Dwayne McDaniel

Reputation:	1198
Pageviews:	137.6K
Articles:	43
Comments:	0

Securing Your Machine Identities Means Better Secrets Management

Machine identities make up the majority of the over 12.7 million secrets discovered in public on GitHub in 2023. Let's look at how we got here and how we fix this.

July 9, 2024

· 504 Views · 1 Like

Lessons On Secrets Security From Datadog Research

Explore security findings from Datadog's research into recent attacks, highlighting two sophisticated attack methods and vital lessons in secret security.

May 9, 2024

· 1,204 Views · 1 Like

Good Application Security Posture Requires Good Data

Application Security Posture Management, ASPM, is only as good as the data sources. Learn about the pitfalls and what to look for in tools and scanners.

February 8, 2024

· 2,513 Views · 1 Like

Honeytokens for Peace of Mind: Using Cyber Deception To Buy Time to Remediate at Scale

Honeytokens bring peace of mind that you are safe from leaks and attacks while tackling secrets sprawl, no matter how many repos or developers you have.

January 15, 2024

· 2,259 Views · 1 Like

TechBash: Automation, Security and Development Best Practices in The Poconos

Explore automation, security, and development best practices at TechBash 2023. Discover GitHub Actions, Azure Key Vault, and strategic automation insights.

December 12, 2023

· 2,329 Views · 2 Likes

What to Do if You Expose a Secret: How to Stay Calm and Respond to an Incident

Learn how to respond to a secret leak incident effectively. Follow our guide to understand the impact, rotate secrets safely, and prep for future events.

December 2, 2023

· 2,731 Views · 2 Likes

API World 2023: Bringing Together API, AI, and Secrets Security

API World 2023 was about sharing insights on best practices, accounting for all your assets, and the importance of AI and API cybersecurity in an API-driven world.

November 30, 2023

· 1,740 Views · 1 Like

Connecting With the Community at BSides Atlanta 2023

Dive into BSides Atlanta 2023, the largest free security event in the South! Explore insights from top security professionals on Web 3.0, cloud vulnerabilities, and more.

November 22, 2023

· 1,517 Views · 2 Likes

Cybersecurity and AI Deep in the Heart of Texas Cyber Summit

Dive into our Texas Cyber Summit 2023 recap. Discover how AI is impacting cybersecurity, learn about Zero Trust strategies, ransomware dos and don'ts, and more.

November 7, 2023

· 1,983 Views · 1 Like

Secrets Management Takes More Than Just Tools

Can you just purchase a tool to give you a good security posture? Discover how People, Processes, and Tools elevate code security to protect against data breaches.

November 3, 2023

· 3,599 Views · 2 Likes

A Look at the Future of Supply Chain and National Security: Updates From CISA and NIST

Explore CISA and NIST's recent cybersecurity publications. Get key insights into securing vital infrastructure in an ever-evolving threat landscape.

November 1, 2023

· 1,519 Views · 1 Like

Dev Up 2023: Leveling Up Our Dev Skills, Security Posture, and Careers

Dev Up 2023 was a gathering of industry professionals looking to Elevate their skills and security know-how. Read about the latest in tools and DevSecOps.

October 24, 2023

· 1,918 Views · 2 Likes

Developer Week CloudX 2023: Better Security and Accessibility in the Cloud

Discover DeveloperWeek CloudX: Uniting Global Cloud Experts! Explore insights from security, accessibility, and DevOps leaders from this year's event.

October 19, 2023

· 3,147 Views · 1 Like

DEF CON 31: A Hot Time in the Las Vegas Heat and Some Cool Days in AppSec Village

DEF CON 31 was a unique experience. Read highlights from GitGuardian's time in Las Vegas, AppSec Village, the Hunt the Hacker CTF, insightful talks, and hacker fun.

October 18, 2023

· 2,448 Views · 1 Like

BSidesLV: The Big Event Before the Biggest Security Event in Las Vegas

BSides Las Vegas 2023 united security experts and devs. Highlights include PasswordsCon, medical device security, MFA challenges, and updates from CISA.

