Figma built Response Sampling, a real-time monitoring system that samples API responses to detect sensitive data exposure. It validates access permissions asynchronously, catches authorization bugs in staging and production, and integrates with their FigTag data categorization system to protect all sensitive fields.   #monitor   #saas   #strategy

A method for decrypting Azure VM extension protected settings by interacting directly with the Azure WireServer service, bypassing the need to access local files.   #azure   #attack

Vietnamese threat actors (UNC6229) use fake job postings on legitimate platforms targeting digital advertising workers. They deliver malware or phishing kits to steal credentials and hijack high-value corporate advertising accounts for monetization.   #attack

How to use AWS Athena to query Terraform state files stored in S3, enabling SQL queries across organizational infrastructure resources.   #aws   #terraform   #iac

A path traversal vulnerability in Smithery.ai that compromised over 3,000 MCP servers and exposed thousands of API keys. Here's how a single Docker build bug nearly triggered one of the largest AI supply chain attacks to date.   #attack   #supply-chain   #containers   #ai   #saas

Trail of Bits is disclosing vulnerabilities in confidential computing systems that use LUKS2 for disk encryption. These vulnerabilities allow attackers with access to storage disks to extract confidential data and modify contents.   #attack   #gcp   #aws   #azure

Slack's engineering team has enhanced its Chef infrastructure to improve deployment safety and reliability without causing disruption to service owners. Instead of a complex migration to Chef Policyfiles, they focused on practical improvements to their existing EC2 and Chef frameworks.   #aws   #ci/cd   #iac   #strategy

A web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

Scan MCP Servers for vulnerabilities.

An MCP security scanner powered with NOVA.

The Dragonfly image service, providing fast, secure and easy access to container images.

Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephemeral access into restricted environments using Tailscale's embedded client.

This post demonstrates centralizing CloudFormation StackSets logs from multiple AWS accounts into a management account using EventBridge and CloudWatch Logs, enabling unified monitoring and troubleshooting of multi-account deployments through automated event forwarding and consolidated logging infrastructure.

A new, dedicated home for all Google Cloud technical documentation at https://docs.cloud.google.com.

Google Cloud Parameter Manager is designed to reduce unnecessarily sharing key cloud configurations, and it works with many types of data formats.

Recommendations and insights into preventing, detecting, and responding to intrusions targeting privileged accounts.