staging-devopsy.kinsta.cloud

Author: Veronica Haggar

  • ColorTokens Named Winner of the Coveted Global InfoSec Awards During RSA Conference 2021

    ColorTokens Wins Hot Company in Security Company of the Year and Publisher’s Choice in SaaS and Cloud Security in the 9th Annual Global InfoSec Awards at #RSAC 2021

    San Francisco, May 17, 2021 — ColorTokens, a Zero Trust cybersecurity platform company, announced today that it has won the following awards from Cyber Defense Magazine (CDM), the industry’s leading electronic information security magazine:

    1. Hot Company in Security Company of the Year
    2. Publisher’s Choice in SaaS/Cloud Security
    3. Next-Gen in Cloud Workload Protection
    4. Next-Gen in Micro-segmentation

    “We’re honored to receive four of the most prestigious and coveted cybersecurity awards in the world from Cyber Defense Magazine,” said Rajesh Khazanchi, Co-Founder and CEO of ColorTokens. “This recognition is a direct reflection of the success of the Xtended ZeroTrust Platform, the success of our customers, and the commitment of the entire ColorTokens team to help meet the security demands of modern enterprises.”

    ColorTokens is thrilled to be a member of this coveted group of winners: http://www.cyberdefenseawards.com/

    “We scoured the globe looking for cybersecurity innovators that could make a huge difference and potentially help turn the tide against the exponential growth in cyber crime,” said Gary S. Miliefsky, Publisher of Cyber Defense Magazine. “ColorTokens is absolutely worthy of these coveted awards and consideration for deployment in your environment.”

    Please join ColorTokens virtually at the #RSAC RSA Conference 2021, https://www.rsaconference.com/usa today, as it shares its red carpet experience and proudly displays its trophy online at its website, blog and social media channels.

    About ColorTokens
    ColorTokens Inc. is a leading innovator in SaaS-based Zero Trust cybersecurity solutions, providing global enterprises with a unique set of products and services for securing applications, data, and users across cloud and hybrid environments. Through its award-winning Xtended ZeroTrust™ Platform and context-aware machine learning-powered technologies, ColorTokens helps businesses accurately assess and improve their security posture dynamically. With a team of over 400 people, ColorTokens has global office locations in Santa Clara, California; New York; London; Copenhagen, Denmark; and Bengaluru, India. For more information, please visit www.colortokens.com.

    About Cyber Defense Magazine
    With over 5 million monthly readers and growing, and thousands of pages of searchable online infosec content, Cyber Defense Magazine is the premier source of IT Security information for B2B and B2G with our sister magazine Cyber Security Magazine for B2C. We are managed and published by and for ethical, honest, passionate information security professionals. Our mission is to share cutting-edge knowledge, real-world stories and awards on the best ideas, products and services in the information technology industry. We deliver electronic magazines every month online for free, and special editions exclusively for the RSA Conferences. CDM is a proud member of the Cyber Defense Media Group. Learn more about us at https://www.cyberdefensemagazine.com and visit https://www.cyberdefensetv.com and https://www.cyberdefenseradio.com to see and hear some of the most informative interviews of many of these winning company executives. Join a webinar at https://www.cyberdefensewebinars.com and realize that infosec knowledge is power.

  • Illusive Donates Security Resources and Charitable Contributions to Highlight Organizational Risk

    Active Defense leader offering donations of $1500 to charity of choice for Lateral Movement Risk Audit

    New York and Tel Aviv, Israel, May 17, 2021 — Illusive, the leader in Active Defense, today announced its Lateral Movement Risk Audit initiative to shed light on security risks to business’ critical assets while giving back to charitable organizations. To further its mission to keep organizations safe and deprive attackers the ability to move laterally, Illusive is offering a free security assessment and a donation of $1,500 to the recipient’s charity of choice.

