Security Insights
Deep dives, expert analysis, and practical guidance on exposure management, adversarial validation, and the future of AI-driven exposure management.
How to Intercept Traffic from Proxy-Unaware Mobile Apps
Set Burp as the device proxy, open the app, and see nothing. The app ignores the system proxy. Here is how to force its traffic through your proxy with iptables NAT, DNSChef, and VPN redirection, then read it.
CTEM for SaaS Security Leaders: A Practical Guide to Choosing the Right SaaS Security Solutions
CTEM for SaaS is a force to be reckoned with. It's adaptable, scalable, and user-centric. From customer relationship management to field service automation, SaaS is making businesses more efficient worldwide. But under the hood, there's a real cybersecurity issue, IT data breaches have exploded, wit
How CTEM Enhances Threat Prioritization in Complex Networks
Modern enterprise networks are more complex than ever, with sprawling cloud environments, remote workforces, third-party integrations, and a constant influx of new vulnerabilities. Security teams are bombarded with thousands of alerts daily, making it nearly impossible to address every issue effecti
Cut RDS Costs by 50% with Aurora Serverless V2 Idle Connection Fix
In a recent migration from a standard RDS DB instance to Aurora RDS PostgreSQL Serverless V2, we encountered an unexpected issue a significant and unexplained increase in Aurora Serverless V2 connections. This anomaly led to spikes in resource utilization, specifically memory, and caused a noticeabl
Critical CUPS Linux Vulnerability: Risks and How to Respond
In a significant security development, a critical Remote Code Execution (RCE) vulnerability, referred to as the cups linux vulnerability has been uncovered in the Common Unix Printing System (CUPS), a widely used printing service in Linux and other Unix-based systems. This flaw, if exploited, could
Top 5 Vulnerability Management Mistakes Companies Make (Plus a Bonus Mistake to Avoid)
Are you confident your vulnerability management solution is truly effective, or do you sometimes feel it’s falling short? Many companies invest time and resources in securing their systems, yet vulnerability management mistakes can leave them exposed to unseen threats. Whether you're refining an exi
CVE-2024-38063: An In-Depth Look at the Critical Remote Code Execution Vulnerability
CVE-2024-38063: An In-Depth Look at the Critical Remote Code Execution Vulnerability In a recent security advisory, Microsoft disclosed a high-severity vulnerability identified as CVE-2024-38063. This critical Remote Code Execution (RCE) flaw, rated with a CVSS score of 9.8, poses a significant risk
Adaptive Service Level Agreements (SLA) for Vulnerability Management- A strobes Guide
Traditionally, organizations have often relied on a standardized SLA for vulnerability management, imposing identical remediation timelines across all teams and vulnerabilities. This approach suffers from several shortcomings: Overwhelm and Discouragement: Teams with limited resources struggle to me
Open Source Security: How Strobes Integrates Security into Your Dev Workflow
Cloud-native development thrives on open source software (OSS). It offers readily available, pre-built components that accelerate development lifecycles. However, this very advantage presents a significant Open Source Security challenge for DevSecOps: OSS security vulnerabilities. A single critical
Top 5 Vulnerabilities for March 2024: A Closer Look at the XZ Utils Supply Chain Attack
March may have roared in like a lion, but for cybersecurity professionals, it was more like a backdoor sneaking into a critical utility. This month, we've seen some serious contenders, but one in particular has sent shockwaves through the open-source software (OSS) community: CVE-2024-3094, a sneaky
Atlassian Patches Critical Bamboo Bug and Over 20 Other Vulnerabilities
Atlassian recently addressed a critical security flaw (CVE-2024-1597) impacting Bamboo Data Center and Server versions. This SQL injection vulnerability, discovered by SonarSource security researcher Paul Gerste, allows attackers to potentially compromise vulnerable systems without needing user inte
A Critical Remote Code Execution(RCE) Vulnerability in Apache Struts2 Flaw Puts Your Web Apps at Risk
The web development world is constantly on guard against security threats, and a recent discovery in the popular Apache Struts2 framework serves as a stark reminder. This critical Remote Code Execution vulnerability, known as CVE-2023-50164, exposes a serious flaw that could allow malicious actors t