A walk-through of attacks in the wild that abuse stolen cloud compute credentials in cloud environments.   #attack   #aws   #gcp

Love them or hate them, vulnerability scanners aren't going anywhere. You should tame the avalanche of findings with a noise-suppressing processing pipeline. Think in shovels, not in teaspoons.   #defend   #strategy

Brex's approach to building threat detection systems is to abstract the capabilities that allow for high-quality detections and then adapt to the best platforms that are available and appropriate for the team.   #monitor   #strategy

The second in a series by Palantir InfoSec on their journey enforcing FIDO2 authentication via hardware authenticators (YubiKeys) across all of Palantir.   #azure   #defend   #strategy

Some diagrams to understand key AWS, Azure and GCP IAM concepts and terminology.   #aws   #azure   #explain   #gcp   #iam

Forensic container checkpointing is based on Checkpoint/Restore In Userspace (CRIU) and allows the creation of stateful copies of a running container without the container knowing that it is being checkpointed.   #defend   #explain   #kubernetes

The detection engineering backlog is a vital starting point for every detection engineering function. By providing an area of input into the detection engineering backlog, cross-functional efficiency can enhance the capability of the detection engineering function.   #defend   #monitor

Learn how to source dynamic secrets from HashiCorp Vault in your Waypoint deployments using dynamic configuration.   #build   #vault

Properly assess whether all those announcements should mean anything to you; here's the ultimate AWS re:Invent 2022 recap you were looking for.   #aws   #explain

Example recipes for Kubernetes Network Policies that you can just copy paste.

A tool to check the security settings of Github Organizations.

Pike is a tool for determining the permissions or policy required for IAC code.

GCPGoat : A Damn Vulnerable GCP Infrastructure.

A simple tool to check if an IP/hostname belongs to the AWS IP space or not.

A tool for visualizing dynamic node usage within a cluster.

How to implement client-side encryption of data in Amazon DynamoDB with the Amazon DynamoDB Encryption Client, leveraging IAM and KMS.

How to detect and investigate security issues in an EKS cluster with Amazon GuardDuty and Amazon Detective.

This post is designed to help you decide which approach is best to securely connect your applications, either residing on premises or hosted outside of AWS, to your AWS environment when no human interaction comes into play.

How to establish GKE cluster governance for Google Cloud organization using the GKE Policy Automation, an open-source tool created by the Google Professional Services team.

How to integrate GCP secret manager and GKE secrets using the External Secrets Operator.

This piece kicks off a 4-part Azure Built-In Security series intended to share lessons Microsoft learnt from recent cloud vulnerabilities and how they are applying these learnings to ensure their technologies and processes are secure for customers.