Microsoft has mitigated an attack by a China-based threat actor Microsoft tracks as Storm-0558 which targeted customer emails. Storm-0558 primarily targets government agencies in Western Europe and focuses on espionage, data theft, and credential access.   #attack   #azure

In this paper, researchers analyzed 337,171 images from Docker Hub and 8,076 other private registries unveiling that 8.5% of images indeed include secrets.   #containers   #defend

Learn how Falco detects failed/misconfigured PCI/DSS Controls.   #containers   #monitor

Post exploring the implementation of OPA and Infracost in a Terraform project, featuring a basic AWS setup with EC2 and RDS resources.   #build   #opa   #terraform

A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples.   #monitor

Article which highlights improvements in areas such as image layout, content addressability, and distribution manifests, aiming to enhance security, interoperability, and performance in container image management.   #announcement   #containers

The article discusses how to migrate from PodSecurityPolicy (PSP) to Kyverno, a Kubernetes policy engine. It explains the challenges of migrating and provides step-by-step instructions on how to perform the migration.   #defend   #kubernetes

How to use the Terraform Cloud/Enterprise provider to coordinate applies and destroys on downstream workspaces in Terraform Cloud.   #explain   #terraform

Passkeys are now available in public beta. Opting in lets you upgrade security keys to passkeys, and use those in place of both your password and your 2FA method.   #announcement   #ci/cd

Python bindings for the Cedar Policy project.

An IAM policy statement parser and query tool aims to simplify the process of collecting and understanding permission policy statements for users and roles in AWS IAM. You can also refer to the companion blog post.

A dashboard that shows AWS IAM data per service.

Host your own Helm Chart Repository.

This version introduce include keyword which allow you to use an existing Compose configuration as part of your Compose stack.

You can now define GitHub Actions steps directly in the BuildSpec and run them alongside CodeBuild commands.

How to detect unused IAM permissions and update them to move safely toward a least privilege environment.

You can use these features to manage controls across standards and to consolidate findings, which can help you significantly reduce finding noise and administrative overhead.

Microsoft is rebranding Azure AD to Microsoft Entra ID.

You can now encrypt more than 2000 secrets when running your AKS cluster with KMS v2 enabled.

Set BGP community tags on traffic sent from Azure to on-premises over ExpressRoute, enabling a greater variety of hybrid network designs.

AWS is looking for an experienced Security Engineer to assess and holistically test incoming submissions while driving resolution of overarching trends.

Chime is hiring for Senior Infrastructure Security Engineers in San Francisco.

The role will support the daily operation of our threat intelligence program, specifically focused around automation and building out systems like the threat intelligence platform and malware analysis pipeline.

The Application and Infrastructure Security (AIS) team conducts risk discovery, security strategy development and execution, identification and execution of high impact security initiatives across Netflix applications and infrastructure.