The AWS Nitro Enclaves platform lacks thorough documentation and mature tooling. So the Trail of Bits team decided to do some deep research into it to fill in some of the documentation gaps and, most importantly, to find security footguns and offer some advice for avoiding them.   #aws   #defend

An updated version of how to detect manual AWS actions from employees.   #aws   #monitor

TruffleHog Now Detects AWS Canaries without setting them off.   #aws   #monitor

An overview of Okta's fundamental components and dive into each part of its environment.   #explain   #iam   #saas

Post breaking down 10 key security configurations and features to ensure robust authentication and identity management within your Okta instance to help prevent future attacks.   #defend   #iam   #saas

The post analyzes an AWS ransomware incident focusing on attacker tactics.   #aws   #defend

This blog demystifies Azure's sometimes complicated logging methods, outlining which logs should be enabled and how to enable them.   #azure   #monitor

This article demonstrates one situation discovered during a recent cloud penetration test that allowed the team to pivot from a Microsoft cloud environment to on-premise machines via PSRemoting.   #attack   #azure

The Legit Security research team has found and reported a zero-click attack that allowed attackers to submit malicious code and access secrets.   #attack   #azure

The Trust on Cloud team discovered a way to allow the management of Azure OpenAI deployments via the Data Plane, resulting in the loss of major security controls.   #attack   #azure

Detect file content types with deep learning.

A Python library to access the GitHub REST API.

Proof of concept code for Datadog Security Labs referenced exploits.

Find your total usage on GitHub Actions.

Reads from existing public and private cloud providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration.

How to automate firewall rule management within the central firewall using distributed firewall configurations spread across multiple AWS accounts.

How to use the new managed data identifier in Amazon Macie to discover and protect copies of your Stripe API keys.

How to manage terraform state files in AWS, best practices on configuring them in AWS and an example of how you can manage it efficiently in your Continuous Integration pipeline in AWS when used with CodeCommit and CodeBuild.

You can use open-source runtime security platform Falco with Google Kubernetes Engine to monitor cluster and container workload security.

Azure Network Watcher VNet flow logs are now in Preview.

With NIS2, the EU expands the original baseline of cybersecurity risk management measures and reporting obligations to include more sectors and critical organizations.