Shift left, shield right: Code-to-cloud strategy for securing apps
summary
Unit 42 data claims compromise to exfiltration drops to five days, and the platform ties together scans across 210,000 cloud accounts and 70,000 repos to find that 63% of monitored repos have unpatched critical/high flaws and 83% still store hardcoded creds. Built features include cloud discovery exposure management for shadow clouds, AppDNA that maps resources to applications, a unified vulnerability view that traces CVEs from repo to runtime, auto remediation hooks (fix-in-cloud, PR creation), an AI Co‑Pilot, and trillion‑log analytics.
AI-written summary · about
chapters (12)
- 0:00Introduction and mission
- 1:44Modern cloud risk challenges
- 4:48The problem with point tools
- 7:42The code to cloud approach
- 9:37Enhancing visibility
- 12:43Prioritizing and context
- 17:25Remediation strategies
- 20:01Vulnerability management
- 22:28Threat detection and mitigation
- 26:48Investigative capabilities
- 29:31Generative AI co-pilot
- 33:32Conclusion and wrap-up
related talks
46mStories from the cutting edge: Cloud security in 2023
50mAvoiding cloud security anti-patterns the right way
18mSecuring cloud innovation: Lessons learned
31mCloud Threat Landscape - 2021
58mCloud Attack Surface Management
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
15mThe origin of security challenges & a revolutionary solution
14mSecurity lifecycle management in a multicloud world