Blink blog

The Top 4 Industries At Risk From Cyber Attacks and How Security Automation Can Help

Discover how security automation strengthens defenses in healthcare, government, education, and finance—industries most at risk from cyberattacks due to their sensitive data and vast networks.

What Are The Key Differences Between XDR, SIEM and SOAR?

Explore the differences between XDR, SIEM, and SOAR, and learn how each security technology enhances detection, monitoring, and response.

What is IAM Automation? Benefits, Challenges and Tools

Discover what IAM automation is, its benefits & challenges, key tools, and how to effectively implement and maintain automated identity & access management.

5 Ways Cybercriminals Are Using AI in Cybercrime in 2024

Learn how cybercriminals exploit AI for phishing, deep fakes, OTP bypasses, hacking, and voice spoofing. Explore the latest AI-driven cybercrime tactics.

Gartner Says Goodbye to SOAR: What’s Next for Security Operations?

Gartner announces that SOAR is obsolete, calling out its limitations and advocating for more advanced generative AI solutions in security operations. In this article, learn about the ways AI is revolutionizing security automation and tackling SOAR obstacles.

Ransomware 2024: Insights into LockBit, BlackCat, and More

Explore the ransomware landscape in 2024, including major attacks by LockBit, BlackCat, and Rhysida. Learn about key trends like ransomware-as-a-service (RaaS), double extortion, supply chain attacks, and hybrid ransomware, as well as cybercriminals' tactics, techniques, and procedures (TTPs).

The Top 5 Ways AI Is Automating Cybersecurity Incident Response

Five practical use cases show how AI is revolutionizing cybersecurity incident response. Discover how automated threat detection improves security. See how AI helps write scripts and how it also helps analyze malicious code, logs, and automates security workflows.

Top 9 Cybersecurity Frameworks in 2024

Discover the top 9 cybersecurity frameworks for 2024, including NIST, ISO, GDPR, and more. Learn their benefits, challenges, and how to choose the right one.

Zero-Day Exploits: Everything to Know in 2024

Zero-days pose a frequent threat in cybersecurity, potentially leading to system compromise and theft of sensitive data. This article takes a look at zero-day exploits, exploring their definition, functionality, and how they differ from n-day vulnerabilities.

The Past, Present, and Future of Security Automation

In this article, we explore the history of security automation, current trends including AI-driven security copilots and cloud-native platforms, and the ongoing debate about autonomous security operations centers (SOCs). See how artificial intelligence and machine learning are reshaping threat detection, investigation, and response processes.

Blink’s Security Automation Platform Delivers 936% ROI, Reveals TAG Study

In a new study by TAG, cybersecurity experts analyzed the Blink security automation platform and its impact. They found an estimated 936% ROI for most businesses by calculating time savings and reduction in breach damage. Read the full report.

My Journey from Manual Processes to AI-Powered Automation with Blink Ops

In this article, Tom Dixon, a security solutions engineer at Blink Ops, reflects on his journey shifting from manual tasks and processes to automating them with an AI-powered solution like Blink.

Streamlining Incident Response Efficiency with Blink and Panther

We're thrilled to announce our new integration with Panther, a leader in modern security intelligence and analytics. Together, Blink and Panther enable teams to transform their alert handling with the power of automation.

6 Real-World Applications of Artificial Intelligence (AI) in Cybersecurity

Explore 6 real-world applications of AI in cybersecurity, including BurpGPT, EPSS, Blink Copilot, VirusTotal's Code Insight, HackerOne's Hai, and Tenable's EscalateGPT.

How to Avoid Vendor Lock-In with AI-Powered Security Automation

AI-powered security automation can enable organizations to avoid vendor lock-in by standardizing and integrating data from various cybersecurity products, regardless of vendor, to provide more open integration and flexibility between best-of-breed solutions.

Will AI Replace Cybersecurity Jobs?

Wondering if AI will replace cybersecurity jobs? Discover how AI impacts roles, why human expertise still matters, and what future skills you'll need to thrive.

5 Signs it's Time to Ditch Your SOAR Platform

Security automation should be fueling your productivity, not slowing you down. Here are five warning signs that your SOAR platform isn't living up to its promises.

