Security
Have you tested and do you have the capability to restore your Active Directory or whatever IAM technology you use in the wake of a devastating incident?
MTTD, as things currently stand, cannot be relied upon exclusively as a metric to measure the effectiveness of data breach detection.
Happy Patch Tuesday: Have some critical SAP vulnerabilities affecting pretty much every internet-facing product whilst you're at it...
Risk arbitrary code execution or face howls from users unable to access Instagram? Priorities, priorities -- but a fresh fix is coming after initial RSR rolled back.
As well as setting up honeypots to identify and target brute force attacks, the NCSC also took down 24,407 web shells in 2022.
You're tired? Everyone's tired. Just patch promptly please.
Dust off your math, review the literature with some strong coffee; envision a future fresh from a William Gibson novel...
Even with ‘traditional’ configuration of resources in the cloud - and Kubernetes becomes a more extreme example of this – what is crystal clear is that security cannot stay outside of the development and DevOps teams."
