Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.   #cloudflare   #announcement

Kubernetes SIG Network announced the retirement of Ingress NGINX. Best-effort maintenance continues until March 2026, then no further releases or security updates. Users should migrate to Gateway API or alternative Ingress controllers immediately.   #kubernetes   #announcement

Unit 42 recently assisted a global data storage and infrastructure company that experienced a destructive ransomware attack. What began with a single click on what appeared to be a routine website CAPTCHA evolved into a 42-day compromise that exposed critical gaps.   #attack   #defend

This article explores Terraform Stacks for Azure on HCP Terraform EU. It covers designing stacks with components and deployments, building modules, configuring authentication via OIDC, passing data between stacks, and operational tasks like provisioning and managing stacks at scale.   #terraform   #iac   #azure

This article demonstrates weaponizing AWS CLI aliases for stealthy persistence. A one-liner dynamically toggles alias activation to execute malicious payloads while preserving original command functionality, evading detection. The technique exfiltrates credentials post-execution and persists across sessions, useful for red team operations.   #aws   #attack

A three-tier model for classifying privileged Microsoft Entra ID roles: Tier 0 (core tenant administration/security), Tier 1 (major service component administration), and Tier 2 (limited-scope/read-only). Each tier has defined security controls, addressing inconsistencies in Microsoft's privileged role documentation.   #azure   #iam   #explain

A new agentic IDE from Google.

A lightweight tool for deploying and managing containerised applications across a network of Docker hosts. Bridging the gap between Docker and Kubernetes.

A web application that allows the users to check whether their SPF, DMARC and DKIM configuration is set up correctly.

An open-source, AI-driven tool for deep security code review.

A guide on how to write effective agents.md files for GitHub Copilot with practical tips, real examples, and templates from analyzing 2,500+ repositories.

Microsoft discovered SesameOp, a backdoor using OpenAI Assistants API for command-and-control communications. The malware employs .NET AppDomainManager injection, encryption, and compression to maintain stealth. Discovered during incident response in July 2025, it enabled long-term espionage persistence.

NVIDIA's AI Red Team identifies three critical LLM vulnerabilities: executing LLM-generated code via exec/eval enabling remote code execution, insecure RAG data store access control allowing data leakage and injection, and active content rendering in outputs enabling data exfiltration through malicious links/images.

A new AWS Command Line Interface (AWS CLI) command, aws login, lets you start building immediately after signing up for AWS without creating and managing long-term access keys. You use the same sign-in method you already use for the AWS Management Console.

AWS Organizations now provides customers the ability to directly transfer an account to a different organization without first having to remove the account from their current organization.

Aggregation for data events streamlines security monitoring by consolidating high-volume AWS API activity into 5-minute summaries. These summaries highlight key trends like access frequency, error rates, and most-used actions, allowing teams to quickly identify patterns while maintaining access to detailed events when needed.

AWS IAM now enables outbound identity federation, allowing developers to securely authenticate AWS workloads with external services using short-lived JSON Web Tokens instead of storing long-term credentials like API keys and passwords.

Google introduces the Emerging Threats Center in Google Security Operations, powered by Gemini AI. It automates detection engineering by ingesting threat intelligence, generating synthetic events, testing coverage, and creating detection rules to help security teams rapidly assess exposure and defensive posture against emerging threats.