Security research team lead @TenableSecurity
Joined November 2021
- Tweets125
- Following612
- Followers276
- Likes410
Shelly Raban retweeted
Apex Park is escaping the wilderness for a chilling final destination: the concrete jungle. 🎃🦕
The incredible love and energy we received for Apex Park gave us all the motivation we needed to bring it back one more time before we officially retire the theme forever in 2026.
Catch us at @BSidesNYC on October 17th at John Jay College for a spooky, haunted night at the park with a small, intimate crowd!
Think you have what is taken to share your expertise? Our CFP is officially OPEN! Come share your knowledge in an intimate setting and be part of our final-ever lineup across:
Talks (30 mins - Detailed research)
Tool Demos (20-30 mins)
Lightning Talks (10-20 mins)
🗓️ Event Date: October 17, 2026
⏳ CFP Deadline: September 30, 2026
📍 Location: John Jay College, NYC
🔗 Submit here: forms.gle/3PL7ctexanA94LTC7
Will you survive your visit? Send us your proposals and see you in NYC! ☁️🦇🎡
#CloudVillage #BSidesNYC #CFP #CyberSecurity #InfoSec #ApexPark
Shelly Raban retweeted
Most organizations are flying blind when it comes to the Non-Human Identities behind their agentic AI🕵️
We'll present at @fwdcloudsec NA 2026 "Who Are the Robots? Uncovering AI Agents Identities." Covering Microsoft’s “Entra Agent ID” and Google’s “GCP Vertex AI Agent identities”
Shelly Raban retweeted
Starting in 15 mins: @shellyraban is live at #CloudVillage breaking down how to track attacker behavior in managed cloud services without the risk! 🛡️
Catch the reality of cloud deception live in Room 204! 🔍
📍 Moscone South, Level 2 | @OneRSAC
#RSAC
Shelly Raban retweeted
Our Google Cloud VRP researchers don't miss! 🔥 Check out @terminatorLM's latest Looker research uncovering 9 novel cross-tenant vulns in Looker.
See how it was done: 👇
Shelly Raban retweeted
It is with profound sadness that we announce the passing of our Chairman and Chief Executive Officer, Amit Yoran (@ayoran), after a battle with cancer. Today’s press release can be read here. ⬇️ tenable.com/press-releases/t…
Shelly Raban retweeted
Researchers have uncovered new attack techniques targeting infrastructure-as-code (IaC) & policy-as-code (PaC) tools like HashiCorp's Terraform & Open Policy Agent (OPA), posing a severe risk to cloud platforms.
Learn how this works: thehackernews.com/2024/11/cy…
#cybersecurity
Shelly Raban retweeted
The recordings for fwd:cloudsec Europe talks are now on YouTube! youtube.com/playlist?list=PL…
Shelly Raban retweeted
Loved @shellyraban's @fwdcloudsec talk on malicious use of IaC files & a vulnerability in OPA! She mentions verifying files prior to ANY usage (even planning!) is key to avoiding these issues.
Shelly Raban retweeted
This was an incredible presentation! Well done on the fantastic security research on IaC security weaknesses and misconfigurations.
"Who Watches the Watchmen?" @shellyraban! 👋🏾
#fwdcloudsec #cloudsecurity
Shelly Raban retweeted
"One Click, Six Services: Abusing The Dangerous Multi-service Orchestration Pattern" by @terminatorLM. I'm a sucker for undocumented or hidden APIs and this is definitely going to be interesting!
Shelly Raban retweeted
First up we have "Intercloud Identities: The Risks and Mitigations of Access Between Cloud Providers" from @NoamDahan and @arieitan. This is sure to be an exciting dive into identity risks.
Shelly Raban retweeted
One of the most common #cryptomining threats for cloud environments is the #Kinsing #malware. Read about the latest Kinsing discovery from Tenable Research. spr.ly/6015dr1NR
Shelly Raban retweeted
Shelly Raban retweeted
CloudTrail and Server Access Logs provide critical insights into Amazon S3 security. Find out how to use them effectively to prevent ransomware attacks.
Read: thehackernews.com/2023/10/th…
#CloudSecurity #ThreatDetection
Shelly Raban retweeted
📢 We’ve identified a new and massive #ransomware campaign targeting external facing #Postgres servers. IOCs below and more details coming soon.
IOCs:
185[.]225.75.188
185[.]225.75.189
194[.]180.49.20
194[.]180.49.9
Shelly Raban retweeted
Mexico #InfoStealer - New Wave 🚨
Phishing domain - rfc-constancia[.]com
WebDAV servers - 167[.]71.245.175@80, 167[.]71.245.41@80
C2 - opulentxhaven[.]com (104[.]21.58.196)
Malicious payloads in thread 👇
Shelly Raban retweeted
Some of our team's recent research on S3 ransomware is featured in @AwsSecDigest!
Go check it out plus other great content from expert AWS researchers 👇
💌 AWS Security Digest 133 is out!
1️⃣ The Rising Threat of S3 Ransomware: Mastering Detection @team__axon
2️⃣ AWS Security Monitoring in 2023: Untangle the chaos @cloudonaut_io
3️⃣ Security Hub gives me imposter syndrome @jcfarris
asd.zph.app/63C
Shelly Raban retweeted
Fully EDR Bypass initial access vector using #cmdl32.exe (??)
weaponized LNK object with cmdl32’s settings file inside RAR.
#pentesting #edr #redteam #purpleteam @ElliotKillick