BlinkOps blog

Weekly Workflow: Rotating Access Keys for Your Azure Storage Account

Azure Storage accounts leverage Shared Key Authorization, a convenient access method secured by access keys. However, a compromised key exposes your storage to unauthorized access.

Weekly Workflow: Realtime Gmail Phishing Detection

Phishing scams are a persistent threat in the digital world, with a staggering 3.4 billion malicious emails in circulation daily. Recognizing and responding to these threats is paramount for safeguarding oneself from financial and data loss. 

Blink Ops Recognized as a Leader in GigaOm’s Latest SOAR Radar Report

Gil Barak, Co-founder and CEO of Blink Ops, shares his POV on Blink being named a Leader and Outperformer in GigaOm’s 2024 SOAR Radar Report.

AI for Incident Response: Benefits, Challenges & Best Practices

Discover how AI boosts incident response through automation, faster detection, and accuracy while addressing challenges and following best practices.

Weekly Workflow: How to Find and Remove Unused Security Groups in AWS in 10 Seconds

75 AWS account owners alerted! Are you one of them? Unused security groups not only create a security risk, but also may be a time sink to clean up. Blink Copilot caan help you fix that.

Weekly Workflow: I Never Knew My Google Drive Was at Risk

We don't often think of Google Drive as not being secure, but the truth of it is that it's just as prone to attacks as any other service when you're not careful about your document share settings.

Best Practices for Automating Vulnerability Management

Vulnerability management in Blink Ops is automated. Check out use cases like web app testing, third-party risk monitoring, API security and patch management.

Incident Response Tools: Features, Types & Top Tools

Discover the key features, types & best practices for incident response tools to improve your security posture and threat mitigation.

Weekly Workflow: Password Nightmares

Maintaining password policies across your entire organization is a time consuming process for any company, especially large ones. An automated workflow can make things so much easier for you, ensuring that both your time and sensitive data are kept safe.

Weekly Workflow: RegreSSHion

Qualys Threat Research Unit (TRU) uncovered a critical Remote Unauthenticated Code Execution (RCE) vulnerability, identified as CVE-2024-6387, affecting OpenSSH servers on glibc-based Linux systems.

Top 4 Security Automation Use Cases: A Detailed Guide

Learn about the top 4 security automation use cases that can streamline your cybersecurity efforts. This guide covers reducing enriching indicators of compromise (IoCs), monitoring external attack surface(s), scanning for web application vulnerabilities and monitoring for leaked user credentials - specifically email addresses.

What is Compliance Automation? Benefits, Use Cases & Tools

Learn how compliance automation simplifies regulatory tasks, boosts efficiency, and reduces errors. Explore key benefits, use cases, and top tools.

What Are The Key Differences Between XDR, SIEM and SOAR?

Explore the differences between XDR, SIEM, and SOAR, and learn how each security technology enhances detection, monitoring, and response.

The Top 4 Industries at Risk for Cyber Attacks and How Security Automation Can Help

Discover how security automation strengthens defenses in healthcare, government, education, and finance—industries most at risk from cyberattacks due to their sensitive data and vast networks.

The Future SOC - How AI, Automation, and Decentralization Will Redefine Cybersecurity

Discover how AI, automation, and decentralization are transforming future security operations centers (SOCs) to streamline threat response.

What is IAM Automation? Benefits, Challenges and Tools

Discover what IAM automation is, its benefits & challenges, key tools, and how to effectively implement and maintain automated identity & access management.

5 Ways Cybercriminals Are Using AI in Cybercrime in 2024

Learn how cybercriminals exploit AI for phishing, deep fakes, OTP bypasses, hacking, and voice spoofing. Explore the latest AI-driven cybercrime tactics.

Saying Goodbye to SOAR: What’s Next for Security Operations?

Gartner declares SOAR obsolete, urging a shift to advanced AI solutions in security operations. Discover how AI is revolutionizing security automation.

Ransomware 2024: Insights into LockBit, BlackCat, and More

Explore the 2024 ransomware landscape, major attacks, key trends like RaaS, double extortion, supply chain attacks, and cybercriminals' evolving tactics.

Top 5 Ways AI Is Automating Cybersecurity Incident Response

Discover five use cases where AI revolutionizes cybersecurity incident response with automated threat detection, script writing, code analysis, and more.

Top 9 Cybersecurity Frameworks in 2024

Discover the top 9 cybersecurity frameworks for 2024, including NIST, ISO, GDPR, and more. Learn their benefits, challenges, and how to choose the right one.

Zero-Day Exploits: Everything to Know in 2024

Explore zero-day exploits in cybersecurity: their definition, how they work, and how they differ from n-day vulnerabilities.

