John Wooten

Product Update: CIS Benchmarks Support in Terramate Cloud 🚨 With Center of Internet Security (CIS) Benchmarks now integrated, Terramate Cloud can automatically detect security misconfigurations across resources managed with Terraform, OpenTofu, and Terragrunt. Scan your infrastructure on AWS, GCP, Azure, Kubernetes, and more for vulnerabilities. Key features: ✅Pre-deployment checks for PRs ✅Automated drift detection to spot issues in existing resources This support is now live for all accounts, including the free tier. For a more in-depth look at the update, watch our new video on YouTube (link in the comments 👇) or read here 👉

15

1 Comment

Join Earl Duby in this latest episode of "Big Reports in Five Minutes" as he summarizes the 2024 Microsoft Digital Defense Report. In this review, he discusses five key points: 1.        Microsoft's significant security investments. 2.        Evolving tactics of phishing with QR codes. 3.        The role of AI in global cyber warfare.  4.        The volume of data that Microsoft sees on a daily basis. 5.        The effects of politics on cybersecurity. Whether you're a cybersecurity professional or just want to stay informed, this breaks down current and emerging threats in the digital landscape. To read the full report click the link in the comments! https://lnkd.in/dVfTafun

3

1 Comment

Check out the latest #UtilizingTech episode featuring our CTO, Dan van der Ster. It's a great discussion on the importance of Ceph for AI data. Let us know what you think!

16

Jonathan Rau returns to the SecDataOpsCast on November 6, joining Neal Bridges to discuss "How To: Security Data Architecture 101" • Why do a data workshop? • Doing discovery and scoping the project • Reference architectures • Lessons and results #secdataopscast #dataarchitecture #federatedsearch

9

2 Comments

Join RPT's Kevin T., Sarah Polan from HashiCorp, and AJ Oller with The Hartford, at #HashiConf as we showcase The Hartford's journey migrating applications to cloud-based infrastructure using the HashiCorp platform. Hear about the challenges, solutions, and lessons learned during their Cloud Transformation Program. This session will highlight how the HashiCorp stack boosted developer productivity and delivered Hartford Services faster, all while reducing operational costs and increasing transparency. Don’t miss this deep dive into cloud transformation success! 🚀 #CloudTransformation #DevOps #HashiCorp #CloudInfrastructure

36

3 Comments

As #GenerativeAI use continues to grow, cybersecurity pros are becoming more aware that their current security stack is not enough to handle the unique risks to GenAI use and adoption. In this byline article featured in Techstrong.ai authored by Portal26 CEO Arti Arora Raman, she discusses why enterprises need to synchronize their #GenAI efforts with their company's overall security and risk management technology and workflow. https://lnkd.in/gyP9G57G

13

Please join this session with Frank and Charles where they will introduce Policy Reporter, an open source tool and Kyverno subproject that leverages Kubernetes WG Policy custom resource definitions, unifies reporting of policy results across multiple concerns, and brings transparency to Kubernetes security. https://hubs.ly/Q02P1TWR0 #kubernetes #devops #kyverno

4

Please join this session with Frank and Charles where they will introduce Policy Reporter, an open source tool and Kyverno subproject that leverages Kubernetes WG Policy custom resource definitions, unifies reporting of policy results across multiple concerns, and brings transparency to Kubernetes security. https://hubs.ly/Q02P1WVl0 #kubernetes #devops #kyverno

13

Please join this session with Frank and Charles where they will introduce Policy Reporter, an open source tool and Kyverno subproject that leverages Kubernetes WG Policy custom resource definitions, unifies reporting of policy results across multiple concerns, and brings transparency to Kubernetes security. https://hubs.ly/Q02P1Vmg0 #kubernetes #devops #kyverno

6

Axoflow joins #Splunk Partnerverse! Learn how to use real-time metrics to enhance the visibility and reduce the resource requirements and MTTR for issues in your telemetry pipeline. https://lnkd.in/di55VuW8

44

1 Comment

➡️ JUST RELEASED: FedRAMP Guidance ⬅️ To help FedRAMP adapt to the new cloud environment, the Office of Management and Budget released guidance set out to scale FedRAMP, strengthen its approach to security review, and accelerate the secure adoption of cloud products and services in the Federal Government. Learn more: https://lnkd.in/eADbW3-T

34

1 Comment

Success in cloud transition lies in human-centered approach and zero trust architecture, says DMI (Digital Management, LLC) chief technology officer gary wang. Learn more: https://lnkd.in/gGzAeKgd #Cloud #HumanCenteredApproach

33

Amazon Kinesis Data Streams now supports adding a VPC endpoint using AWS PrivateLink, enabling secure connections via FIPS 140-3 validated cryptographic modules. This feature is ideal for regulated workloads requiring FIPS 140-3 compliance, particularly for companies contracting with the U.S. . federal government. FIPS-compliant endpoints help meet security requirements by encrypting sensitive data in supported U.S. regions, including AWS GovCloud. Users can create interface VPC endpoints to connect to Kinesis Data Streams' FIPS endpoints. . This new capability is available across all U.S. AWS Regions. For more details, users can refer to the AWS PrivateLink and FIPS 140-3 Compliance documentation. . . . . #avmconsulting #AmazonKinesis #FIPS1403 #AWSPrivateLink #DataSecurity #VPCEndpoints #GovCloud #CloudCompliance #CyberSecurity #EncryptedData #AWSGovCloud #KinesisDataStreams #FIPSCompliant #USFederal

2

“We’re trying to provide the ability for companies to optimize the amount of skills they have, so not everybody becomes an infrastructure expert." Check out this in-depth breakdown of the complexity and fragmentation in the current IaC ecosystem, and how the emergence of platform engineering signals a shift in approach.

10

How OCI ZPR improves traditional data #security by restricting the potential paths for data exfiltration: https://lnkd.in/eYXfJgD5

47

Weekly blog post is here. Open source software has become a very popular trend in software engineering, including the realm of government contracting. Click on the link below to learn more about open source software in relation to government contracting! https://lnkd.in/e8J2qPVX

2

✨ SOSS Fusion Session Highlight - October 22 & 23 - Atlanta ✨ Join Vincent Danen, VP of Red Hat Product Security for his highly anticipated session, “The Open Source Paradox: Unpacking Risk, Equity, and Acceptance.” Open source is widely adopted in enterprises, but risk assessment lags behind. We often apply double standards when comparing open source to proprietary software, turning open source strengths into perceived weaknesses. This paradox affects risk tolerance and security equity. In this session, you’ll examine biases in the open source vs. proprietary software debate and reconsider the approach to risk management. Learn more about this session: https://hubs.la/Q02T0dBh0 Explore the full schedule: https://hubs.la/Q02T0dD60 Register by Oct. 11 & SAVE: https://hubs.la/Q02T0dzk0 #SOSSFusion #OpenSSF #OSSSecurity #OpenSource #OpenSourceSoftware #LinuxFoundation

1

Looking to reduce your Splunk Virtual Compute (SVC) utilization? This Splunk Lantern article shows you how to reduce or make your SVC utilization more efficient by using Edge Processor and associated stack configurations: https://splk.it/4dLBWu0

51