#SecretsManagement

The Problem of Permissions and Non-Human Identities – Why Remediating Credentials Takes Longer Than You Think

by

November 18, 2024 at 12:57PM A recent GitGuardian and CyberArk report reveals 79% of IT leaders faced secrets leaks, with over 12.7 million hardcoded credentials on GitHub. Despite developer and security teams’ efforts, confusion over permissions hampers efficient remediation, averaging 27 days. Implementing a shared responsibility model is essential to address these risks effectively. **Meeting … Read more

The Problem of Permissions and Non-Human Identities – Why Remediating Credentials Takes Longer Than You Think

by

November 18, 2024 at 09:00AM Research by GitGuardian and CyberArk reveals a rise in secrets leaks among IT decision-makers, with over 12.7 million hardcoded credentials exposed on GitHub. Organizations face lengthy remediation times and unclear ownership of security responsibilities. A shared responsibility model between developers and security teams could enhance credential management and reduce risks. … Read more

The Current Cybersecurity Landscape: New Threats, Same Security Mistakes

by

September 17, 2024 at 10:10AM Today’s cybersecurity landscape demands resilience amid economic turbulence and increasing cyber threats. Embracing generative artificial intelligence (GenAI) poses new risks if not properly implemented, especially as the pace of technology adoption outstrips security measures. The “2024 Thales Data Threat Report” highlights the pressing need for proactive cybersecurity and identifies three … Read more

Entro Extends Industry-leading Non-Human Identity Security Platform

by

August 9, 2024 at 01:49PM Entro Security, a leader in Non-Human Identity (NHI) and Secrets Management, has announced two groundbreaking features at Black Hat USA: Optical Character Recognition (OCR) support for secret scanning and Employees Tokens Blast Radius. These unique features provide comprehensive insight and governance for secrets and NHI management, empowering security teams with … Read more

End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

by

July 1, 2024 at 08:06AM The article emphasizes the critical importance of securing machine identities and managing secrets in software development. It highlights the prevalence of identity-related breaches and the risks associated with using plaintext credentials. The recommended approach includes secrets detection, management, scanning, and automatic rotation, along with implementing centralized vault solutions and securing … Read more

Code Keepers: Mastering Non-Human Identity Management

by

April 12, 2024 at 07:51AM The article discusses the growing importance of managing non-human identities in today’s technology landscape. It highlights the potential vulnerabilities and security risks associated with these identities and provides insights into the necessary features for managing them effectively, emphasizing the need for comprehensive visibility, real-time monitoring, centralized governance, and vulnerability detection. … Read more

Python’s PyPI Reveals Its Secrets

by

April 11, 2024 at 10:27AM GitGuardian’s 2023 and 2024 reports revealed significant security concerns in public repositories. The 2024 report found 12.8 million new exposed secrets on GitHub and highlighted security risks in PyPI. The report emphasizes the prevalence of open-source packages and stresses the importance of proper secret management to prevent potential exploitation. After … Read more

Behind the Scenes: The Art of Safeguarding Non-Human Identities

by

March 28, 2024 at 08:03AM The text discusses the challenges of managing non-human identities in modern software development, highlighting issues such as hard-coded secrets, scalability challenges, compliance difficulties, and the neglect of security in the development process. It also provides best practices for securing non-human identities and introduces Entro, a tool for efficient secrets management … Read more

Secrets Sensei: Conquering Secrets Management Challenges

by

March 8, 2024 at 06:09AM In the cybersecurity realm, secrets management is essential in safeguarding sensitive data. This involves avoiding common mistakes such as hard coding secrets, inadequate key rotation, public storage, and over-provisioning of privileges. Additional pitfalls include improper lifecycle management, lack of audit trails, and failure to encrypt Kubernetes secrets. Strategies for remedying … Read more

GitHub rotates keys to mitigate impact of credential-exposing flaw

by

January 16, 2024 at 05:23PM GitHub resolved vulnerabilities enabling attackers to access credentials in production containers by patching CVE-2024-0200. The update applies to GitHub Enterprise Server versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3. While potential exploitation requires an organization owner role, GitHub rotated exposed credentials and urges swift security update installation. Additionally, a command injection vulnerability … Read more