gafnit retweeted
It's on! BlueHat IL Nights is returning on June 22nd. Join us for the ultimate security bash with renowned Microsoft researcher Ned Moran, as he unveils the untold secrets of Iranian cyber operators like never before. Register now! microsoftrnd.co.il/bluehatil…
gafnit retweeted
Every once in a while a resource comes along that just oozes value. This is one of those resources by my pal Jonathan Rau. It’s a gargantuan 110 pages chocked full with code goodies and guidance. Check it out and put it into practice!
This Post is from an account that no longer exists. Learn more
An amazing find by @Frichette_n that shows again the power of undocumented API. Many cloud security solutions including GuardDuty itself rely on the expected coverage of CloudTrail events to identify malicious activity.
New cloud security research! We found a method to bypass CloudTrail logging for specific IAM actions via an undocumented API service! Attackers could perform some reconnaissance activities while being undetected.
securitylabs.datadoghq.com/a…
If you could infect any image on AWS ECR Public Gallery, which one would you choose? 👀
blog.lightspin.io/aws-ecr-pu…
✅Browse to cloudshell-df.azurewebsites.…
✅Inject victim's localStorage
✅Execute commands in victim's Cloud Shell terminal
✅Download payload
✅Steal access token
Read the full vulnerability story of Azure Cloud Shell
blog.lightspin.io/azure-clou…
gafnit retweeted
The proactive community engagement by @notdurson of AWS security is a huge asset to the trust us cloudsec folks have in AWS. Thank you.
Exploiting AWS IAM Authenticator by crafting malicious signed STS GetCallerIdentity request.
👉CVE-2022-2385
blog.lightspin.io/exploiting…
Recent vulnerabilities in Kubernetes NGINX Ingress Controller with details of CVE-2021-25745, CVE-2021-25748.
Inspired by Mitch Hulscher CVE-2021-25742.
blog.lightspin.io/kubernetes…
One of the things I really love is to write technical blog posts. so here is a NEW one - my AWS RDS Vulnerability
blog.lightspin.io/aws-rds-cr…
#AWS #cloudsecurity #Lightspin
gafnit retweeted
Harden your AWS environment is important because you can never know how an attacker can break in 😈
and here is our example:
Cross-Account Access vulnerability in AWS SageMaker Jupyter Notebook Instance
blog.lightspin.io/aws-sagema…