Least Privilege
-
Cloud Security
Kubernetes RBAC Grants More Than Its Verbs Suggest
Permission to read secrets in a namespace is obvious. Permission to create pods in that namespace grants the same access…
Read More » -
Identity & Access
Standing Admin Access Is the Vulnerability You Approved
Permanent administrative rights mean every compromise of that account is an immediate full compromise. Just-in-time elevation converts a standing risk…
Read More » -
Cloud Security
Cloud Breaches Are Configuration Failures, Not Hacking
Almost no cloud breach involves defeating the provider's security. It involves a permission granted too broadly, a bucket left open,…
Read More »