Firewall Architecture in the Cloud
In my last blog, I explained why you need a firewall in the cloud. Now, let’s talk about the how. Typically, customers have two different deployment models of their cloud network...
Security
How Azure AD Falls Short of Identity Governance
Identity Governance – the “Why” and the “What” Is Identity Governance not the same as Identity (and Access) Management? Why not? Technically, what we consider as IAM stems from the need...
What We’ve Learned About IT Security from Past Network Breaches
With the rise of cloud connectivity and the remote workforce, the perimeter of enterprise organizations has greatly expanded. We’ve moved on from an original perimeter of endpoints, on-site users,...
Device Management in the World of Consulting
In light of the Okta frenzy on March 22, 2022, Okta announced that LAPSUS$ posted screenshots they were able to take from a security engineer’s computer. This security engineer worked for...
Do I Need a Firewall in the Cloud?
This blog series will cover architecture decisions that should be considered when migrating to the cloud. This series is written by a team of consultants that have worked with all walks of life in...
Cybersecurity has always been of extreme importance, but the conflict between Russia and Ukraine has placed an even heavier emphasis on it. Our CTO, Eric Aslaksen, Head of IT Security, Thomas...
Least Privileged Access with Terraform
AWS, like most security-minded organizations, strongly recommends following the security practice of least privileged. In some cases, this can be a simple task. A handful of instances may only need...
ServiceNow for IGA?
With the complexity, as well as the importance, of identity and access management (IAM) on the rise, it’s important that businesses employ the proper tools. In my previous blog, How is IAM Divided...
How We Use BloodHound and How it Can Help Defenders
BloodHound, available at bloodhound.readthedocs.io, maps Windows Active Directory permissions to a graph database that lets users trace attack paths using a GUI and a query system. To make that more...
Four Easy Indicators of a Phish
Cybersecurity can be an endless game of cat and mouse, and attackers are constantly looking for ways into your organization. While major Internet and software providers, including the open source...
The Rise of Mobile Malware
Smartphones, tablets and other mobile devices have become ubiquitous in our society over the past few decades, leading to a world where many of us have one in our possession at all times. The sheer...
Inbox (1): Proper Email Authentication
Emails are sent from a source server to a destination server (sometimes through multiple hops) via the SMTP protocol. When you use a webmail client – think Gmail and Yahoo – to send an email, the...