Past, Present, and the Future of Security Automation

Explore the history of security automation, AI-driven trends, and the debate on autonomous SOCs. Learn how AI is transforming threat detection and response.

From Manual Processes to AI-Powered Automation with Blink

Tom Dixon, a security solutions engineer at Blink Ops, shares his journey from manual tasks to AI-powered automation with Blink.

Blink’s Security Automation Platform Delivers 936% ROI

Discover the new TAG study that shows Blink security automation delivers 936% ROI, with significant time savings and reduced breach damage. Read the report.

Streamline Incident Response Efficiency with Blink & Panther

Learn more about our new integration with Panther that combines Blink's automation with Panther's security intelligence to revolutionize alert handling.

6 Real-World Applications of AI in Cybersecurity

Explore six real-world AI applications in cybersecurity, including BurpGPT, Blink Copilot, VirusTotal Code Insight, and Tenable's EscalateGPT.

Avoid Vendor Lock-in with AI-Powered Security Automation

Discover how AI-powered security automation helps avoid vendor lock-in by standardizing and integrating data across various cybersecurity products.

Will AI Replace Cybersecurity Jobs?

Wondering if AI will replace cybersecurity jobs? Discover how AI impacts roles, why human expertise still matters, and what future skills you'll need to thrive.

5 Signs it's Time to Ditch Your SOAR Platform

Discover five warning signs that indicate your SOAR platform may be hindering your security efforts and learn how to choose a better solution.

What to Look for in a Security Automation Platform

Explore the evolution of security automation and discover the top features to look for in 2024 beyond legacy SOAR systems.

A Security Team’s Guide to Generative AI

Learn the essentials of generative AI in our guide tailored for security professionals, covering key concepts and practical insights.

Meet Niv Schneiderman: Senior Software Engineer at Blink Ops

Meet Niv Schneiderman, Senior Software Engineer at Blink Ops. Discover his passion for automation, tech insights, and explore his advice for new engineers.

AI and Security: Fighting Fire with Fire

Learn how to use AI in cybersecurity to your advantage and stay proactive against new cyber threats. Find out how to fight fire with fire.

Meet Nicola Dimant: Technical Writer at Blink

Get to know Nicola Dimant, Technical Writer at Blink. Find out Nicola's favorite thing about the Blink platform and what a typical day at Blink looks like.

How Security Teams are Using Generative AI

Discover the top five ways Gen-AI is transforming security operations and enhancing tools across various industries and disciplines.

What is a Security Automation Copilot? How Do They Help You?

With a security automation copilot, anyone can think of a workflow and automate it fully in seconds. Learn how to create smart, automated workflows.

17 Microsoft Azure Workflow Automations You Should Know

Explore 17 Azure workflows to automate for enhanced security, compliance, and cost savings. Streamline your Azure operations with our guide.

New Feature: Blink Case Management for Threat Prioritization

Explore Blink’s new case management feature that simplifies incident tracking and remediation for SOC teams, enhancing efficiency and response.

4 Ways to Connect With Blink at AWS Re:Invent 2023

Connect with Blink in Las Vegas during one of the largest gatherings of the cloud and security community, AWS re:Invent.

Blink & Reco AI: Control Access and Automate Security Tasks

Discover 7 key benefits of integrating Blink and Reco AI into your security tech stack for enhanced SaaS protection.

New Era of Security Automation: Blink's Momentum in 2023

Learn how Blink Ops achieved over 600% revenue growth, expanded partnerships, and gained customer adoption. CEO Gil Barak shares insights on this success.

What is Cloud Security Automation? Benefits & How to Set It Up

Discover the benefits of cloud security automation, its key elements, and how to set it up for enhanced protection & efficiency of your cloud environment.

What We Know About AI-Powered Cyber Attacks So Far

Explore the evolving threat of AI-powered cyber attacks, their impact, and how AI can be used defensively to protect against sophisticated cyber threats.

5 Automated Workflows to Boost Security in Your Organization

Discover five automated workflows to enhance security at your company, from MFA to strong passwords, following CISA's recommended practices.

Top Security Automation Examples with No-Code Workflows

Discover the latest security automation use cases leveraging no-code workflows to streamline operations, enhance response times, and improve efficiency.

How to Automate Vulnerability Management for Risk Reduction

Discover how automating vulnerability management can reduce risk exposure while saving time and resources. Learn best practices for effective automation.

Automated Threat Hunting: A Complete Guide

Learn how automated and agentic threat hunting finds threats your alerts miss, how reactive and proactive hunts differ, and what an AI agent needs to hunt.

