Pros and cons of various team structures for startups.   #strategy

Cloudflare has shifted to Infrastructure as Code and policy enforcement to manage internal Cloudflare accounts. This new architecture uses Terraform, custom tooling, and Open Policy Agent to enforce security baselines and increase engineering velocity.   #iac   #terraform   #cloudflare   #strategy   #ci/cd

This article discusses "Zombie Workflows," a GitHub Actions vulnerability pattern where attackers exploit old workflow versions in non-default branches even after fixes are applied to the main branch. SonarSource found 67 such vulnerabilities across popular repositories; GitHub mitigated this by changing workflow execution defaults.   #attack   #ci/cd   #supply-chain

An initial security overview of AWS Lambda Managed Instances, exploring the Bottlerocket-based architecture, the 'Elevator' components, and security insights for this new compute model.   #aws   #containers   #explain   #design

Post which analyzes AWS initial access vectors through identity-driven misconfigurations, categorizing them into service exposure (Lambda, EC2, ECR, DataSync) and access by design (IAM/STS, IoT, Cognito) vulnerabilities that compromise cloud perimeter security.   #aws   #attack   #defend

Datadog identified an active adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users. The campaign uses lookalike domains, proxies legitimate authentication pages, injects JavaScript to steal credentials and session tokens, and can bypass non-phishing-resistant MFA.   #attack   #defend   #azure   #saas

How attackers are leveraging compromised employee GitHub Personal Access Tokens to compromise cloud environments.   #attack   #ci/cd

AWS IAM eventual consistency creates a 4-second window where deleted AWS access keys can still work. Learn how attackers exploit this and how to mitigate it.   #aws   #iam   #attack   #defend

A technical deep dive into React2Shell (CVE-2025-55182): deserialization bugs, gadget-chains, framework-wide impact, and real-world exploitation data.   #attack   #explain   #supply-chain

A sandbox environment designed for loading, running and profiling a wide range of files, including machine learning models, ELFs, Pickle, Javascript and more.

A command line tool that provides jq-style access to structured data sources: SQL databases, or document formats like CSV or Excel.

An autonomous OSINT agent for social media using any OpenAI-compatible API for deep analysis and reporting.

An Ansible collection that installs a SCOM deployment with optional configurations.

A portal collecting hands-on workshops crafted by AWS experts to gain practical experience and solve real business challenges.