via SBCFireInfo 🐦

Public Input Needed: Draft CWPP & Transportation Study

The #SantaBarbara County Fire Department is seeking public input on the Community Wildfire Protection Plan (CWPP) and Transportation Study for the Santa Barbara Foothill Communities. The Draft CWPP is now available for public review until March 11, 2025.

🔹 Public Review Period: February 11 – March 11, 2025
🔹 Virtual Public Meeting: Thursday, February 27, 2025 | 6:00 – 7:30 PM | Register Here

Your feedback is crucial in shaping wildfire preparedness and community safety. Review the draft plan and register for the public meeting at: ims.dudek.com/sbfoothillscwpp

#SBCFire #WildfirePreparedness
#CWPP

https://www.calcalistech.com/ctechnews/article/hy0089mi7ye

#security #cybersecurity #cloudsecurity #funding #CSPM #CWPP #APISecurity #VulnerabilityManagement #Vulnerability #identitysecurity #ContainerSecurity
4/4

𝐌𝐚𝐩 𝐂𝐨𝐧𝐭𝐚𝐢𝐧𝐞𝐫 𝐈𝐦𝐚𝐠𝐞𝐬 𝐟𝐫𝐨𝐦 𝐂𝐨𝐝𝐞 𝐭𝐨 𝐂𝐥𝐨𝐮𝐝 𝐰𝐢𝐭𝐡 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐟𝐨𝐫 𝐂𝐥𝐨𝐮𝐝

When a vulnerability is identified in a container image stored in a container registry or running in a Kubernetes cluster, it can be difficult for a security practitioner to trace back to the CI/CD pipeline that first built the container image and identify a developer remediation owner.

With DevOps security capabilities in Microsoft Defender Cloud Security Posture Management (CSPM), you can map your cloud-native applications from code to cloud to easily kick off developer remediation workflows and reduce the time to remediation of vulnerabilities in your container images.

https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/bridging-the-gap-between-code-and-cloud-with-defender-for-cloud/ba-p/4042557

Details: https://learn.microsoft.com/en-us/azure/defender-for-cloud/container-image-mapping

#defender #cspm #CloudSecurityPostureManagement #devops #pipeline #codetocloud #container #vulnerabilities #Kubernetes #cnapp #cwpp #cloudnative #cloudsecurity #soc #microsoft #microsoftsecurity #azure #multicoud

𝐈𝐧𝐭𝐫𝐨𝐝𝐮𝐜𝐢𝐧𝐠 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐟𝐨𝐫 𝐂𝐥𝐨𝐮𝐝 𝐋𝐚𝐛𝐬

Our labs project help you get ramped up with Microsoft Defender for Cloud and provide hands-on practical experience for product features, capabilities, and scenarios. The labs are divided into 3 main tracks, a beginner (level 100/200) and an advanced (level 300+) track. The labs contain several modules cover different pillars such as Cloud Security Posture Management (CSPM) to Cloud Workload Protection (CWP). To start using our labs, you will need to create Azure Trial Subscription which provides you all capabilities for 30 days – so you have to finish this lab at this point to take advantage of the free trial.

https://github.com/Azure/Microsoft-Defender-for-Cloud/tree/main/Labs

#defender #defenderforcloud #cnapp #cspm #cwp #cwpp #cloudsecurity #multicloud #azure #aws #gcp #microsoft #microsoftsecurity #soc #server #container #storage #dns #api #devops #database #api #github #arc #agentless #storageaccount #mde #vulnerability #mdvm #siem

VMware Carbon Black: 기능 및 규격
NGAV 및 EDR 활용한 정보보안 업무에 참고할 수 있도록 규격서 정리되어 있습니다.
솔루션 도입 검토에 참고하실 수 있습니다.
- https://bs.etevers.tech/books/carbon-black/page/cloud-workload-protection-platfom-cwpp

#VMware #CarbonBlack #CWPP #containersecurity #infosec #정보보안

Steps Forward: Can ‘CNAPP’ solutions truly unify cloud, on-premises best cybersecurity practices?

Byron Acohido hosts a #CNAPP conversation with #Runecast, Data Theorem, Palo Alto Networks, and #Gartner.

#CSPM #CWPP
https://www.lastwatchdog.com/steps-forward-can-cnapp-solutions-truly-unify-cloud-on-premises-best-cybersecurity-practices/

𝗛𝗼𝘄 𝘁𝗼 𝘀𝗲𝗰𝘂𝗿𝗲 𝗮 𝗙𝘂𝗻𝗰𝘁𝗶𝗼𝗻 𝗔𝗽𝗽?

𝚂̲𝚎̲𝚌̲𝚞̲𝚛̲𝚎̲ ̲𝚘̲𝚙̲𝚎̲𝚛̲𝚊̲𝚝̲𝚒̲𝚘̲𝚗̲

➡️Defender for Cloud for assessment of potential configuration-related security vulnerabilities

➡️Log and monitor: diagnostic settings to configure streaming export of platform logs and metrics

➡️Require HTTPS

➡️Securing keys with Azure key Vault

➡️Enable App Service Authentication/Authorization

➡️Use Azure API Management (APIM) to authenticate requests

➡️Run your function app with the lowest possible permissions

➡️Store data encrypted

𝚂̲𝚎̲𝚌̲𝚞̲𝚛̲𝚎̲ ̲𝚍̲𝚎̲𝚙̲𝚕̲𝚘̲𝚢̲𝚖̲𝚎̲𝚗̲𝚝̲

➡️Disable FTP

➡️Secure the scm endpoint

𝙽̲𝚎̲𝚝̲𝚠̲𝚘̲𝚛̲𝚔̲ ̲𝚜̲𝚎̲𝚌̲𝚞̲𝚛̲𝚒̲𝚝̲𝚢̲

➡️Set access restrictions

➡️Secure the storage account

➡️Private site access with Azure Private Endpoint

➡️Deploy your function app in isolation configuring a Web Application Firewall (WAF) for App Service Environment.