Top SOC Automation Use Cases to Boost Security Operations

Discover top use cases to start SOC automation and enhance security. Learn where to begin for effective threat detection.

What is No-Code Security Automation? Everything to Know

Explore the evolution of security automation and learn all about no-code security automation platforms in our article.

Achieve SOC 2 Compliance with AWS Security Controls

Learn how to adopt AWS security controls to maintain SOC 2 compliance. Follow our guide to perform compliance checks and ensure data privacy.

10 Best Practices for Securing GitHub Enterprise SaaS

Discover 10 essential rules for enforcing SaaS Security on GitHub for Enterprise. Follow our guide and best practices to reduce security risks effectively.

10 Essential Security Policies Beyond SOC 2 and ISO 27001

Discover 10 critical security policies to enforce that go beyond SOC 2 and ISO 27001 compliance, enhancing your organization’s cybersecurity posture.

How to Ensure NIST CSF Compliance in AWS Environments

Learn how to apply the NIST Cybersecurity Framework to AWS environments. Find out how to enhance security by aligning AWS with NIST CSF standards.

Secure Your GCP Account with Forseti Security Controls

Learn how to check your GCP environment for security gaps with Forseti Security Controls. Find out how to maintain a strong security posture for your organization.

Align Your AWS Account with FFIEC Cybersecurity Standards

Ensure your AWS environment complies with FFIEC cybersecurity standards. This guide shows you how to check and enable required controls.

Reco Partners with Blink for SaaS Data Security Automation

Discover how Reco & Blink partnership enables security teams to automate responses to SaaS data exposure and remediate risks effectively.

How to Detect and Remediate Okta Impossible Traveler Alerts

Learn how to detect and remediate 'impossible traveler' alerts in Okta, investigating suspicious logins from different locations.

Blink Ops Announced as Launch Partner for Wiz Integration

Learn how a technology partnership empowers customers to reduce cloud risk by automating cybersecurity workflows with generative AI.

How to Check if All Azure Users Have MFA Enabled

Ensure Azure security by verifying that MFA is enabled for all users. Discover how to find and remove any non-compliant accounts step-by-step.

Azure Storage Account Encryption: How-to Guide

Verify the encryption status of Azure Storage Accounts and remediate non-compliance. Follow our guide to secure your data properly.

Blink Monthly Newsletter May/April 2023

Subscribe to the monthly newsletter to find out about the latest Blink news, read selected articles, and explore how-to guides on common security challenges.

Meet Blink Copilot: Generative AI for Security Workflows

Discover Blink Copilot, the first generative AI for automating security and IT workflows. Create no-code workflows effortlessly with simple prompts.

How to Secure Google Drive Files with Excessive Permissions

Learn how to secure your organization's Google Drive by identifying and managing publicly-exposed or overly-permissive files

How to Check Your Azure Account Against the CIS Benchmark

Learn how to use the CIS benchmarks report to check and enforce security best practices in your Azure account.

How to Find and Update Public EC2 AMIs in AWS

Secure your AWS account by finding and updating public AMIs to private. Learn how to prevent exposure of sensitive application information.

How No-Code Enhances Your Security Automation Capabilities

Discover how no-code automation can streamline security operations, enhance efficiency, and empower security teams to automate without coding skills.

Investigating Suspicious Events in Okta: Security Tips

Learn how to identify and respond to suspicious events in Okta. Discover effective strategies and automations to enhance security and reduce alert fatigue.

Blink Monthly Newsletter March 2023

Stay informed with the Blink monthly newsletter—get the latest news, blog highlights, and handy how-to guides for tackling common security tasks.

Automating Security Operations Beyond the SOC: What it Means

Explore how AI and automation are transforming cybersecurity. Learn about SOAR use cases and the future of security automation with AI and ML tools.

How to Clone an Azure VM Instance to Another Region

Learn how to clone Azure VM instances across regions to have backup instances ready in the event of regional outages.

How to Get User Creation Events from GCP Logs

Learn how to find and retrieve user creation events from GCP logs to monitor security and manage user access effectively in your cloud environment.

How to Retrieve User Activity from GCP Logs

Quickly access user activity logs in GCP to assess potential security threats. Follow our guide to retrieve and review user activity efficiently.

How to Search for IOCs Across Devices in CrowdStrike

Learn how to search for Indicators of Compromise (IOCs) across devices in CrowdStrike to identify malware and prevent further infection.

How to Contain an Endpoint with CrowdStrike

Learn how to contain endpoints with CrowdStrike when malware is detected. Follow step-by-step instructions to reduce your risk effectively.

