Let's try all the different S3 encryption options, see why it's more like access control than encryption, and why that matters.   #aws   #explain

Permiso started a series of blog posts that will walk through some of MITRE's ATT&CK Matrix, diving deep into cloud-based techniques. The first post of this series covers Cloud Administration Command.   #attack   #azure   #defend

Azure, AWS, and Gcloud CLI commands may expose sensitive info on GitHub Actions.   #attack   #ci/cd

Writeup on how it was possible to leverage a RCE on a machine joined to Microsoft's Active Directory domain with the privileges of a Microsoft Senior Developer.   #attack   #ci/cd

This vulnerability allowed anyone to steal secrets managed by AppFlow in any AWS account.   #attack   #aws

The setting of the searchable bit for other users on /var/lib/docker/ and child directories can allow for a low-privileged attacker to gain access to various containers' filesystems.   #attack   #containers

DataDog analyzed data from thousands of applications and cloud environments to assess trends in application security posture and adoption of DevSecOps best practices.   #strategy

The recent attempted XZ Utils backdoor (CVE-2024-3094) may not be an isolated incident as evidenced by a similar credible takeover attempt intercepted by the OpenJS Foundation.   #defend   #supply-chain

SCALIBR (Software Composition Analysis Library) is an extensible file system scanner used to extract software inventory data (e.g. installed language packages) and detect vulnerabilities.

Maester is a PowerShell-based test automation framework designed to help you monitor and maintain the security configuration of your Microsoft 365 environment.

Ludus is a system to build easy to use cyber environments for testing and development.

A tool for in-depth analysis of container checkpoints.

A tool to help security teams easily understand log events generated by AWS console activity. You can also refer to the companion blog post.

Shortcut links take an authenticated user to a desired AWS Management Console destination, such as an S3 bucket details page, in a specific account, and with a specific permission set already assigned to the user.

You can now protect AWS Lambda URL origins by using CloudFront Origin Access Control (OAC) to only allow access from designated CloudFront distributions.

You can now customize the frequency of rotation period between 90 days to 7 years as well as invoke key rotation on demand for customer managed KMS keys.

A solution to send policy violations from PaC solutions using Kubernetes policy report format (for example, using Kyverno) or from Gatekeeper's constraints status directly to AWS Security Hub.

A Zero Trust activity-level guidance for DoD Components and DIB partners implementing the DoD Zero Trust Strategy.