How to start doing AWS security research. What you need to learn, who you should learn from, and what you should think about along the way while not actually doing research.   #strategy

Thanks to the "Bring Your Own Builder" framework, it's now possible for maintainers of existing GitHub Actions to start producing SLSA Level 3 provenance attestations.   #build   #ci/cd   #supply-chain

KMS aliases are a great way to make KMS keys more convenient. But permitting one account to use an KMS key in another account through a KMS alias can be difficult. This article explains why, and how to solve the problem correctly.   #aws   #build

Research on various techniques to bypass default falco ruleset.   #attack   #falco

In Azure environments, guest users are the go-to option when giving access to a user from a different tenant. However, this could prove to be a costly mistake.   #attack   #azure

Five low-cost and easy to implement measures with high-impact to prevent or limit the impact of an incident in Azure: setup budget quotas, restrict app registration, prevent subscriptions from entering your tenant, ingest audit logging, and limit external collaboration.   #azure   #defend

Grafana signing keys have been exposed. Be sure to update their trusted certificate if you are a Grafana user.   #attack

Applications, such as Kyverno, running within a Pod's containers can utilize the AWS SDK to make API requests to AWS services by leveraging AWS Identity and Access Management (IAM) permissions.   #aws   #build   #containers

Stratus Red Team now features 3 attack techniques to simulate ransomware activity.

A demo to show how you can use Cedar in Python, with a simple Flask based web application.

Terraform templates that help you learn about common Azure security issues. Each template is a vulnerable environment, with some significant misconfigurations.

An offensive and defensive security toolset for Microsoft 365 Power Platform.

K8s Network Policy Migrator is a tool to migrate Calico or Cilium custom network policies to Kubernetes native network policy.

Post showing how Detective automatically consolidates multiple security findings into a single security event, and how finding groups visualizations help reduce noise and prioritize findings that present true risk.

How to automate the validation of IAM policies by using a combination of the IAM Policy Validator for AWS CloudFormation (cfn-policy-validator) and GitHub Actions.

At Next'23, Google announced new security features of Duet AI, as well as bringing innovation and enhancements across their security operations and cloud platforms.

Google is trying to introduce new way to cloud for developers that favors "shifting down" over "shifting left", for a cloud experience that is easy, fast, and secure.

Announced at Next'23, Mandiant Hunt integrates frontline intelligence and expertise into Chronicle Security Operations to search for undetected attacks.

Post walking through a few scenarios of misconfigured AWS Cloud resources and how Microsoft Defender for Cloud can help proactively identify misconfigurations and allow security teams prevent risks and remediate quickly.

Post diving into how Defender for APIs augments the security offered by Azure Web Application Firewall (Azure WAF) and Azure API Management (APIM).

You can now encrypt traffic transmitted between applications within an environment using mTLS.

AFS is seeking a Principal DevSecOps Engineer to be responsible for building and setting up new development tools and infrastructure utilizing knowledge in continuous integration, delivery, and deployment (CI/CD), Cloud technologies, Container Orchestration and Security.

Palo Alto is looking to grow their Cloud Security/Virtualization team, tasked with building their next-generation cloud security offerings on public and private cloud.

Rackspace Cyber Defence is looking for an Indian based Security Engineer, with a specialism in Cloud Security to support Rackspace's strategic customers.