TGViewer
Channel Public Channel
CloudSec Wine

CloudSec Wine

@cloud_sec

All about cloud security

Contacts:
@AMark0f
@dvyakimov

About DevSecOps:
@sec_devops
Open in Telegram
Subscribers
2.27K
Photos
1.1K
Videos
0
Links
1.4K

Showing posts older than #306 · Back to latest

Older Posts 20 shown
Post #301 711
🔴 Auditing GKE operations? Configure Data Access audit logs

The GKE Admin Activity logs are missing "get" operations on Secret objects by default. So for example, if you store a service account password in your cluster as a Kubernetes secret, a "kubectl get secret service_account_password -o yaml" will get an attacker the entire secret without logging a single line into the audit logs.

https://padlock.argh.in/2022/02/10/gke-audit.html

#gcp
Padlock Auditing GKE operations? Configure Data Access audit logs Notes about information security, written by Feroz Salam.
Post #300 695
🔶 A "Safety Net" for AWS Canarytokens

AWS Canarytokens are a low-effort, high-fidelity method to detect attackers who have compromised your infrastructure.

https://blog.thinkst.com/2022/02/a-safety-net-for-aws-canarytokens.html

#aws
Thinkst Thoughts A “Safety Net” for AWS Canarytokens The AWS API Key Canarytoken (paid and free) is a great way to detect attackers who have compromised your infrastructure. The full details are in a previous blogpost, but in short: You go to and gen…
Post #299 685
🔷 Understanding and Protecting local authentication for Azure services - Part 1

The challenge is to protect service-level (or local) authentication credentials from malicious or unintended use in a way that is manageable at scale.

https://davidokeyode.medium.com/understanding-and-protecting-local-authentication-for-azure-services-part-1-e1b308e7b05f

#azure
Medium Understanding and Protecting local authentication for Azure services — Part 1 I recently started a series on protecting access in Azure. In a previous post, I covered anonymous access and protecting them. In this…
Post #297 736
🔶 Ransomware-resistant backups with duplicity and AWS S3

Why you should care about ransomware attacks even for irrelevant internet-connected systems, and how to use duplicity with AWS S3 to create ransomware-resistant backups.

https://www.franzoni.eu/ransomware-resistant-backups

#aws
Alan's Lair Ransomware-resistant backups with duplicity and AWS S3 Why you should care about ransomware attacks even for irrelevant internet-connected systems, and how to use duplicity with AWS S3 to create ransomware-resistant backups.
Post #295 725
🔶 Bypassing the AWS WAF protection with an 8KB bullet

The AWS WAF and Shield service can be used to protect web applications against a lot of different types of attacks. However, it has a limitation on the size of the packet that it can inspect that could result in attackers being able to bypass its protection features.

https://kloudle.com/blog/the-infamous-8kb-aws-waf-request-body-inspection-limitation

#aws
Kloudle Find & Fix 350+ security issues in your Cloud with Kloudle.
Post #294 1.11K
🔶 Attack trend alert: AWS-themed credential phishing technique

They're at it again. This time attackers are phishing for credentials by sending fake AWS log-in pages to unsuspecting users.

https://expel.com/blog/attack-trend-alert-aws-themed-credential-phishing-technique

#aws
Expel Attack trend alert: AWS-themed credential phishing technique | Expel Attackers are phishing with fake AWS log-in pages. See how our crew identified and triaged a malicious email to protect a customer.
Post #293 1.12K
🔶 Handling Auth in EKS Clusters: Setting Up Kubernetes User Access Using AWS IAM

How to get authentication working correctly in EKS from the beginning.

https://nextlinklabs.com/insights/handling-authentication-in-EKS-clusters-kubernetes-AWS-IAM

#aws
Nextlinklabs Handling Auth in EKS Clusters: Setting Up Kubernetes User Access Using AWS IAM | NextLink Labs Deploying a shiny new EKS cluster running the latest version of Kubernetes isn’t the hardest task in the world. On the other hand, setting up the authentic
Post #291 761
🔶 Why you need to update your risky default EMR managed roles and policies

Post examining EMR's default roles and managed policies to understand if they follow security best practices of least privileges.

https://blog.lightspin.io/why-update-risky-default-emr-managed-roles-and-policies

#aws
blog.lightspin.io Why you need to update your risky default EMR managed roles and policies In this blog we examine EMR's default roles and managed policies to understand if they follow security best practices of least privileges.
Post #287 783
🔶 How I Discovered Thousands of Open Databases on AWS

A writeup describing the journey on finding and reporting databases with sensitive data about Fortune-500 companies, hospitals, crypto platforms, startups, and more.

https://infosecwriteups.com/how-i-discovered-thousands-of-open-databases-on-aws-764729aa7f32

#aws
Medium How I Discovered Thousands of Open Databases on AWS My journey on finding and reporting databases with sensitive data about Fortune-500 companies, Hospitals, Crypto platforms, Startups during…
Post #286 935
🔶 Top 10 security best practices for securing backups in AWS

This post will guide you through a curated list of the top ten security best practices to secure your backup data and operations in AWS.

https://aws.amazon.com/ru/blogs/security/top-10-security-best-practices-for-securing-backups-in-aws/

#aws
Amazon Top 10 security best practices for securing backups in AWS | Amazon Web Services Security is a shared responsibility between AWS and the customer. Customers have asked for ways to secure their backups in AWS. This post will guide you through a curated list of the top ten security best practices to secure your backup data and operations…
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →