by Roman Faynberg | Aug 29, 2022 | News
*Summary: this post talks about ways that organizations could implement security controls to log and audit code accesses to simplify incident response in the event of source code compromise.* A large part of Carve’s customer base is software development...
by Roman Faynberg | Apr 12, 2021 | Exploits, Featured, News, Techniques
You might have taken all the right steps to secure a corporate Windows workstation: your users are not running as local admins, endpoint protection is in place, service ACLs and file permissions are locked down, etc. Yet there is still a frequently overlooked...
by Roman Faynberg | May 25, 2018 | Cloud, Digital Transformation
Our customers who embark on a “digital transformation” journey frequently face a dilemma as they inevitably consider the cloud as the target platform for their new product. When they need to outsource computing to the cloud, how do they do it? Do they...
by Roman Faynberg | Oct 19, 2016 | Android, Labs, Mobile, Techniques
Recently, we needed to man-in-the-middle TLS traffic coming from an Android Wear application. On a regular Android app, this would be an easy thing to do, but we started to run into trouble pretty quickly on the only Android watch that we had at our disposal, the 1st...
