Noname Security’s Post

Preventing Session Replay Attacks - Safeguarding Azure Cloud Websites: Session replay attacks are a type of web application attack where an attacker records a user's interactions with a website or web application, including login credentials, and then replays them to impersonate the user.

Automatically Enforce PCI DSS Compliance for your Cloud PCI DSS v4.0 has brought with it a range of new requirements to address emerging threats. With modernization of network security controls, explicit guidance on cardholder data protections, and process maturity, the standard focuses on establishing sustainable controls and governance. Learn more: https://lnkd.in/d25SMpwV #Azure #AWS #GCP #OCI

🚨 Sumo Logic discloses security breach, advises API key resets Security and data analytics company Sumo Logic disclosed a security breach after discovering that its AWS (Amazon Web Services) account was compromised last week. The company detected evidence of the breach on Friday, November 3, after discovering that an attacker used stolen credentials to gain access to a Sumo Logic AWS account. Sumo Logic says its systems and networks weren't impacted during the breach and that "customer data has been and remains encrypted." https://lnkd.in/gzvt5U6w #securitybreach #securityincident #credentials #sumologic #apisecurity #threatmanagement #threatintelligence #cybersecuritynews #infosec #cyberdefence

🚨 Sumo Logic discloses security breach, advises API key resets Security and data analytics company Sumo Logic disclosed a security breach after discovering that its AWS (Amazon Web Services) account was compromised last week. The company detected evidence of the breach on Friday, November 3, after discovering that an attacker used stolen credentials to gain access to a Sumo Logic AWS account. Sumo Logic says its systems and networks weren't impacted during the breach and that "customer data has been and remains encrypted." https://lnkd.in/gzvt5U6w #securitybreach #securityincident #credentials #sumologic #apisecurity #threatmanagement #threatintelligence #cybersecuritynews #infosec #cyberdefence

🚨 Sumo Logic discloses security breach, advises API key resets Security and data analytics company Sumo Logic disclosed a security breach after discovering that its AWS (Amazon Web Services) account was compromised last week. The company detected evidence of the breach on Friday, November 3, after discovering that an attacker used stolen credentials to gain access to a Sumo Logic AWS account. Sumo Logic says its systems and networks weren't impacted during the breach and that "customer data has been and remains encrypted." Source: https://lnkd.in/gzvt5U6w #securitybreach #securityincident #credentials #sumologic #apisecurity #threatmanagement #threatintelligence #cybersecuritynews #infosec #cyberdefence

Secure APIs on AWS with F5 As an AWS partner, F5 offers security that works with Amazon API Gateway to secure your apps and APIs. F5 BIG-IP Advanced WAF or F5 Distributed Cloud WAF can identify malicious traffic trying to reach the Amazon API Gateway or your API services. You can deploy the WAF in front of or behind Amazon API Gateway. However, deploying it in front of the gateway has the added benefit of preventing malicious API calls that will cost you money. F5 WAF solutions use behavioral analytics to accurately identify threats and provide layer 7 DoS mitigation, application-layer encryption, and threat intelligence services. Deploying a WAF protects your applications and APIs against attacks, including those in the OWASP Top 10.

Application Load Balancer (ALB) now supports console integration with AWS WAF that allows you to secure your applications behind ALB with a single click. This integration enables AWS WAF protections as a first line of defense against common web threats for your applications that use ALB. You can still optionally configure additional protections like bot detection and fraud prevention for your applications from the AWS WAF console.

With any internet facing application you will have to deal with probes and scans trying to infiltrate your resources. One way to thwart most of the basic attacks is by using a Web Application Firewall (WAF) like the managed one AWS offers. The AWS WAF is highly customizable with rules but even the core rules will be good protection for a lot of things. One challenge is looking through the logs the WAF generates to see how it’s going. This article from Kartik Bheemisetty and Vishal L. shows how you can use WAF dashboards and Athena to build relevant queries. https://lnkd.in/e2NDZDj4

Excited to share my latest blog post on SPIFFE, a game-changer for secure identity and communication in distributed systems. 🚀🔒 If you're curious about going password-less in a multi-cloud environment and enhancing your security, Discover how to set up SPIFFE and establish trust between Kubernetes and AWS resources. Check out the full article below. #SPIFFE #Security #PasswordLess #IdentityManagement #Kubernetes #AWS