How Slack automatically detects stolen session cookies.   #defend   #saas

This research introduces the basics of Client-Side Path Traversal, presenting sources and sinks for Cross-Site Request Forgery.   #attack

The Qualys Threat Research Unit (TRU) has discovered a Remote Unauthenticated Code Execution (RCE) vulnerability in OpenSSH's server (sshd) in glibc-based Linux systems. CVE assigned to this vulnerability is CVE-2024-6387.   #attack

Azure Policy is a popular service to ensure compliance. But did you know attackers can also leverage it to backdoor cloud resources?   #attack   #azure

The Grafana Loki Helm chart had a default configuration that could potentially lead to unintended requests to third-party S3 buckets under specific circumstances.   #attack   #saas

A deep into Amazon GuardDuty Malware Protection for S3, covering: scan modes, mitigations, reporting, devex, and pricing.   #aws   #defend   #explain

A page collecting the history of AWS service announcements and releases.   #aws

A walk through of the implementation process of a DFIR lab in AWS.   #build   #monitor

GitOps Toolkit controller that patches container image tags in Git.

A tool to show what AWS account and identity you're using.

A better dotenv, from the creator of dotenv.

A tool that simplifies the transactional log format provided by Microsoft.

Github Action for securing your Github workflows using egress policies.

How to use AWS CodeCommit to securely host Git repositories, AWS CodePipeline to automate continuous delivery pipelines, AWS CodeBuild to build and test code, and Amazon CodeGuru Reviewer to detect potential code defects.

This allows you to create CloudShell environments in a VPC, which enables you to use CloudShell securely within the same subnet as other resources in your VPC without the need for additional network configuration.

With the introduction of trusted identity propagation, applications can now propagate a user's workforce identity from their identity provider (IdP) to applications running in AWS and to storage services backing those applications, such as S3 or Glue.

AWS revealed an initial roadmap of services that will be available in the AWS European Sovereign Cloud.

GCP's Sensitive Data Protection (SDP) discovery service now supports Cloud Storage, joining BigQuery, BigLake, and Cloud SQL.