CloudSecGPT is a custom-built generative AI model that specializes in cloud security. Disclaimer: I wrote this post.   #announcement

How the Figma security engineering team leveraged commit signatures and Okta Device Trust certificates to protect GitHub release branches.   #ci/cd   #defend

Best practices for configuring AWS security services. From the AWS team.   #aws   #defend

This article outlines how as an adversary you can use an AWS service to exfiltrate data.   #attack   #aws

A lack of security controls of the underlying Open Source Software (OSS) managed solution allows an attacker with knowledge of the Dataproc IP address to access it without any authentication.   #attack   #gcp

Post outlining the rise of Adversary in The Middle (AiTM) attacks in compromising Microsoft 365 environments, bypassing MFA, and highlights the severe impact due to the reliance on Microsoft 365 SSO for various services.   #attack   #microsoft   #saas

How to tackle character limits in SCPs.   #aws   #build

The threat actors misused the OAuth applications with high privilege permissions to deploy virtual machines (VMs) for cryptocurrency mining, establish persistence following business email compromise (BEC), and launch spamming activity using the targeted organization's resources and domain name.   #attack   #saas

GitHub shares insights about how they run a scalable vulnerability management program built on top of GitHub.   #build   #ci/cd

Serverless transparency log.

This repo contains IOC, malware and malware analysis associated with AWS cloud. You can also refer to the companion blog post.

Uncover the true IP address of websites safeguarded by Cloudflare.

DNS Exfiltration tool for stealthily sending files over DNS requests.

A tool to automatically give AWS IAM users access to your Kubernetes cluster.

Flowpipe is a cloud scripting engine, providing automation and workflows to connect your clouds to the people, systems and data.

You can now view your logs interactively in real-time as they're ingested within your own custom applications or dashboards inside or outside of AWS.

How to automate Config and Control Tower checks.

New IAM groups authentication in Cloud SQL simplifies granting/revoking access to database objects at scale.

This post explores how to use the Data Export API, and effectively query exported raw logs using SQL statements in GCP BigQuery.

An article that describes the process for migrating from service account keys to more secure authentication methods.

Active Directory Certificate Services (AD CS) is commonly used in Active Directory environments to manage Public Key Infrastructure (PKI) and it plays a critical role in instrumenting digital certificates.