Two mitigations exist for cloud service-account confused deputy attacks: for customer-managed identities, an attachment gate (GCP actAs, AWS iam:PassRole, Azure assign/action) controls bind-time authorization; for provider-managed identities, the CSP enforces internal checks, with AWS uniquely exposing this via Forward Access Sessions and condition keys.

Sysdig TRT observed an attacker use one leaked service principal (with RoleManagement.ReadWrite.Directory) to self-grant Global Administrator, then elevateAccess to root RBAC Owner, harvest storage/Event Hub/Key Vault keys, and plant backdoors on 26 app registrations.

Detect and mitigate malicious @asyncapi npm packages linked to the latest npm supply chain attack.

How four DynamoDB IAM condition keys for Global Secondary Indexes silently failed to enforce item-level access, the test cases that proved it, and the full disclosure timeline with AWS.

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters, including voice phishing (vishing), supply-chain compromise, and misconfigured guest access targeting SaaS-based applications.

AWS STS now supports a new OIDC claim that restricts which role ARNs a token can assume. Enforced before trust policy evaluation. The boolean condition key sts:RoleAuthorizedByIdp enables mandatory enforcement via trust policies or RCPs.

A malicious commit disguised as SDK telemetry briefly compromised @injectivelabs/sdk-ts, exfiltrating wallet mnemonics and private keys.

A post demonstrating how to use FleetDM's authenticated YARA rule distribution with Osquery's yara_process table to scan Kubernetes container process memory, detecting in-memory Sliver C2 implants and credential-stealing malicious MCP servers via live SQL queries.

A command line utility to display dependency tree of the installed Python packages.

The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2.0 Service Providers, also supporting SCIM protocol.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Annotate and review coding agent plans and code diffs visually, share with your team, send feedback to agents with one click.

The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by agents.

AWS MCP Server now supports OAuth-based sign-in using existing AWS credentials (IAM, IAM Identity Center, federated). Includes dynamic client registration, headless token API, new IAM condition keys, token introspection/revocation, and CloudTrail logging for OAuth events.

AWS WAF Bot Control now supports Web Bot Authentication (WBA), using ed25519 cryptographic signatures (RFC 9421) to verify AI agent identities. It introduces new WAF labels (verified, invalid, expired, unknown_bot) enabling granular allow/block rules, replacing unreliable IP-based bot filtering.