    “Attackers are actively seeking ways to steal organizations’ most critical assets, which can leave businesses and organizations completely immobilized,” said Ofer Israeli, Founder and CEO of Illusive. “Lateral movement risk audits are critical to discovering the vulnerabilities that exist within an organization’s environment and enable threats. With this initiative, we’re able to not only stop today’s most dangerous nation-state and ransomware attacks, but also support charities doing incredibly important work in other areas.”

    The full audit will provide insights into organizations’ security posture through a comprehensive risk overview by threat vector. Organizations will have increased network visibility, including admin account access and high-risk connections to business assets, to make more informed decisions and get ahead of potentially damaging security threats.

    Illusive’s fully remote audit evaluates six different attack surface categories ranging from identification of ‘crown jewel’ assets, user credentials and local administrators to network connection pathways and shadow admins. Each category is assigned a grade from A to F along with specific details of risk findings and actionable insights.

    For more information on the security assessment, please visit https://go.illusive.com/lateral-movement-risk-audit-charity.

    About Illusive  
    Illusive prevents attackers from accessing critical assets and detects the lateral movement that enables today’s most dangerous ransomware and nation-state attacks. Despite significant investments, it’s still difficult to see and stop attackers moving inside your environment. The Illusive Active Defense Suite identifies and removes the vulnerable connections and credentials that allow attackers to move undetected, and then replaces them with deceptive versions that fool attackers into revealing their presence upon engagement. Illusive’s agentless approach captures deterministic proof of in-progress attacks and provides actionable forensics to empower a quick and effective response.

    Illusive was founded by nation-state attackers who developed a solution to beat attackers. We help Fortune 100 companies protect their crown jewels, including the largest global financials and pharmaceuticals. Illusive has participated in over 130 red team exercises and never lost one!

    For more information, visit www.illusive.com, contact us at info@illusive.com or follow on LinkedIn, @illusivenw on Twitter and Facebook.

  • ThycoticCentrify Strengthens DevSecOps Capabilities with Addition of Advanced Reporting in DevOps Secrets Vault

    Santa Clara, CA and Washington, DC, May 13, 2021 — ThycoticCentrify, a leading provider of cloud identity security solutions formed by the merger of privileged access management (PAM) leaders Thycotic and Centrify, today announced enhancements to its PAM solution for DevOps, Thycotic DevOps Secrets Vault. New functionality improves security and collaboration crucial for effective DevSecOps.

    DevOps Secrets Vault eliminates friction in the DevOps workflow with high-speed secrets management. When cloud platform administrators, developers, applications, or databases need to access a target, DevOps Secrets Vault generates just-in-time, dynamic secrets that automatically expire. Developers can avoid hard-coding credentials in applications and CI/CD tools or storing them in third-party repositories.

    Advanced reporting identifies vulnerabilities and reduces risk

    The latest release of DevOps Secrets Vault includes advanced reporting capabilities that enable enterprises to easily identify privileged account risk in their DevOps processes. DevOps Secrets Vault customers can now customize reports using advanced queries to return granular information on users, groups, secrets, and policies. As a result, they can take action more quickly to address security vulnerabilities in their DevOps process and protect critical privileged accounts from negligent insiders and malicious cyber attackers.

    DevOps Secrets Vault saves developers time and instills confidence that encryption is correct. Instead of including encryption within an application or creating another application to manage a process, developers can now send unencrypted data to DevOps Secrets Vault’s API where it is then returned with encryption. DevOps Secrets Vault automatically creates the data encryption key and locks it away in a military-grade, secure vault.

    With this latest release, users also have the choice to manually supply an encryption key. This option allows developers maximum control to use the same key to encrypt and decrypt, even outside of DevOps Secrets Vault.

    “DevSecOps is transforming the ways enterprises act to reduce cyber threats,” says Jai Dargan, Vice President of Product Management at ThycoticCentrify. “With the enhancements to the DevOps Secrets Vault, we’re improving the ways developers, operations, and security teams collaborate so they can accelerate their work, and gain a more accurate picture of risk.”

    Multi-layered approach to cloud security

    DevOps Secrets Vault is available as a standalone vault for organizations with existing PAM solutions, as well as within Thycotic’s Cloud Automation Bundle, a single package of Thycotic’s integrated cloud PAM solutions.