What to Look for in a Security Automation Platform

Security automation has changed a lot since the days of legacy SOAR. Here are the top things to look for in 2024.

A Security Team’s Guide to Generative AI

This guide outlines the basics of generative AI that every security professional should know.

Blink Spotlight: Niv Schneiderman

Get to know Niv, our clever Senior Software Engineer here at Blink Ops.

AI + Security: Fighting Fire with Fire

Make no mistake: AI is here to stay. As malicious actors use it to their advantage, it's time for security teams to do the same.

Blink Spotlight: Nicola

Get to know Nicci, Blink's talented technical writer based in our Tel Aviv HQ.

How Security Teams are Using Generative AI

Gen-AI has quickly become a valuable tool for everyone across various industries and disciplines. Security teams are no different. Find out the top five ways it’s helping security operations and beyond.

What is a Security Automation Copilot? How Do They Help You?

With a security automation copilot, anyone can think of a workflow and automate it fully in seconds. Learn how to create smart, automated workflows.

17 Microsoft Azure Workflow Automations You Should Know

Explore 17 Azure workflows to automate for enhanced security, compliance, and cost savings. Streamline your Azure operations with our guide.

Say Hello to Blink Case Management: Threat Prioritization for Security Teams

Blink’s newest case management feature unlocks easier incident tracking and remediation for SOC teams.

4 Ways to Connect With Blink Ops at AWS Re:Invent 2023

The AWS Re:Invent conference is one of the largest gatherings of the cloud and security community. Here’s how you can interact with Blink while in Las Vegas.

Control Access, Automate Everything with Blink and Reco AI

Discover the seven key benefits of implementing Blink and Reco in your security tech stack.

A New Era of Security Automation: A Look at Blink's Momentum in 2023

This year, Blink Ops reached significant milestones in customer adoption, increased revenue by more than 600% since the beginning of the year, and expanded strategic partnerships. CEO and co-founder, Gil Barak, provides his insights into this success.

What is Cloud Security Automation? Benefits & How to Set It Up

Discover the benefits of cloud security automation, its key elements, and how to set it up for enhanced protection & efficiency of your cloud environment.

What We Know About AI-Powered Cyber Attacks So Far

AI-powered cyber attacks are not merely the stuff of science fiction; they are a growing reality. Find out more about how AI has changed the threat landscape, and how you can use AI to fight back.

5 Automated Workflows to Enforce Security Basics Across your Organization

Discover five automated workflows to enhance security at your company, from MFA to strong passwords, following CISA's recommended practices.

Top Security Automation Examples with No-Code Workflows

Discover the latest security automation use cases leveraging no-code workflows to streamline operations, enhance response times, and improve efficiency.

How to Automate Vulnerability Management

Vulnerability management is essential to reducing risk exposure, but it demands precious time and resources. Find out how automating vulnerability management can remove these blockers.

10 Key Benefits of Security Automation

Security automation platforms offer a range of advantages for security professionals. The benefits of no-code security automation are even more impressive. Here are the top benefits to know.

Your Guide to Automated Cyber Threat Hunting

Threat hunting is a powerful – yet time-consuming – piece of the security operations puzzle. Learn more about streamlined threat hunting with automation.

SOC Automation Use Cases: Where to Start

Security automation is a powerful tool for SOC teams, but it can be tricky to decide where to begin. Here are the top use cases to kickstart your SOC automation.

What is SOC Automation? Why it Matters

Explore SOC automation & its importance in streamlining alert triage and incident response. Learn how your SOC team can benefit from automation.

What is No-Code Security Automation? Everything to Know.

Security automation has come a long way since the early days of SOAR. Here’s everything you need to know about no-code security automation platforms.

Adopting AWS Security Controls to Achieve SOC 2 Compliance

SOC 2 compliance for Amazon Web Services (AWS) is a widely recognized cybersecurity standard for data privacy. In this guide, we'll show you how to perform compliance checks to maintain AWS SOC 2 standards.

