Dan Kaplan

3 days ago | securityboulevard.com | Dan Kaplan

Modern infrastructure depends on keys. Lots of them. Every time a workload spins up, data moves between services, or a machine requests access to an API, some form of key – often called a credential – makes that interaction possible. These keys underpin everything from encryption to identity, silently powering the secure operations that cloud-native environments rely on. But here’s the problem: not all keys are created equal, and treating them as if they are can quietly introduce risk.

3 days ago | securityboulevard.com | Dan Kaplan

Static credentials, like hardcoded API keys and embedded passwords, have long been a necessary evil. But in distributed, cloud-native environments, where services and workloads constantly spin up and down, these static credentials have become a growing source of risk, operational friction, and compliance failure. This raises an urgent question for security and platform teams: Is there a better way to manage workload identity and access across dynamic, heterogeneous environments?

3 days ago | securityboulevard.com | Dan Kaplan

As organizations accelerate their cloud adoption, managing sensitive data like API keys, passwords, and certificates has become more complex than ever. Poor secrets management is a leading cause of data breaches. The 2025 Verizon Data Breach Investigations Report shows that credential abuse (use of stolen or compromised credentials) is cited as the initial attack vector in 22% of breaches, making it one of the top two entry points for attackers, alongside exploitation of vulnerabilities.

1 week ago | securityboulevard.com | Dan Kaplan

GitHub Actions environment variables power the automation that builds, tests, and deploys your code. These variables connect your pipelines to external systems, databases, and cloud providers. A 2024 report from Legit Security found that most GitHub Actions workflows have critical security flaws. Over 7,000 workflows interpolate untrusted input, more than 2,500 execute untrusted code, and 86% don’t limit token permissions.

2 weeks ago | thedispatch.com | Jonah Goldberg |Charles Hilu |Alex Demas |Dan Kaplan

Blaming the Jews? For things they didn’t do? Groundbreaking. Published June 12, 2025 Atlantic columnist Yair Rosenberg joins Jonah Goldberg to discuss the shocking rise of Jew hatred in America, the connection between populist movements and antisemitic sentiments, and Edward Said’s influence—all while poking fun at the podcast bros and reminding the elite institutions about the importance of standing with Israel.