How Palantir leverages Insight, Foundry, and Apollo to keep thousands of servers in check.   #defend   #strategy

This article demonstrates how AWS Certificate Manager can be exploited as a data exfiltration mechanism by storing arbitrary data in X.509 certificates' nsComments extension, allowing up to 2MB per certificate.   #attack   #aws

Discover how attackers could quietly enumerate AWS resources via Resource Explorer, and how Datadog and AWS worked together to close the visibility gap.   #attack   #aws   #monitor

At DEF CON 33 a security researcher unveiled a series of unpatched zero-day clickjacking security vulnerabilities impacting the browser-based plugins for a wide range of password managers including: 1Password, Bitwarden, Dashlane, Enpass, iCloud Passwords, Keeper, LastPass, LogMeOnce, NordPass, ProtonPass, and RoboForm.   #attack   #saas

Post covering a privilege escalation vector which relies on using functionality designed for the ECS agent to self-register a compromised EC2 and override a task definition.   #attack   #aws

GitHub Actions policy adds blocking specific actions/versions and enforcing SHA pinning to limit exposure to compromised dependencies and strengthen supply chain security.   #announcement   #ci/cd

Speculative plan can run code on runners and expose cloud credentials. Learn how tokens are abused and how to lock it down with policy and dynamic creds.   #attack   #terraform

A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation.

Tfclean is tool to remove applied moved block, import block, etc.

This repository contains a collection of detection rules for security monitoring of Auth0 environments.

Tool for Active Directory Certificate Services enumeration and abuse.

AWS IAM Identity Center introduces support for user background sessions, a new feature which allows Amazon SageMaker Studio users to initiate long-running jobs that continue to run in the background even after a user logs off from their computer.

Google Cloud Compliance Manager, now in preview, can help simplify and enhance how organizations manage security, privacy, and compliance in the cloud.

Google Kubernetes Engine now offers Auto-IPAM, to simplify IP Address Management (IPAM) and improve IP efficiency for your GKE clusters.

To help highly-regulated organizations meet their encryption key service obligation, Google is now offering Cloud HSM for Google Workspace CSE customers.

Learn how to control the platform engineering application lifecycle with golden paths, guardrails, safety nets, and manual checkpoints and reviews.

Google Cloud DSPM provides end-to-end governance for data security, privacy, and compliance. Here's how it can help you.