![9 User Authentication Methods to Stay Secure in 2024](https://discover.strongdm.com/hubfs/authentication-methods.jpg)
Latest blog posts from John
![9 User Authentication Methods to Stay Secure in 2024](https://discover.strongdm.com/hubfs/authentication-methods.jpg)
User authentication plays an essential role in securing networks and ensuring that only authorized users can access sensitive data. As our infrastructure transitions from traditional on-premises setups to cloud and hybrid environments, our authentication methods must continue evolving.
![Cybersecurity Audit: The Ultimate Guide for 2024](https://discover.strongdm.com/hubfs/cybersecurity-audit.png)
A cybersecurity audit is a comprehensive assessment of your organization's information systems, networks, and processes that identify vulnerabilities and weaknesses that cybercriminals could exploit. The audit also evaluates the effectiveness of your security controls, policies, and procedures and determines if they align with industry best practices and compliance standards.
![Top 9 Zero Trust Security Solutions in 2024](https://discover.strongdm.com/hubfs/zero-trust-security-solutions.jpg)
Zero trust is a security and authentication model that eliminates the assumption of trust and shifts the focus from a traditional security parameter, like a VPN or firewall, to the individual user. Nearly all (92 percent) cybersecurity professionals agree that it’s the best network security approach that exists. In this article, we’ll evaluate the top nine zero trust solutions and help you decide which is right for your organization.
![StrongDM vs. AWS SSM Session Manager: Side-by-Side Comparison](https://discover.strongdm.com/hubfs/strongdm-vs-aws-ssm-session-manager.jpg)
Both AWS Systems Manager (SSM) Session Manager and StrongDM are solutions for gaining remote access to critical infrastructure. Yet, while they share some of the same capabilities required of an enterprise access management platform, the execution and the ultimate goals they accomplish for security and compliance teams are very different.
![Unauthorized Access: Types, Examples & Prevention](https://discover.strongdm.com/hubfs/unauthorized-access.png)
Unauthorized access—the unauthorized entry or use of an organization's systems, networks, or data by individuals without permission—is a common way for bad actors to exfiltrate data, inject malicious code, and take advantage of all types of breaches, and can have severe consequences for an enterprise and its customers.
![XZ Utils Backdoor Explained: How to Mitigate Risks](https://discover.strongdm.com/hubfs/xz-backdoor.png)
Last week, Red Hat issued a warning regarding a potential presence of a malicious backdoor in the widely utilized data compression software library XZ, which may affect instances of Fedora Linux 40 and the Fedora Rawhide developer distribution. CISA, or Cybersecurity & Infrastructure Security Agency, confirmed and issued an alert for the same CVE.
![Unmasking Cozy Bear (APT29): The Urgent Need for Continuous Authorization](https://discover.strongdm.com/hubfs/cozy-bear-apt29.jpg)
Cozy Bear specializes in targeting governments, diplomatic entities, non-governmental organizations (NGOs), and IT service providers, primarily in the U.S. and Europe. These state-sponsored groups aim to clandestinely gather strategic and sensitive information for Russia, maintaining prolonged access without raising suspicions.
![Leveraging CSA CCM with StrongDM for Enhanced Cloud Security](https://discover.strongdm.com/hubfs/csa-cloud-control-matrix.png)
The CSA CCM is a cybersecurity control framework specifically designed for cloud computing. It outlines a comprehensive set of best practices and security controls across 17 domains that are designed to ensure that cloud environments are secure and resilient against an ever expanding threat landscape. The CCM framework is structured to provide clarity and actionable guidance for the implementation of security measures in a prescriptive and adaptable way for recognized compliance standards and
![AWS re:Invent 2023 Recap: RDS for Db2, EKS Pod Identity & More](https://discover.strongdm.com/hubfs/aws-reinvent-2023-recap-strongdm.jpg)
re:Invent 2023 was AWS’ 12th conference, and it did not disappoint. More than 50,000 of us descended onto Las Vegas for a week of learning, networking, and discussing all things cloud. The campus was insanely large, spanning most of the Las Vegas strip, so that meant we got our steps in! We had some fun along the way, as well, at the many social gatherings, parties and amazing musical experience re:Play.
![AWS Well-Architected Framework Security Best Practices](https://discover.strongdm.com/hubfs/aws-well-architected-framework-best-practices.png)
The AWS Well-Architected Framework has been a staple for many years for AWS practitioners of all sorts, including cloud architects and platform engineers. It’s a blueprint for architectural and design best practices that will lay the foundation for resilience, operational efficiency, and security on the AWS Cloud.
![MITRE ATT&CK Framework Containers Matrix for Kubernetes](https://discover.strongdm.com/hubfs/mitre-attack-matrix-for-kubernetes.png)
If you’re Kuberntes admin and you’re not familiar with the tactics outlined in the MITRE ATT&CK framework, this blog post is for you. MITRE ATT&CK framework is an extensive knowledge base of tactics and techniques employed by bad actors that defensive security experts use to help defend their organizations against attack, and many times, used by their offensive security counterparts to test their weaknesses.
![CIS Kubernetes Benchmark Implementation Recommendations](https://discover.strongdm.com/hubfs/cis-kubernetes-benchmark.png)
The CIS Kubernetes Benchmark is a set of prescriptive recommendations assembled to guide administrators to achieve good security hygiene and results in strength security outcomes for their Kubernetes environments.
![Simplifying AWS Access with StrongDM Without Compromising Security Posture](https://discover.strongdm.com/hubfs/simplifying-aws-access.jpg)
Since Amazon Web Services first announced it in 2011, AWS IAM has evolved to become the gateway to the AWS Cloud. Organizations cannot interact with their cloud resources and its many services without it. Identity, not networking, is the real access boundary.