This article explores architectural issues within the Apache HTTP Server, highlighting several technical debts within Httpd, including 3 types of Confusion Attacks, 9 new vulnerabilities, 20 exploitation techniques, and over 30 case studies.   #attack

This article provides an overview of AWS networking concepts for network engineers, covering VPCs, subnets, route tables, Internet Gateways, NAT Gateways, and security groups.   #aws   #explain

Preventing anonymous privilege escalation via misconfigured OIDC roles: defensive strategies and AWS's improvements.   #aws   #defend

This article provides an overview of the most common attack vectors on GitHub workflows and recommendations on how to secure them.   #ci/cd   #defend

New research uncovers a potential attack vector on GitHub repositories, with leaked tokens leading to potential compromise of services.   #attack   #ci/cd

The impact of these vulnerabilities range between remote code execution (RCE), full-service user takeover (which might provide powerful administrative access), manipulation of AI modules, exposing sensitive data, data exfiltration and denial of service.   #attack   #aws

Post tracing a threat actor's steps through ransomware deployment, vertical (lateral) movement via AWS Systems Manager (SSM), and privilege escalation through IAM abuse.   #attack   #aws

The Wiz research team detected a phishing campaign targeting AWS accounts using fake sign-in pages.   #attack   #aws

YARA scanning, user-supplied rules, and Golang support. You can also refer to the companion blog post.

The TrailShark Capture Utility seamlessly integrates with Wireshark, facilitating the capture of AWS CloudTrail logs directly into Wireshark for near-real-time analysis. You can also refer to the companion blog post.

Generate datasets of cloud audit logs for common attacks. You can also refer to the companion blog post.

The TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).

Runs IAM policy linting and security checks against either a single AWS account or a set of member accounts of an AWS Organization.

Step-by-step solution to establish a Centralized Security Account that uses the AWS Secrets Manager service for securely storing your secrets in a central place.

Custom Org Policy and Policy Controller can help secure your GKE clusters and achieve governance and compliance at scale.