Managing Secrets - Vlad Matsiiako - ASW #327
22 April - 1 hour 3 minsSecrets end up everywhere, from dev systems to CI/CD pipelines to services, certificates, and cloud environments. Vlad Matsiiako shares some of the tactics that make managing secrets more secure as we discuss the distinctions between secure architectures, good policies, and developer friendly tools. We've thankfully moved on from forced 90-day user password rotations, but that doesn't mean there isn't a place for rotating secrets. It means that the tooling and processes for ephemeral secrets should be based on secure, efficient mechanisms rather than putting all the burden on users. And it also means that managing secrets shouldn't become an unmanaged risk with new attack surfaces or new poi...
Series Episodes
New book from Dr. Anand Singh, why CISOs buy, and the latest news - Anand Singh - ESW #428
1 hour 43 mins
13 October Finished
Ballistic Hot Dogs, Clayrat, Twonet, Lockbit, Resumes, Discord, Aaran Leyland and... - SWN #519
31 mins
10 October Finished
Forrester's Global Cybersecurity Market Forecast Before AI Fully Kicks In - Merritt Maxim - BSW #416
52 mins
8 October Finished
Bad Crypto, Zombie CPUs, Y2K38,Park Mobile, Redis, Red Hat, Deloitte, Aaran Leyland.. - SWN #518
28 mins
7 October Finished
Finding Large Bounties with Large Language Models - Nico Waisman - ASW #351
53 mins
7 October Finished
