Passkeys are the future of authentication, offering enhanced security and convenience over passwords, but widespread adoption faces challenges that the NCSC is working to resolve.   #defend   #iam   #strategy

Sysdig released Stratoshark, which applies the proven Wireshark philosophy to a new domain: system calls.   #announcement

How should we authenticate AI agents? We don't need to completely reinvent the wheel -- we already have OAuth, which gives us most of what we need for controlled, auditable access delegation.   #iam

The OWASP Non-Human Identities Top 10 project outlines the most critical risks associated with non-human identities (NHIs) in cloud security, which outnumber human identities significantly.   #defend   #explain   #iam

Azure DevOps can be accessed using multiple 1st party client ids, allowing anyone to pivot from a stolen session to access the repositories.   #attack   #azure   #ci/cd

Through practical tests, this article demonstrates how running as root can lead to vulnerabilities, such as downloading and executing malware, accessing host resources, and potential privilege escalation.   #attack   #containers   #kubernetes

The Kubernetes API server can act as an HTTP proxy server, allowing users with the right access to get to applications they might otherwise not be able to reach.   #explain   #kubernetes

This post describes PoC exploits that can lead to pre-auth remote code execution and poisoning of the local artifacts in Sonatype Nexus and JFrog Artifactory.   #attack   #ci/cd   #supply-chain

Dev tools, env vars, task runner.

Authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set of protocols.

Local CLI tool for browser extension risk analysis.

Kubernetes controller for GitHub Actions self-hosted runners.

This blog post provides an overview of prompt injection risks in generative AI applications and outlines effective strategies for mitigating these risks on Bedrock.

The article discusses the integration of Google Cloud's Security Command Center (SCC) and Cloud Next Generation Firewall (NGFW), by combining threat detection from NGFW with SCC's automation and response features.

An overview of the newly launched dashboarding capabilities within Google SecOps, enabling users to create custom dashboards using statistical search syntax.

BigQuery metastore is a highly scalable runtime metadata service that works with multiple engines, for example, BigQuery, Apache Spark, Apache Hive and Apache Flink, and supports the open Apache Iceberg table format.