Latest Blogs

Cloud Security Insights, Thoughts, and Ideas

4 Min Read
Aligning SecOps Teams With Compliance Roadmaps

Lindsey Ullian

December 4, 2018

Compliance is essential, and organizations need to get it right. Despite the importance of compliance, organizations often treat it as an ...

3 Min Read
AWS re:Invent 2018 Recap: Security, DevOps, ML, & Hybrid Cloud Take Center Stage

Steve Lowing

November 30, 2018

Another year at AWS re:Invent has come and gone. As usual it was a jam packed show full of exciting announcements, great keynotes, sessions, and ...

2 Min Read
Three Old-School Network Security Tips That (Still!) Work for Modern Infrastructure

Nathan Cooprider

November 20, 2018

The adage “Everything old is new again,” rings true in the cybersecurity industry as much as anywhere else. Some of the best practices from ...

23 Min Read
50 Useful Kubernetes Tutorials for IT Professionals

Mike Broberg

November 15, 2018

Technologies like Docker have made it easier to continuously deploy applications across any number of host servers. They eliminate the need for ...

4 Min Read
AWS EC2 Tagging — An Overview

Pan Chhum

November 1, 2018

Just this morning I received my weekly AWS announcements email, and as I usually do, took a peek to see if there was anything useful or interesting. ...

3 Min Read
How to Create a Threat Model for Cloud Infrastructure Security

Pat Cable

October 30, 2018

Our Motto is: Threat Modeling: The sooner the better, but never too late. — OWASP The practice of creating a threat model can help teams ...

3 Min Read
3 Questions to Ask When You're Ready to Operationalize Your Security

Mark Moore

October 25, 2018

New global data from Checkmarx reveals that 92 percent of organizations struggle to implement security into DevOps — even though they say they want ...

3 Min Read
Security Budgeting Considerations for Containers

Dan Kirsch

October 23, 2018

When it comes to managing SecOps, you must consider all the risks at hand, as well as how you can address them. Many of today’s SecOps teams are ...

3 Min Read
How to Cope With the Security Talent Shortage in SecOps

Mark Moore

October 18, 2018

Security budgets are rising, but are they helping with challenges caused by the security talent shortage? This post offers insights from our recent ...

< 1 Min Read
Introducing AWS EC2 Tag Integration

Ivan Evsyukov

October 15, 2018

At Threat Stack, we are all about keeping you secure as you scale your business and your infrastructure. That's why we have added the ability to use ...

7 Min Read
A Deep Dive Into Secrets Management

Mike Broberg

October 9, 2018

There’s a lot to think about when it comes to working with containers, Kubernetes, and secrets. You have to employ and communicate best practices ...

5 Min Read
Container Security: Winter is Coming — Dress in Layers!

Hannah Klemme

October 4, 2018

Recently I had the pleasure of joining hundreds of DevOps pros, IT managers, and security engineers at the first ever Container Security event at ...

3 Min Read
5 SecOps Processes to Try Today

Mark Moore

October 3, 2018

DevOps has enabled businesses to bring products to market faster than ever before. But what about security? In our recent survey, Refocusing Security ...

2 Min Read
New SecOps eBook for Cloud Infrastructure – A Practitioner’s Guide for Security & Ops Teams

Steve Lowing

October 2, 2018

— Shifting From DevOps to SecOps — Organizations of all sizes have embraced DevOps as a way to deliver work quickly and reliably — but security ...

4 Min Read
Top 4 Questions to Ask About Compliance, Security, and Containers

Pan Chhum

September 27, 2018

Introducing containers into cloud infrastructure can lead to faster development cycles as well as more efficient use of infrastructure resources. ...

16 Min Read
50 Useful Docker Tutorials for IT Professionals (from Beginner to Advanced)

Hank Schless

September 26, 2018

Containers bring many benefits to DevOps teams along with a number of security concerns. This post brings you details about 50 Docker training ...

4 Min Read
Threat Stack Announces General Availability of Its Docker Containerized Agent

Hank Schless

September 25, 2018

Last month we announced that a containerized version of the Threat Stack Agent was coming soon for customers who are using containers to deploy cloud ...

15 Min Read
22 Most Under-Used AWS Security Metrics

Hank Schless

September 21, 2018

22 AWS Security Pros Reveal the Most Underused/Under-Appreciated AWS Security Metrics AWS offers a variety of built-in security features that users ...

9 Min Read
Creating Custom CloudTrail Rules in Threat Stack

Paul Ivanivsky

September 19, 2018

The Threat Stack CloudTrail Base Ruleset has several out-of-the-box rules that alert users on activity within some of  AWS’s most popular services ...

21 Min Read
50 Best Cloud Security Podcasts

Mark Moore

September 17, 2018

For an updated list, take a look at Mark Moore's 25 Best Cloud Security Podcasts to Visit in 2020. Some of the earliest podcasters were ...

2 Min Read
Security by Design or by Accident

Matt Getty

September 11, 2018

Security has such a large number of subtopics that it’s sometimes difficult to define what the field looks like as a whole. It means something ...