10 Best Practices for Enforcing SaaS Security on GitHub for Enterprises

There are many settings and best practices you can follow to maintain a secure GitHub organization. In this guide, we walk through 10 rules you can enforce to reduce your security risk.

10 Essential Security Policies to Enforce That Don’t Get Covered in SOC 2 and ISO 27001

Find out the 10 specific policies that are crucial to enforce and go beyond the scope of SOC 2 and ISO 27001 compliance controls.

Applying the NIST Cybersecurity Framework to AWS Environments

The NIST Cybersecurity Framework provides guidance to help organization follow security best practices. In this guide, we'll show how you can apply the NIST CSF standards to your AWS environment.

Securing Your GCP Account Using Forseti Security Controls

Forseti Security, a collection of open source tools for GCP, helps companies maintain a strong security posture by providing guidance on which controls should be enabled. In this guide, we'll show how you can check your GCP environment to identify gaps.

Aligning Your AWS Account with the FFIEC Cybersecurity Standards

The Federal Financial Institutions Examination Council (FFIEC) have established cybersecurity standards, which require certain controls to be enabled in AWS. In this guide, we'll show you how to check your AWS environment for compliance.

Detecting and Remediating Okta Impossible Traveler Alerts

If the same Okta user logs in from different places so far apart it would be impossible, this suspicious activity should be investigated. In this guide, we'll show you how to detect and remediate "impossible traveler" alerts.

Reco Partners with Blink to Automatically Remediate SaaS Data Security Exposure Events

Partnership empowers security teams to automate response when sensitive information is exposed through SaaS tools and remediate risk

Blink Ops Announced as Launch Partner for Wiz Integration (WIN) 

Technology Partnership Enables Mutual Customers to Reduce Cloud Risk by Automating Cybersecurity Workflows using Generative AI

How to Check if All Azure Users Have MFA Enabled

If your organization is using multi-factor authentication to secure your Azure account, it's important that all users have this security setting enabled. In this guide, we'll show you how to find any users without MFA enabled.

Azure Storage Account Encryption: How-to Guide

Verify the encryption status of Azure Storage Accounts and remediate non-compliance. Follow our guide to secure your data properly.

Blink Monthly Newsletter May/April 2023

The Blink monthly newsletter includes details about the latest Blink news, featured articles from our blog, and how-to guides for solving common security and platform operations challenges.

Introducing Blink Copilot: Generative AI for Security Workflows

Discover Blink Copilot, the first generative AI for automating security and IT workflows. Create no-code workflows effortlessly with simple prompts.

Securing Google Drive Files with Excessive Permissions

Publicly-exposed or overly-permissive files in Google Drive accounts at your organization could be big security risk. In this guide, we'll show you how to maintain a secure Google Drive posture.

Checking Your Azure Account Against the CIS Benchmarks

The CIS benchmarks for Azure are a comprehensive collection of security best practices for the platform. In this guide, we'll explain how to use the benchmarks report to check these controls in your Azure account.

How to Find and Update Public EC2 AMIs in AWS

If you have public AMIs in your AWS account, they might be exposing sensitive information about your applications. In this guide, we'll show you how to find and update public AMIs to private.

How No-Code Supercharges Your Security Automation Capabilities

Decentralized application architectures have made security more critical and essential to business operations, while making security exponentially harder to manage. In this post, you'll learn how no-code automation can help modernize and streamline your security operations workflows.

Investigating Suspicious Events in Okta

Suspicious events in Okta could be harmless false alerts or early indicators of a malicious attack. In this guide, we'll explain a bit about the types of suspicious events and show how security teams can respond to them.

Blink Monthly Newsletter March 2023

Stay up-to-date with the Blink monthly newsletter, where you'll find the latest news, featured articles from our blog, and handy how-to guides for tackling common security tasks.

How to Clone an Azure VM Instance to Another Region

Learn how to clone Azure VM instances across regions to have backup instances ready in the event of regional outages.

What Does It Mean to Automate Security Operations Beyond the SOC?

It’s not just ChatGPT hype. Over the last few years, AI and automation have fully arrived on the cybersecurity scene. In this post, you'll learn about SOAR use cases and the future of security automation using AI and ML tools.

