Researchers analyzed network traffic from seven popular coding agents to determine data transmission, telemetry patterns, and privacy implications.   #ai   #supply-chain   #monitor

Rather than offering passkeys as an optional authentication method, Mercari created phishing-resistant accounts that systematically eliminate password-based authentication.   #defend   #iam

Rapid7 has observed increased activity of a new threat group attacking AWS cloud environments, Crimson Collective, who recently claimed to have stolen private repositories from Red Hat's GitLab.   #aws   #attack   #supply-chain   #iam

Security researchers discovered multiple critical vulnerabilities in Tata Motors' systems: exposed AWS keys revealed 70+ TB of sensitive data across hundreds of buckets, a Tableau backdoor enabled passwordless admin access, and leaked API credentials compromised fleet management systems.   #attack   #iam   #saas

Three high-severity runc vulnerabilities enable container breakouts through procfs write bypasses. Attackers exploit race conditions in masked paths, /dev/console mounts, and LSM label writes to access dangerous procfs files like core_pattern. Patches released in runc v1.2.8, v1.3.3, and v1.4.0-rc.3.   #containers   #kubernetes   #attack

This article demonstrates exploiting self-hosted GitLab by hijacking instance runners with shell executors to gain remote access, exfiltrate secrets from pipeline files, steal IAM credentials from AWS metadata service, and pivot laterally using SSM permissions for cloud infrastructure compromise.   #ci/cd   #attack

GitHub releases now support immutability, adding a new layer of supply chain security. With immutable releases, assets and tags are protected from tampering after publication, so the software you publish remains secure and trustworthy.   #announcement   #ci/cd

Detects AI-hallucinated package dependencies and supply chain attacks.

Repository to help security vendors deal with false positives.

The official Python 3 client library for VirusTotal.

A restricted execution environment for Python to run untrusted code.

A CLI tool that automatically generates clear, concise, and structured reports about your GPT configurations, shared users, and linked files.

Post exploring the process of migrating from OPA and Rego to Verified Permissions and Cedar, including policy translation strategies, software development and testing approaches, and deployment considerations.

An architecture pattern for providing strong authorization for results returned from knowledge bases with a walkthrough example of this using Amazon S3 Access Grants with Amazon Bedrock Knowledge Bases.

AWS Capabilities by Region is a new planning tool that provides detailed visibility into AWS services, features, APIs, and CloudFormation resources across different AWS Regions, helping customers make informed decisions for global deployments and prevent costly rework through side-by-side regional comparisons and forward-looking roadmap information.

Google's threat modeling process follows four key questions: identifying scope, enumerating potential threats using STRIDE methodology and threat libraries, operationalizing mitigations through defensive controls and offensive red team activities, and continuously updating models through review processes and AI-powered automation with Gemini.

This whitepaper presents a unified, risk-based privilege framework for securing identities and roles in Microsoft Entra ID and Azure. It is designed for large organizations with a need to balance security controls with administrative usability and operational efficiency.