    Even with multiple business and technical functions utilizing different types of cloud resources, Thycotic provides a consolidated view of privileged access across an entire organization so IT security teams can manage privileges according to consistent policies. Automation and simple, policy-based controls replace time-consuming, error-prone manual privilege management.

    To learn more about DevOps Secrets Vault and receive a free trial go here.

    About ThycoticCentrify
    ThycoticCentrify is a leading cloud identity security vendor, enabling digital transformation at scale. ThycoticCentrify’s industry-leading privileged access management (PAM) solutions reduce risk, complexity, and cost while securing organizations’ data, devices, and code across cloud, on-premises, and hybrid environments. ThycoticCentrify is trusted by over 14,000 leading organizations around the globe including over half of the Fortune 100, and customers include the world’s largest financial institutions, intelligence agencies, and critical infrastructure companies.

    © Thycotic Software, LLC and Centrify Corporation 2021. ®Centrify and ®Thycotic are registered trademarks of Centrify Corporation and Thycotic Software, LLC respectively.

  • Vectra Cognito Arrives in AWS Marketplace

    San Jose, CA, May 13, 2021 — Vectra AI, a leader in threat detection and response, today announced the availability of its Cognito platform, now available for purchase in the Amazon Web Services (AWS) Marketplace. AWS customers worldwide can now employ Vectra’s suite of solutions through their AWS Enterprise Discount Plan for seamless procurement at a reduced rate. The accelerated purchasing process ensures fast time-to-value for customers leveraging Vectra solutions to gain real-time security, operational and cost management insights across their hybrid AWS environment.

    “Working with vendors who provide the added value of enabling joint customers to purchase security solutions through the AWS marketplace is appreciated,” said Tera Davis, Managing Director of Critical Start. “Knowing that our margins are retained, while providing a procurement vehicle that benefits the customer shows a genuine partnership and one we trust.”

    Today’s cyberattacks will use any means of entry necessary to compromise a network. As a result, the time it takes to detect and respond to an adversary is paramount in thwarting attacks. The Cognito platform accelerates threat detection, investigation, and response using AI to enrich cloud logs and network metadata. Once enriched, the data is collected and stored with the right context to detect, hunt, and investigate known and unknown threats in real-time.

    Vectra offers four applications on the Cognito platform to address these high-priority use cases:

    • Cognito Detect™ provides the fastest most efficient way to prioritize and stop attacks across cloud, data center, applications, and workloads, as well as user & IoT devices and accounts.
    • Cognito Detect for Office 365 and Azure AD™ finds and stops attacks in enterprise SaaS applications and the Microsoft 365 Ecosystem.
    • Cognito Stream™ sends security-enriched metadata to data lakes and SIEMs in Zeek-format.
    • Cognito Recall™ is a cloud-based application that stores and investigates threats in enriched metadata.

    Vectra’s Cognito platform integrates with AWS virtual private cloud (VPC) traffic mirroring to monitor all infrastructure-as-a-service traffic. Cognito also integrates with AWS Security Hub to publish Vectra detections as findings in Security Hub, enabling security teams to correlate Vectra attacker detections with other data sources for faster threat hunting and incident investigations.

    “We are committed to enhancing the productivity of our customers, which means ensuring our industry-leading technology is easily accessible,” said Randy Schirman, Vice President. “Attacks are becoming more sophisticated by the day, and security teams need to be able to seamlessly adopt automated technology that eases the burden of threat detection and response. AWS customers are now able to purchase Vectra’s suite of tried-and-true solutions as a part of their subscription package for quick and easy deployment.”

    Vectra’s Cognito platform is available today on the AWS Marketplace. By purchasing Cognito through the Marketplace, customers can prepay for Vectra solutions through their regular AWS bill once they subscribe, resulting in a consolidated, easy to process bill.

    To learn more, please visit the AWS Marketplace here, or inquire about a custom package by contacting aws-marketplace@vectra.ai.

