Learn about how Google has created and deployed a high-assurance web framework that almost completely eliminates exploitable web vulnerabilities.   #defend   #design   #strategy

A novel approach which aims to enhance software reliability by generating specific faults (mutants) in the source code and creating targeted tests to catch these faults, particularly focusing on privacy-related issues.   #ai   #build

Post taking a look at branch protection (protected branches) on GitHub; in particular, whether it's possible for attackers to bypass rules requiring approval to merge pull requests.   #attack   #ci/cd   #defend

An on-call buddy designed to assist Mercari engineers in rapidly resolving incidents, thus reducing the Mean Time to Recovery (MTTR), and reducing on-call handling costs for companies and engineers.   #build   #monitor

A comprehensive guide on known attacks against OAuth implementations, together with a checklist that should prove useful for testers and developers alike to quickly assess whether their implementation is secure.   #attack   #build

Post diving into the potential risks of Kubernetes policy enforcement, focusing on how seemingly secure rules, such as those used in OPA Gatekeeper, can be bypassed if not carefully configured.   #attack   #kubernetes   #opa

In a compromised AWS environment, adversaries can copy S3 objects, encrypt them, and prevent the victim from recovering the encryption keys.   #attack   #aws

This research shows what an attacker can achieve after creating a malicious OIDC identity provider in AWS and how they can do it. The article presents novel techniques and tools for persistence and evasion.   #attack   #aws

This blog explores how unused cloud regions can be abused, the tools that enable such exploits, and strategies to mitigate these risks.   #attack   #aws   #monitor

The revival of SlackPirate, a tool designed to extract valuable data from Slack, including private keys and user information.   #attack   #saas

This Terraform module consists of the configuration for automating the remediation of AWS EC2 vulnerabilities using AWS Inspector findings.

View HTTP/HTTPS requests made by any Linux program.

Repository of sample Custom Rules for AWS Config.

A Python-based SAML authentication handler for AWS STS that allows you to get temporary credentials using SAML to the AWS CLI.

An open source SIEM for instant log insights, powered by DuckDB.

Post outlining the changes to resource-level permission, explore use cases for their implementation, and discuss the importance of adopting this improved permission model.

You can now configure your identity provider to encrypt the SAML assertions that it sends to IAM.

Depending on where the data sits as part of the generative AI application, you will need to use different implementations of data authorization, and there isn't a one-size-fits-all solution.

These changes include disabling public accessibility, enabling database encryption, and enforcing secure connections.