Security research team lead @TenableSecurity
Joined November 2021
- Tweets125
- Following612
- Followers276
- Likes410
Pinned Tweet
It was a pleasure! Big thanks to the Cloud Village team for having me!
Huge thanks to @shellyraban for showing us how to turn attacker behavior into detections that matter! 👏
From leaked credentials to forensic logging, Shelly proved that understanding the adversary is the best way to strengthen real defenses.
Thanks for joining us! ☁️ @OneRSAC
Shelly Raban retweeted
Apex Park is escaping the wilderness for a chilling final destination: the concrete jungle. 🎃🦕
The incredible love and energy we received for Apex Park gave us all the motivation we needed to bring it back one more time before we officially retire the theme forever in 2026.
Catch us at @BSidesNYC on October 17th at John Jay College for a spooky, haunted night at the park with a small, intimate crowd!
Think you have what is taken to share your expertise? Our CFP is officially OPEN! Come share your knowledge in an intimate setting and be part of our final-ever lineup across:
Talks (30 mins - Detailed research)
Tool Demos (20-30 mins)
Lightning Talks (10-20 mins)
🗓️ Event Date: October 17, 2026
⏳ CFP Deadline: September 30, 2026
📍 Location: John Jay College, NYC
🔗 Submit here: forms.gle/3PL7ctexanA94LTC7
Will you survive your visit? Send us your proposals and see you in NYC! ☁️🦇🎡
#CloudVillage #BSidesNYC #CFP #CyberSecurity #InfoSec #ApexPark
Super excited about this one!!
Autonomous #AI agents raise major security questions. At @fwdcloudsec North America, Tenable researchers @cnotin and @popov1ron will explore how AI agent identities function as a specialized, high-velocity breed of Non-Human Identity (NHI).
🔗: spr.ly/6013B8XRCv
7K weekly downloads. 730 versions of legitimate package, then Sliver C2 drops in the postinstall. Amazing work by Ron from my team catching this! Pin to 1.1.558, check for /tmp/.sshd on build servers - the masqueraded implant. Rotate creds if you installed it.
Tenable Research has detected yet another npm supply chain attack 🚨
This attack is part of an ongoing wave hitting the ecosystem right now
Affected: "cqa-lib/cqa-ui", version 1.1.559, 1.1.560
Last known clean version: 1.1.558
#SupplyChainAttack #npm #malware #SliverC2
Shelly Raban retweeted
Most organizations are flying blind when it comes to the Non-Human Identities behind their agentic AI🕵️
We'll present at @fwdcloudsec NA 2026 "Who Are the Robots? Uncovering AI Agents Identities." Covering Microsoft’s “Entra Agent ID” and Google’s “GCP Vertex AI Agent identities”
Shelly Raban retweeted
Starting in 15 mins: @shellyraban is live at #CloudVillage breaking down how to track attacker behavior in managed cloud services without the risk! 🛡️
Catch the reality of cloud deception live in Room 204! 🔍
📍 Moscone South, Level 2 | @OneRSAC
#RSAC
Can’t wait! 😍
How do you leak a cloud key without losing your budget? 🔑
Join @shellyraban at Cloud Village inside the Moscone Center to learn the "Hard Way" of running cloud honeypots—from authentic IAM roles to Bedrock & SageMaker forensics.
See you at @OneRSAC! 🛡️ #CloudSecurity #RSAC
Shelly Raban retweeted
Our Google Cloud VRP researchers don't miss! 🔥 Check out @terminatorLM's latest Looker research uncovering 9 novel cross-tenant vulns in Looker.
See how it was done: 👇
#AI is revolutionizing the cloud—but at what cost to security? Our team has been working on the NEW Cloud AI Risk Report that uncovers the top risks security teams should be aware of as AI-driven cloud adoption advances. Get the report here →... ow.ly/mguA1062UkH
Shelly Raban retweeted
It is with profound sadness that we announce the passing of our Chairman and Chief Executive Officer, Amit Yoran (@ayoran), after a battle with cancer. Today’s press release can be read here. ⬇️ tenable.com/press-releases/t…
Was such an amazing experience! Super interesting talks, 10/10 setup, and an awesome community🫶
Who watches the Watchmen? Let's steal credentials with Shelly Raban from policy-as-code engines at #WICCON2024.
youtube.com/watch?v=nZX3lpnC…
#CyberSecurity #WomenInTech
Shelly Raban retweeted
Researchers have uncovered new attack techniques targeting infrastructure-as-code (IaC) & policy-as-code (PaC) tools like HashiCorp's Terraform & Open Policy Agent (OPA), posing a severe risk to cloud platforms.
Learn how this works: thehackernews.com/2024/11/cy…
#cybersecurity
Thanks for featuring my DSLs attack techniques research!
Read all about it in our blog-
tenable.com/blog/the-dark-si…
📖 CloudSecList Issue 265 just got released, w/ content from @iann0036 @trailofbits @PushSecurity @tenablesecurity @tracebit_com @SentinelOne and more!
cloudseclist.com/issues/issu…
Had so much fun! Thanks to everyone who survived to hear my talk this late in the afternoon 😂
Last speaker for today. @shellyraban: Who watches the Watchmen? Let's steal credentials from policy-as-code engines at #WICCON2024. #CyberSecurity #WomenInTech
Enjoying the beautiful Haarlem while I put the final touches on my WICCON talk! See you there! 😊☕️
🎃✨ Witchy Alert! ✨🎃
WICCON 2024 is close to being SOLD OUT! 🕸️ If you don't have a ticket yet, you’ll need to cast a speed spell—spaces are vanishing faster than a full moon on Halloween night! 🌕🧙♀️
🔮 Get your tickets before it’s too late! 🔮 wiccon.nl/tickets-2024
Wow, what a crazy few days.
I just got home from @fwdcloudsec EU and wanted to share how amazing this journey was. 1/5
My fwd:cloudsec talk’s recording is now available on YouTube!
youtube.com/watch?v=1kk7STIs…
Shelly Raban retweeted
The recordings for fwd:cloudsec Europe talks are now on YouTube! youtube.com/playlist?list=PL…
Next month I’ll be speaking at #WICCON2024, a cybersecurity conference that puts women’s technical achievements in the spotlight. @wicca_NL has an awesome mission that is personally close to my heart.
