A reference implementation for achieving SLSA 3 and creating non-forgeable build provenance using only free tooling on GitHub Actions.   #build   #ci/cd   #supply-chain

Insightful article from the Chime security team, explaining how to choose where to prioritize investments in security, and how to empower engineers and teams to independently improve the security posture of their code.   #defend   #strategy

How the Expel team detected and stopped an unauthorized access in one AWS environment.   #aws   #monitor

Materials (slides, scripts, demo app, and other code samples) used for various workshops, tutorials, and training sessions around the themes of Docker, containers, and orchestration. Developed by @jpetazzo.   #containers   #explain   #kubernetes

A handy illustration which explains how Kubernetes Admission Webhooks work.   #explain   #kubernetes

How to write Semgrep rules to find issues directly in AWS CDK code.   #build   #iac

How users who have rights to the certificate signing request (CSR) API in Kubernetes might be able to use them to escalate their privileges in a cluster.   #attack   #kubernetes

The malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls.   #attack   #aws

The first issue allows anyone to query the directory synchronization status. The second issue could reveal internal information about the target Azure AD tenant, including the technical contact's full name and phone number.   #attack   #azure

The Kubernetes 1.24 release will deprecate several (beta) APIs in favor of stable versions of the same APIs. The major change coming in the Kubernetes 1.24 release is the removal of Dockershim.   #announcement   #kubernetes

Performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.

Secure, cross-platform Git credential storage with authentication to GitHub, Azure Repos, and other popular Git hosting services.

Distributed tcpdump for cloud native environments. You can also refer to the companion blog post.

A Microservices-based framework for the study of Network Security and Penetration Test techniques.

Get eBPF programs running from the cloud to the kernel in 1 line of bash.

Amazon announced the general availability of Lambda Function URLs, a new feature that lets you add HTTPS endpoints to any Lambda function and optionally configure Cross-Origin Resource Sharing (CORS) headers.

An example of how to detect security misconfigurations, indicators of compromise, and other anomalous activity.

Get started with application observability using the Ops Agent integrations UI for monitoring and logging 3rd party applications on Compute Engine.

Introducing a new security blueprint that helps enterprises build a secure data warehouse.

A preview of the new Service Directory and Traffic Director integration, and how it will allow you to set up load balancing and traffic management on services in a consistent way across heterogeneous and evolving infrastructure.