Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Contain Your Toxic Waste: Keep Prod Out of Dev

bishopfox.com | blog | #appsec | #devops | #data-protection | #pii | #environment-separation

Summary

Tony Lozano describes finding production data — SSNs, PII, credentials — in dev and staging environments, and argues for realistic fake datasets instead.
Published
Collected

original ↗

Related coverage

  1. The Unmask IAM Permission: API Gateway Access Logging (bishopfox.com)
  2. EzAdsPro BlackBox Advisory (bishopfox.com)
  3. How to Run an AI Application Pentesting Vendor RFP: The Evaluation Framework that actually works (xbow.com)
  4. When to use SAST versus an LLM security scanner (about.gitlab.com)
  5. How to calculate DevOps platform total cost of ownership (about.gitlab.com)
  6. Co-Create: Building GitLab with our users (about.gitlab.com)

back