An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues.   #attack   #aws   #azure   #gcp

An attacker compromising a Cloudflare account can abuse Workers to establish persistence and exfiltrate sensitive data.   #attack   #cloudflare

Some of the more surprising things learned while auditing Series A/B startups.   #build

A step-by-step guide to building a free solution for Day 1 Vault logging and alerting on AWS.   #aws   #build   #vault

A write-up on using Stratus Red Team for testing threat detection rules.   #attack   #azure   #monitor

FabricScape (CVE-2022-30137) is a privilege escalation vulnerability in Microsoft's Service Fabric, which allowed cross tenant root access built out of unprivileged processes.   #attack   #azure

This will walk through the CloudGoat AWS detection_evasion scenario, detailing how to avoid AWS security detection and response services, such as in Lambda.   #attack   #aws

1Password for VS Code provides you with a set of tools to integrate your development workflow with 1Password, powered by the 1Password CLI. You can also read the companion blog post.

Evaluate source control (GitHub) security posture.

A prometheus exporter for monitoring aspects secrets stored on a running HashiCorp Vault server.

Run unit-tests with Golang testing on your Azure policies. You can also read the companion blog post.

You will no longer be able to use TLS versions 1.0 and 1.1 with all AWS APIs in all AWS Regions by June 28, 2023.

Recommendations that can improve resiliency for those that use IAM federation, in the unlikely event of disrupted availability of one of the regional endpoints.

Google Cloud now supports improved, threat-informed defenses by mapping their native security capabilities to MITRE ATT&CK.

A new constraint to prevent from exempting additional principals from audit logging.

Google announced two major capabilities that expand Cloud Armor's coverage to more types of workloads: edge security policies, and TCP/SSL Proxy Load Balancers.