Money, secrets and mass exploitation: This research unveils a quarry of sensitive data stored in public AMIs. Digging through each AMI they managed to collect 500 GB of credentials, private repositories, access keys and more.   #attack   #aws

A post covering defense evasion strategies from MITRE's ATT&CK Matrix.   #defend   #monitor

On April 26, 2024 Okta reported observing a large scale credential stuffing attack that shares infrastructure with a campaign previously reported by Cisco Talos.   #attack   #saas

How to set up audit alerts and monitoring for manual actions in EKS resources, such as ClusterRoleBinding or Secret creation or deletion.   #aws   #build   #kubernetes   #monitor

A step-by-step guide on implementing mTLS for AWS Application Load Balancer using an open-source cloud CA.   #aws   #build

A small program that can be used to create and approve a Client Signing Request in a Kubernetes cluster and then create a new kubeconfig based on that approved certificate.

Okta Verify and Okta FastPass Abuse Tool.

The Helm chart you can use to install any of your applications into Kubernetes/OpenShift.

A utility to detect various technology for a given IP address.

A small utility that cleans up your AWS AMIs.

AWS introduced a new EC2 API to retrieve the public endorsement key (EkPub) for the Nitro Trusted Platform Module (NitroTPM) of an Amazon EC2 instance.

Four different high-level approaches for creating an organizational multi-Region failover strategy.

This paper explains Google's approach to securing their AI supply chain using provenance information and provides guidance for other organizations.

At RSA, Google announced AI innovations across the Google Cloud Security portfolio, including Google Threat Intelligence, and the latest release of Google Security Operations.

Google Threat Intelligence includes Gemini in Threat Intelligence, their AI-powered agent that provides conversational search across their vast repository of threat intelligence, enabling customers to gain insights and protect themselves from threats faster than ever before.

This blog post covers various strategies and methodologies to help understand the scope and complexity of how threat actors' manoeuvre within Azure subscriptions.

You can now enable Customer Managed Keys (CMK) on existing Azure Cosmos DB accounts.