Slides from a talk that shares a theory of how to incrementally and collaboratively move a cloud-native organization to Zero Touch Prod.   #build   #strategy

An article which explores a newly identified technique to bypass Okta's passwordless MFA solution, providing a detailed technical analysis of the method and a demonstration, as well as strategies for mitigation and detection.   #attack   #defend   #saas

Post exploring a campaign targeting AWS Secrets Manager, AWS S3 and AWS S3 Glacier.   #attack   #aws

Kubernetes' 'allowPrivilegeEscalation' is a useful but poorly understood security hardening setting. This post dives into how it works and debunks some common myths about it.   #attack   #explain   #kubernetes

This blog outlines three vulnerabilities surfaced from how Google Cloud handles user-associated HMAC keys.   #attack   #gcp

30 minutes. 30 minutes is how long it took to develop, publish, and polish a Visual Studio Code extension that changes your IDE's colors while leaking all your source code to a remote server.   #attack   #saas

What might the history of signature-based threat detection tell us about the future of signature-based approaches and the evolution toward behavioral detection and response in the cloud?   #monitor

Debugging facilities can always be interesting for attackers, and in general for security, so Rory McCune decided to take a look at Kubernetes support for Profiling, and where it could be a risk to cluster security.   #attack   #kubernetes

RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and add reviewers. You can also refer to the companion blog post.

Kpexec is a kubernetes cli that runs commands in a container with high privileges.

A terraform module and Go library for deploying probers to Google Cloud Run.

A reference implementation for building a Lambda container image and deploying it to an AWS account.

Enumeration/exploit/analysis/download/etc pentesting framework for GCP.

How to enhance the security of managed node groups using a CIS Amazon Linux benchmark for Amazon Linux 2 and Amazon Linux 2023.

An alternative approach to implement tenant isolation with ABAC by using the AWS STS AssumeRoleWithWebIdentity API operation and https://aws.amazon.com/tags claim in a JSON Web Token (JWT).

How to prioritize riskiest misconfigurations across your multicloud environment, all inside of a single dashboard by using Defender CSPM.