Even the average person on the street is tired of reading hot takes about #log4shell. In contrast, if you work in Security or IT, you probably haven’t had the time to even look. It has been a brutal seven days for you.
However, one positive aspect of disruptive events like this, that’s worth celebrating, is how brilliantly the tech community has come together. In particular, the level of information and solution sharing that is still ongoing has been spectacular.
The same is true in our own Tines Community and it has been a pleasure to see these incredibly busy people sharing various automations they have created. Security automation can’t stop exploits being created but it can mitigate their impact.
This Story (we call our automations “Stories”) from Kurt Boberg is a nice example of that. It simply checks the CISA Advisory RSS feed once an hour, scans for common languages/package managers, and emits notifications to Slack if there’s a match. It’s also a great way to see how a Tines Story is constructed and how easy it is.
If you are a Tines user and you’re not a member of our Community Slack, please do join, as you’re missing out.
You also have almost 60 hours to get a YDWWT competition entry in and win a prize automatically. What are you waiting for?