    About Vectra

    Vectra® is the leader in threat detection and response – from cloud and data center workloads to user and IoT devices. Its Cognito® platform accelerates threat detection and investigation using AI to enrich network metadata it collects and stores with the right context to detect, hunt and investigate known and unknown threats in real time. Vectra offers four applications on the Cognito platform to address high-priority use cases. Cognito Stream™ sends security-enriched metadata to data lakes and SIEMs. Cognito Recall™ is a cloud-based application to store and investigate threats in enriched metadata. Cognito Detect™ uses AI to reveal and prioritize hidden and unknown attackers at speed. And Cognito Detect for Office 365 and Azure AD™ finds and stops attacks in enterprise SaaS applications and the Microsoft 365 ecosystem. For more information, visit vectra.ai.

  • Conga Announces Serena Williams as Keynote Speaker for Conga Connect 2021

    San Mateo, CA, May 11, 2021 — Conga, the global leader in commercial operations transformation, has announced the initial agenda and registration details for its annual event Conga Connect. This year’s event will feature professional athlete and businesswoman Serena Williams as the keynote speaker, who will speak with Conga CEO, Noel Goggin, about her journey and the drive, inspiration, and discipline that have gotten her to where she is today.

    This year’s conference, “Commercial Operations Evolved,” will focus on how businesses can become more agile and adapt quickly to change with solutions that streamline, automate and accelerate essential commercial operations. Sessions are aimed at helping businesses map their journey to digital transformation through best practices to accelerate revenue yield and create better customer and employee experiences.

    Virtual attendees will foster meaningful connections and hear from industry leaders, Conga experts, customers and partners on the latest business trends in revenue operations, contract and lifecycle management and document-centered business processes automation. They will have the opportunity to hear inspirational keynotes, join strategic training sessions, and participate in uplifting self-care sessions.

    “We are excited to welcome our customers and partners to attend Conga Connect this year, and are thrilled that Serena Williams will join us as this year’s keynote speaker. She is a globally recognized figure and one of the greatest athletes of all time, and will be a great addition to our virtual stage,” said Noel Goggin, CEO, Conga. “At Conga, we enable our customers to digitally transform their businesses, but that journey can be very challenging, difficult, and even frightening. Like Serena’s journey through her career, attendees will have the opportunity to hear her insights and gain valuable lessons on how she achieved such remarkable success over an extended period of time.”

    Conga also announced that for every attendee who registers, it will donate $1 to The Nature Conservancy, a global non-profit constantly adapting to take on our planet’s most important challenges. Nature Conservancy’s vision is a world where the diversity of life thrives, and people act to conserve nature for its own sake and ours.

    Conga Connect 2021 will kick-off on Wednesday, June 9 at 9 am PT. The global events will continue into the APAC Region on Thursday, June 10 at 9 am AEST and close with the EMEA region on June 10 at 9 am BST.

    To register for the free virtual event and for more information about Conga Connect, including agenda updates and featured session details, visit Conga.com/connect-registration.

    About Conga

    Conga, the global leader in commercial operations transformation, helps businesses simplify and automate their approach to the essential quotes, contracts, and documents that drive commerce. We help our customers become more agile, so they can adapt quickly to change and create a fluid, connected customer experience. Companies choose Conga for the most comprehensive solution set in the market and expert guidance, enabling them to transform the processes and documents surrounding customer engagement, configure price quote (CPQ), contract lifecycle management (CLM), and the complete commercial operations lifecycle. With Conga, businesses evolve their commercial operations to streamline their revenue processes and derive the meaningful insights that lead to sustained growth.

    Conga is headquartered in San Mateo, Calif. with global operations across North America, Europe and Asia. Learn more at conga.com or follow Conga on Twitter: @CongaHQ.

  • DevOps Connect at RSAC 2021: Insightful Talks, Live Q&A, Workshops, Pilates and More

    DevOps Connect at RSAC 2021: Insightful Talks, Live Q&A, Workshops, Pilates and More

    We are excited to announce the return of DevOps Connect: DevSecOps Virtual Summit on May 19, as part of the RSA Conference 2021. This year, internationally recognized speakers will take a deep dive into “Securing the Cloud Native World.”

