Resources

Security

Redefining Root of Trust For The Cloud Era (Part 2)

Cloud computing has brought irreversible changes and improvements to the way we share information and conduct business. However, it has also introduced new cybersecurity threats, that if left unaddressed, can result in irreversible damage to a company’s reputation and position in the market. Encryption has been used as a primary defense against data theft, whether […]

Security

Redefining Root of Trust For The Cloud Era (Part 1)

In the digital world, cryptographic solutions use encryption keys to secure data at rest, data in use, and data in transit. They are responsible for encrypting and decrypting the data, validating identities by authenticating users and devices, and securing transactions with digital signatures and certificates. Beneath the complex world of encryption use cases and algorithms […]

Security

The Case For Just-In-Time Credentials and Zero Trust Access: Fortinet VPN Credentials Compromised

On September 8 2021, a threat actor released a list with half a million username and passwords for Fortinet VPN deployments. This is very concerning, as the attacker claims a large portion of these credentials are still valid. As a result, it is now easy for a threat actor to launch a customized campaign, targeting […]

Security

Next Gen Root of Trust To Secure Cryptographic Keys Across The Hybrid Multi-Cloud

In our recent article “Are your cryptographic keys truly safe? Root of Trust redefined for the cloud era” featured in HelpNetSecurity, we discussed how the objective of a Hardware Security Module (HSM) is to ensure that the keys it stores cannot be compromised. When the safety of the keys in an HSM can be assured, […]

Security

Using Dynamic Secrets To Achieve Zero Standing Privileges

In their 2019 report Remove Standing Privileges Through a Just-in-Time PAM Approach, Gartner suggested that: “The existence of privileged access carries significant risk, and even with PAM tools in place, the residual risk of users with standing privileges remains high. Security and risk management leaders engaged in IAM must implement a zero standing privileges strategy […]

Security

Using Akeyless to Enable Zero-Trust Secure Remote Access

Implementing a Zero Trust security model requires that your organization isn't trusting anyone or anything automatically, from inside or outside of your organization. In this blog we'll delve into some of Zero Trust principles of Just-in-Time Access, Least Privileged Approach and Zero-Standing Permissions, discussing why Akeyless is in the best position to provide a comprehensive Zero-Trust solution.

Security

Better Protect Your Ansible Secrets and Privileged Access

Configuration management tools, such as Ansible, have become an attack target for malicious attackers. Find out how to add two layers of protection to your Ansible secrets.

Security

Better Protect Your Kubernetes Secrets and Privileged Access

Container orchestration tools, such as Kubernetes, have become an attack target for malicious attackers. Find out how to add two layers of protection to your Kubernetes secrets.

Security

Just-in-time Access Done Right for DevOps and Security Teams

Just-in-time (JIT) originates from the manufacturing industry. Its goal is to eliminate waste by receiving what you need when you need it. JIT has very practical uses in security risk...

Security

Eliminating SSH Keys is Possible by Using SSH Certificates Instead

If you’re looking to free your time and stop using SSH Keys by leveraging SSH Certificates automation, there is a way to do that. SSH Keys provide a secure protocol...