#CSPM

Mor Ashermorasher
2025-03-07

Cloud misconfigurations: a gap calling for the thief.

Top and common cloud misconfigurations you will find in a typical cloud deployment.

While many invest great resources in applications vulnerabilities (rightfully), many tend to neglect configuration hardening. A big mistake.

api.cyfluencer.com/s/top-cloud

isecjobs.cominfosec_jobs
2024-10-21

HIRING: Senior Information Security Architect (m/f/d) / Aschaffenburg, Berlin
💰 EUR 80K+

👉 isecjobs.com/J511529/

isecjobs.cominfosec_jobs
2024-10-14

HIRING: Senior Information Security Architect (m/f/d) / Aschaffenburg, Berlin
💰 EUR 80K+

👉 isecjobs.com/J511529/

isecjobs.cominfosec_jobs
2024-10-07

HIRING: Senior Information Security Architect (m/f/d) / Aschaffenburg, Berlin
💰 EUR 80K+

👉 isecjobs.com/J511529/

isecjobs.cominfosec_jobs
2024-09-30

HIRING: Senior Information Security Architect (m/f/d) / Aschaffenburg, Berlin
💰 EUR 80K+

👉 isecjobs.com/J511529/

isecjobs.cominfosec_jobs
2024-09-27

HIRING: Senior Information Security Architect (m/f/d) / Aschaffenburg, Berlin
💰 EUR 80K+

👉 isecjobs.com/J511529/

InfosecTrain_EducationInfosecTrainEducation
2024-09-09

☁️ 𝐖𝐡𝐚𝐭 𝐢𝐬 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐏𝐨𝐬𝐭𝐮𝐫𝐞 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 (𝐂𝐒𝐏𝐌)? 🔒

🔍 Ready to strengthen your cloud security? Click here to explore the full blog post on Cloud Security Posture Management (CSPM) and protect your cloud assets today! Read More... 👇
infosec-train.blogspot.com/202

2024-07-24

What security products can you recommend for securing cloud deployments (AWS in particular)? I'm not sure if I can tell actual good and sensible products apart from hype marketing with the acronym and buzzword laden offerings. XDR/CDR, CNAPP, CSPM, CWPP, CIEM, ...

Insights from people with hands on experience are much appreciated!

#aws #k8s #cloud #security #xdr #cnapp #cspm #siem

2024-07-22

AWS Security Hub als zentrales Sicherheits-Orchestrierungstool 🔐

Der Dreh- und Angelpunkt hinsichtlich der Sicherheit in der AWS-Cloud ist der AWS Security Hub, der als zentrales Sicherheits-Orchestrierungstool alle AWS Security Services aggregiert. Der Hub gibt somit einen gesamtheitlichen Cloud-Sicherheitsstatus wieder und initiiert SicherheitsOrchestrierungs-, Automatisierungs- und Antwort-Workflows ♻

2024-07-15

Cloud Security Posture Management (CSPM) in 2024: Benefits & AWS Setup

Cloud Security Posture Management (CSPM) represents a proactive approach to cloud security, focusing on the continuous monitoring and assessment of cloud infrastructure.

At its core, CSPM involves the automated detection of misconfigurations, vulnerabilities, and non-compliance issues within a cloud environment. 

Steps to Configure CSPM with AWS
Configuring Cloud Security Posture Management (CSPM) with AWS involves several steps to ensure a comprehensive security posture. This process begins with the initial setup of CSPM tools, followed by integration with AWS services, and concludes with configuring continuous monitoring and alerting mechanisms.

Full Read - knowcybersec.xyz/2024/07/Cloud

#CSPM #cloudsecurity #cybersecurity #awssecurity

2024-07-11

A pleasure to be back moderating webinars, first one for a few years today for SC UK with speakers from Picus Security and AWS talking cloud security, automation, attack simulation and #cspm

insight.scmagazineuk.com/beyon

2024-01-30

𝐌𝐚𝐩 𝐂𝐨𝐧𝐭𝐚𝐢𝐧𝐞𝐫 𝐈𝐦𝐚𝐠𝐞𝐬 𝐟𝐫𝐨𝐦 𝐂𝐨𝐝𝐞 𝐭𝐨 𝐂𝐥𝐨𝐮𝐝 𝐰𝐢𝐭𝐡 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐟𝐨𝐫 𝐂𝐥𝐨𝐮𝐝

When a vulnerability is identified in a container image stored in a container registry or running in a Kubernetes cluster, it can be difficult for a security practitioner to trace back to the CI/CD pipeline that first built the container image and identify a developer remediation owner.

With DevOps security capabilities in Microsoft Defender Cloud Security Posture Management (CSPM), you can map your cloud-native applications from code to cloud to easily kick off developer remediation workflows and reduce the time to remediation of vulnerabilities in your container images.

techcommunity.microsoft.com/t5

Details: learn.microsoft.com/en-us/azur

#defender #cspm #CloudSecurityPostureManagement #devops #pipeline #codetocloud #container #vulnerabilities #Kubernetes #cnapp #cwpp #cloudnative #cloudsecurity #soc #microsoft #microsoftsecurity #azure #multicoud

2024-01-08

𝐈𝐧𝐭𝐫𝐨𝐝𝐮𝐜𝐢𝐧𝐠 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐟𝐨𝐫 𝐂𝐥𝐨𝐮𝐝 𝐋𝐚𝐛𝐬

Our labs project help you get ramped up with Microsoft Defender for Cloud and provide hands-on practical experience for product features, capabilities, and scenarios. The labs are divided into 3 main tracks, a beginner (level 100/200) and an advanced (level 300+) track. The labs contain several modules cover different pillars such as Cloud Security Posture Management (CSPM) to Cloud Workload Protection (CWP). To start using our labs, you will need to create Azure Trial Subscription which provides you all capabilities for 30 days – so you have to finish this lab at this point to take advantage of the free trial.

github.com/Azure/Microsoft-Def

#defender #defenderforcloud #cnapp #cspm #cwp #cwpp #cloudsecurity #multicloud #azure #aws #gcp #microsoft #microsoftsecurity #soc #server #container #storage #dns #api #devops #database #api #github #arc #agentless #storageaccount #mde #vulnerability #mdvm #siem

2024-01-02

New report by me and @joltsik on Cloud Detection and Response #CDR. If you're a client, check it out or ping us to learn more: research.esg-global.com/report
#CSPM #devsecops #cloudsecurity #threatdetection #infosec #cybersecurity #CSO #CISO #XDR #secops

kurtshkurtsh
2023-12-07

Prepare to onboard Microsoft Defender for Cloud (MDC) with Terraform: The new Terraform module, "mdc-defender-plans-azure" allows you to configure MDC plans for your subscriptions or management groups with just a few lines of code!

"Simplifying Onboarding to Microsoft Defender for Cloud with Terraform" - Microsoft Community Hub
techcommunity.microsoft.com/t5

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst