Cloud and container security deep thoughts @sysdig. Gamer, PhD physicist, cat lady, ex-Gartner analyst. Opinions my own.
Boston, MA
Joined February 2010
- Tweets470
- Following677
- Followers592
- Likes2.1K
My #cloud people, my #security people, and my #cloudsecurity people, come hang out with me and @forrester's delightful @hackerxbella next week. We'll talk about handling threat detection at cloud speed, and we promise to be at least mildly entertaining!
bit.ly/3UgI6vU
Anna Belak retweeted
🔥 Sysdig’s @aabelak joined Screaming in the Cloud to discuss findings from our 2023 Global Cloud Threat Report. Hear her take on the challenges teams face in ensuring their cloud is secure, such as quantity of data vs. quality, automation & more. ⤵
okt.to/CqoEzW
Anna Belak retweeted
"It’s really hard to know all the 51 ways to run containers in the cloud and then to be like, oh, 51 ways to run malicious containers in the cloud. How do I prevent all of them, when you have a day job?” — Anna Belak (@aabelak)
Have a listen: buff.ly/45bB8KO
Anna Belak retweeted
Exciting podcast alert! 📣
🎙 Sysdig's @aabelak sat down with @BanyanSecurity's #CISO @denjonescyber to discuss the #cybersecurity challenges tech-forward companies face. From zero trust strategies to reducing risk—this podcast covers it all!
🎧 Tune in:okt.to/X0UMeH
Anna Belak retweeted
Live from #GartnerSEC, Gartner Opening Keynote: Debunking the Myths that Obscure Cybersecurity's Full Value. Gartner analysts practical steps #cybersecurity leaders must take. Unlock another expert-led session now: gtnr.it/3qfZsMb #CISO xitter.cf/i/broadcasts/1ZkKzXLWq…
Anna Belak retweeted
🗣 Hot @Gartner Summit Session alert! 🔥 Join former Gartner analysts @aabelak & @michaelisbitski this Monday to learn about the anatomy of container attacks & mitigation strategies. Visit expo booth #931 & get ready for a Big Announcement™ 📢 from the Summit on Wednesday!
Anna Belak retweeted
My first post-analyst #GartnerSEC and I actually have time to watch the keynote ... and with @aabelak ... that should make it even better :-) Let the fun and yet slightly cynical commentary commence!
Anna Belak retweeted
#Cryptojacking is on the rise as threat actors exploit cloud resources for profit — resulting in significant financial losses for businesses. 💸 Learn about their tactics, costs & steps to protect your business in @aabelak’s article for @StackPublishing: okt.to/ITCkLJ”
Anna Belak retweeted
Cloud Security: Turns Out We Needed Another Acronym (CNAPP) bit.ly/3NtjjRJ @aabelak #cloudsecurity #CNAPP
Anna Belak retweeted
What are some good public breaches where we know Initial Access was a Kubernetes attack?
Or where kube played a role in the breach?
Anna Belak retweeted
Great question! SCARLETEEL is the best recent example that I know of. Actor exploited a vulnerable Kubernetes container and pivoted to the underlying cloud service account. sysdig.com/blog/cloud-breach…
Anna Belak retweeted
Insightful takes from @aabelak on how securing custom-built software has changed in recent years & why vulnerability prioritization is key to saving #DevOps time & energy without slowing down the delivery of the organization’s business value. Check it out:
okt.to/DpLWN0
Anna Belak retweeted
Cryptojacking: Free Money for Attackers, Huge Cloud Bill for You bit.ly/3UXbdRS by Nick Lang and Anna Belak ( @aabelak
) @sysdig #Cryptojacking
Anna Belak retweeted
Episode 94 "Meet Cloud Security Acronyms with Anna Belak" of Cloud Security Podcast where hosts @anton_chuvakin and @_TimPeacock interview Anna Belak (@aabelak) from @sysdig about cloud security acronym proliferation: CSPM, CWPP, CNAPP, etc
cloud.withgoogle.com/cloudse…
Anna Belak retweeted
Sysdig Talks: 2022 Threat Landscape (Live) xitter.cf/i/broadcasts/1OdKrzkmR…
Anna Belak retweeted
Are you willing to pay $430K for a stranger’s cryptocoins? 💸
Last chance to register for @InformationWeek (10/6) & hear @aabelak present the latest intel from Sysdig’s Threat Research Team on how attackers have evolved their strategies to reach the cloud. okt.to/BYILnU
Anna Belak retweeted
Sysdig's @aabelak & @bwolmarans are teaming up with @AWS_Partners for a webinar on 9/15 to discuss fundamentals & best practices for finding suspicious events with #AWS CloudTrail.
Reserve your spot in this complementary @TechstrongGroup #DevOps webinar: okt.to/xhCZSK
Anna Belak retweeted
A challenge I hear in software security is the tree vs the forest problem. It's one thing to work with one dev team to improve their secure dev process & have them meet a policy before pushing to prod. It's another thing to manage the security of a fleet of apps across an org.
I'm on @CISOseries Podcast w/Mike Johnson and @dspark. Listen: cisoseries.com/when-does-an-… @CISOseries
Anna Belak retweeted
A #CloudSecurity system that uses #MachineLearning (ML) to detect #malware sounds great—in theory, but as @aabelak states in her latest article on @darkreading: ML is not magic pixie dust! ML should 𝙚𝙭𝙩𝙚𝙣𝙙 existing security methods, not replace them. okt.to/S8b5y9
