Computers Checking Compliance Boxes

This episode is sponsored in part by the Google for Startups Cloud ProgramLinks:CircleCI came out with a security alert urging you to rotate any secrets stored in CircleCI.Another bite at the craptastic LastPass breach response, this article parses their weak-sauce PR statement Over the holidays Slack had some private GitHub code repositories stolen.ACSESSED is another Azure vulnerabilityAmazon S3 Encrypts New Objects By Default Updated whitepaper available: AWS Security Incident Response Guideiamfast analyzes your application code to generate a least-privilege IAM policy.Wiz has come up with and open sourced PEACH, a tenant isolation framework for cloud applications.