Has reliance on SSO left orgs with a single point of exploitation? Doyensec's latest research explores various IdP compromise scenarios and their impacts, as well as how to harden and detect these attacks in Teleport installations.   #attack   #defend   #saas

Virtual machines (VMs) are a significant attack target. Focusing on three major CSPs, this research summarizes the conditions for possible VM attack paths.   #attack   #aws   #azure   #gcp

Google engineers discuss how to actually migrate to Post-Quantum Cryptography and explore the role cryptographic agility and key rotation play in this process.   #build   #strategy

The AnyRun team provides an interest postmortem and the first results of their investigation into the recent incident and share a full account of the events.   #defend   #monitor   #saas

A post expanding on Nick Frichette's discovery of enumerable OIDC providers in AWS using the known_aws_accounts dataset.   #attack   #aws

An analysis of the thousands of public SSM Command documents, including identification of secret leakage.   #attack   #aws

By preferring short-lived tokens over long-lived ones and enforcing policies with tools like Kyverno, organizations can significantly reduce the risk of token-based security incidents.   #defend   #kubernetes

CLI to prevent malicious Terraform Providers from being executed.

The slimest and simplest Function As A Service.

Wut.dev is a client-side browser for AWS Organizations and SCPs.

Protect against subdomain takeover in GCP.

Cloud Commotion intends to cause chaos to simulate security incidents.

Dorothy is a tool to test security monitoring and detection for Okta environments. You can also refer to the companion blog post.

An overview of the new IAM condition keys available with ACM.

By redirecting the IdP token endpoint in the Cognito user pool's external OIDC IdP configuration to a route in an API Gateway, you can use Lambda functions to customize the request flow between Cognito and the IdP.

Cloud KMS Autokey incorporates recommended practices that can significantly reduce the toil associated with managing your own encryption keys.