Two new archetypes for bypassing AWS CloudTrail through certain non-production endpoints with API actions that access account-level information and through API calls which generate multiple events in CloudTrail.   #attack   #aws

Post disclosing new techniques to steal sensitive data in localStorage (like API keys and passwords) via subdomain takeover.   #attack   #saas

Artifact Attestations allows project maintainers to effortlessly create a tamper-proof, unforgeable paper trail linking their software to the process that created it.   #ci/cd   #supply-chain

Post detailing the research around DocumentDB, and a deep dive on a public exposure impacting millions of customers of a publicly traded company.   #attack   #aws

Netskope Threat Labs is tracking multiple phishing campaigns that abuse Cloudflare Workers. One campaign uses HTML smuggling, a detection evasion technique often used for downloading malware, to hide the phishing content from network inspection.   #attack   #cloudflare

Do you believe the annual cost of $100,000 for a CNAPP means you will only spend $100,000?   #strategy

Attackers are using Adversary in the Middle (AitM) phishing toolkits to bypass MFA. This post looks at what AitM is, how it works, and what you can do about it.   #attack   #saas

Practical resources for offensive CI/CD security research.   #attack   #ci/cd

Clean up Kubernetes yaml and json output to make it readable.

Azure Red Team tool for graphing Azure and Azure Active Directory objects.

Secretgen-controller provides CRDs to specify what secrets need to be on Kubernetes cluster.

The first of a two-part series that will demonstrate the value of Amazon Security Lake and how you can use it and other resources to accelerate your incident response (IR) capabilities.

How you can analyze access activity in your organization by using the CloudTrail logs to evaluate impact of your data perimeter controls and perform troubleshooting.

How Parametric implemented their Audit Surveillance Data Lake on AWS with purpose-built fully managed analytics services. With this solution, Parametric was able to respond to various audit requests within hours rather than days or weeks.

A deeper look at how the global front end solution improves the performance, protection, and scalability of their internet-facing web services.