How to determine the right point in time to harden a role which results in guidance on where to invest your time.   #aws   #iam

How would you feel if an attacker could read your AWS resource tags? Turns out they can!   #attack   #aws

A post looking at using an AWS Lex Service chatbot as a persistence method for a red teamer.   #attack   #aws

The Wiz research team unpacks the security implications of the new EKS access and identity management features and recommends best practices when using them.   #aws   #iam   #kubernetes

If you're looking for a high value, low effort way to boost your security program, analytics on cloud risk data is a fantastic contender. If you have Snowflake and you use Wiz then look no further.   #strategy

Commando Cat is a novel cryptojacking campaign exploiting Docker for Initial Access. The campaign deploys a credential stealer payload, targeting Cloud Service Provider credentials (AWS, GCP, Azure).   #attack   #aws   #azure   #gcp

The Orca Security Research Pod discovered three vulnerabilities in Azure HDInsight that could lead to privilege escalation and denial of service.   #attack   #azure

Mixing work and personal contexts can provide a better employee experience and increased security risk. Here we look at specific scenarios, risks, and available controls to help startups find balance.   #saas   #strategy

Octoherd allows you to run a script against multiple repositories in parallel.

A Kubernetes manifests validator, with support for Custom Resources.

Terraform module to deploy Atlantis on AWS Fargate.

Kubernetes Security Training Platform - focusing on security mitigation.

An S/MIME signing utility for use with Git.

Amazon updated the AWS Free Tier for Amazon Elastic Compute Cloud, 12 month free, to include 750 hours of public IPv4 address usage per month.

A Case Study Presented by CodeWhisperer Customizations.

How to import an asymmetric key into AWS KMS from CloudHSM by using the CloudHSM CLI.

This iteration of the Google Cloud Threat Horizons Report explores top cloud threats and security concerns for 2024, including credential abuse, cryptomining, ransomware, and data theft.

This solution guide covers the process and the guidelines to deploy a FedRAMP-aligned three-tier workload on Google Cloud using Assured Workloads.

A notebook that guides you through an investigation experience to understand the Azure WAF incidents in Microsoft Sentinel, identify false positives, and automatically apply exclusions to WAF rules to address the false positives.