Why Twitter security sucks: Half of staff has PII access
Peiter “Mudge” Zatko (pictured) was grilled by U.S. senators this week. Twitter’s former head of security has some damning things to say about the service’s DevOps security — or lack of it.
Dev & DevSecOps
Why Twitter security sucks: Half of staff has PII access
To secure your CI/CD pipelines, round up the usual suspects
A presentation at the Black Hat Briefings in Las Vegas dug into the “how” of CI/CD compromises. As it turns out, many of the culprits will be familiar to security teams.