    DevOps Connect is a full-day event, featuring four different content tracks, with more than 50 speakers, including keynote presentations, demos, insight talks and featured sessions.

    The agenda features a mix of topics, including cloud security, CI/CD, Kubernetes, GitOps, AppSec, security risks, shift left, open source, case studies covering DevSecOps and more. Attendees will learn how the finance, manufacturing, healthcare and hospitality industries are securing their cloud environments, and how to better secure and monitor their systems.

    DevOps Connect 2021 Lineup

    DevOps Connect 2021 features an exceptional lineup of the most prominent and respected security and DevOps leaders, including:

    • Featured keynote speaker: Christopher Krebs, former director of the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA), and co-founder of Krebs Stamos Group LLC
    • Chenxi Wang, founder and general partner at Rain Capital
    • Allan Friedman, director of cybersecurity initiatives at National Telecommunications and Information Administration in the U.S. Department of Commerce
    • John Willis, senior director of Global Transformation Office at Red Hat
    • Cyndi Gula, managing partner at Gula Tech Adventures
    • Alessandro Vozza, principal software engineer at Microsoft
    • Caroline Wong, CSO at Cobalt
    • Thomas Krane, principal at Insight Partners
    • Charles J. Kolodgy, principal at Security Mindsets LLC and analyst at Accelerated Strategies Group
    • Nisha Kumar, open source engineer at VMware
    • Mike Rothman, president at DisruptOps
    • Dave Howell, VP at ZeroNorth
    • Maciej Mensfeld, senior product manager at WhiteSource
    • Matt Wilson, senior product manager at GitLab
    • Erkang Zheng, founder and CEO at JupiterOne
    • Philippe Humeau, CEO at CrowdSec
    • Jennifer Czaplewski, director of product security at Target
    • Al Sargent, senior director of product at InfluxData

    Former CISA director Christopher Krebs, our featured keynote speaker, will be answering questions from the audience during a live Q&A.

    Workshop Friday

    We are also hosting Workshop Friday, as we wrap up the RSAC 2021, offering live workshops designed to be as interactive and hands-on as possible with experts from Google, JupiterOne, Sysdig and Sonatype. These workshops provide professional guidance and training on a variety of topics, including Site Reliability Engineering (SRE), AWS cloud security and protecting against supply chain attacks. On May 21, attendees will have the opportunity to interact with the experts, share their process, get immediate feedback and personal assistance. Each workshop will be live-streamed through our online platform at no cost to attendees. We have limited spots available. Seats are reserved on a first-come, first-served basis. To save your spot, visit the Workshop Friday website.

    A Unique Virtual Environment and a Few Surprises

    The virtual environment features an auditorium with different tracks where attendees can watch the sessions by industry experts. There will be an expo hall lined with booths featuring interactive chats and downloadable resources. The expo hall will be open throughout the event, giving attendees the opportunity to chat with sponsors, including GitLab, Prisma Cloud by Palo Alto Networks, Sonatype, WhiteSource, Sysdig, JupiterOne, Snyk and more.

    We have a few surprises planned to make this year’s DevOps Connect extra special. Take a break between presentations, grab your yoga mat and enjoy a Pilates class by a certified instructor, dance to the music of our featured DJ and check out how to make a delicious cloud drink by a professional mixologist. You can also participate in a raffle to win a copy of “You Can Stop Stupid” by Ira Winkler, author and president at Secure Mentem, and a copy of “Security Yearbook 2020” by Richard Stiennon, industry analyst at IT-Harvest.

    DevOps Connect 2021 offers the best of a physical environment in a virtual context combined with the advantages and convenience that a virtual environment offers.

    Registered attendees will receive a link to access the virtual environment on-demand. To check out the full agenda and to register, visit the DevOps Connect website.

  • Open Mainframe Project Launches Call for Proposals for the 2nd Annual Open Mainframe Summit on September 22-23 

    Registration for the virtual event is now open.