How to Get User Activity From Your GCP Logs

If one of your employees has their account compromised, being able to quickly see their GCP user activity can help you assess the threat. In this guide, we'll show you how to quickly get a user's activity logs from GCP.

How to Contain an Endpoint with CrowdStrike

When malware is detected on a device, you can contain that endpoint with CrowdStrike to reduce your risk. In this guide, we'll show you how to take these containment steps.

How to Search for an IOC Across Devices in CrowdStrike

If malware is detected on one device at your organization, it might not be the only one. In this guide, we'll show you how to search whether any other devices have encountered the same IOCs.

How to Find and Remove Inactive CrowdStrike Falcon Sensors

Cleaning up inactive sensors in CrowdStrike ensures that you aren't paying for resources you are not using. In this guide, we'll show you how to identify and clean up inactive sensors.

How to Use Azure Activity Logs to Audit User Activity

Learn how to retrieve activity logs for a user in Azure to help your team assess the scope of a security incident. Follow our step-by-step guide.

How to Block Project Access for a Given User or Group in GCP

If you are dealing with a security event, you may want to block a user or group's access to a GCP project. In this guide, we'll show you how to block access using the GCP Console and CLI.

How to Check Your GCP Account for Compliance with the CIS v2 Benchmark

The CIS Benchmarks for GCP are a collection of 400 security best practices. In this guide, we'll explain the basics of the latest version of CIS Benchmark for GCP and how you can check for compliance with Blink.

How to Rollback Your Kubernetes Deployment

If a new Deployment to your Kubernetes cluster is not stable, you may want to rollback to a prior version. In this guide, we'll show you how to do this with kubectl commands.

Blink Monthly Newsletter February 2023

Stay updated with the Blink monthly newsletter, your go-to source for the latest Blink news, featured articles from our blog, and helpful how-to guides for tackling common security tasks.

How to Verify IOCs and Enrich Your Incident Response with VirusTotal

When malware is detected, you can use tools like VirusTotal to get more information. In this guide, we'll show you how to get more information on IOCs using VirusTotal.

How to Remove a Member from Your Organization in GitHub

If someone's account is compromised or if they are leaving your organization, it's important to remove them from your GitHub organization in a timely manner. In this guide, we show you the steps to take action fast.

How to Find Unused Network Access Control Lists (ACLs) in AWS

If you have network access control lists that you are not using, it's a best practice to clean them up. In this guide, we'll show you how to find and delete unused ACLs in AWS.

How to Find and Remove Unused Security Groups in AWS

It's important to regularly identify and remove any security groups in your AWS account that are not being used. In this guide, we'll show you how to find and delete unused security groups.

Giving a New Repository Access to an Organization Secret in GitHub

If you have organization-level secrets in GitHub, you may need to update the secret settings when you create a new repository that needs access. In this guide, we'll show you the steps for updating your secrets.

Should You Build vs. Buy for Security Automation?

Eliminate tedious work by focusing on business critical operations. Here’s what you get when investing in a no-code security automation platform like Blink.

Blink Monthly Newsletter January 2023

Stay up to date with the Blink monthly newsletter, where you'll find the latest Blink news, featured blog articles, and helpful how-to guides for tackling common security tasks.

Blink bytes: 30 Seconds with New Director of Sales Matt Formica

Blink bytes are short interviews with members of the Blink team. Get to know Blink Director of Sales Matt Formica in this blog post.

How to Ensure Public Access is Disabled On Your EKS Cluster

New AWS EKS clusters, by default, have a publicly-accessible endpoint. In this guide, we'll show you how to secure your EKS cluster by removing public access.

How Blink Empowers XM Cyber to Achieve Operational Excellence

Blink provides a platform that enables DevOps, SecOps, and FinOps to do what they do best, better. Let’s look at how we’ve empowered one of our customers, XM Cyber, to achieve unparalleled results.

How ControlUp Uses Blink to Automate Security Workflows

Discover how ControlUp leveraged Blink to automate security workflows, reduce manual tasks, and enhance cloud security operations, saving valuable time and resources

Launch Template vs Launch Configuration and How to Migrate

Learn about the difference between launch template vs launch configuration and find out how to migrate from configurations to templates with our guide.

