The Security Ledger Podcast

The Security Ledger Podcast


Podcast: Uber Breach Puts Focus on Securing DevOps Secrets

November 29, 2017

The hack of Uber and the loss of information on 57 million customers is just the latest security incident stemming from what our guest Elizabeth Lawler calls “DevOps secrets” – valuable credentials, APIs and other sensitive information that often end up exposed to the public as a result of lax continuous development operations. In this Spotlight Edition* of The Security Ledger Podcast, sponsored by CyberArk, we talk with Elizabeth about how to contain DevOps secrets and secure the secret super user lurking in modern organizations: highly privileged application code.  When the ride hailing service Uber revealed that information on 57 million customers and 600,000 drivers had been stolen by hackers, media attention focused on the company’s apparent decision to cover up the breach for months. That decision now seems likely to deliver a wealth of lawsuits to Uber’s doorstep. Just as important, however, are the still-emerging details about how hackers were able […]