    SAN FRANCISCO, May 5, 2021 – The Open Mainframe Project (OMP), an open source initiative that enables collaboration across the mainframe community to develop shared tool sets and resources, today announced plans for its 2nd annual Open Mainframe Summit, the premier mainframe event of 2021. The event, set for September 22-23, is open to students, developers, users and contributors of Open Mainframe projects from around the globe looking to learn, network and collaborate. As a virtual event again this year, Open Mainframe Summit will feature content tracks that tackle both business and technical strategies for enterprise development and deployment.

    In Open Mainframe Project’s inaugural event last year, more than 380 registrants from 175 companies joined the two-day conference that featured 36 sessions. Some of the most popular sessions were the Women in Tech panel, COBOL sessions, new mainframer journey and project overview sessions for Ambitus, Feilong, Polycephaly, and Zowe. The event report can be found here and all of the videos can be watched here.

    “Open Mainframe Project is becoming the gateway to all educational tools and initiatives that run some of the world’s biggest enterprise systems,” said John Mertic, Director of Program Management at the Linux Foundation. “For our inaugural event last year, we merely dipped our toes in the water as a new summit. This year, we’ll see more change makers speaking about open source innovation, creativity and diversity in mainframe related technologies. We look forward to igniting conversations that are going to positively impact all facets of mainframes.”

    Call for Proposals

    The Call for Proposals is now open and will be accepting submissions until July 16, 2021. Interested speakers can submit proposals in five tracks such as business overview, Linux on Z, z/OS, education and training and diversity, equity and inclusion. Options for presentations include lightning talks, 30-minute sessions and panel discussions. 

    A program committee, which will include maintainers, active community members and project leaders, will review and rate the proposals once all the submissions are in. This year, Open Mainframe Project welcomes Greg MacKinnon, Distinguished Engineer at Broadcom, Inc; Joe Winchester, Technical Staff Member at IBM; Kimberly Andersson, Director of Experience Design at Rocket Software; Stacey Miller, Product Marketing Manager at SUSE; and Harry Williams, Chief Technology Officer at Marist College as the 2021 Open Mainframe Summit program committee. 

    Submit a proposal here: https://events.linuxfoundation.org/open-mainframe-summit/program/cfp/. 

    Whether a company is a member or contributor of Open Mainframe Project or is sponsoring the event has no impact on whether talks from their developers will be selected. However, being a community leader does have an impact, as program committee members will often rate talks from the creators or leaders of an open source project more highly. Focus on work with an open source project, whether it is one of the Open Mainframe Project’s 18 hosted projects or working groups that adds value to the ecosystem.

    Conference Registration for the online event is $50 for general attendance and $15 for academia. Registration is now open, click here to register. 

    Thank You Sponsors

    Open Mainframe Summit is made possible with support from our Platinum Sponsors Broadcom Mainframe Software, Rocket Software, and SUSE; our Gold Sponsor Vicom Infinity; and our Academic and Community Sponsors CD Foundation and the Fintech Open Source Foundation (FINOS). To become a sponsor, click here. 

    For more about Open Mainframe Project, visit https://www.openmainframeproject.org/.

    About the Open Mainframe Project

    The Open Mainframe Project is intended to serve as a focal point for deployment and use of Linux and Open Source in a mainframe computing environment. With a vision of Open Source on the Mainframe as the standard for enterprise class systems and applications, the project’s mission is to build community and adoption of Open Source on the mainframe by eliminating barriers to Open Source adoption on the mainframe, demonstrating value of the mainframe on technical and business levels, and strengthening collaboration points and resources for the community to thrive. Learn more about the project at https://www.openmainframeproject.org.

    About The Linux Foundation

    The Linux Foundation is the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and commercial adoption. Together with the worldwide open source community, it is solving the hardest technology problems by creating the largest shared technology investment in history. Founded in 2000, The Linux Foundation today provides tools, training and events to scale any open source project, which together deliver an economic impact not achievable by any one company. More information can be found at www.linuxfoundation.org. 

