Zero Trust & Network Security
Section
Opinion
Data Security & Privacy
Treat a Test Environment Holding Real Personal Data as Production
Application Security
Treat a WAF Rule for PHP2Shell as a Patch-Window Control Only
Cloud Security
Treat Cloud Billing Admin as a Privileged Role
Security Operations
Automatic Content Updates Belong in Your Patch Policy
Threat Intelligence
A 1,400-Plus-CVE Release Shows Why the CVE Count Should Not Set Your Priorities
Application Security
Keep Your Self-Hosted CI Server Off the Public Internet
Data Security & Privacy
Backups Hold Production Data, So Guard Them Like Production
Threat Intelligence
Watch Certificate Transparency for Every Domain You Own, Parked Ones Too
Threat Intelligence
