AWS Security LIVE! is a Twitch show focused on AWS and AWS Partners solving security challenges for customers. In a recent episode, Chris McHenry, VP of Product Management at Aviatrix, joined hosts Margo Cronin, Principal Solution Architect, Security & Compliance at AWS, and Rob Hale, Principal Security Segment Leader, EMEA at AWS. Together, they explored…
The early days of cloud were like the wild west – developers spun up test environments and created solutions on the fly to solve their problems. Eventually, as the center of mass and more business-critical applications shifted to cloud, IT and enterprise controls followed. Today, we’re seeing Kubernetes follow the same trajectory. In 2022,…
It’s All About Risk Earlier this spring I decided to take an in-depth look at the best-practice networking security known as the virtual DMZ, which is essentially a data center era firewall deployed at virtual kit in a hub VPC or VNet, surrounded by various spoke VPCs or VNets. I set out to examine…
In November of 2021, a team of security researchers at Alibaba announced a massive discovery. Log4J, one of the most popular libraries in the 2nd most popular programming language, had an extremely simple Remote Code Execution vulnerability. They nicknamed it “Log4Shell.” This, like several Apache Struts vulnerabilities before it, was a 5-alarm fire for many…