    The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see its trademark usage page: www.linuxfoundation.org/trademark-usage. Linux is a registered trademark of Linus Torvalds.

  • Live Fireside Chat with Christopher Krebs: How to Combat Disinformation

    Live Fireside Chat with Christopher Krebs: How to Combat Disinformation

    We live in a digital world where most information is now found online. This makes it increasingly difficult to verify the veracity of information. Threat actors have been taking advantage of the digital landscape to spread disinformation, propaganda and conspiracy theories to manipulate the public and sow doubt, discord and chaos. How can we distinguish between fact and opinion, truth and supposition? How can we spot fake news and tackle disinformation?

    Former Director of the Department of Homeland’s Cybersecurity and Infrastructure Security Agency (CISA) and Co-Founder of Krebs Stamos Group, Christopher Krebs, will be speaking about disinformation at this year’s DevOps Connect: DevSecOps on May 19 at 12:00 p.m. EDT. During his keynote session, Krebs will explain what disinformation is, how to recognize fake news and the challenges disinformation poses to cybersecurity teams. He will reveal effective ways to combat disinformation, and how public and private partnerships can help. Krebs will also be answering questions from the audience during the live Q&A session.

    Krebs is a founding partner of the Krebs Stamos Group, and previously served as the first director of the federal CISA for two years. Before that, he served in various roles at the Department of Homeland Security (DHS), responsible for a range of cybersecurity, critical infrastructure and national resilience issues. He has also directed U.S. cybersecurity policy for Microsoft and advised industry and government clients on complex cybersecurity and business risk matters while serving in positions with Obsidian Analysis and Dutko Consulting.

    DevOps Connect: DevSecOps has been part of the RSA Conference for six years in a row. This year, the main focus of the event is on “Securing the Cloud Native World.” Krebs has joined a stellar lineup of DevOps, cybersecurity and IT thought leaders as the DevOps Connect 2021 featured keynote speaker. Attend his live session, “Disinformation: As Dangerous as Cyber and Physical Threats,” and check out all the other breakout sessions to learn more about cloud security, DevSecOps, cybersecurity threats—such as disinformation—and more.

    For more information and to register for free, visit the DevOps Connect 2021 website. Save your spot today and learn how to better secure, monitor and maintain the security of your systems.

  • Cybersecurity 2021: Are You Really Prepared for a Cyberattack?

    Cybersecurity 2021: Are You Really Prepared for a Cyberattack?

    As the majority of businesses are increasingly moving to the online world, employees keep working remotely and more cyberattacks keep happening all over the globe, there is no doubt that embracing DevSecOps should be the new normal for every company. Organizations need to be able to adopt DevSecOps practices and adapt to new and evolving threats in order to protect their data and systems from malicious attacks.

    At Cybersecurity 2021: The New Normal Virtual Summit, taking place March 4 and 5, the brightest minds in the security and IT industry will come together to discuss new security threats, empower DevOps teams with the latest security tools and provide practical tips and guidance to help developers and ops teams make the right security decisions to keep their data secure.

    The two-day virtual event features thought-provoking discussions, networking opportunities and educational sessions focused on:

    • DevSecOps tools and practices
    • The main challenges of security and development teams when it comes to AppSec
    • Identity and Access Management (IAM)
    • Passwordless and the long-term future of identity management
    • Policy-as-Code and how it impacts security
    • How security threats changed with COVID-19 and what to expect in 2021
    • How to manage AppSec
    • How to mitigate API vulnerabilities
    • How to break the silos and advance towards DevSecOps maturity
    • How to expand your security program through low-to-no cost initiatives
    • Time series database for security monitoring
    • Machine identity management
    • Top 10 Hacks From the Past Decade
    • Runtime observability techniques for security and compliance
    • Securing AWS credentials on DevOps machines

    Cybersecurity 2021 features an outstanding lineup of industry leaders, including:

