A snapshot of the security architecture OpenAI designed to protect their research infrastructure and model training.   #defend   #strategy

Several innovative new features that every enterprise SaaS application needs to embrace to protect users in the era of post-authentication attacks.   #defend   #saas

A guide to logging at each cluster layer with a focus on AuditPolicy.   #kubernetes   #monitor

A data theft and extortion campaign targeting organizations utilizing Snowflake databases is an emerging threat posed by a threat actor.   #attack   #saas

Still, only 2% of GitHub repositories pins an Action to a full length commit SHA.   #ci/cd   #defend

A "working as intended" branch protection bypass that allows for protected credential exfiltration.   #attack   #ci/cd

S3 is weirder than you think. Make sure you know all the quirks before they turn into vulnerabilities in your AWS infrastructure.   #attack   #aws   #explain

Blog analyzing the modern practice of Phishing Tests as a cybersecurity control as it relates to industry-standard fire protection practices.   #strategy

Wasn't RASP supposed to save us? This post walks through the history and challenge of the RASP market, and looks at whether the new ADR acronym will bring any better luck.   #defend   #strategy

Kubernetes controller to enable automatic kubelet CSR validation after a series of (configurable) security checks.

A verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies you create.

A tool for generating files and folders ('boilerplate') from a set of templates.

Validate AWS CloudFormation templates against AWS Well-Architected Sustainability Pillar best practices.

You can now view your logs interactively in real-time as they're ingested via AWS CLI or programmatically within your own custom dashboards inside or outside of AWS.