October 17, 2023

· 2,256 Views · 1 Like

Nebraska.Code() — Developing in the Great Plains

With topics ranging from OSS contribution to getting along with your coworkers to using Azure Key Vault at scale, there was a lot of knowledge shared.

October 16, 2023

· 3,494 Views · 1 Like

php[tek] 2023: A Community of Communities Powering the Internet

The PHP community came together in Chicago for php[tek] 2023, sharing best practices and the latest updates about the tech that runs over 77% of the internet.

October 12, 2023

· 2,320 Views · 1 Like

Techno Security and Digital Forensics Conference East 2023

For the 23rd year, Techno Security and Digital Forensics Conference East brought practitioners from law enforcement, academia, and security industry pros.

October 10, 2023

· 1,349 Views · 2 Likes

cdCon + GitOpsCon: Co-evolving Open Source DevOps Communities in One Conference

The CD Foundation and OpenGitOps communities joined forces in Vancouver to create cdCon + GitOpsCon for a conference about the future of DevOps tools and best practices.

October 10, 2023

· 2,379 Views · 2 Likes

BSidesAustin 2023: CyberSecurity In The Texas Tech Capital

Austin, Texas, is home to many cybersecurity communities. Read the highlights from when they got together BSides Austin 2023 and shared best practices.

September 21, 2023

· 2,200 Views · 2 Likes

Hardcoded Secret at the Heart of the Dell Compellent VMware Vulnerability

Dell disclosed a Compellent vulnerability affecting VMware users. Let's take a closer look to learn to safeguard your data and prevent coding mishaps safely.

September 18, 2023

· 1,632 Views · 1 Like

Researcher Finds GitHub Admin Credentials of Car Company Thanks to Misconfiguration

Take a closer look at a security researcher's tale of hacking a car company via their bug bounty program. Learn how to better protect your apps and your org.

September 15, 2023

· 4,163 Views · 3 Likes

Protect Your Keys: Lessons from the Azure Key Breach

Learn how to better protect your organization from attacks by looking at how attackers compromised a Microsoft signing key. Secure your keys and review logs.

September 9, 2023

· 3,764 Views · 2 Likes

RVAsec 2023: Improving Ourselves, Our Security, and Our Community

RVAsec 2023 was the largest edition of this annual cybersecurity event in the heart of Virginia. Topics covered include improving our teams, CISO research, and more.

August 15, 2023

· 1,469 Views · 1 Like

RSA Conference 2023: DevSecOps and the Future of Security

The RSA Conference in San Francisco drew 40,000 participants over four extremely busy days. Read just a few of the highlights from this legendary security event.

August 14, 2023

· 2,106 Views · 1 Like

How Your Secrets Management Maturity Can Impact Your DevOps Research and Assessment Metrics

Learn how your secrets management can affect your DevOps performance, measured by DORA metrics, as well as increase your risk as an organization.

July 16, 2023

· 2,493 Views · 1 Like

DevOps Midwest: A Community Event Full of DevSecOps Best Practices

DevOps Midwest 2023 brought together experts in scale, availability, and security best practices. Read some of the highlights from this DevSecOps-focused event.

May 24, 2023

· 3,093 Views · 1 Like

Cyphercon 6: Staying Up Late for Cybersecurity

Nearly 1500 cybersecurity professionals gathered in Milwaukee for Cyphercon 6. Read the highlights from the largest hacker event in Wisconsin.

May 17, 2023

· 2,916 Views · 1 Like

Remediating Incidents With the GitGuardian API [Cheat Sheet Included]

The GitGuardian API lets you remediate your secret incidents. We are proud to release a new demo app to help you learn how to automate your workflows.

May 12, 2023

· 5,144 Views · 1 Like

GitHub Exposed a Private SSH Key: What You Need to Know

Everyone has secrets leakage incidents from time to time, even massive players like GitHub. This is a good reminder we all need to stay vigilant.

April 15, 2023

· 5,310 Views · 2 Likes

Articles