Blog
Last week I was updating an AWS Landing Zone environment to the latest version. It was late on a Thursday and I was running the upgrade in my own environment and having a few minor issues so I decided to come back in the morning to finish it off. Come the next morning, I re-ran it. All of a sudden I’m getting a new error in the CodeBuild step that […]
Read More →
Last week the Australian government announced that government services had been under a sustained cyber attack. They said it had been happening for a while and had the footprint of a nation state level attack. No breaches were revealed. Don’t cyber attacks happen all the time? Well, yes, but this one was different. The key was the scale of the attack. It was across industries, including critical infrastructure such as […]
Read More →
The COVID-19 pandemic has resulted in significant changes to working patterns for most organisations, with a more geographically dispersed workforce than ever before. Many organisations are making more and more user of Microsoft 365 (formally known as Microsoft Office 365) for collaboration. Security of a Microsoft 365 tenant starts with visibility of operations, yet many organisations remain unaware of the day to day activities and usage of the platform. In […]
Read More →
Last week, Rapid7 announced its intention to acquire DivvyCloud. DivvyCloud will cost Rapid7 a cool $145 million. The acquisition is expected to complete in the second quarter of 2020. It’s a significant investment. It comes hard on the heels of the Trend acquisition of Cloud Conformity, a solution that plays in a similar space to DivvyCloud. At RedBear, we are big users of Rapid7. We use their Cloud SIEM, vulnerability management […]
Read More →
The Australian federal government released the COVIDSafe app this week. It’s a contact tracing app designed to help find close contacts of COVID-19 cases. The app is intended to assist health officials to quickly contact people who may have been exposed to COVID-19. In Australia, use of the app is completely voluntary. However, it has stoked a significant debate on privacy concerns, spawning a number of urban myths at the […]
Read More →
With a move to remote working as a result of the COVID-19 pandemic, organisations are looking for solutions that can provide a secure and simple experience. One of the common ways to ensure secure communications when home working is through a VPN solution. It also has the advantage of providing an “on the corporate network” experience for remote workers. In recent times, IT departments have been challenged with supporting remote […]
Read More →
With a move to remote working as a result of the COVID-19 pandemic, organisations are looking for solutions that can streamline the experience. Some of the challenges of remote working often start with having the appropriate end user device. It might be a corporate managed laptop but equally it might be an uncontrolled personal device. Can a virtual desktop help? With end devices, what software is installed? Have you installed […]
Read More →
The COVID-19 pandemic is resulting in significant concern and uncertainty in our communities and globally. Many organisations are moving to adopt a remote working approach so as to avoid the chance for transmission between teams and reduce the spread of the disease. The challenge for organisations is how to stay digitally safe from the kitchen table? What are the common pitfalls to avoid? Uncontrolled networks Most people will be remote […]
Read More →
The COVID-19 pandemic is resulting in significant concern and uncertainty in our communities and globally. RedBear want to reassure our customers that the security of your environments remains our top priority today and every day. We are fully operational and are available to respond to your security and business continuity needs as this situation evolves. Keeping our team safe We are following guidance from the World Health Organisation, state and […]
Read More →
The principle of least privileged is king when it comes to managing access. It’s a simple approach. You give your users access to the services and the actions on those services that they need and nothing more. Importantly, this approach is critical for regulated environments, such as PCI DSS. However, when we adopt an everything as code approach it can get more complicated. Similarly with automation, you end up with […]
Read More →