Blog

Equif**ked - a Lesson for CFOs

As the trading hours closed tonight, Wall Street has rendered its initial verdict on Equifax after its breach earlier this month -- 25%, or $4 Billion, in market cap wiped out in just 5 days. And...

Read More

Varun Badhwar

09.13.17 0:46 AM

Security Best Practices for AWS Access Key Deletion

Recent months have seen a number of high profile breaches such as the OneLogin breach that resulted from compromised access keys. In these instances, the affected organizations failed to meet...

Read More

RedLock CSI Team

08.15.17 14:37 PM

Google Groups Misconfiguration Security Advisory

The RedLock CSI team discovered hundreds of Google Groups that have publicly exposed messages containing sensitive information.

 

Read More

RedLock CSI Team

07.24.17 9:00 AM

Docker Hub Security Advisory

The RedLock CSI team found that many organizations have accidentally shared internal Docker images publicly.

 

Read More

RedLock CSI Team

07.18.17 5:22 AM

3 Key Takeaways from AWS Community Day

Last week, the first AWS Community Day was held in San Francisco. Unlike most conferences that are sponsored by vendors, this free event was organized by AWS community leaders and heroes...

Read More

Amy Heng

06.20.17 23:20 PM

Misconfiguration Exposes 198 Million American Voter Records

During the 2016 election, the Republican National Committee (RNC) hired Deep Root Analytics (DRA) to analyze political voting behaviors of Americans. DRA is storing 25 terabytes of sensitive voter...

Read More

Varun Badhwar

06.20.17 0:26 AM

Lessons from the OneLogin Breach

Research has shown that people with the GG genotype are able to quickly learn from their mistakes. We are starting the “Cybersecurity GG Genotype” blog series where we will analyze breaches and...

Read More

Gaurav Kumar

06.08.17 14:05 PM

Cloud Security Trends and Preventing Cyberheists

During one of my favorite scenes in Ocean’s Eleven, Saul Bloom asked Danny Ocean, "You expect us to just walk out the casino with millions of dollars on us?” Who responded with a simple, “Yeah.”...

Read More

Gaurav Kumar

05.24.17 23:07 PM

AWS RDS / EBS Misconfiguration Advisory

The RedLock security research team discovered a common misconfiguration in Amazon Relational Database Service (RDS) and Amazon Elastic Block Store (EBS) where snapshots have inadvertently been...

Read More

RedLock CSI Team

05.24.17 22:40 PM

Amazon S3 Misconfiguration Advisory

Researchers (most notably Chris Vickery) have discovered that a common misconfiguration in Amazon Simple Storage Service (Amazon S3) may expose sensitive enterprise data to unauthorized access....

Read More

RedLock CSI Team

05.24.17 22:21 PM