With just three lines of code, attackers can escape containers and gain full root access to the host. From there, the attacker could access, steal, or manipulate the sensitive data and proprietary models of all other customers running on the same shared hardware.   #ai   #attack   #containers

Dropbox has developed an advanced key management solution to enhance team-based file encryption, addressing the needs of customers with sensitive data, such as those in finance or healthcare.   #aws   #build

A practical guide on enforcing least privilege in AWS IAM by using IAM Access Analyzer and service Last Accessed data. Includes real workflows, auditing strategies, and automation tips.   #aws   #explain   #iam

This new authentication method for Amazon Bedrock introduces some helpful options, but also brings challenges.   #ai   #aws   #iam

Backdooring Microsoft's applications is far from over. A vulnerable, built-in SP that could have allowed escalation from Application Administrator to any hybrid tenant user, including Global Admin, was discovered.   #attack   #azure

A bypass was discovered within a template in Open Policy Agent's (OPA) Gatekeeper Library, allowing a latest-tagged image to be deployed even if it had been specifically designated as disallowed.   #attack   #kubernetes   #opa

Post discussing several critical AWS Managed Active Directory security vulnerabilities enabling RBCD attacks via ms-ds-MachineAccountQuota.   #attack   #aws

A Remote Code Execution vulnerability in Oracle Cloud Infrastructure Code Editor, which allowed an attacker to silently 1-click hijack a victim's Cloud Shell environment and potentially pivot across OCI services.   #attack

VBrowser is a secure, containerized browser platform designed for covert web investigations.

A Kubernetes Forensic Collection Framework for Azure Kubernetes Service. You can also refer to the companion blog post.

Decide how to interact with the model while enjoying updates from Anthropic.

Kiro is an agentic IDE that works alongside you from prototype to production.

A tool for managing project collaboration between humans and AI Agents in a git ecosystem.

How Scale to Win configured their network topology and AWS WAF to protect against DDoS events that reached peaks of over 2 million requests per second during the 2024 US presidential election campaign season.

Amazon S3 Metadata now provides comprehensive visibility into all objects in S3 buckets through live inventory and journal tables, enabling SQL-based analysis of both existing and new objects with automatic updates within an hour of changes.

Amazon Bedrock AgentCore enables rapid deployment and scaling of AI agents with enterprise-grade security. It provides memory management, identity controls, and tool integration, streamlining development while working with any open-source framework and foundation model.

Amazon S3 Vectors is a new cloud object store that provides native support for storing and querying vectors at massive scale.

Strengthen disaster recovery, centralize backup management, and improve security with Backup for GKE's cross-project backup and restore.

Cloud Storage bucket relocation makes it easy to change a bucket's location, eliminates complex manual planning and prevents extended downtime.