Post explaining in detail how memory analysis works and how it can be used on any GKE node in production today.   #gcp   #kubernetes   #monitor

A thorough introduction which provides a step-by-step guide to implementing DevSecOps in a CI/CD pipeline.   #ci/cd   #defend

An attempt to document CloudTrail events that are "interesting" for incident responders or detection engineers.   #aws   #monitor

You can use any Cloudflare protected site to retrieve your external IP address, thanks to a script offered by the CDN.   #attack   #cloudflare

As an incident responder, walk through how we can investigate and resolve an ongoing attack targeting CloudGoat's vulnerable Lambda scenario.   #attack   #aws   #defend

Unlike providers, modules do not benefit from the cryptographic guarantee provided by the Dependency Lock File, resulting in potential security threats.   #attack   #terraform

Containers share the same kernel and potential vulnerabilities can pose risks to the host and other containers. Implementing security measures like namespace partitioning, control groups, seccomp, AppArmor, SELinux, and vulnerability scanning can help mitigate these risks.   #containers   #defend

An implementation flaw discovered in Microsoft Azure AD OAuth applications that, when exploited, could lead to full account takeover.   #attack   #azure

Google's Project Oak is a research effort that relies on the confidential computing paradigm to build an infrastructure for processing sensitive user data in a secure and privacy-preserving way.   #announcement   #supply-chain

HashiCorp Vault 1.14 includes the Vault Secrets Operator GA, ACME PKI, and a new OpenLDAP secrets engine.   #announcement   #hashicorp   #vault

The principle of minimalism in engineering, where your default should be the lowest-common denominator of what you actually need.   #strategy

Escalate your SSRF vulnerabilities on Modern Cloud Environments.

You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework.

A threat modeling tool to help reduce time-to-value when threat modeling.

An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.

Post exploring policy-based access control (PBAC) and how it can be used in application development using Amazon Verified Permissions.

Amazon Inspector now offers the ability to export a consolidated Software Bill of Materials (SBOMs) for all Amazon Inspector monitored resources across your organization in industry standard formats, including CycloneDx and SPDX.

This new capability expands the existing MFA functionality by introducing additional options such as FIPS-validated security keys.

With support for front-end mutual TLS (mTLS), you can now offload client certificate authentication using External HTTPS Load Balancing.

New features and services come to Assured Workloads, which can help organizations achieve and maintain compliance around the world without refactoring.

This learning path helps AWS professionals translate their existing AWS knowledge to Google Cloud knowledge, while also preparing them for the Professional Google Cloud Architect Certification.

This guide provides the detailed instructions and technical artefacts required to stand up a Google Cloud architecture compliant with the 14 Controls of the EDMCouncil Cloud Data Management Capabilities (CDMC).