#awssecurity — Public Fediverse posts

AWS DevSecOps Training || Learn End-to-End CICD + Security Automation

https://www.emilyselect.com/aws-devsecops-training-learn-end-to-end-cicd-security-automation/?feed_id=2716&_unique_id=6908271f30dc4&Mastodon

#awscicdproject #awsdevsecopsproject #awssecurity #awstraining #cicdpipelinewithdevsecops #devopsandsecurity #devopsautomation #devopstraining #devsecopscertification #devsecopscicdpipeline #devsecopsengineer #devsecopsexplained #devsecopssecurityscan #devsecopstraining #devsecopstra...

Crimson Collective is using clever tricks on AWS—from sniffing out exposed keys to full-blown privilege escalation. Think your cloud’s safe? Discover how these tactics could put your data at risk and what you can do about it.

https://thedefendopsdiaries.com/crimson-collective-tactics-techniques-and-mitigation-strategies-for-aws-cloud-attacks/

#crimsoncollective
#awssecurity
#cloudattacks
#databreach
#cyberthreats

Crimson Collective is using clever tricks on AWS—from sniffing out exposed keys to full-blown privilege escalation. Think your cloud’s safe? Discover how these tactics could put your data at risk and what you can do about it.

https://thedefendopsdiaries.com/crimson-collective-tactics-techniques-and-mitigation-strategies-for-aws-cloud-attacks/

#crimsoncollective
#awssecurity
#cloudattacks
#databreach
#cyberthreats

Crimson Collective is using clever tricks on AWS—from sniffing out exposed keys to full-blown privilege escalation. Think your cloud’s safe? Discover how these tactics could put your data at risk and what you can do about it.

https://thedefendopsdiaries.com/crimson-collective-tactics-techniques-and-mitigation-strategies-for-aws-cloud-attacks/

#crimsoncollective
#awssecurity
#cloudattacks
#databreach
#cyberthreats

Crimson Collective is using clever tricks on AWS—from sniffing out exposed keys to full-blown privilege escalation. Think your cloud’s safe? Discover how these tactics could put your data at risk and what you can do about it.

https://thedefendopsdiaries.com/crimson-collective-tactics-techniques-and-mitigation-strategies-for-aws-cloud-attacks/

#crimsoncollective
#awssecurity
#cloudattacks
#databreach
#cyberthreats

Some early morning coffee and catching up on the latest AWS IAM news and blogs on my Kindle Scribe - love this big screen! Becoming a bit of a habit (a good one too). #aws #awssecurity

New Phishing Campaign Attacking AWS Accounts To Steal Logins https://cybersecuritynews.com/aws-phishing-campaign/ #CybersecurityTrends #CyberSecurityNews #PhishingAttacks #AWSSecurity #Phishing #cloud

IdentifyMobile incident exposed 200M records from hundreds of companies

https://stackdiary.com/identifymobile-incident-exposed-200m-records-from-hundreds-of-companies/

#Security #DataBreach #IdentifyMobile #SMS #AWS #Cybersecurity #Privacy #Hack #2FA #Authentication #DataProtection #InfoSec #CCC #TechNews #OnlineSecurity #Encryption #DataLeak #Vulnerability #Incident #TechSafety #ConfigurationError #Webex #AWSsecurity #DigitalSecurity #CloudSecurity #DataPrivacy #TechBreach #SecurityFlaw #CyberSafety #DataSecurity

IdentifyMobile incident exposed 200M records from hundreds of companies

https://stackdiary.com/identifymobile-incident-exposed-200m-records-from-hundreds-of-companies/

#Security #DataBreach #IdentifyMobile #SMS #AWS #Cybersecurity #Privacy #Hack #2FA #Authentication #DataProtection #InfoSec #CCC #TechNews #OnlineSecurity #Encryption #DataLeak #Vulnerability #Incident #TechSafety #ConfigurationError #Webex #AWSsecurity #DigitalSecurity #CloudSecurity #DataPrivacy #TechBreach #SecurityFlaw #CyberSafety #DataSecurity

IdentifyMobile incident exposed 200M records from hundreds of companies

https://stackdiary.com/identifymobile-incident-exposed-200m-records-from-hundreds-of-companies/

