.  Other thoughts? AgentN/APlatformUsing Lacework/OperationalizingCloudAWS

1
Ben Sherman
Lacer
7 months ago

Badge winners

Show all badges
Terms of UseCookie settings