Understanding the Fundamentals of Cryptography

Cybersecurity encompasses multiple different domains, including network isolation, platform security and infrastructure security. However, one thing that we less frequently discuss, but use more than often is cryptography. Whether it’s HTTPS, data encryption in databases, disk encryption, or technologies like VPNs and blockchains, cryptography is one of the fundamental building blocks. As part of this

How Security Engineers Can Help Build a Strong Security Culture

In today’s fast-paced world, organizations face increasing cyber threats that can compromise their operational integrity, erode customer trust, and jeopardize financial stability. While it’s crucial to have advanced security technologies in place, many organizations overlook the importance of cultivating a culture of security. A robust security culture is a key factor in preventing security breaches,

Evaluating Similariy Digests: A Study of TLSH, ssdeep, and sdhash Against Common File Modifications

The field of digital forensics often uses signatures to identify malicious executables. These signatures can take various forms: cryptographic hashes can be used to uniquely identify executables, whereas tools like YARA can help malware researchers identify and classify malware samples. The behavior of files— functions exported, functions called, IP addresses and domains they connect to,

Secure Your Oracle Database Passwords in AWS RDS With a Password Verification Function

Protecting database access through strong password policies is a cornerstone of security in any environment. When deploying Oracle databases on AWS RDS, enforcing password complexity is essential, but the approach differs slightly from on-premises Oracle environments. AWS provides two primary ways to enforce password complexity in RDS Oracle: using the standard ORA_STIG_VERIFY_FUNCTION or a custom

Online Developer Tools a Backdoor to Security Threat

Free Online Utilities May Not Be Safe Using online developer utilities, such as a JSON Viewer, can be incredibly convenient for parsing and visualizing JSON data, but they also come with significant risks. The tool, for instance, often requires users to upload JSON files or paste sensitive data directly into the tool. If the utility

The Bare Metal Bet That Made Our Multiplayer Platform Hum

The cloud may be fast…but it nearly slowed us down.  When we launched Hathora in 2022, we knew the infrastructure behind multiplayer games was long overdue for reinvention. Studios like EA and Blizzard had built their own complex systems to host game servers, but for most multiplayer game studios, that approach was out of reach.

Serverless IAM: Implementing IAM in Serverless Architectures with Lessons from the Security Trenches

When I first began working with serverless architectures in 2018, I quickly discovered that my traditional security playbook wasn’t going to cut it. The ephemeral nature of functions, the distributed service architecture, and the multiplicity of entry points created a fundamentally different security landscape. After several years of implementing IAM strategies for serverless applications across

Secure IaC With a Shift-Left Approach

Imagine you’re building a skyscraper—not just quickly, but with precision. You rely on blueprints to make sure every beam and every bolt is exactly where it should be. That’s what Infrastructure as Code (IaC) is for today’s cloud-native organizations—a blueprint for the cloud. As businesses race to innovate faster, IaC helps them automate and standardize

The Synergy of Security and Development: Integrating Threat Models With DevOps

In our digital-first world, security isn’t just important — it’s non-negotiable, especially within DevOps environments. Yes, DevOps brilliantly accelerates development by bridging the gap between development and operations teams. But here’s the catch: that impressive speed sometimes races past essential security checkpoints. That’s why weaving threat modeling directly into your DevOps workflow isn’t just smart

Enhancing SQL Server Security With AI-Driven Anomaly Detection

As SQL Server databases become increasingly targeted by cybercriminals, it’s crucial to adopt proactive security measures. Traditional database security mechanisms, such as access controls, role-based permissions, and firewalls, are important but may not be sufficient to detect advanced threats or malicious insider activities.  In this tutorial, we’ll show you how to integrate AI-powered anomaly detection