Post which reviews different log types and unveils some tricks to optimize logging configuration without straining budgets.   #aws   #azure   #gcp   #monitor

Slides from a talk focusing on the problems you'll encounter scaling a cloud security program.   #strategy

A survey of approaches to scorecarding in security programs.   #strategy

This article isn't complaining about SSO-taxing vendors, but it covers how to implement similar security measures without such a centralized mechanism.   #iam   #saas   #strategy

False positive are a recurring issue when working with external scanning tools. This blog post discusses the most common types of false positives the AutoVM team at Google has observed in this context and provides instructions on how to identify them.   #defend   #process

When users create a private fork of a public repository and then commit data to the private fork, all of their private commits are publicly visible.   #attack   #azure

The Document AI service unintentionally allows users to read any Cloud Storage object in the same project and write to an attacker-controlled location.   #attack   #gcp

This article discusses a potential exploit in AWS Transit Gateway peering that could allow unauthorized access across accounts.   #attack   #aws

This blog post shows how a user with Reader-level access to an Azure API Management resource actually had the equivalent of Contributor-level access, allowing the user to read, modify and even delete configurations of the resource via the Direct Management API.   #attack   #azure   #iam

AUs are a useful method for creating scoped Entra ID role assignments. However, this scoping also offers juicy new methods for anyone looking to persist quietly in an Azure tenant.   #attack   #azure

Capturing SSL/TLS plaintext without a CA certificate using eBPF.

Stratus Red Team now supports Entra ID.

Expand IAM Actions with Wildcards.

Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments.

This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs.

This new encryption capability gives you an additional option to meet compliance and regulatory requirements when using S3 Express One Zone.

A new whitepaper AWS recently authored with SANS Institute called Building Security from the Ground up with Secure by Design, which addresses SbD strategy and explores the effects of SbD implementations.

The IAM Access Analyzer unused access recommendations feature streamlines the process towards least privilege by selecting the permissions that are used and retaining the resource and condition context from existing policies.

The AWS Customer Incident Response Team (CIRT) has developed a methodology that you can use to investigate security incidents involving generative AI-based applications.

An architectural paradigm which tends to address privacy requirements for privacy-centric data management and exchange.

How Google Cloud introduces code changes into its products by following a rigorous change management process.

Required MFA for all Azure users will be rolled out in phases starting in the 2nd half of calendar year 2024.