An attacker who can get their malicious pipeline executing on a runner can steal information for other work executing on the same runner, and subsequently gain access to production systems.   #attack   #ci/cd

How to build a free alternative to Burp Collaborator using Cloudflare Workers and Discord.   #build   #cloudflare

An exploration of etcd exploitation in Kubernetes, demonstrating how compromised etcd access grants full control over clusters and nodes, emphasizing the critical need for robust etcd security measures.   #attack   #kubernetes

How to identify the ARN of a user/role from AWS IAM unique IDs, often seen in CloudTrail logs.   #aws   #explain   #iam

Presentation examining how JSON Web Token (JWT) caching works in corporate settings with Azure Active Directory (Azure AD) integration, including Azure AD Joined and Hybrid environments.   #attack   #azure

Post focusing on red team strategies for targeting Okta in initial access phases. It covers identifying Okta portals, setting up phishing infrastructure, evading Okta's behavioral detection, and prevention and detection recommendations for blue teams.   #attack   #saas

Aqua researchers found exposed Kubernetes secrets that pose a critical threat of supply chain attack to hundreds of organizations and OSS.   #attack   #kubernetes

Improve your GitHub Action's security posture by securing your source repository, protecting your maintainers, and making it easy to report security incidents.   #ci/cd   #defend

A solution which helps you deploy, update and stage your Web Application Firewalls while managing them centrally via AWS Firewall Manager.

A docker registry implementation in Workers that uses R2.

Open source Terraform module registry with UI, optional Git integration and deep analysis.

YouShallNotPass executes administrator specified checks on CI/CD pipelines to prevent unauthorized workflows from executing commands on sensitive systems. You can also refer to the companion blog post.

Lambda function that streamlines containment of an AWS account compromise.

Amazon S3 now allows you to enable S3 Object Lock for existing buckets and to enable S3 Replication for buckets using S3 Object Lock.

Recently, IAM launched two new condition keys: "aws:SourceOrgID" and "aws:SourceOrgPaths".

How to use preventative controls to help ensure that your resources are deployed within your VPC, so that you can effectively enforce the network perimeter controls.

AWS launched new IAM Identity Center APIs to manage user assignments to supported AWS and cloud applications.

You can now have two types of IAM Identity Center instances: organization instances and account instances.

Security Command Center (SCC) recently introduced two new features: Attack Path Simulation (APS) and Attack Exposure Scoring (AES).