A CTF challenge created to boost your AWS IAM knowledge.   #aws   #iam

Some useful tips on wrangling dependencies from someone who worked on large-scale projects, CI/CD, build tools, and more.   #build   #ci/cd   #defend   #supply-chain

A deep dive into AWS SSM Run Command shows that there are multiple documents attackers can use for executing code remotely on EC2 instances.   #attack   #aws

A practical tutorial to build a comprehensive Cedar-based application authorization system.   #aws   #build   #iam

TrustedSec researchers have discovered a OneDrive enumeration vulnerability that could allow an attacker to discover the email addresses of OneDrive users. You can also refer to the companion tool.   #attack   #azure   #microsoft

A vulnerability in Cloudflare CASB that enabled to view sensitive information about other customers' Microsoft and GitHub organizations. This included employee names/emails, links to SharePoint files, repository names/descriptions and more.   #attack   #cloudflare

Post delving into the possibilities of enforcing machine-to-machine (m2m) authentication using OIDC (OpenID Connect) at a high level when utilizing an AWS ALB.   #aws   #build

Two sleuthing SREs uncovered an AWS security issue. Here's how they found it, why it matters, and what you need to do to resolve it.   #attack   #aws

Customers do not know how to configure cloud services securely.   #defend   #strategy

Regal is a linter for Rego.

Labs to help people learn how to write and work with infrastructure as code in Azure.

A library of Incident Response notebooks using Jupyter.

A reference implementation that allows to create data catalogs, discover, protect, and visualize sensitive data across multiple AWS accounts.

A project for free (maybe) egress from EC2 instances using Tailscale and Session Manager.

A collection of documented and undocumented AWS API models.

AWS updated the AWS Ramp-Up Guide: Security.

You can now enable a new Managed Domain List on Amazon Route 53 Resolver DNS Firewall, to block domains identified as low-reputation or that are known or suspected to be malicious by Amazon GuardDuty's threat intelligence.

Amazon announced the launch of AWS Signer Container Image Signing, a new capability that gives customers native AWS support for signing and verifying container images stored in container registries like ECR.

A temporary elevated access management solution that integrates with AWS IAM Identity Center and allows you to manage temporary elevated access to your multi-account AWS environment.

Amazon CloudWatch Logs announce support for account level data protection policy configuration: you can now create a data protection policy that will be applied to all existing and future log groups within your AWS account.

Google Cloud now offers Security Command Center Premium customers $1 million of protection against cryptomining attacks.

Four new Cloud Firewall features are now generally available, including threat intelligence, geo-location objects, address groups, and local IP ranges.

Google released released the Secure AI Framework to help collaboratively secure AI technology.

Google Workspace is enabling the use of passkeys as a simpler and safer alternative to passwords to sign-in to Google Accounts.