How to Launch Spot Instances with Your AWS EC2 Auto Scaling Group

Incorporating Spot Instances into your EC2 Auto Scaling strategy can help you significantly lower your costs. In this guide, we'll show how you can launch Spot Instances with your EC2 Auto Scaling group.

Blink Monthly Newsletter December 2022

Get the scoop on all things Blink with our monthly newsletter! Stay up-to-date with the latest news, dive into featured blog articles, and unlock expert how-to guides for common SecOps tasks.

Create AWS EC2 Launch Templates Without Public IP Access

Learn how to create AWS EC2 launch templates and block public access by configuring your launch template settings.

How to Find and Delete AWS CLI Secrets Immediately

Learn how to find and delete unused AWS CLI secrets to reduce costs and enhance security. Follow our step-by-step guide to optimize your AWS account.

Operational Excellence in a Cloud-Native World: No-code Automation and FinOps

Explore "operational excellence" in a four-part series that looks at trends across DevOps, SecOps, and FinOps. This fourth and final post features no-code automation and FinOps.

Introducing the Blink Automation Library with 5000+ DevOps and SecOps Automations

Meet the Blink Automation Library: A Massive No-Code Repository with 5000+ DevOps and SecOps Automations. Rapidly build no-code automations using cloud tools like AWS, GitHub, HashiCorp Terraform, Kubernetes, and Slack.

How to Boost Performance with EBS-Optimized Instances in AWS

By enabling EBS-optimization, you can guarantee a certain level of performance between your EBS volumes and EC2 instances. In this guide, we'll show you how to find instances without it enabled so you can update them.

How to Upgrade Your GKE Cluster to the Latest Version

Upgrading your GKE clusters is an important way to ensure that you have the most secure, efficient cluster possible. In this guide, we'll show you how to manually upgrade GKE clusters.

How to Add Collaborators to Your GitHub Repository

You may have projects where you need to add outside collaborators to your GitHub repositories. In this guide, we'll show you how to add collaborators with the GitHub UI and the GitHub API.

Operational Excellence in a Cloud-Native World: No-Code Automation and SecOps

Explore "operational excellence" in a four-part series that looks at trends across DevOps, SecOps, and FinOps. This third post features no-code automation and SecOps.

How to Enable Autoscaling for a GKE Cluster

When autoscaling is enabled, your GKE cluster will be more responsive as workloads change and scale down to lower costs when it can. In this guide, we'll show you how to enable autoscaling.

How to Block Public Access to an Individual S3 Bucket

Publicly accessible S3 buckets could pose a security risk for your organization. In this guide, we'll show you how you can block public access at the bucket-level in AWS.

Blink Monthly Newsletter November 2022

Get all the latest Blink news, featured articles from our blog, and handy how-to guides to tackle common DevOps and SecOps challenges in our monthly newsletter.

Setting Up Automatic Key Rotation in GCP

Automatic key rotation in GCP is useful way to reduce your security risk. In this guide, we'll show you how to set up automation key rotation.

How to Manually Rotate Keys in GCP

If there's a chance a key in your GCP account has become compromised, you'll want to manually rotate keys right away. In this guide, we'll show you the steps to rotating keys manually in GCP.

Syncing User Groups Across Platforms with Blink Automation

When you adjust user groups in one platform, how do you ensure those changes are reflected in other tools? In this post, we share how the team at Non-Fungible Labs went about solving this problem using Blink automations.

Operational Excellence in a Cloud-Native World: No-Code Automation and DevOps

Explore "operational excellence" in a four-part series that looks at trends across DevOps, SecOps, and FinOps. This second post features no-code automation and DevOps.

How to Find and Remove Unused AWS Passwords

If you have more AWS login profiles than you need, those unused passwords could become a security liability. In this guide, we'll show you how to find and delete unused passwords in AWS.

How to Find and Remove Unused AWS Access Keys

It's a good security practice to keep AWS access keys to a minimum. In this guide, we'll show you how to find unused access keys in AWS and remove them.