We’ve had a quite a few exciting announcements roll out lately, but this one is especially important. Today we’ve unveiled the beta program for a new product built directly into the CloudPassage Halo platform: Project Cielo! Project Cielo expands our…
Tag: alerting
Detection and remediation of Spectre and Meltdown (CVE-2017-5754, CVE-2017-5753, CVE-2017-5715) using Halo
Authors: Alex Mandernack, Security Engineer, CloudPassage Sean Nicholson, Security Engineer, CloudPassage As news breaks of yet another critical vulnerability, security personnel are scrambling to find a way to detect and remediate these vulnerabilities as quickly as possible. If you are…
An example of Halo’s workload protection at work: NTPD vulnerability CVE-2016-7434
Last week the team that supports the Network Time Protocol (NTP) software released an advisory describing a number of vulnerabilities in NTP and announced patches that address them. One of the announced vulnerabilities could be used to crash the NTP…
CloudPassage Halo: What’s new in the latest update?
A few weeks ago, we released the latest update to our award-winning Halo platform. The update includes several enhancements including a new filtering feature in the portal user interface, visual and functional improvements to the Traffic Discovery feature, improved server…
Video: The cloud amplifies old security problems (Black Hat 2016)
Guest blog by David Spark, Spark Media Solutions “A lot of the same security vulnerabilities and a lot of the same risks exist in the cloud, they just exist in a different form,” explained Trevor Hawthorn (@packetwerks), CTO, Wombat Security…
Video: There is no configuration that stays constant in the cloud (Black Hat 2016)
Guest blog by David Spark, Spark Media Solutions “If you don’t have a metric on something, how do you know what normal looks like?” asked Aaron McKeown, lead security architect and cloud security product owner for Xero in our conversation…
Video: How Xero uses CloudPassage to get security into the hands of developers
Guest blog by David Spark, Spark Media Solutions “We have to get developers thinking about security at the start of the entire development lifecycle. And that even comes down to the fact that it’s mandatory to put tools like our…
Will we be able to control data in the wild? (Black Hat 2016)
Guest blog by David Spark, Spark Media Solutions “Once the data is out there, it’s out of their control,” said Elliot Lewis (@elliotdlewis), VP of security, risk, and compliance research at Info-Tech Research Group, in our conversation at the Black…
How microsegmentation helps with applications
Guest post by Matthew Pascucci, Frontline Sentinel One use case for microsegmentation that we haven’t completely touched on in previous posts is the protection of applications within your network. We’ve discussed the use of security as a whole and why…
Video: Will your cloud provider play nice with your third-party security vendor?
Guest blog by David Spark, Spark Media Solutions When a company moves to the cloud, there are many parties responsible for security. Even with contracts, it may not always be clear where the boundaries of responsibility between the companies, the users, the…