Some lateral movement techniques observed in the wild within cloud environments.   #attack   #aws   #azure   #gcp

What can an attacker do if they can edit Terraform state? The answer should be 'nothing' but is actually 'take over your CI/CD pipeline'.   #attack   #ci/cd   #terraform

Post reviewing the current state of the technology from a security standpoint and discussing some critical aspects of passkey implementation.   #explain

Post going through native tools that we can utilize to centralize compliance, logging, monitoring, and user & access management through multi-accounts in an organization.   #aws   #defend

Scott Piper checked in on "The state of ABAC on AWS" back in 2020. Things are only a little better.   #aws   #explain   #iam

Attackers with Reader access to Batch can: read sensitive data from job outputs and gain access to SAS tokens for Storage Account files attached to the jobs.   #attack   #azure

Entra ID has a built-in role called "Partner Tier2 Support" that enables escalation to Global Admin, but this role is hidden from view in the Azure portal GUI.   #attack   #azure

A library for building fast, reliable and evolvable network services. You can also refer to the companion blog post.

Pipelined Query Language. You can also refer to the companion blog post.

The Python Risk Identification Tool for generative AI (PyRIT) is an open access automation framework to empower security professionals and machine learning engineers to proactively find risks in their generative AI systems. You can also refer to the companion blog post.

Living Off The Pipeline tools.

Sample code to deploy a website and a "public files" S3 bucket which can be loaded with any files an administrator wishes to publish publicly online.

This tool analyzes a given GitLab repository and searches for dangling or force-pushed commits containing potential secret or interesting information.

How to can export software bills of materials (SBOMs) for your containers by using an AWS native service, Amazon Inspector, and visualize the SBOMs through Amazon QuickSight.

How to plan and implement a proof of concept for Security Lake to help you determine the functionality and value of Security Lake in your environment.

With this release, AWS IMEs engage you within five minutes of an alarm trigger or in response to a critical support case you raise to AWS Incident Detection and Response.

This blog post provides recommendations that you can use to help improve resiliency in the unlikely event of disrupted availability of the global (now legacy) AWS Security Token Service (AWS STS) endpoint.

Post explaining the misconfigurations that could potentially allow a malicious actor to move laterally, and recommending protection methods that can help secure your Google Cloud environment.

There are no simple solutions to securing cloud credentials, but one way to get started is to stop using service account keys. Here's how.

The article discusses key considerations for designing a Google Cloud Landing Zone as part of cloud adoption, focusing on scalability, security, and governance to ensure a structured and efficient cloud environment.

Effective prompts give Copilot for Security adequate and useful parameters to generate valuable responses.