Zero Trust data-level security and key management
🌎 Global
Joined August 2019
- Tweets218
- Following13
- Followers155
- Likes195
🙏 Nothing humbles us more than unsolicited customer feedback. Je Sum, CTO at @humanmanaged , recently wrote about his positive experience implementing our encryption API to protect sensitive attributes and data in their ABAC system. Read his full blog: bit.ly/3KQ1Xwj
Format-Preserving Encryption (FPE) 🛡️ FPE doesn't just enhance security, it obliterates tokenization's pain points. Say farewell to tokenization's complexities and vulnerabilities. Explore the game-changing shift: bit.ly/3KLdLQa
🎉 Happy Independence Day! 🇺🇸 To all our amazing U.S.A. employees, customers, and partners, have a joyous and memorable Fourth of July! Stay safe, enjoy the festivities, and celebrate the spirit of freedom that unites us all! #Happy4thofJuly #IndependenceDay
Today, we honor Juneteenth, commemorating the moment when African Americans in Galveston, Texas, received the news of their emancipation on June 19, 1865. Let's stand together, speak up against injustice, and strive for a more just and inclusive society. Happy Juneteenth 2023! 🎉
Is AWS S3 encryption a false sense of security? @awscloud Security Architect @AdityaPatel believes so, and so do we (well, mostly). And exactly why we built the application-layer encryption API @ubiqsec bit.ly/3VU9xdr
Improper usage of seeds in PRNGs can expose sensitive values if guessed or reused. Proper seed mgmt. is crucial for secure operation of PRNGs. Check out @foodiedeveloper's blog re: @MITREcorp's CWE-335, why it happens, a case study, and recommends mitigations bit.ly/3AU4HDn
Exciting news! @ubiqsec is now SOC 2 Type II compliant - reaffirming our commitment to security! A huge thanks to @DrataHQ, @clearvectorhq, @SolCyberMSS, @righthand_ai, and @PrescientAssur. Our security work is never done and we're always striving to improve. bit.ly/3Lx7Z5I
Protecting sensitive data requires the use of strong cryptographic algorithms, and a key component of such algorithms is entropy. However, insufficiently random values can undermine the security of these algorithms. Check out @foodiedeveloper's blog re: @MITRECorp’s CWE-331, why it happens, a case study, and recommended mitigations. bit.ly/41nz5RY
Encryption key mgmt made easy: our partnership @OWASP provides advanced access to our app-layer encryption API, fully automating key rotation & storage. And your data & encryption keys never leave your app environment ubiqsecurity.com/owasp
Key mgmt made easy: our partnership with @ubiqsec & @ubiqsecjp provides advanced access to their app-layer encryption API, fully automating key rotation & storage. And your data & encryption keys never leave your app environment. ubiqsecurity.com/owasp
Protect sensitive data from attackers with our flexible app-layer encryption API for fields, columns, files & strings (w/o modifying your databases) and trust in vetted, public open-source libraries.
Protect sensitive data from attackers w/ field/column level encryption (w/o modifying DBs) via our partnership with @ubiqsec & @ubiqsecjp. Versatile app-layer encryption API for fields, files & strings, & trust in vetted, public open-source libraries. ubiqsecurity.com/owasp
💯 and exactly why approaches like application-layer encryption are critical to safeguard sensitive data
Check out Gary Schneir’s recent talk at @owasp's PANW event where he discusses how to leverage format-preserving encryption to protect sensitive data without restructuring your database bit.ly/3l4v1pS
Is disk encryption in AWS (all CSPs really) close to useless and potentially harmful? Just “security theater?” Security researcher Mellow Root believes so, and so do we and most of the security community. And exactly why we built the application-layer encryption API @ubiqsec
Link to blog: tmp.bearblog.dev/disk-encryp…
Better late than never, but don't get your hopes up. S3 encryption + KMS won't protect you against modern threats like admin credential compromise, cause the encryption is designed to be transparent. If an attacker has your credentials, AWS will serve them unencrypted data.
.@awscloud said in a Jan. 5 blog post that S3 buckets that do not use default encryption will now automatically apply server-side encryption (SSE-S3) — first launched in 2011 — as the default setting. #cybersecurity #cloudsecurity #infosec #ITsecurity bit.ly/3iq2LNg
One of the primary reasons we built our application-layer encryption API at @ubiqsec was to enable our customers to safely and securely store sensitive data with any cloud service provider (CSP). And it's one of the most popular use cases for our API.
