Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

4/30/2021
10:00 AM
Steve Zurier
Steve Zurier
Slideshows
Connect Directly
Twitter
RSS
E-Mail

7 Modern-Day Cybersecurity Realities

Security pros may be working with a false sense of security. We explore seven places where old methods and techniques have to change to keep their organizations safe.
2 of 8

Are the Cloud Apps You Build Really Secure?
As companies moved to the cloud, they invested heavily in security tooling reimagined for the cloud, often in the form of cloud workload protection and container security tools, says Salt Security's Isbitski. Such tools, he says, are useful for identifying known vulnerable dependencies, detecting misconfigurations, microsegmenting workloads, and preventing drift from hardened baselines. But unpatched vulnerabilities and misconfigurations in platforms such as Kubernetes have been a point of entry for attackers, allowing them to bypass access controls, run their own code on compromised clusters, and deploy cryptocurrency miners.  
'Unfortunately, this new breed of cloud security tooling still fails to address much of application-layer security,' Isbitski says. 'These tools primarily address network security and infrastructure security and continue to leave applications vulnerable. So the public cloud may be secure, but that doesn't mean what you build in-house is secure.' 
Image Source: Adobe Stock: kran77

Are the Cloud Apps You Build Really Secure?

As companies moved to the cloud, they invested heavily in security tooling reimagined for the cloud, often in the form of cloud workload protection and container security tools, says Salt Security's Isbitski. Such tools, he says, are useful for identifying known vulnerable dependencies, detecting misconfigurations, microsegmenting workloads, and preventing drift from hardened baselines. But unpatched vulnerabilities and misconfigurations in platforms such as Kubernetes have been a point of entry for attackers, allowing them to bypass access controls, run their own code on compromised clusters, and deploy cryptocurrency miners.

"Unfortunately, this new breed of cloud security tooling still fails to address much of application-layer security," Isbitski says. "These tools primarily address network security and infrastructure security and continue to leave applications vulnerable. So the public cloud may be secure, but that doesn't mean what you build in-house is secure."

Image Source: Adobe Stock: kran77

2 of 8
Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
carolynperry
50%
50%
carolynperry,
User Rank: Apprentice
5/26/2021 | 12:29:11 PM
Re: Digital Identities are the most vulnerable attack vector
yes this is really good
JulieS680
50%
50%
JulieS680,
User Rank: Apprentice
5/17/2021 | 4:55:29 PM
Digital Identities are the most vulnerable attack vector
Great read, thanks!

I would add that cybersecurity pros need to embrace the importance of securing digital identities in their security strategies. As we've witnessed, digital identities (user names and passwords) are the most exploited attack vector  - with a valid set of credentials, criminals can just login to get access to critical resources and systems and do significant damage.

Modern approaches to identity security - the protection of human/machine identityes through technologies like dentity proofing, MFA, risk-based authentication -  and identity defined security - using a trusted identitiy to further secure transactions throughout the entire technology stack -  are important to addressing the cybersecurity realities we face today.
jake_hyve
50%
50%
jake_hyve,
User Rank: Author
5/4/2021 | 7:35:54 AM
Response to 7 Modern-Day Cybersecurity Realities article
Really interesting read. To add - I think everyone in a company should be responsible for ensuring security, not just the security or tech people
Commentary
What the FedEx Logo Taught Me About Cybersecurity
Matt Shea, Head of Federal @ MixMode,  6/4/2021
Edge-DRsplash-10-edge-articles
A View From Inside a Deception
Sara Peters, Senior Editor at Dark Reading,  6/2/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-34682
PUBLISHED: 2021-06-12
Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.
CVE-2021-31811
PUBLISHED: 2021-06-12
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVE-2021-31812
PUBLISHED: 2021-06-12
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVE-2021-32552
PUBLISHED: 2021-06-12
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users.
CVE-2021-32553
PUBLISHED: 2021-06-12
It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.