Post looking at how to set them up, how to use them on websites and in mobile apps, and talk about what some of their shortcomings are.   #explain

A new CTF by Wiz.   #attack   #aws   #defend   #explain

Build resilient GitHub Actions workflows with insights from real attacks, missteps to avoid, and security tips GitHub's docs don't fully cover.   #ci/cd   #defend

Post sharing findings on four AWS services - Amazon Athena, AWS Elastic Beanstalk, AWS CodePipeline, AWS Config - and the implications of bucket name squatting.   #attack   #aws

An MCP implementation to augment Claude LLM for interacting with Elasticsearch to assist with threat identification.   #elastic   #monitor

Kubernetes is introducing Service Account Token Integration for Kubelet Credential Providers, now available in alpha. This enhancement allows credential providers to use pod-specific service account tokens to obtain registry credentials, which kubelet can then use for image pulls, eliminating the need for long-lived image pull secrets.   #explain   #kubernetes

Post describing an infrastructure that you can use to perform incident response tasks such as root cause analysis, containment, and eradication.   #defend   #monitor

Visual testing tool for MCP servers.

TrailAlerts is a AWS-native, serverless cloud-detection tool that lets you define simple rules as code and get rich alerts about events in AWS. You can also refer to the companion blog post.

AI powered Kubernetes Assistant.

(d)ocker(f)ile (c)onverter: CLI to convert Dockerfiles to use Chainguard Images and APKs in FROM and RUN lines etc.

A binary and file access authorization system for macOS.

This comprehensive guide provides FSI customers practical considerations for responsible AI adoption across key dimensions including governance, risk management, compliance, data management, model management and AI agent management.

How to deploy a security chatbot with a GUI and a serverless backend powered by an Amazon Bedrock agent that incorporates existing playbooks to investigate or respond to a security event.

The AWS Zero Trust Accelerator for Government (ZTAG) is a government-centric set of resources to help government organizations implement zero trust architectures.

At Google Cloud Next, Google announced multiple new capabilities in their IAM, Access Risk, and Cloud Governance portfolio, including: IAM, Access Risk products including VPC Service Controls, Context-Aware Access and Identity Threat Detection and Response, Cloud Governance with Organization Policy Service, and Resource Management.