Defeating Microsoft EPM in the Race to Admin: a Tale of a LPE vulnerability
Introduction Not too long ago I read an interesting blogpost by SpecterOps about Microsoft EPM that got my attention as I was not aware of this Microsoft product/feature. It was interesting to...
Read Blog
Securing cloud console and CLI access for agile software development
Fast-moving cloud environments demand speed, but without the right access controls they invite risk. Resources such as virtual machines, containers, and services are created, modified, and...
Read Blog
How external attackers and malicious insiders exploit standing privileges in the cloud
For many of us, the term “cloud security breach” conjures meticulous attack plans executed by sophisticated criminal syndicates. But in reality, “attacks” can be far more mundane: maybe some...
Read Blog
Bridging runtime visibility and secrets management in Kubernetes with Sweet Security and CyberArk
Secrets management is a foundational pillar of cloud security. It enables secure storage, rotation, and access control for application secrets. But in Kubernetes environments, secrets don’t just...
Read Blog
Container security at scale: Strengthening software supply chains
Modern applications have undergone a paradigm shift, with containers becoming the default choice for deployment. While their flexibility and scalability are well-recognized, their adoption has...
Read Blog
Modern application control, done right with least privilege
When attackers gain access to a single endpoint—like a developer’s workstation or an HR system—it’s often game over. With some skill and patience, that foothold can escalate into full-blown...
Read Blog
Developers fly the plane: AI guardrails for secure cloud innovation
Developers now chart courses through environments as dynamic and unpredictable as open skies, plotting efficient courses through shifting clouds of technology to reach ambitious goals....
Read Blog
Now on AWS Marketplace: CyberArk Enterprise Support for cert-manager
Running Kubernetes on Amazon EKS? You’re likely already using cert-manager—the open source standard for TLS and mTLS certificate automation in Kubernetes clusters. Today, we’re excited to announce...
Read Blog