Essential tools with critical security challenges. [Research Saturday] - podcast episode cover

Essential tools with critical security challenges. [Research Saturday]

Aug 17, 202424 minEp 339Transcript available on Metacast
--:--
--:--
Listen in podcast apps:

Episode description

Snir Ben Shimol from ZEST Security on their work, "How we hacked a cloud production environment by exploiting Terraform providers." In this blog, ZEST discusses the security risks associated with Terraform providers, particularly those from community sources. The research highlights the importance of carefully vetting providers, regular scanning, and following best practices like version pinning to mitigate potential vulnerabilities in cloud infrastructure management. The research can be found here: The hidden risks of Terraform providers Learn more about your ad choices. Visit megaphone.fm/adchoices