Security

For a digital business, such as a development company like ScreamingBox, or like many of our clients with digital apps and e-commerce sites, a cyber security attack can really damage a business.

Picture this - you're Kevin McCallister in Home Alone , and your house is under siege. But instead of relying on swinging paint cans and icy steps to fend off the Wet Bandits, you're fortifying your digital home against Cyber Criminals armed with a lot tools far craftier than crowbars.

Even though you might be responsible for a SMB or Start-up, there is much to learn from how very large organizations like the Federal Government or large Enterprise companies approach the high risk game of protecting your data and business from Cyber Criminals.

Cyber-attacks are common nowadays and even more so in small businesses that do not invest in advanced cyber security tools or software.

In today’s digital era, protecting business data is a priority for companies of every size. You have all read the headlines “Cybercriminals stole XXX million users info!”, most have gotten the letters in the mail notifying you that your data was stolen and you should change your passwords and freeze your credit.

It sounds like it is the opening of a Science Fiction novel… “In the year 2025, Cybersecurity threats are more advanced, evasive, and damaging than ever…” But the reality is that it is not from Sci-Fi, but real life, and the Cybersecurity threats pose

You see it in the news all the time, 10 Billions names and passwords stolen from the BobSpace App user base, or Generic Bank App is hacked and customers get their money stolen. And everybody asks, “How could this happen, aren’t apps safe and secure?” The short answer is… “It depends”.

In a perfect world, every API in a microservices architecture would behave like a well-trained security guard: alert, skeptical, and definitely not handing out access to anyone who looks “kind of familiar.” Unfortunately, many APIs resemble the opposite - an overly trusting golden retriever who lets anyone in as long as they have a vaguely friendly vibe.

One of the most common microservices security mistakes is encrypting only north–south traffic (client to service) while leaving east–west traffic (service to service) unprotected. In a Zero Trust model, this is unacceptable.