How to Find and Remove Inactive CrowdStrike Falcon Sensors

Learn how to identify and remove inactive CrowdStrike Falcon sensors to avoid unnecessary costs and optimize your security setup.

Cloud Audit Logs: How to Automate Monitoring and Response Across AWS, Azure, and GCP

Automate cloud audit log monitoring, triage, and response across AWS CloudTrail, Azure Activity Logs, and Google Cloud Audit Logs with human approval.

How to Rollback Your Kubernetes Deployment with Kubectl

Learn how to rollback a Kubernetes deployment to a previous version using kubectl commands. Follow our guide to ensure stability in your cluster.

How to Check Your GCP Account for Compliance

Learn how to check your GCP account for compliance with the latest CIS v2 Benchmark, covering 400 security best practices, using Blink.

How to Block Project Access for a Given User or Group in GCP

Learn how to block user or group access to a GCP project during a security event using the GCP Console and CLI in our step-by-step guide.

Blink Monthly Newsletter February 2023

Stay updated with the Blink newsletter, your source for the latest news, blog articles, and how-to guides for common security tasks.

Automated Employee Offboarding: Revoking Access Across Okta, GitHub, and Your SaaS Stack

Automate employee offboarding as an identity-lifecycle security workflow: deactivate Okta users, remove GitHub org members, revoke SaaS, and log every step.

Verify IOCs & Improve Incident Response with VirusTotal

Learn how to use VirusTotal to verify Indicators of Compromise (IOCs) and enhance your incident response with automated workflows and threat intelligence.

How to Remove Unused Security Groups in AWS

Learn how to identify and delete unused security groups in AWS. Follow our guide to keep your AWS environment clean and secure.

How to Find Unused AWS Network Access Control Lists (ACLs)

Reduce security risks by finding and deleting unused AWS Network ACLs. Learn how to locate them using AWS tools.

Build vs Buy Security Automation Tool: Which is Better?

Discover the benefits of investing in a no-code security automation platform like Blink to streamline operations by focusing on critical tasks. .

Blink Monthly Newsletter January 2023

Stay informed with the Blink monthly newsletter—latest news, blog highlights, and helpful how-to guides for common security tasks.

30 Seconds with Matt Formica, New Director of Sales at Blink

Meet Matt Formica, the new Director of Sales at Blink Ops. Learn more about Matt's career history and his favorite toolset for everyday work.

How to Disable Public Access on Your AWS EKS Cluster

Learn how to secure your AWS EKS cluster by disabling public access to the Kubernetes API server endpoint using AWS Console or CLI.

How Blink Helps XM Cyber Achieve Operational Excellence

Discover how XM Cyber uses Blink to automate workflows, enhance security, and achieve operational excellence in cloud infrastructure management.

How ControlUp Uses Blink to Automate Security Workflows

Discover how ControlUp leveraged Blink to automate security workflows, reduce manual tasks, and enhance cloud security operations, saving valuable time and resources

Launch Spot Instances with AWS EC2 Auto Scaling Group

Learn to configure AWS EC2 Auto Scaling groups with Spot Instances to lower costs and optimize your cloud infrastructure efficiently.

Launch Template vs Launch Configuration and How to Migrate

Learn about the difference between launch template vs launch configuration and find out how to migrate from configurations to templates with our guide.

Blink Monthly Newsletter December 2022

Stay updated with the Blink newsletter. Read the latest news, featured posts, and expert tips and best practices for common SecOps tasks.

Create AWS EC2 Launch Templates Without Public IP Access

Learn how to create AWS EC2 launch templates and block public access by configuring your launch template settings.

How to Find and Delete AWS CLI Secrets Immediately

Learn how to find and delete unused AWS CLI secrets to reduce costs and enhance security. Follow our step-by-step guide to optimize your AWS account.

Cloud-Native Excellence: No-Code Automation & FinOps

Discover operational excellence focusing on no-code automation and FinOps. Explore our four-part series on DevOps, SecOps, and FinOps trends.

Introducing Blink Library: 5000+ DevOps & SecOps Automations

Explore the Blink Automation Library: 5000+ no-code DevOps and SecOps automations using AWS, GitHub, Terraform, Kubernetes, Slack, and more.

Agentic GitHub Repository Access Reviews: Why Manual Collaborator Management Breaks at Scale

A GitHub repository access review checks who can reach your repositories, teams, and organizations, then decides whether that access should continue. Adding and removing collaborators by hand works for one repository, but it breaks across an organization. Continuous, governed, automated reviews are how security teams hold least privilege.

How to Upgrade Your GKE Cluster to the Latest Version

Ensure your GKE clusters are secure and efficient by upgrading to the latest version. Follow our guide to manually upgrade your GKE clusters.