I said something yesterday at the Vancouver Cloud Summit that I will repeat here:
"Logs are cheaper than lawyers".
When deploying to the cloud, especially "cloud native" applications you must ensure you are collecting logs for analysis, threat hunting, and forensics. Platforms have logging off and often charge for it. Turn them on, protect them and USE THEM.
If you don’t use a password manager, what’s the reason?
Feel free to comment.
Reposts appreciated for more reach.
The question many are asking:
In 2023, how does a tech giant get hacked via having a privileged account compromised by password spraying?
A more disturbing question:
How often have intrusions this basic happened previously at the tech giants and just gone undisclosed until now?
My team is getting ready to hire an Identity and Access Management Engineer role (official title is TBD). We're probably talking about 1-2 days / week onsite in Portland, OR (#PDX). There’s some room for flexibility on that with the following states AZ, ID, OR, TX, and WA.
This is a great team, where people are supported and learn a lot.
Unofficial salary numbers look like $99k-$162k. Plus bonus. Plus 401k contribution that the company makes. Plus 401k match. Plus good medical, dental, vision benefits.
Do you know someone I should talk to about this role? #fedihire
My team is getting ready to hire an Industrial Control Systems (ICS) Security role. While lots of it can be done remotely, with ICS there's a reality of needing to be near the equipment and people near Portland, OR (#PDX). We're probably talking about 1-2 days / week onsite.
This is a great team, where people are supported and learn a lot.
Unofficial salary numbers look like $83k-$162k. Plus bonus. Plus 401k contribution that the company makes. Plus 401k match. Plus good medical, dental, vision benefits.
Do you know someone I should talk to about this role? #fedihire
Chester Wisniewski 🇨🇦
liam o 🦆
John Opdenakker
Brian in Pittsburgh
Conny Duck
quintessence 