Levels.fyi has released their 2023 Mid-Year Report, which provides insights into tech industry salaries and trends.   #strategy

The Orca Research Pod discovered Bad.Build, a vulnerability in the Google Cloud Build service that enables attackers to escalate privileges and gain unauthorized access to code repositories and images in Artifact Registry.   #attack   #gcp

The article discusses a security vulnerability in the Amazon VPC CNI plugin, used by Amazon EKS. The flaw allows an attacker to move laterally to other VPCs in the AWS account.   #attack   #aws   #kubernetes

An analysis of the findings published by a security researcher last month, claiming to have uncovered zero days in thousands of EKS cluster.   #attack   #aws

Learn how Istio's authentication and authorization policies enhance security in microservices. Get a comprehensive guide to implementing robust access control.   #explain   #kubernetes

Post discussing alternative solutions to using access keys.   #aws   #defend   #iam

Post explaining how to see container deployments as a precursor to building secure production infrastructure using Kubernetes.   #explain   #kubernetes

Why it's essential to monitor non-standard pods and containers, including static pods, mirror pods, init containers, pause containers, and ephemeral containers within your Kubernetes environment.   #kubernetes   #monitor

Orca Security shares their experience in building a petabyte-scale data lake using Apache Iceberg and AWS services.   #aws   #build   #strategy

A small module that creates a Cloudflare Pages application with Zero Trust Authentication, where only the "allowed_emails" are allowed to access the application.

Monitors public commits on Github and package releases on NPM, looking for leaked secrets. You can also refer to the companion blog post.

A PowerShell script that leverages the Microsoft Graph SDK to orchestrate the setup of Azure Active Directory tenants, populating them with diverse entities while also introducing common security misconfigurations to create vulnerable tenants with multiple attack paths.

A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration.

GitHub Actions Importer helps you plan and automate the migration of Azure DevOps, CircleCI, GitLab, Jenkins, and Travis CI pipelines to GitHub Actions.

With Amazon S3 Inventory, you can now easily review your access control lists (ACLs) on all of your objects to simplify review of access permissions.

How to use EventBridge, Lambda, Step Functions, SNS, and S3 to scan AMIs and generate Amazon Inspector finding reports to help ensure that your AMIs are scanned for known vulnerabilities and updated prior to deployment.

How to set up and optimize the AWS Config recorder when it is used for controls in Security Hub.

Post discussing how to protect APIs by building a perimeter protection layer with CloudFront, WAF, and Shield and putting it in front of API Gateway endpoints.

With AWS Certificate Manager (ACM), you can simplify certificate lifecycle management by using event-driven workflows to notify or take action on expiring TLS certificates in your organization.

Blog explaining the different types of NEGs in GCP, and their support for GCP Load Balancers.

How Google Cloud Users can Secure their Cloud Run Deployments using Approved Artifact Registry repositories and Binary Authorization.

Customers will be able to purchase and seamlessly deploy ESUs through Azure Arc in on-premises or multicloud environments, right from the Azure portal.

You can now use your own keys to encrypt your ephemeral OS disks.

Microsoft will include access to wider cloud security logs at no additional cost.

The Product Security team at AWS is looking for an engineering manager in California.

The Security team at Figma is looking for an Engineering Manager to lead a group of engineers to build systems and solutions to protect Figma and their users.

ITV is looking for Cloud Security Engineers to join their Security Engineering team in London.

FNZ Group is looking for a Cloud Security Engineer to support their growing public cloud footprint.