Which is more important: security or speed? This question has long been a source of concern for businesses worldwide, and it can leave many organizations vulnerable to hacks in the name of doing things fast and improving employee work experience. Starting today, to foster corporate security and growth, you do not need to compromise your […]
Blog
-
Akamai EAA – Setup LDAP Directory If you use Okta without any additional Active or LDAP Directory and want to use the existing user and groups from Okta in Akamai’s EAA, this article becomes handy to you. Especially if you use Okta as an Identity Provider (IDP) for your EAA applications. Instructions We have to parts here: Part One: Okta Configuration […]
14th October, 2021 -
Downtime is Pricy, Solution isn’t: How to Stay Out of DNS Outages The recent global DNS outages, with the latest addition of Facebook-Instagram-WhatsApp, are a call to transform your approach to DNS solutions. In this webinar, we explore whether cloud-borne environments are really fail-proof and how businesses can use the most advanced cybersecurity methods and DNS solutions to minimize their risk of server failures, code misconfigurations, DDoS […]
13th October, 2021 -
Facebook Will Happen Again: DNS Outages and Interconnected Systems Last week’s massive outage on the Facebook-Instagram-WhatsApp ecosystem left many of us puzzled and concerned: How did our entire social communication (and news source for many) become so dependent in a single, non-regulated conglomerate? How come this conglomerate can fail over a seemingly-trivial reason such as DNS? And what are the dangers of our over-reliance […]
11th October, 2021 -
Defending eCommerce from Bots… Without Dissing Your Customers The real big winners of eCommerce surge 2020 saw the largest year-over-year growth in eCommerce sales. Throughout this growth, fraudsters continued to develop sophisticated attacks to fill their pockets. One of the most devastating attack types is automated fraud: bots that mimic the actions of a real customer so they can bypass fraud prevention tools. […]
22nd September, 2021 -
Redefining Cloud Security to Accelerate Business Which is more important to your business, security or speed? This has long troubled business owners worldwide and can leave many companies vulnerable to cyberattacks in a bid to optimize user experience. But you don’t need to compromise your level of enterprise security to nurture business growth. Until today, IT security often created roadblocks for […]
22nd September, 2021 -
The good, the good-old and the biometric: 5 Passwordless options compared Passwords are obsolete. Memorizing long and complicated passwords has been holding back businesses for over 50 years, while cyberattacks are evolving every day. ¹ In fact, Google has registered over 2 million phishing sites as of January 2021. The figure is up from 1.7 million in January 2020, a 27% increase year on year. ² […]
25th August, 2021 -
Terraform Naming Conventions & Best Practices: A hell-of-a-practical guide Modules naming conventions Based on Hashicorp documentations we should follow general naming conventions for Terraform modules. Based on information above all Terraform modules should follow next ruleset • All source code in git All modules follow naming convention terraform-<PROVIDER>-<NAME>. For example terraform-aws-ec2, terraform-azure-vms, terraform-infoblox-dns etc • All terraform modules should have Unit/Integration tests. For example […]
19th August, 2021 -
API Vulnerability Exposes COVID Vaccination Status of All Israeli Citizens Returning from my vacation abroad, I had to fill out a COVID declaration form on the Israeli Health Ministry website. Something looked weird when I filled it out on my mobile: It was too quick to indicate that I’m vaccinated, and this output came up even with a typo in my passport number. Hence I […]
17th August, 2021 -
RCE in Cdnjs and What It Means to You Last week, a researcher named RyotaK shared a clever supply chain vulnerability in Cloudflare’s highly popular hosted module called cdnjs, which runs on around 12% of all sites on the web. The module helps developers consume other popular packages and integrate them safely into their sites. The vulnerability was in the cdnjs library update server […]
19th July, 2021 -
5+4 = The New Cloud Security Stack Infrastructures, threat, and security are all under a quick, constant evolution. Once every few year there comes a tipping point which forces us to rethink our technology posture. 2020 was that tipping point. The cloud surge has peaked during the Pandemic, as remote work became the new normal for most office-based businesses. This has introduced […]
9th June, 2021 -
Old Approaches to Monitor a New World: Monitoring in the Hybrid Cloud In this article I hope to give the reader a small history lesson as well as some advice on how to build a useful monitoring system for your platform. First, it’s key to understand where we came from. Before cloud computing systems, every company owned its own infrastructure and therefore had a need to monitor […]
9th June, 2021 -
Why is SRE Becoming 2021’s Hottest Hire? In the current IT market, one of the hottest job roles is the Site Reliability Engineer (SRE). In January 2019, according to LinkedIn, being an SRE is the second most promising job in the USA. These Statistics were cited: Median Base Salary: $200,000 Job Openings (YoY Growth): 1,400+ (72%) Career Advancement Score (out of 10): 9 […]
3rd June, 2021