Attack group PoisonSeed has recently found a way to downgrade FIDO key authentication in a new social engineering tactic via cross-device sign-in.   #attack   #iam

How to use Claude Code to automate the process of updating ARM64 patches and reviewing dozens of commits just to keep GitHub Actions runner images in sync.   #ai   #build   #ci/cd

Google introduced OSS Rebuild, a project aimed at strengthening trust in open source package ecosystems by reproducing upstream artifacts to detect and prevent supply chain attacks.   #announcement   #build   #supply-chain

Zigazoo, a social network for kids, has been found to have significant security vulnerabilities, including unauthorized access to user records, content, and account escalation, all related to Firebase.   #attack   #gcp

Truffle Security scanned 8,400+ public GCP images and did not find a single exposed secret.   #attack   #gcp

A hacker exploited a vulnerability in Amazon Q, an AI coding assistant, by submitting a malicious pull request that instructed the tool to delete files and cloud resources.   #ai   #attack

New ToolShell exploit chain targets SharePoint via CVE-2025-53770/53771. This post reveals how it works, who's at risk, and how to detect and respond fast.   #attack   #defend   #saas

Wiz Research has identified a new iteration of a broader malicious cryptomining campaign, which they dubbed Soco404.   #attack   #defend

Kcp is a prototype of a multi-tenant Kubernetes control plane for workloads on many clusters.

The Sigma command line interface based on pySigma.

Convert JSON IAM Policies to other formats.

Template for deploying Workers for Platforms with subdomain routing and custom hostnames.

PowerShell function for extracting credentials from Azure App Services applications that have integrated Entra ID authentication. You can also refer to the companion blog post.

This solution demonstrates building an EKS platform that combines flexible compute options with enterprise-grade observability using AWS native services and OpenTelemetry.

Secure Boot can help protect AI from the moment GPU-accelerated workloads power up. Here's how to use it on Google Cloud.

Sentinel data lake, rolling out in Public Preview, giving security teams a powerful, cost-effective way to unify, retain, and analyze all security data.

Going forward, the DomainNames field will no longer return all federated domain information. Instead, it will only include the domain information that is passed as the parameter.