Ubiq Security

Wishing all of our U.S. employees, customers, and partners a very safe and Happy Thanksgiving!

🙏 Nothing humbles us more than unsolicited customer feedback. Je Sum, CTO at @humanmanaged , recently wrote about his positive experience implementing our encryption API to protect sensitive attributes and data in their ABAC system. Read his full blog: bit.ly/3KQ1Xwj

Format-Preserving Encryption (FPE) 🛡️ FPE doesn't just enhance security, it obliterates tokenization's pain points. Say farewell to tokenization's complexities and vulnerabilities. Explore the game-changing shift: bit.ly/3KLdLQa

🎉 Happy Independence Day! 🇺🇸 To all our amazing U.S.A. employees, customers, and partners, have a joyous and memorable Fourth of July! Stay safe, enjoy the festivities, and celebrate the spirit of freedom that unites us all! #Happy4thofJuly #IndependenceDay

Today, we honor Juneteenth, commemorating the moment when African Americans in Galveston, Texas, received the news of their emancipation on June 19, 1865. Let's stand together, speak up against injustice, and strive for a more just and inclusive society. Happy Juneteenth 2023! 🎉

Is AWS S3 encryption a false sense of security? @awscloud Security Architect @AdityaPatel believes so, and so do we (well, mostly). And exactly why we built the application-layer encryption API @ubiqsec bit.ly/3VU9xdr

Improper usage of seeds in PRNGs can expose sensitive values if guessed or reused. Proper seed mgmt. is crucial for secure operation of PRNGs. Check out @foodiedeveloper's blog re: @MITREcorp's CWE-335, why it happens, a case study, and recommends mitigations bit.ly/3AU4HDn

@matthew_d_green ...

I have no mouth and yet I must scream.

Exciting news! @ubiqsec is now SOC 2 Type II compliant - reaffirming our commitment to security! A huge thanks to @DrataHQ, @clearvectorhq, @SolCyberMSS, @righthand_ai, and @PrescientAssur. Our security work is never done and we're always striving to improve. bit.ly/3Lx7Z5I

Protecting sensitive data requires the use of strong cryptographic algorithms, and a key component of such algorithms is entropy. However, insufficiently random values can undermine the security of these algorithms. Check out @foodiedeveloper's blog re: @MITRECorp’s CWE-331, why it happens, a case study, and recommended mitigations. bit.ly/41nz5RY

Encryption key mgmt made easy: our partnership @OWASP provides advanced access to our app-layer encryption API, fully automating key rotation & storage. And your data & encryption keys never leave your app environment ubiqsecurity.com/owasp

@simulxxx @Polyd_ 💯 agreed and one of the worst kept secrets in security!

Protect sensitive data from attackers with our flexible app-layer encryption API for fields, columns, files & strings (w/o modifying your databases) and trust in vetted, public open-source libraries.

@ubiqsec The best reason for turning on the transparent encryption at rest check boxes is that it saves the trouble of explaining why you didn't.

💯 and exactly why approaches like application-layer encryption are critical to safeguard sensitive data

Check out Gary Schneir’s recent talk at @owasp's PANW event where he discusses how to leverage format-preserving encryption to protect sensitive data without restructuring your database bit.ly/3l4v1pS

Link to blog: tmp.bearblog.dev/disk-encryptio…

Is disk encryption in AWS (all CSPs really) close to useless and potentially harmful? Just “security theater?” Security researcher Mellow Root believes so, and so do we and most of the security community. And exactly why we built the application-layer encryption API @ubiqsec