How to secure your contingent workers with modern workforce security practices.   #defend   #iam   #strategy

Trail of Bits have scrutinized the attack surface of AWS Nitro Enclaves, uncovering potential bugs that could compromise even these hardened environments.   #attack   #aws

Post covering the most common security misconfigurations in Cloudflare R2 buckets that developers often make.   #attack   #cloudflare

If an attacker has permissions to replace the metadata, they can add a metadata document from an IdP they control. After doing this, they'll be able to assume the roles that trust this identity provider.   #attack   #aws   #iam

Strategies for tracking and defending against malicious activity and threats in the cloud using atomic indicators of compromise (IOCs).   #defend   #monitor

Tenable Research discovered a remote code execution (RCE) vulnerability in GCP that could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool.   #attack   #gcp   #supply-chain

Palo Alto has been monitoring a widely popular phishing-as-a-service (PhaaS) platform named Sniper Dz that primarily targets popular social media platforms and online services.   #attack   #saas

Analyzing a campaign where a threat actor leveraged Docker Swam and Kubernetes to mine cryptocurrency.   #attack   #containers   #kubernetes

This article explores techniques for backdooring Azure Automation Account packages and runtime environments. It covers creating malicious packages, exploiting package dependencies, and manipulating runtime environments to gain persistent access and execute arbitrary code within Azure Automation Accounts.   #attack   #azure

Cloud-init is the industry standard multi-distribution method for cross-platform cloud instance initialization.

A tool for scanning public or private AMIs for sensitive files and secrets.

Examples of various Entra ID scenarios in Terraform.

Generate pip requirements.txt file based on imports of any project.

Post walking through the process of switching from one identity source to another and provides sample code that you can use to assist with the transition.

With network activity events for VPC endpoints, you can view details of who is accessing resources within your network giving you greater ability to identify and respond to malicious or unauthorized actions in your data perimeter.

Cloud KMS Autokey simplifies creating and using customer-managed encryption keys (CMEKs) by automating provisioning and assignment.

Google released a generic design to automate password rotation on Google Cloud.

Google announced the general availability of certificate-based access in their Identity and Access Management portfolio.