Ransomware affiliates have long since abused Cloudflared tunnels to maintain persistent access to compromised environments. These tunnels can be utilized as a strong indicator of compromise when examined at-scale.   #attack   #cloudflare   #monitor

A hidden comment was enough to make GitLab Duo leak private source code and inject untrusted HTML into its responses.   #ai   #attack   #ci/cd

Post showcasing a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data.   #ai   #attack   #ci/cd

Learn how a convincing Google spoof used a DKIM replay attack to bypass email security and trick users with a fake subpoena. A real-world phishing example you need to see.   #attack   #gsuite

Salesforce security sits in this weird no-man's-land. It's not clearly IT's job, not entirely the security team's responsibility, and sometimes falls partly on the Sales Ops roles in the business units themselves. Figuring out who truly "owns" permission management can turn into a serious headache.   #iam   #saas

This article introduces the technologies, challenges, and solutions behind extending Token Server and migrating workloads on Google Cloud to use short-lived credentials.   #build   #ci/cd   #gcp   #iam

While these plug-and-play options greatly simplify the setup process, they often prioritize ease of use over security. As a result, a large number of applications end up being deployed in a misconfigured state by default, exposing sensitive data, cloud resources, or even the entire environment to attackers.   #attack   #kubernetes

How GitHub addressed the challenges of securing their SAML implementation with this behind-the-scenes look at building trust in their systems.   #ci/cd   #defend   #iam

Tooling to make audited kubectl exec easy. You can also refer to the companion blog post.

Run and manage MCP servers easily and securely.

A simple Python package for refreshing AWS temporary credentials in boto3 automatically.

Code snippets to reproduce MCP tool poisoning attacks.

Step-by-step instructions for tracking Security Hub findings in each severity category against service-level agreements (SLAs) through visual dashboards.

Post which analyzes the malware delivery methods, technical details of the malware attack chain, discuss other recent APT41 activities, and share indicators of compromise (IOCs) to help security practitioners defend against similar attacks.

New automations in the Cloud Deploy continuous delivery platform help keep production environments reliable and up-to-date.