How Uber built their own Secret Management Platform, solving key challenges and setting a new standard for secrets management.   #build   #strategy

This article outlines steps for identifying AWS accounts, determining which ones are truly production, and analyzing access levels, including finding users and roles with AdministratorAccess.   #aws   #explain   #iam

Analysis of a threat actor campaign targeting Solidity developers via three malicious VS Code extensions.   #attack   #supply-chain

The article highlights the dangers of using the AWS managed policy PowerUserAccess in complex environments by sharing an attacker's perspective on the matter.   #attack   #aws

A bucket traversal vulnerability arises when an application mishandles user input while interacting with cloud storage, allowing unauthorized access to storage objects.   #attack   #gcp

Post demonstrating how Terraform can be leveraged to automate, simplify, and reduce costs related to provisioning and managing infrastructure within your disaster recovery strategy.   #build   #terraform

The Kubernetes Gateway API introduces a standardized, Kubernetes-native framework for managing traffic.   #explain   #kubernetes

SOCKS5 proxy tool that uses Azure Blob Storage as a means of communication.

Cloud Privilege Escalation Awesome Script Suite.

Arsenal is just a quick inventory and launcher for hacking programs.

A static analysis and exploit toolkit for GitHub Actions.

Manage / Proxy / Secure your MCP Servers.

EKS Dashboard provides cloud architects and cluster administrators with a centralized view to monitor and govern Kubernetes clusters across multiple AWS Regions and accounts, offering insights into clusters, managed node groups, and EKS add-ons through a unified interface in the AWS Console.

Amazon ECR image-to-container mapping that shows which images are actively running in containers and how widely they're deployed, and extended vulnerability scanning support for minimal base images including scratch, distroless, and Chainguard containers.

Post showing the differences between Amazon EKS and Amazon EC2 resources, and how to handle EKS automation for incident response.

Microsoft introduced Microsoft Entra Agent ID, which extends identity management and access capabilities to AI agents.