CloudSec Wine— Telegram Channel

Думаю в первую очередь стоит поделиться презентацией с Zeronights Web Village 2019 о AWS секьюрити. Особено рекомендую заглянуть в конец презентации в секцию ссылок на полезные материалы, чуть позже н…

🔸The Ten Riskiest AWS Misconfigurations #aws

🔸Retrieving AWS security credentials from the AWS console How to retrieve AWS security credentials (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY and AWS_SESSION_TOKEN) when authenticated in the AWS Cons…

🔶🔷🔴 Mapping of On-Premises Security Controls Versus Services Offered by Major Cloud Providers By the link below you can find the fifth version of a diagram that started in March 2017, with just AW…

🔸Security Architecture Review Of A Cloud Native Environment Walkthrough of a cloud security assessment performed on an organisation which had recently moved their infrastructure from an on-prem to a…

🔶 Introducing account regional namespaces for Amazon S3 general purpose bucket AWS launches a new feature of Amazon S3 that lets you create general purpose buckets in your own account regional names…

🔶 Behind the console: Active phishing campaign targeting AWS console credentials Datadog Security Research identified an active adversary-in-the-middle (AiTM) phishing campaign targeting AWS Console…

🔶 Bucketsquatting is (Finally) Dead AWS introduced account-regional namespaces for S3 (<prefix> - <accountid> - <region> - an) to eliminate bucketsquatting, where attackers claim deleted bucket name…

🤖 How AI Agents Automate CVE Vulnerability Research A technical deep-dive into Praetorian's multi-agent CVE research pipeline, exploring how orchestrated AI agents transform vulnerability data into…

🤖 The Reach Pattern The "Reach" pattern is a personal CLI that hijacks existing browser sessions to query SaaS APIs (Slack, Jira, Confluence, etc.) on your behalf, feeding structured organizational…