Where is your organization really in your zero trust journey, and how much further do you have to do? Implementing a true zero trust architecture is more aspirational than achievable.   #defend   #process   #strategy

Blog describing Plaid's journey of creating and leveraging a secure Key Management System to protect sensitive data, including design, architecture, usage, and challenges.   #build   #design

You can Graffiti other people's GitHub activity.   #attack   #ci/cd

Concrete advice on approaching a migration to IMDSv2.   #aws   #defend   #process

Post exploring how AWS services provide IAM credentials, and teaching key risks and detection strategies to secure your cloud environment against credential misuse.   #aws   #defend   #iam

Azure Key Vault Contributors are not allowed access to Key Vault keys, certificates, and secrets. But did you know they can still gain access to this sensitive data? This post will cover a privilege escalation vector to access data in key vaults using the access policy permissions model.   #attack   #azure

The attacker leverages several initial access techniques spread across a phishing campaign and dozens of trojanized GitHub repositories to deliver the same second-stage payload.   #attack   #ci/cd

This post breaks down the basics of SLSA, explains the importance of artifact attestations, and provides a step-by-step guide to securing a build process.   #build   #ci/cd   #supply-chain

Amazon has introduced the same dependency confusion issue at least on 3 separate occasions when adding new packages to the Neuron SDK registry.   #attack   #aws

After nearly 10 years, OPA reached version 1.0. The new version introduces mandatory syntax changes, including the use of if for rule definitions and contains for multi-value rules.   #announcement   #opa

Why does this service account still have access even though I deleted its service account key?   #attack   #defend   #gcp

A set of Conditional Access (CA) policies and PowerShell management tools for Microsoft Entra ID.

A VSCode Extension that simplifies building decision trees to model adverse scenarios.

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with auto-mapping.

A decorator to aid in annotating logs for easier reading and searching.

An open source Wireshark extcap to make ad hoc mirroring of AWS EC2 traffic easier.

Post demonstrating an approach to giving users controlled flexibility within safe boundaries by allowing resource provisioning that uses only approved configurations.

An overview of the dashboard and a step-by-step guide to deploy it in your environment.