Security Weekly
Enterprise Security WeeklySubscribe
Incident Response, Data Security, DevSecOps, Identity

How to Secure Your Secrets With Keeper Security – Zane Bond – ESW #266

Since IT network secrets unlock access to highly privileged systems and data, securing secrets is just as critical to preventing cyberattacks as securing end-user passwords. One study found that 75% of ransomware attacks involve compromised credentials – most of the time, RDP credentials. However, secrets management is a challenge for IT teams, who must mitigate secrets sprawl, hardcoded and embedded credentials, and duplicative data stores in hybrid cloud and multi-cloud environments.

Keeper Secrets Manager (KSM) is a fully cloud-based, Zero-Knowledge platform for managing IT infrastructure secrets such as API keys, database passwords, cloud access keys, certificates, SSH keys, service account passwords, and any other type of confidential data. KSM seamlessly integrates into nearly any data environment, with no additional hardware or cloud-hosted infrastructure required. It offers out-of-the-box integrations with a wide variety of DevOps tools, including Github Actions, Kubernetes, Ansible and more.

Segment Resources:

https://www.keepersecurity.com/en_GB/secrets-manager.html

This segment is sponsored by Keeper Security.

Visit https://securityweekly.com/keepersecurity to learn more about them!

Full episode and show notes

Announcements

  • Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!

Guest

Zane Bond
Director of Product Management at Keeper Security

Zane Bond is the Director of Product Management at Keeper Security. In his role, Zane is responsible for driving product strategy while building the product roadmap for Keeper’ portfolio. Zane has managed various cybersecurity solutions for more than 12 years, across many disciplines including, endpoint security, network detection, machine learning and AI, incident response, privileged access management, and now credential and secrets management.

Hosts

Principal Researcher at The Defenders Initiative
Product Marketer and Content Strategist at OX Security
VP Traceable.ai, Cyber Angel Investor and Advisor at 90 Degree Ventures

Related

Why Cyber Resilience Matters – Theresa Lanowitz – BSW #361

What are the barriers to cyber resilience today? Why is it so difficult? And what is coming next, that will generate resilience challenges further down the line? After five years of focusing on the short- and medium-term future of cybersecurity and edge, this year, LevelBlue wanted to understand what is preventing cyber resilience—and what busines...
Crowdstrike: The Aftermath – PSW #836

Segment description coming soon!The Crowdstrike incident: what happened and what we can do better, people forget what 0-Day really means, shutting off the heat in January, honeypot evasion and non-functional exploits, what not to use to read eMMC, what if we don't patch DoS related vulnerabilities, a CVSS 10 deserves its own category, port shadow a...