Post discussing Kubernetes logging and the best practices for logging in a Kubernetes environment.   #explain   #kubernetes   #monitor

The AWS Security Specialty Exam (SCS-C01) got a makeover and will be retiring next week. The new and improved SCS-C01, updated with new content and an added domain is now available.   #aws   #explain

Granting a user the unconstrained permission to update Lambda function code in an AWS account can have unexpected, possibly severe, consequences under certain conditions that might not be obvious on first pass.   #attack   #aws   #iam

More and more engineers are considering integrating Cedar into their own systems for authorization, but what do policy authors need to consider to avoid unexpected outcomes?   #aws   #explain   #iam

AquaSec identified infrastructure in early stages of testing and deployment of a cloud worm, designed to deploy on exposed JupyterLab and Docker APIs.   #attack   #containers

Five problems you'll likely encounter when trying to verify signatures at deployment time in Kubernetes.   #defend   #kubernetes

1Password announced that 1Password Service Accounts are now generally available. Service accounts offer a secure, automated way to access infrastructure secrets from CI/CD workflows.   #announcement   #ci/cd

Post introducing the concept of Confidential Computing (CC) to improve any computing environment's security and privacy properties, especially Kubernetes.   #explain   #kubernetes

Elastic introduce sysgrok, a research prototype investigating how large language models (LLMs) can be applied to problems in the domains of performance optimization, root cause analysis, and systems engineering.   #announcement

The 1Password Connect Kubernetes Operator provides the ability to integrate Kubernetes Secrets with 1Password.

GitHub Action to run the Docker Scout CLI as part of your workflows.

Sharable Config Presets for Renovatebot.

An AppEngine application that lets you manage just-in-time privileged access to Google Cloud projects.

A policy-as-code tool that provides analysis for Multi-Cloud and SaaS environments.

Three ways to improve incident response in the cloud, based on insights from the AWS re:Inforce 2023 conference. The strategies include automating response processes, leveraging cloud-native tools, and adopting a proactive approach to security.

Post discussing S3 Bucket Policies, IAM Policies, and their different use cases.

The Amazon GuardDuty EKS Runtime Monitoring eBPF security agent now supports EKS workloads that use the Bottlerocket operating system, AWS Graviton processors, and AMD64 processors.

Workload Identity Federation can be integrated with external providers, such as Gitlab, GitHub actions and Terraform Cloud.

You can now ingest data directly from an event hub into a Log Analytics workspace.

Table-level access allows you to let specific people read data only from a specific set of tables. It applies both for workspace-context and resource-context.

Protect the sensitive data getting stored in your Web Application Firewall (WAF) logs using log scrubbing on Azure's regional Web Application Firewall running on Application Gateway.

Azure Virtual Network encryption allows you to seamlessly encrypt and decrypt traffic between Azure Virtual Machines.

Robinhood Platform Security is looking for a cloud security domain expert to build security controls on AWS.

In this role, you will collaborate cross-functionally with teams across the company to design and build infrastructure, technical controls, and programs that strengthen our security and privacy practices.

KPMG currently have opportunities for Consultants to Directors across their Cyber Cloud Security Architect & Cyber Defence divisions.