@raesene

Security Geek, Containers, Kubernetes, Ruby, Hillwalking. Probably more active on Mastodon (@raesene@infosec.exchange) or blue sky (@mccune.org.uk) these days.

 Scotland
mccune.org.uk
Joined July 2008
  • Tweets9.1K
  • Following1.7K
  • Followers4.7K
432Media
Think it's time to Log out here. If you're interested in container/kubernetes security I'm posting these days at Blue Sky (@mccune.org.uk), Mastodon (@[email protected]), and Linkedin linkedin.com/in/rorym/
5
709
🦋
3
686
Fun with Google Cloud's default service accounts (and how to leverage them for offensive purposes) securitylabs.datadoghq.com/a…

Exploring Google Cloud Default Service Accounts: Deep Dive and Real-World Adoption Trends

This post offers a deep dive into Google Cloud’s default service accounts, explaining their functionality, risks, and real-world adoption trends.

securitylabs.datadoghq.com
1
21
49
3,675
If people are thinking of checking out Blue Sky for any reason and are wondering how to find interesting accounts, it's worth knowing about their starter pack feature. Some possibly handy ones below. go.bsky.app/RnNiDb9 go.bsky.app/RCerxDE go.bsky.app/JvFS98y
2
500
The density and diversity of infosec people on @bluesky is now high enough to allow for great content and meaningful discussions. Why aren’t you joining? Known benefits: - no ads 😌 - no polarizing "For you" feed 🕊️ - an Open Source simili-TweetDeck 🤖
5
3
22
4,033
☁️ State of Cloud Security 2024 update of @Datadog’s report analyzing security posture data from a sample of thousands of orgs across AWS, Azure, and Google Cloud • Long-lived credentials continue to be a major risk. • Adoption of public access blocks in cloud storage services is rapidly increasing, • <1/2 of EC2 instances enforce IMDSv2, but adoption is growing • Securing managed Kubernetes clusters requires non-default, cloud-specific tuning • Insecure IAM roles for third-party integrations leave AWS accounts at risk of exposure • Most cloud incidents are caused by compromised cloud credentials datadoghq.com/state-of-cloud…

State of Cloud Security | Datadog

For our 2025 report, we analyzed AWS, Google Cloud, and Azure data from thousands of organizations to understand the latest trends in cloud security posture.

datadoghq.com
1
15
1
38
3,721
Apropos of nothing in particular... I'm more active these days on :- Blue Sky - @mccune.org.uk Mastodon - @[email protected] Linkedin - linkedin.com/in/rorym/
2
302
Rory McCune retweeted
Bluesky
@bluesky17 Oct 2024
over 100k people have joined bluesky in the last 12 hours alone... welcome! 🦋💙 bsky.app/download
Bluesky
@bluesky17 Oct 2024
how it started vs. how it's going 📈 bsky.app/download
167
1,144
461
3,318
945,079
Rory McCune retweeted
Cooper@Ministraitor16 Oct 2024
People often ask how many talks/cons my rigs have recorded by now, and I'd just accept any number suggested because, well, 🤷🏻‍♂️. Today I figured oh well, and ran some numbers: Events - 281 spread over 686 days. Talks - 5255 of which 4625 are currently online.
4
8
5
47
4,235
Thanks to the generosity of the community, we have a small number of pre-paid tickets to give away. We want to do our bit to help newcomers, those on low incomes, or those who simply deserve a chance. Our "pay it forward" nomination form is now live! payitforward.hackglasgow.liv…
5
1
5
1,063
That's me got my Noddy tickets booked for this one, looking forward to it!
Hack Glasgow@Hack_Glasgow1 Oct 2024
"Noddy" tickets are now available to purchase! A noddy ticket includes full access to the entire day, lunch, Platform's world class street food dinner, refreshments, entrance to the after-party, and 1x after-party drinks token. Head to hackglasgow.live to grab yours!
1
3
574
A globally distributed team of people have been...creating a lot of print jobs in the past 24 hours. And by that I mean we've been testing the new big-name RCE. See our detailed analysis here: securitylabs.datadoghq.com/a…

Remote execution exploit chain in CUPS: Overview, detection, and remediation

Learn more about the exploit chain affecting CUPS.

securitylabs.datadoghq.com
1
6
1
27
2,135
We are kicking off! #BSidesLjubljana
7
19
1,058
Preparation in full swing @muzej (thx Gaja, Natasa, Marko + boy who did all the heavy lifting). @Ministraitor in the house, making sure there will be recording #BSidesLjubljana
1
5
2
16
999
Rory McCune retweeted
Soroush Dalili
@irsdl23 Sep 2024
As a reminder for whoever is looking for my old articles such as .NET remoting article, please use my blog instead of the NCC Group research website as they have mangled almost all documents containing XML. e.g.: soroush.me/blog/2019/03/find… They all have a PDF there.

Soroush Dalili | A web application security ninja 🥷

A web application security ninja 🥷, a semicolon enthusiast!

soroush.me
6
36
3,282
🛎️ AWS Security Digest 176 is out! All about fwd:cloudsec Europe. awssecuritydigest.com/past-i… 1️⃣ undocumented-aws-api-hunter by @frichette_n 2️⃣ A Cloud Access Management Maturity Model: Part 1 & Part 2 by @elrowan 3️⃣ Highlights from fwd:cloudsec Europe 2024 by @christophetd Bonus: A trio of resources from the AWS mothership
4
10
991
Really looking forward to speaking at BSides Ljubljana this week!
Security BSidesLjubljana@BSidesLjubljana22 Sep 2024
This week! #Friday!
2
10
859
📚 tl;dr sec 248 ☁️ 10X Your Cloud Security @ramimacisabird 🛡️ Secure by Design whitepaper @SANSInstitute, @aws, @emjohn20, @paulvixie, @buddykey 📖 @fwdcloudsec overview @christophetd 😈 recaptcha-phish PoC @_JohnHammond 🤖 AI OffSec benchmark @nicowaisman, @Xbow and more! tldrsec.com/p/tldr-sec-248

[tl;dr sec] #248 - 10X Your Cloud Security, Secure by Design, AI OffSec Benchmarks

Excellent scaling CloudSec resources, SANS + AWS white paper, two OSS benchmarks for measuring the offensive capabilities of AI models

tldrsec.com
1
3
22
6,444
Are you ready to Hack Glasgow on the 26th April 2025? We are! Tickets, CFV, CFP, and more information available soon!
7
2
16
2,113
Rory McCune retweeted
SteelCon@Steel_Con20 Sep 2024
Still waiting for @nez_ze_nerd to sign the paperwork, but looks like next year's dates will be July 11-13. Plenty of time to book your hotel rooms and pick your outfits for our big 10th birthday party.
2
9
21
4,961
Load more