Insecure Transit - Microservice Security
summary
Organizations still fail basic hygiene: 81% of breaches link to weak or stolen passwords and ~44% follow known unpatched vulnerabilities (Equifax exploited an Apache Struts CVE with CVSS 10). Practical fixes include enforced use of password managers, rotate and time-limit API keys, separate backups into different cloud accounts, and automate patching and dependency scanning with tools like Snyk and container scanners (Clair, Aqua). Use centralized secret stores such as Vault or AWS KMS, apply mutual TLS and short-lived JWT tokens for service-to-service identity.
AI-written summary · about
chapters (6)
- 0:00Start
- 3:51Just Enough Security
- 7:37The Basics
- 11:31Embrace password managers
- 22:20CONSUL TEMPLATE
- 37:31HTTPS Everywhere!
