Discover why traditional IAM efforts fall short and how an Attack Graph First approach reframes identity risk to drive effective security.   #defend   #iam   #strategy

Exploring the breakthrough potential and emerging risks of AI agents that can autonomously discover and exploit complex AWS attack chains.   #ai   #aws   #defend   #monitor

A fun experiment: the Belgian eID, which includes an authentication certificate, can be utilized to authenticate users without requiring extensive certificate management.   #aws   #iam

A research demonstrating that Semgrep Code identifies more findings than Semgrep Community Edition, in the tested open-source projects.   #ci/cd   #defend

This blog describes how Uber enhanced SubmitQueue to slash CI resource usage by 53% and speed up wait times by 37%, all while keeping mainlines green.   #build   #ci/cd

This article discusses JA3 and JA4 fingerprints, including how they can be useful across cloud services, and how to use them with AWS WAF.   #aws   #defend

This article explores OAuth phishing and token-based abuse in Microsoft Entra ID. Through emulation and analysis of tokens, scope, and device behavior during sign-in activity, it surfaces high-fidelity signals defenders can use to detect and hunt for OAuth misuse.   #azure   #elastic   #monitor

A look at how network security works in Kubernetes.   #explain   #kubernetes

A Terraform module that creates a GCP Workload Identity Federation to allow AWS workloads to authenticate to GCP via a GCP Service Account, without storing service account keys.

Lightweight coding agent that runs in your terminal.

Analyze binaries and containers to extract and disassemble seccomp-bpf profiles.

A comprehensive security checklist for MCP-based AI tools.

The enhanced Security Hub now uses advanced analytics to automatically correlate, enrich, and prioritize security signals across your cloud environment.