An opinionated guide on best practices that these vendors should follow to ensure an appropriate level of security when integrating with customers' AWS environments.   #aws   #build   #defend

Trail of Bits completed a comparative security assessment of authorization policy languages: Cedar, Rego, and the OpenFGA modeling language.   #explain   #opa

EclecticIQ analysts discovered ransomware operations by SCATTERED SPIDER targeting cloud infrastructures within the insurance and financial sectors.   #attack   #azure

This article discusses Netflix's use of eBPF to detect noisy neighbors in cloud environments. It explains their custom solution for identifying CPU-hogging processes and mitigating their impact on shared resources, improving overall system performance and reliability.   #build

Some of the most common security misconfigurations in AWS S3 buckets.   #attack   #aws

A blog about some pitfalls learned generating Kubernetes Custom Resources with "controller-gen" over the years, and how to do more rigid validation and defaulting with it.   #build   #kubernetes

This article discusses how attackers can exploit Microsoft applications to gain unauthorized privilege elevation in Active Directory environments, highlighting risks and providing mitigation strategies for administrators to protect against such threats.   #attack   #azure

This blog post walks through one of the newest CloudGoat scenarios, glue_privesc, where you will attempt to move through an AWS environment and perform privilege escalation against the Glue service in order to capture the flag.   #attack   #aws

Sample Go app repo with test and release pipelines optimized for software supply chain security (S3C). Includes Terraform setup for Artifact Registry on GCP with OpenID Connect (OIDC), so no need for service account keys or GitHub secrets.

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis.

A proxy sidecar to access Gemini models via OpenAI and Ollama APIs.

Build integrations that programmatically access your secrets in 1Password.

Google announced three major enhancements to the Google Cloud Backup and Disaster Recovery (DR) service: the new backup vault storage feature, a centralized backup management experience, and an integration within the Compute Engine VM creation experience.

New log scopes in Cloud Observability tools make it easier to find relevant log data for your environment.