Rapid7 has observed increased activity of a new threat group attacking AWS cloud environments, Crimson Collective, who recently claimed to have stolen private repositories from Red Hat's GitLab.   #attack   #aws   #ci/cd

The Clean Source Principle gives us a simple but powerful lens: security dependencies must be as trustworthy as the objects they secure. When that rule is violated, attack paths emerge. An exploration of GitHub, Entra, and Active Directory shows how easily these violations occur, and how they compound across platforms.   #attack   #defend   #supply-chain

This article details a critical Redis vulnerability (CVE-2025-49844) discovered by Wiz Research that allows attackers to escape the Lua sandbox and execute arbitrary code on hosts. The 13-year-old bug affects all Redis versions and has a CVSS score of 10.0.   #attack

Attackers are skipping malware and extorting orgs through exposed databases. Learn how these attacks work, who's affected, and how to defend your environment.   #attack   #defend   #explain

Abusing AWS CloudControl API to stealthily enumerate resources, persist in accounts, and evade detection.   #aws   #attack

With Terraform actions you can now perform operations outside of the normal CRUD (Create-Read-Update-Delete) workflow of Terraform. Enabling operations that interact with your resources in ways you normally use other tools for, e.g. Ansible.   #terraform   #iac   #explain

This article announces Cosign v3, which makes new capabilities like offline verification, key rotation, and transparency log sharding on by default, with plans for Cosign v4 to remove old functionality entirely.   #announcement   #supply-chain

This article introduces Security-Profiles-Operator's new audit logging feature, which addresses a security gap by recording user activities inside containers and on host nodes during kubectl debugging sessions, providing detailed JSON logs for compliance and incident investigation.   #kubernetes   #monitor

A highly portable AWS SigV4 C implementation.

HoneyBee is a tool for creating misconfigured environments to test vulnerabilities in technologies like Jenkins, Jupyter Notebook, and more. You can also refer to the companion blog post.

Extend your AWS IAM switching roles by Chrome extension, Firefox add-on, or Edge add-on.

Open-source compliance scanner for AWS, Azure, and M365 with auditor-ready evidence collection guides.

Open-source agent for AI-ready privilege access management (PAM) and just-in-time access (JIT) to cloud infrastructure, SaaS applications and local systems.

The whitepaper covers the core security principles of Amazon EKS Auto Mode, highlighting its unique approach to managing Kubernetes clusters.

Gain control over encryption and comply with regulations using customer-managed keys for AWS IAM Identity Center's user data and passwords.

AWS is aware of a potential Instance Metadata Service (IMDS) impersonation issue that would lead to customers interacting with unexpected AWS accounts.

GCP now supports post-quantum Key Encapsulation Mechanisms in Cloud KMS, in preview, enabling customers to begin migrating to a post-quantum world.