How do you manage and maintain blacklisted IP addresses?
I'm curious how people handle blacklisted IP addresses in practice. Do you review and manage them manually, maintain internal scripts, import threat intelligence feeds, or rely on a…
threat intelligence
How do you manage and automate blacklisted IP addresses?
I'm looking at better ways to manage IP addresses that need to be blocked. Do you review and maintain them manually, run internal scripts, use firewall or security…
Are Paid Threat Intelligence Feeds Worth It If They Don’t Produce Detections?
We subscribe to several paid threat intelligence feeds marketed as operational and actionable. Most deliver long reports or blog-style analysis, sometimes with STIX bundles or CSV files containing…
How can we effectively reduce container CVE vulnerabilities in production?
We're facing a major challenge with container CVE vulnerabilities in our production environment. Whenever we pull standard base images, even standard ones like slim or Alpine, we get…
How should I use threat intelligence to update Kubernetes network policies without risking outages?
I'm working with real-time vulnerability feeds and considering automating the updates for my Kubernetes network policies or runtime security rules based on these alerts. What's the best way…