How to make your content interactive by building a conversational knowledge base. A practical walkthrough using CloudSecList, LLMs, and Cloudflare Workers. (Disclaimer: I did write this post)   #ai   #build   #cloudflare

The Wiz Threat Research team has identified a widespread cryptojacking campaign targeting commonly used DevOps applications including Nomad and Consul.   #attack   #defend   #hashicorp

Post diving into Tool Poisoning Attacks (TPA) on MCP servers.   #ai   #attack

Permiso uncovered a subtle yet critical logging evasion vulnerability within AWS environments - mainly the differing size limitations of individual AWS CloudTrail logs versus the actual content being logged. By exploiting whitespace and other syntactic quirks, an attacker can create valid IAM policies that effectively bypass CloudTrail logging.   #attack   #aws   #iam

Learn how Dependabot can be co-opted to exploit some sensitive workflows, through the Confused Deputy Problem and branch name injections.   #attack   #ci/cd   #supply-chain

Turn your security backlog into a ranked list that actually makes sense with LLMs, smart prompts, and just enough chaos to keep it interesting.   #ai   #defend   #process

Unit 42 researchers discovered an issue with Azure OpenAI's Domain Name System (DNS) resolution logic that could have enabled cross-tenant data leaks and meddler-in-the-middle (MitM) attacks.   #ai   #attack   #azure

Post exploring Azure Arc's overlooked C2aaS potential: attacking and defending against its usage and exploring use cases for Red Teams.   #attack   #azure   #defend

Envilder is a CLI that securely centralizes your environment variables from AWS SSM as a single source of truth.

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application.

Gubble is a tool designed to audit Google Workspace group settings.

A security scanner for MCP servers that detects vulnerabilities and security issues in your MCP server implementations.

A program designed to quickly pull some interesting security related information from Kubernetes clusters.

By using security groups in Entra and mapping them to permission sets in IAM Identity Center, you can automate the provisioning and deprovisioning of privileged access based on defined policies and approval workflows.

UNC6040 uses vishing to impersonate IT support, deceiving victims into granting access to their Salesforce instances.

Google announced additional capabilities in Toolbox specifically designed to empower AI-assisted development. Toolbox now makes it easy to connect databases to AI assistants in your IDE.

Including agentless scanning for Compute Engine and GKE, Artifact Analysis integration, Threat detection for Cloud Run.