Hardware-grade Runtime Security

Secure Enclaves minus all the Effort

Feb 18, 2021

Azure Key Vault backend integration for Hashicorp Vault

Hashicorp Vault is a wonderful solution for storing and controlling access to tokens and credentials, RBAC, and all-things authentication, authorization, and secrets-related in an organization. We, at Anjuna, love Vault for its…

Yan Michalevsky

Feb 4, 2021

The sudo privilege-escalation vulnerability and how to future-proof yourself against the likes of it

On January 16th, 2021, Qualys Research Labs disclosed a privilege escalation vulnerability in no other than the Linux sudo utility. It was filed as…

Yan Michalevsky

Nov 22, 2019

Compiler-based Techniques for Enhancing Performance and Privacy in Enclaves

I’ve been collaborating for a while with the ACSL research lab at the Technion and this collaboration has resulted in the recent publication of our paper CoSMIX: A Compiler-based System for Secure…

Yan Michalevsky

May 20, 2019

Why protection against root users is important

Security company Qualys has recently disclosed vulnerabilities in Linux’s Systemd, the default service manager daemon for many Linux distributions [1]. They effectively enable a non-privileged user to obtain root privileges. This follows another…