    • Ira Winkler, author and president at Secure Mentem
    • Chenxi Wang, founder and general partner at Rain Capital
    • Ron Gula, president at Gula Tech Adventures
    • Richard Stiennon, founding member of The Analyst Syndicate and chief research analyst at IT-Harvest
    • Joe Levy, CTO at Sophos
    • Rajat Bhargava, founder and CEO at JumpCloud
    • Myla Pilao, head of security research communications for TrendLabs at Trend Micro
    • Upasna Gupta, senior product marketing manager for Prisma Cloud at Palo Alto Networks
    • Julian Waits, general manager of cyber business unit and public sector at Devo
    • Joseph Feiman, chief strategy officer at WhiteHat Security
    • Ian Murphy, founder and CEO at CyberOff
    • Mike Jones, security researcher at H4unt3d Hacker Podcast
    • Rhys Arkins, director of product management at WhiteSource
    • TJ Jermoluk, co-founder and CEO at Beyond Identity
    • Jim Ducharme, general manager of the anti-fraud business unit at RSA

    Attendees will have the chance to enter a raffle for a chance to win a free copy of “You can Stop Stupid” by Ira Winkler and another one for a free copy of “Security Yearbook 2020” by Richard Stiennon. There will be valuable resources available for download and attendees will be able to interact with sponsors to learn more about their security tools and services.

    To see the full agenda and to register, please visit the Cybersecurity 2021 website.

  • Game On: Secure Coding Virtual Summit 2021

    Game On: Secure Coding Virtual Summit 2021

    Agile organizations are looking for ways to win at security without slowing down their release cycles. That’s where DevSecOps comes in. The days of a hands-off security approach for developers are over. Organizations implementing DevSecOps to integrate security into their DevOps framework are able to release secure software faster. Developers test code for potential security vulnerabilities earlier in the pipeline to fix security issues in real time to avoid costly delays.

    At Secure Coding Virtual Summit 2021, industry-leading AppSec and DevSecOps practitioners, analysts and visionaries will come together to share their best pro tips and power ups to level up your code security. The agenda for the virtual event, taking place March 24 from 10 a.m. to 6 p.m. ET, features a mix of topics including AppSec, threat modeling, API security, container security, case studies and more.

    The most brilliant security luminaries from OWASP, Okta, Microsoft, Secure Code Warrior, WhiteSource and many other well-known IT companies, will discuss:

    • How to level up your secure coding strategies
    • How to run an AppSec program with open source projects
    • The best practices for securing your APIs, the attack surface of an API and common authorization problems
    • The concept of threat modeling, its objectives and its role in the SDLC
    • How to transform developers into security people
    • How easy (or not) it is to get a container or Kubernetes cluster hacked on purpose
    • How to create an AppSec pipeline with containers in a short period of time (demo)

    This year’s Secure Coding features outstanding industry leaders, such as:

    • Vandana Verma Sehgal, global board of directors at OWASP
    • Simone Curzi, cybersecurity principal consultant at Microsoft
    • Keith Casey, API problem solver at Okta
    • Matias Madou, CTO and co-founder at Secure Code Warrior
    • Matthew Coles, senior principal product security engineer at Dell
    • Sarah Young, security architect at Microsoft
    • Chris Romeo, CEO and co-founder at Security Journey
    • Dr. Phillipe de Ryck, web security expert and founder at Pragmatic Web Security
    • Richard Greenberg, founder and CEO at Security Advisors LLC
    • Izar Tarandach, principal security engineer at Squarespace
    • Jeroen Willemsen, principal security architect at Xebia
    • Shiri Ivtsan, director of product at WhiteSource
    • Justin Hutchings, director of product management at GitHub
    • Matt Tesauro, senior partner at 10 Security
    • Matthew Butler, principle engineer at Laurel Lye

    Attendees will have access to useful resources and will be able to interact with sponsors to power up their secure coding strategies. There will be live Q&A chats with keynote speakers to get your burning questions answered. Attendees will also have the opportunity to hunt for Easter eggs to boost their player score for a chance to win a PlayStation 5.

    To see the full agenda and to register, please visit the Secure Coding website.