The early days of cloud were like the wild west – developers spun up test environments and created solutions on the fly to solve their problems. Eventually, as the center of mass and more business-critical applications shifted to cloud, IT and enterprise controls followed. Today, we’re seeing Kubernetes follow the same trajectory. In 2022,…
Approximately 4 out of 5 global IT leaders agree that current cloud approaches are creating new security risks for their enterprise (CloudBolt). It’s a belief that skyPurple Cloud, a cloud services company, is working through with its customers every day. Serving companies primarily in life sciences, healthcare, and biotech, skyPurple Cloud provides bespoke…
It’s All About Risk Earlier this spring I decided to take an in-depth look at the best-practice networking security known as the virtual DMZ, which is essentially a data center era firewall deployed at virtual kit in a hub VPC or VNet, surrounded by various spoke VPCs or VNets. I set out to examine…
In November of 2021, a team of security researchers at Alibaba announced a massive discovery. Log4J, one of the most popular libraries in the 2nd most popular programming language, had an extremely simple Remote Code Execution vulnerability. They nicknamed it “Log4Shell.” This, like several Apache Struts vulnerabilities before it, was a 5-alarm fire for many…