A look into building IssueOps workflows on GitHub to do everything from CI/CD to handling approvals and more.   #build   #ci/cd   #process

How to chain round-trip attacks and namespace confusion to achieve unauthenticated admin access on GitLab Enterprise by exploiting the ruby-saml library.   #attack   #ci/cd

Success in these engagements is not solely determined by the number of findings but by how well the intended objectives align with the outcomes.   #defend   #strategy

A supply chain attack on GitHub Action tj-actions/changed-files caused many repositories to leak their secrets.   #attack   #ci/cd   #supply-chain

A supply chain attack on tj-actions/changed-files leaked secrets. Wiz Research found another attack on reviewdog/actions-setup, possibly causing the compromise.   #attack   #ci/cd   #supply-chain

Another article breaking down the tj-actions/changed-files supply chain attack.   #attack   #ci/cd   #supply-chain

Post diving into the exploitation of CVE-2024-0402 in GitLab, impacting the GitLab Workspaces functionality.   #attack   #ci/cd

A solution using CloudWatch log subscription filters to stream logs to an S3 bucket via Kinesis Firehose.   #aws   #azure   #monitor

This article aims to provide a deeper technical understanding of the Elevate Access mechanism, including its underlying implementation, the specific logs where activities are recorded, when you DON'T need Elevate Access to get the same permissions, and the practical techniques attackers use to leverage it.   #azure   #explain   #iam

A command-line program that finds secrets and sensitive information in textual data and Git history.

Pattern recognition for hosts, services, and content.

Convert Sigma rules to SIEM queries, directly in your browser.

Generate Watermarked Images from Pseudorandom Codes.

Python tool for converting files and office documents to Markdown.

Several use cases to help you better take advantage of the newly introduced CloudWatch metrics to manage your AWS KMS API usage and costs.

Post exploring four patterns for integrating Verified Permissions into a containerized environment.

Mandiant has developed an internal tool (Delusion) for performing BitM attacks, enabling an operator to target a specific application without possessing prior knowledge about the authentication protocols employed by the application.

Gemini in Workspace apps and the Gemini app are the first generative AI assistants for productivity and collaboration suites to have achieved FedRAMP High authorization.

Network Security Integration can help you integrate third-party network appliance or service deployments with your Google Cloud workloads.

Google compared OWASP's top 10 API security threats list to the security capabilities of Apigee.