The long deep reach of the SolarWinds compromise

The long deep reach of the SolarWinds compromise

The news about the compromise of SolarWinds has started to recede but it will remain a watershed event in the history of information security. If you haven’t heard this podcast discussing the compromise and its consequences by the Andreessen Horowitz team at...
Cloud misconfigurations

Cloud misconfigurations

In my previous blog, I outlined the enormous benefits of the rapidly growing SaaS and cloud services model for software, and also touched on the inherent security risks of misconfigurations and how they’re going largely unaddressed. These risks are substantial, so...