Acceptance of zero trust models like BeyondCorp by Google or LISA by Netflix lags in Europe, where endpoint security is king. We examine why this situation must change by looking into the principles of modern zero trust concepts.
We look at Microsoft security boundaries and protection goals and their interpretation of the different security areas of Windows operating systems and components.
The danger of ransomware attacks calls for a robust backup and monitoring strategy.
Keep an attacker's connections open in an Endlessh "tarpit" or delay incoming connections with the more traditional rate-limiting approach of tc.
The FIDO and FIDO2 standard supports passwordless authentication. We discuss the requirements for the use of FIDO2 and show a sample implementation for a web service.
Vault is a highly secure, trusted place to keep your secrets and certificates.
Security segmentation into zones has long been the norm in data centers. Microsoft Azure Network Security Groups offers this kind of granular defense-in-depth security, including multilevel configuration of access rules.
Amazon GuardDuty continuously monitors your AWS accounts and workloads for potential threats.
Despite the growing exploitation of PowerShell's scripting language by hackers, the tool's security features also offer a line of defense.
The balance between IT threats and IT security is woefully unbalanced in a Windows environment, requiring the enforcement of company-wide security standards.
