Showing 1–12 of 24 articles
Page 1 of 2
Check the SaaS settings you assumed were safe
A business subscription does not automatically select the right sharing and access controls. Define the intended configuration, review administrators and integrations, and test the user experience.
Read the visual guide
Keep a list of the remote admin tools you allow
A legitimate support tool still creates an access path. Record the tool, managed systems, operators, authentication, session records, and how access is removed.
Read the visual guide
Passwords that are still in Git history
Deleting a secret from the latest version does not invalidate it or remove every earlier copy. Contain the credential first, then assess repository history and any evidence of use.
Read the visual guide
Who can reach a Kubernetes cluster
A cluster’s exposure includes more than its public endpoint. Review administrators, workload identities, role bindings, credentials, network paths, and access to sensitive configuration.
Read the visual guide
What a container does not isolate
A container’s boundary depends on its configuration and the host it shares. Review privilege, mounted resources, credentials, network access, and runtime controls as a complete deployment.
Read the visual guide
Where ordinary IT ends and a safety system begins
A system connected to physical operations can fail in ways that affect safety, not only information. Coordinate security work with the people responsible for the process and its safe operation.
Read the visual guide
Who can use an encryption key, and how you would know
The right to manage a key and the right to use it are different powers. Review who can decrypt, change policy, rotate, export, or delete keys, and what evidence those actions leave.
Read the visual guide
Backups that ransomware cannot rewrite
A backup is vulnerable if an attacker can erase or rewrite it using the same authority that controls production. Review the backup’s administrative path as well as its storage features.
Read the visual guide
How to use certificate transparency logs
Certificate Transparency records can help you notice unexpected certificate issuance. They are useful clues to investigate, not proof that the named service is live or that it was compromised.
Read the visual guide
Where SAML and OpenID Connect sign-in usually fail
A signed identity message still needs the correct issuer, audience, destination, and request context. Review the integration as a complete sign-in and account lifecycle.
Read the visual guide
Home routers used for work
A home router connects work systems to personal devices and internet services. Review its support status, administration, Wi-Fi configuration, and any unnecessary remote access.
Read the visual guide
Change the default passwords on network appliances
A device may have separate credentials for administration, monitoring, support, and cloud services. Review all of them before deciding that the factory access has been removed.
Read the visual guide