More details: https://learn.microsoft.com/en-us/azure/azure-functions/security-concepts?tabs=v4

#security #azure #cloud #data #management #streaming #functionapp #serverless #waf #appservice #privateendpoint #networksecurity #securedeployment #apim #ftp #keyvault #key #vulnerability #assessment #misconfiguration #encryption #storage #storageaccount #defender #defenderforcloud #cnapp #cspm #cwpp #microsoft #microsoftsecurity #cloudsecurity #cloudnative #siem #monitoring #soc

Was really cool today to add #WatchDuty to our #CWPP draft today. Srsly

What's new in Microsoft Defender for Cloud?

Updates in May include:

➡️New alert in Defender for Key Vault

➡️Agentless scanning now supports encrypted disks in AWS

➡️Revised JIT (Just-In-Time) rule naming conventions in Defender for Cloud

➡️Onboard selected AWS regions

➡️Multiple changes to identity recommendations

➡️Deprecation of legacy standards in compliance dashboard

➡️Two Defender for DevOps recommendations now include Azure DevOps scan findings

➡️New default setting for Defender for Servers vulnerability assessment solution

More details: https://learn.microsoft.com/en-us/azure/defender-for-cloud/release-notes#may-2023

#microsoft #azure #devops #cloud #aws #compliance #gcp #defender #defenderforcloud #cnapp #cspm #cwpp #soc #cloudsecurity #multicloud #securityplatform #microsoftsecurity

Protecting Cloud Workloads: The Role of CSPM and CWPP.

Or CSPM vs CWPP

https://www.blackchili.co.uk/cspm-and-cwpp/

#cloudsecurity #cspm #cwpp #securitypolicy #securitypolicies #Automation

I am very much looking forward to this discussion, as I typically take advantage of any opportunity that I have to talk with either of these guys, so having both together is a big treat. 😎 🎬 👏🏽

#CNAPP #CSPM #CWPP #CloudSecurity

https://www.runecast.com/register-now/how-to-make-a-well-informed-cnapp-buying-decision-in-2023

CWPP 개념

#CWPP #Gartner #Carbonblack #정보보안

https://seungminblog.tistory.com/entry/CWPP-%EC%9D%98-%EA%B0%9C%EB%85%90

New #CNAPP Buyer’s Guide

https://www.runecast.com/download/ebook-cnapp-buyers-guide-2023

#cspm #cwpp #cloudsecurity

With this blog, we are focusing on deployment and integration of Microsoft Defender for Endpoint with Microsoft Defender for Servers on Linux machines

https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/microsoft-defender-for-endpoint-for-linux-and-microsoft-defender/ba-p/3702077

#microsoft #linux #defender #xdr #edr #cspm #CWPP #cloud #multicloud #cybersecurity #azure

#Runecast ranks ‘High Performer’ with ‘Best Support’ across all quarterly 2022 G2 Grid® Reports

#CNAPP #CWPP #CSPM #KSPM #VMware #AWS #Azure #GCP #Kubernetes #K8s #Windows #Linux #automation #CISO #CIO #ITsecurity #compliance
https://www.ciodive.com/press-release/20230104-runecast-ranks-high-performer-with-best-support-across-all-quarterly-20

🍲Getting caught up in the alphabet soup of ☁cloud security🍲? #CSPM, #CIEM, #CWPP, and #CNAPP🥢. We'll review the different types of solutions🧪, their uses, pros/cons⚖, and more so you can determine what the best approach is for you🗺! 👀Read more: https://sysdig.com/blog/cnapp-cloud-security-sysdig/

Application News – ASW #78 - Application News
The post Application News – ASW #78 appeared first on Security Weekly. more: http://feedproxy.google.com/~r/securityweekly/XBIC/~3/mQKz3zess5A/ #applicationsecurityweekly #cloudworkloadprotection #vulnerabilities #cloudsecurity #cloudsecurity #mattalderman #devsecops #mikeshema #exploits #software #threats #devops #azure #cloud #news #cwpp #aws #gcp

Attacking AWS: Elastic Map to Reduce Clusters – ESW #154 - Attacking AWS: Elastic Map to Reduce Clusters
The post Attacking AWS: Elastic Map to Reduce Clusters... more: http://feedproxy.google.com/~r/securityweekly/XBIC/~3/acZVxGxcJ9o/ #enterprisesecurityweekly #cloudworkloadprotection #cloudconfiguration #vulnerabilities #paulasadoorian #cloudsecurity #cloudsecurity #mattalderman #compliance #johnstrand #devsecops #exploits #software #threats #devops #policy #topic #azure #cloud #cwpp

Cloud Security – ESW #154 - Cloud Security
The post Cloud Security – ESW #154 appeared first on Security Weekly. more: http://feedproxy.google.com/~r/securityweekly/XBIC/~3/KZE9RBlGtxY/ #enterprisesecurityweekly #cloudworkloadprotection #cloudconfiguration #vulnerabilities #paulasadoorian #cloudsecurity #cloudsecurity #mattalderman #compliance #devsecops #exploits #software #threats #devops #policy #topic #azure #cloud #cwpp #aws #gcp