Geek-Guy.com

Tag: your

Identify unused AWS KMS keys and prevent accidental key deletions

As you scale your use of Amazon Web Services (AWS), managing KMS keys becomes increasingly important. Whether you manage a handful of keys or thousands across multiple AWS accounts and AWS Regions, there’s often a need to audit key usage to help you meet compliance requirements, evaluate your risk posture, and optimize key management costs.…

How Lineage Reveals Your Data’s Secrets

Imagine this scenario: on an otherwise fine and ordinary Monday morning, your security operations center (SOC) flags a suspicious alert.  Files from a confidential vault are transferring to someone’s personal cloud storage account.  Halt! An analyst stops the flow, but some files are leaked to who-knows-where.  In fact, other than knowing the leak happened, you…

AWS KY3P report now available for third-party supplier due diligence

We’re excited to announce that Amazon Web Services (AWS) has completed the S&P Global Know Your Third Party (KY3P) assessment of its security posture. This assessment demonstrates our continued commitment to meet the heightened expectations of cloud service providers. Customers can now use the AWS KY3P assessment to reduce their supplier due diligence burden. KY3P,…

Top 5 Phishing-Driven Social Engineering Attacks on Companies in 2026

Your employees are not falling for “bad grammar” phishing anymore. They are being pulled into fake Microsoft logins, banking pages, AI tool instructions, real OAuth flows, and event invitations that look close enough to daily work to pass without alarm.  For CISOs, that is the real social engineering problem in 2026: attacks are no longer…

Weekly Update 504

It’s a hot topic, the old “pay or don’t pay” for hackers not to leak your data. Since recording this a few days ago, we’ve had Grafana go with the “no pay” approach, and I’ve seen a raft of commentary around other companies reaching “agreements”, which is a much politer way of saying “we paid…

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

In Your Biggest Security Risk Isn’t Malware — It’s What You Already Trust, we made a simple argument: the most dangerous activity inside most organizations no longer looks like an attack. It looks like administration. PowerShell, WMIC, netsh, Certutil, MSBuild — the same trusted utilities your IT team uses every day are also the preferred…

Regional routing for AWS access portals: Implementing custom vanity domains for IAM Identity Center

AWS IAM Identity Center provides a web-based access portal that gives your workforce a single place to view their AWS accounts and applications. With the recent launch of IAM Identity Center multi-Region replication, customers can replicate their IAM Identity Center instance across multiple AWS Regions to improve resilience and reduce latency for a globally distributed…

Automating post-quantum cryptography readiness using AWS Config

Migrating your TLS endpoints to Post-quantum cryptography (PQC) starts with understanding your current TLS endpoint inventory and posture. This post introduces the PQC Readiness Scanner — an automated tool that inventories your Application Load Balancer (ALB), Network Load Balancer (NLB), and Amazon API Gateway endpoints and continuously monitors their TLS configurations for PQC readiness. The…

Complimentary virtual training: Get hands-on with AWS Security Services

If you’re looking to strengthen your organization’s security posture on Amazon Web Services (AWS) but aren’t sure where to start, then we’re here to help. Security Activation Days are complimentary, virtual, hands-on workshops designed to help you get practical experience with AWS security services in a single session. What to expect Each Security Activation Day…

How CISOs should utilize data security posture management to inform risk

Every CISO eventually faces the same tension: You know your security program needs to mature, but the budget and headcount to do it all aren’t there. That tension is especially sharp when it comes to data security posture management (DSPM). Not every organization can afford, or even needs, the gold standard of DSPM deployment. Full-featured…

Struggling to Manage Multiple Screens – Here’s a Smarter Approach

Managing multiple screens across locations shouldn’t drain your team’s time and patience. Discover practical strategies to simplify multi-display management today. You walk into your office on Monday morning, coffee in hand, and three different people hit you with bad news. The lobby screen is frozen. The break room display is showing last month’s menu. The…

The Governance Gap: How the EU AI Act Makes API Security a Compliance Imperative

Your legal team just handed you a 400-page document and said “figure out compliance.” The EU AI Act is live, your organization falls under its scope, which is broader than many expect. Even non‑EU companies must comply if their AI systems are used, deployed, or produce effects within the European Union. In practice, that means that global organizations…

Level Up Your Payment Security Expertise with PCI SSC Knowledge Training

  Give your team the insight and confidence to work effectively with assessors through Knowledge Training. These courses are designed to help learners speak the same language as the assessor, confidently guide their organization through assessments and any pre-planning, and effectively collaborate alongside the assessor during an assessment. When teams are aligned, assessments run more…

Level Up Your Payment Security Expertise with PCI SSC Knowledge Training

  Give your team the insight and confidence to work effectively with assessors through Knowledge Training. These courses are designed to help learners speak the same language as the assessor, confidently guide their organization through assessments and any pre-planning, and effectively collaborate alongside the assessor during an assessment. When teams are aligned, assessments run more…

Product showcase: Syncthing for secure, private file synchronization

Syncthing is a free and open-source application that synchronizes files directly between your devices. Instead of uploading data to a central server, it uses a peer-to-peer approach, transferring files whenever peers are online. This decentralized model ensures that your data remains private and under your control. Syncthing monitors shared folders for changes. When a file…

Exhibit at or Sponsor the 2026 Community Meetings

  Don’t miss your chance to join the excitement at this year’s highly anticipated PCI SSC Community Meetings in Vancouver, BC, Canada; Edinburgh, Scotland; and Kuala Lumpur, Malaysia. Secure sponsorship or exhibitor opportunities to connect with payment security leaders, network with peers, and meet prospective customers—all while celebrating PCI SSC’s 20th anniversary with the global…

ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories

You know that feeling when you open your feed on a Thursday morning and it’s just… a lot? Yeah. This week delivered. We’ve got hackers getting creative in ways that are almost impressive if you ignore the whole “crime” part, ancient vulnerabilities somehow still ruining people’s days, and enough supply chain drama to fill a season of television…

Apiiro CLI turns AI coding assistants into full-stack security engineers

The Apiiro CLI brings the Apiiro platform to your terminal and to your AI coding assistants, giving them six native security capabilities: scanning, risk management, remediation, an AI security analyst (via Apiiro Guardian Agent), AI Threat Modeling, and prompt enrichment. It installs in seconds on macOS, Linux, and Windows via brew, direct download, or RPM.…

Smashing Security podcast #462: LinkedIn is spying on you, and you agreed to nothing

LinkedIn has been secretly scanning your browser for over 6,000 installed extensions — on every single click you make. It can tell if you’re job hunting, what religion you are, and whether you have ADHD. And none of this is mentioned anywhere in their privacy policy. Meanwhile, California’s crypto millionaires are learning that no amount…

LinkedIn is spying on you, and you agreed to nothing

LinkedIn has been secretly scanning your browser for over 6,000 installed extensions — on every single click you make. It can tell if you’re job hunting, what religion you are, and whether you have ADHD. And none of this is mentioned anywhere in their privacy policy. Meanwhile, California’s crypto millionaires are learning that no amount…

5 practical steps to strengthen attack resilience with attack surface management

Every asset you manage expands your attack surface. Internet‑facing applications, cloud workloads, credentials, endpoints, and third‑party integrations all represent potential entry points for attackers. As environments grow more distributed, that exposure expands faster than most security teams can track manually. Attack surface management (ASM) helps answer a critical question for IT security teams: What can…

How To Choose The Right Low Code Platform For Your Business Needs

Learn how to choose the right low code platform for your business needs. In today’s fast-paced business world, agility is the key to success. Low code development platforms have emerged as a valuable tool for organizations to develop and deploy business applications with minimal coding quickly.  With the right platform, businesses can improve their productivity,…

Why Third-Party Risk Is the Biggest Gap in Your Clients’ Security Posture

The next major breach hitting your clients probably won’t come from inside their walls. It’ll come through a vendor they trust, a SaaS tool their finance team signed up for, or a subcontractor nobody in IT knows about. That’s the new attack surface, and most organizations are underprepared for it. Cynomi’s new guide, Securing the Modern Perimeter: The Rise of…

Construction Safety Compliance Software: Keep Your Site Safe and Audit‑Ready Every Day

Discover how Construction Safety Compliance Software: Keep Your Site Safe and Audit‑Ready Every Day can enhance safety and streamline your site’s compliance. Key Highlights Embrace construction safety software to streamline your site safety and compliance management. In Australia, some of the most popular construction safety compliance software solutions include HammerTech, SiteDocs, and Procore, which are…

World Backup Day 2026

World Backup Day is an important reminder of the ever-increasing likelihood that your organization will be the next cyberattack target. While backup remains essential, today’s threat landscape means businesses need to think more broadly about recovery, resilience and what it takes to restore operations with confidence after an attack.

The dark side of chatbots with ‘personality’

They say you can find anything on Amazon. Now, you can even get a personality.  Not for yourself, but for your AI “friend,” Alexa.  Amazon has announced four new “conversation styles” or “personalities” for its voice-interaction Alexa+ AI chatbot.  Users can now choose between “Brief,” “Chill,” “Sweet,” and “Sassy” styles and pick from a range…

Harness Launches AI Security Covering Code to Runtime Stage

Harness has unveiled two new products: AI Security, a new solution to discover, test, and protect AI running in your applications, and Secure AI Coding, a new capability within the Harness Static Application Security Testing (SAST) platform that secures the code generated by AI tools.  Together, they extend Harness’s DevSecOps platform into the age of…

Protect Your Privacy: Best Secure Messaging Apps in 2026

Think your messages are private? Think again. Someone could be reading them. Someone could be listening to your calls. From public Wi-Fi to fake login pages, attackers have countless ways to slip between you and the person you’re communicating with, without you ever knowing. Without a trusted messaging app, you’re leaving the door wide open.…

Deploy AWS applications and access AWS accounts across multiple Regions with IAM Identity Center

If your organization relies on AWS IAM Identity Center for workforce access, you can now extend that access across multiple AWS Regions with multi-Region replication. Previously, AWS access portal was only available in one Region, when you add an additional Region, users get an active access portal endpoint there. If the primary Region experiences a…

Fig Security emerges from stealth with $38 million to resilience-proof enterprise security

Fig Security, a new platform that finds and fixes broken security flows across your entire SecOps infrastructure, has launched from stealth with $38 million across Seed and Series A rounds. It addresses one of the least visible challenges yet most consequential in enterprise security: the quiet breakdown of security operations as environments grow more complex.…

A Practical Guide to Microsoft Copilot for MSPs

If you’re an MSP considering adding Microsoft Copilot to your portfolio in 2026, it’s worth being deliberate about how you package and position it for clients. For many organizations, pitching AI as a novel “productivity booster” is no longer enough.  Customers increasingly expect the conversation to shift from experimentation to execution, anchored in defined use…

Take control: Locking down common endpoint vulnerabilities

Attackers are constantly on the prowl, scoping out vulnerabilities of network-connected devices in your systems. These devices—laptops, desktops, servers, IoT, and more—are like unlocked doors waiting for threat actors to stroll through. And here’s the kicker: many of these vulnerabilities are shockingly common and easily preventable. Let’s break down the weaknesses we most frequently track…