Showing 1–12 of 15 articles
Page 1 of 2
Check the SaaS settings you assumed were safe
A business subscription does not automatically select the right sharing and access controls. Define the intended configuration, review administrators and integrations, and test the user experience.
Read the visual guide
Keep a list of the remote admin tools you allow
A legitimate support tool still creates an access path. Record the tool, managed systems, operators, authentication, session records, and how access is removed.
Read the visual guide
Passwords that are still in Git history
Deleting a secret from the latest version does not invalidate it or remove every earlier copy. Contain the credential first, then assess repository history and any evidence of use.
Read the visual guide
Who can reach a Kubernetes cluster
A cluster’s exposure includes more than its public endpoint. Review administrators, workload identities, role bindings, credentials, network paths, and access to sensitive configuration.
Read the visual guide
Who can use an encryption key, and how you would know
The right to manage a key and the right to use it are different powers. Review who can decrypt, change policy, rotate, export, or delete keys, and what evidence those actions leave.
Read the visual guide
Backups that ransomware cannot rewrite
A backup is vulnerable if an attacker can erase or rewrite it using the same authority that controls production. Review the backup’s administrative path as well as its storage features.
Read the visual guide
Where SAML and OpenID Connect sign-in usually fail
A signed identity message still needs the correct issuer, audience, destination, and request context. Review the integration as a complete sign-in and account lifecycle.
Read the visual guide
Change the default passwords on network appliances
A device may have separate credentials for administration, monitoring, support, and cloud services. Review all of them before deciding that the factory access has been removed.
Read the visual guide
Who should be allowed to change your DNS records
Control of DNS can affect email, websites, and other essential services. Identify the registrar, DNS host, privileged users, and applications that can change records.
Read the visual guide
What to do when a password is pasted into chat
Deleting a chat message does not invalidate a password or token that someone may have copied. Identify the credential, revoke or rotate it, and review its possible use.
Read the visual guide
Who should have administrator rights on a work laptop
Administrator access changes what software can do to a device. Limit routine privilege while giving staff a clear, workable route for approved installation and support.
Read the visual guide
What you still have to secure when you use the cloud
A managed cloud service does not remove every security responsibility from your team. Map the provider’s role and your own configuration, identities, data, and recovery duties.
Read the visual guide