This guide explains common sources of image bloat, best practices for slimming down production images, and practical examples for Node.js, Go, Rust, and other application stacks.   #build   #containers   #explain

How to automate the deployment of a private AppRunner instance on AWS that hosts multiple internal apps securely behind Cloudflare's zero-trust access controls.   #aws   #build   #cloudflare

The process involves using API actions like CreateTrustAnchor and CreateProfile to facilitate the exploitation.   #attack   #aws

Adversaries can compromise key material in Azure OpenAI to host malicious models, poison trained models, and steal intellectual property. Here's how they do it and what to look for in the logs.   #attack

Wiz Research looks at phishing tactics, along with how to trace and investigate these campaigns.   #attack   #defend   #monitor

This blog post aims to demonstrate how to apply a TDD workflow to detection engineering that allows to know with certainty that our detections protect us against the target threat.   #defend   #monitor   #process

This post covers the threat of Kubernetes privilege escalation as well as the abuse potential of system pods within an attack chain, while Part 2 covers how misconfigurations in GKE System Pods could allow attackers to become cluster admin and control an entire Kubernetes cluster.   #attack   #defend   #kubernetes

An attacker that has write access to the Cloud Composer environment's dedicated bucket can gain command execution in the Composer environment.   #attack   #gcp

Post exploring the variety of IP addresses you're likely to see in a Kubernetes cluster, and how those tie to the operating system level.   #explain   #kubernetes

The Finch CLI is an open source client for container development.

Safer AWS SCP deployments via real-time error monitoring.

Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. You can also refer to the companion blog post.

A tool designed to simulate and detect numerous actions that can disrupt the flow of AWS CloudTrail logs to their configured S3 Buckets. You can also refer to the [companion blog post](https://permiso.io/blog/bucketshield-track-log-flow-secure-buckets-simulate-threats.

How to apply tags to resources so that you can use risk-based prioritization of Amazon Inspector findings in your environment.

Some of the recent techniques used by threat actors that leverage specific customer configurations or design to make unauthorized use of resources within an AWS account.

Post walking through the risks associated with using sensitive data as part of fine-tuning for FMs, retrieval augmented generation (RAG), AI agents, and tooling with generative AI workloads.

Starting in 2025, Google will require users to use MFA when accessing Google Cloud.