Snyk Security Labs Team has identified four container breakout vulnerabilities in core container infrastructure components including Docker and runc, which also impacts Kubernetes.   #attack   #containers   #kubernetes

An AWS incident response story, including the techniques used by the threat actor.   #attack   #aws   #monitor

Millions of businesses use Stripe's payment processing platform everyday. What could happen if a Stripe API key is leaked (or stolen)?   #attack   #saas

How Mercari's Security team approached the challenge of reviewing user access permissions in Okta, while dealing with legacy configurations and practices.   #defend   #saas

This blog uncovers two vulnerabilities potentially allowing to gain Remote Code Execution on a Jenkins instance.   #attack   #ci/cd

Security researchers have discovered a new Google Kubernetes Engine misconfiguration that could allow attackers with a basic Gmail account to take control of a Kubernetes (k8s) cluster.   #attack   #gcp   #kubernetes

Post analyzing how using Azure Arc as a persistence vector would work, and what kind of logs it would generate on the host.   #attack   #azure   #monitor

Oracle Cloud details the rise and evolution of DDoS attacks, plus how scalable cloud architecture can mitigate the slew of malicious traffic.   #defend

A dependency confusion is a supply chain attack where an attacker is able to poison the build by forcing the build system to retrieve his malicious dependency somewhere on the internet instead of the legitimate internal dependency.   #attack   #ci/cd

Post that tries to classify IAM Roles or IAM User candidates for an attack.   #aws   #iam

How can IAM identities escalate privileges to access customer-managed KMS keys protected by a key policy?   #attack   #aws   #iam

How to use TruffleHog scan git for exposed secrets.   #ci/cd   #defend

Visualize and explore IaC. Create and share notes in VS Code. Sync notes and findings in real-time with friends. You can also refer to the companion blog post.

Debug your GitHub Actions via SSH by using tmate to get access to the runner system itself.

Fast and customizable vulnerability scanner For JIRA.

A Post-exploitation Toolset for Interacting with the Microsoft Graph API.

Set up GitHub Actions to deploy to AWS.

How to export a consolidated SBOM for the resources monitored by Amazon Inspector across your organization in industry standard formats, including CycloneDx and SPDX.

This workshop simulates unauthorized data deletion events on an Amazon RDS instance and walks through some of the detection mechanisms employed by the AWS CIRT (Customer Incident Response Team) to respond to such security events.

Custom Organization Policies is now generally available. The powerful new extension to Org Policies can create granular resource policies to address cloud governance requirements.

Automate your Detection Engineering workflows by building a CI/CD pipeline to deploy & manage detection rules in Chronicle Security Operations.

You can now disable SSH for AKS to reduce the attack surface on your cluster.

Cross region for Backup vault using Azure Backup is now generally available.

You can now bring your own certificates and keys to use with Istio add-on for signing workload certificates for improved security.