How DigitalOcean redesigned its vulnerability management program using the concept of "security debt" to drive meaningful risk reduction and empower engineering teams to prioritize and resolve security issues autonomously.   #defend   #process   #strategy

By adopting the 'Zero Noise' approach - prioritizing attacker-focused detections, continuous feedback loops, and a 'no alert left behind' mentality - security teams can cut through cloud alert noise, enabling swift and precise responses to true threats.   #monitor   #strategy

A step-by-step guide to building a framework for ingesting billions of cloud telemetry records to detect and respond to cyber threats.   #build   #defend

Post which highlights the risks associated with VS Code's popular plugin system, which can be exploited by threat actors to run untrusted code within a trusted environment.   #attack   #supply-chain

Post detailing newly discovered authentication bypass vulnerabilities in the ruby-saml library used for single sign-on (SSO) via SAML on the service provider (application) side.   #attack   #saas   #supply-chain

Post discussing vulnerabilities in Azure's CLI related to cloud image confusion attacks, similar to those identified last month in AWS.   #attack   #azure

Post explaining how ephemeral values, resources, and write-only arguments work.   #explain   #iac   #terraform

An AI Coding Assistant aiming to teach people how Cursor and all these other coding agents work under the hood.

An experimental CLI tool that enables AI assistants to manage and operate Terraform environments.

A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.

A transformative log viewer for Kubernetes.

Administrative tooling for Falco.

EKS enables default envelope encryption for all Kubernetes API data in EKS clusters running Kubernetes version 1.28 or higher.

Project Shield employs Google Cloud Armor to defend against DDoS attacks with minimal user configuration.

ShieldGemma 2 can detect harmful content in AI models' text and image inputs/outputs, built on Gemma 3 for safer AI development.