cloud 24
- Investigating suspicious AI workflows in Microsoft Entra Agent ID: Autonomous agents
- Exploring Agent based Cloud Review Capabilities
- AWS Security Digest #262 - Not private
- Navigating Lax Load Balancers: When an Intersection Gets You Inside
- Paved With Intent: ROADtools and Nation-State Tactics in the Cloud
- AWS Security Digest #261 - Pretending
- Pathfinding Labs: Deploy, test, and learn from 100+ intentionally vulnerable AWS environments
- The Convergence of Cloud Secrets & AI Risk
- AWS Security Digest #260 -
- The Good, the Bad and the Ugly in Cybersecurity – Week 19
- Claude Code Cost Tracking: AWS Bedrock vs Pro Max (Part 2) — Tag Propagation, Sydney Migration, Bug Fixes
- The Danger of Multi-SSO AWS Cognito User Pools
- AWS Security Digest #259 - Better late
- Essential Data Sources for Detection Beyond the Endpoint
- Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool
- AWS Security Digest #257 - Myth not Mythos?
- AWS Security Digest #256 - TY Mythos
- IAM the Captain Now – Hijacking Azure Identity Access
- Unpatchable Vulnerabilities of Kubernetes: CVE-2020-8562
- Ingress NGINX is EOL: A practical guide for migrating to Kubernetes Gateway API
- Cracks in the Bedrock: Agent God Mode
- What we learned about TEE security from auditing WhatsApp's Private Inference
- Cracks in the Bedrock: Escaping the AWS AgentCore Sandbox
- Understanding Current Threats to Kubernetes Environments