Trying to find the 2-3 vulnerabilities that really matter when you are slammed with thousands is a tough challenge.   #defend

Set sail on a secure journey through Google Cloud Platform with built-in and open-source auditing tools.   #gcp   #monitor

Post explaining root causes and mitigating actions against Cloud-Squatting.   #attack

If you publicly host large data files on AWS S3 and pay for AWS transfer costs, you may be vulnerable to a "Denial of Wallet" amplification attack.   #attack   #aws

Semperis researchers have discovered Silver SAML: a new application of Golden SAML that can be exploited in Entra ID and without AD FS.   #attack   #azure

Learn about the etcd metrics that can help you understand the health and performance of your clusters.   #kubernetes   #monitor

With Global Secure Access enabled access to the Microsoft 365 services such as SharePoint/OneDrive will be recorded in the EnrichedOffice365AuditLogs.   #azure   #monitor

CI/CD for IaC on multiple orchestrators.

Cirrus is a command-line tool written in Python to facilitate environment access and evidence collection across Google Cloud.

An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications. You can also refer to the companion blog post.

Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker.

A GitHub Action to suggest removal of non-organization members from CODEOWNERS files.

A streamlined process for tracking and analyzing Amazon CodeWhisperer usage events.

This blog post provides architectural guidance on AWS CloudHSM crypto user credential rotation and is intended for those using or considering using CloudHSM.

Post introducing the new dashboards and delve into a few use cases to help you gain better visibility into the overall security of your applications using AWS WAF and make informed decisions based on insights from the dashboards.

How to configure an IAM OIDC identity provider to establish trust with a Microsoft Entra ID tenant.

Google's new report outlines principles and approaches for strengthening security through design.

With Change Analysis, you can now see who initiated the change and with which client that change was made, for changes across all your tenants and subscriptions.

A detailed, step-by-step look at how it can help surface, contain, and mitigate a human-operated ransomware attack.