#Security #DataBreach #IdentifyMobile #SMS #AWS #Cybersecurity #Privacy #Hack #2FA #Authentication #DataProtection #InfoSec #CCC #TechNews #OnlineSecurity #Encryption #DataLeak #Vulnerability #Incident #TechSafety #ConfigurationError #Webex #AWSsecurity #DigitalSecurity #CloudSecurity #DataPrivacy #TechBreach #SecurityFlaw #CyberSafety #DataSecurity

IdentifyMobile incident exposed 200M records from hundreds of companies

https://stackdiary.com/identifymobile-incident-exposed-200m-records-from-hundreds-of-companies/

#Security #DataBreach #IdentifyMobile #SMS #AWS #Cybersecurity #Privacy #Hack #2FA #Authentication #DataProtection #InfoSec #CCC #TechNews #OnlineSecurity #Encryption #DataLeak #Vulnerability #Incident #TechSafety #ConfigurationError #Webex #AWSsecurity #DigitalSecurity #CloudSecurity #DataPrivacy #TechBreach #SecurityFlaw #CyberSafety #DataSecurity

We ask #ChatGPT about an oft overlooked policy that you should be putting in place when using #VPC #Endpoints in #AWS. Do NOT inadvertently allow access to other tenants' resources!

FOLLOW US as we explore cloud network security with #AI.

#awssecurity

@notdurson & @astor I credit you two for being a force in how AWS has changed this narrative. Keep going - lead the way.

https://luketucker.com/aws-security-bulletins-and-cloud-security-researcher-trends/

Thanks for the original share @frichetten

#security #offensivesecurity #disclosure #securityawareness #securityresearch #outreach #bugbounty #aws #AWSCommunity #customerobsession #awssecurity #awscloud #awsome

@notdurson & @astor I credit you two for being a force in how AWS has changed this narrative. Keep going - lead the way.

https://luketucker.com/aws-security-bulletins-and-cloud-security-researcher-trends/

Thanks for the original share @frichetten

#security #offensivesecurity #disclosure #securityawareness #securityresearch #outreach #bugbounty #aws #AWSCommunity #customerobsession #awssecurity #awscloud #awsome

TIL, there's a hard coded client_id in the #AWS #awsconsole for what I suspect is an AWS managed account that handles oauth2.0 for root/some login types.

The client_id depending on the service that it first redirects looks like this arn:aws:iam:015428540659:user/s3

Another service that I've noticed is phd-console (Which I think is AWS health dashboard).

So in this pattern it looks like your secret access key is treated as the client secret in an authorization code flow.

The code/access token returned by AWS is an opaque encrypted JWT.

#awssecurity

A rundown of AWS security best practices. How to tame the cloud and deliver robust cloud services that won't keep you awake at night.

https://www.blackchili.co.uk/aws-best-practices/

#cloudsecurity #awssecurity #keepitsimple #getthebasicsright #blackchili

🔒 Security is of the highest priority for us and our customers. Ensuring the security of their applications running on the underlying infrastructure is crucial. We trust in the key capabilities of AWS to provide a robust security layer, enhanced within our own platform.

https://www.youtube.com/watch?v=H7C-qUZm8mY

#AWS #AWSDevOps #AWSSecurity #Lagoon #Kubernetes #security #infrastructure #ZeroOps #DevOps #OpenSource

The #AWSreInforce registration is now open! What to expect: In-depth content across 6 tracks, hands-on learning opportunities & networking with leaders & experts in the industry. I look forward to seeing you in Anaheim, June 13-14! https://aws.amazon.com/blogs/security/gain-insights-and-knowledge-at-aws-reinforce-2023/ #awssecurity #awscloud

#ChatGPT explaining cross-account Security Group referencing pretty neatly. One of the easiest ways to implement an IP Address-free trust between connected apps in #AWS.

Also called #microsegmentation.

FOLLOW US as we explore cloud network security with #AI.

#awssecurity

#ChatGPT may have passed law and business exams, but it won't be getting #AWS networking certifications anytime soon.

9.9.9.9 is not in the 128.0.0.0/1 subnet, and Rules are not evaluated sequentially 🤦

FOLLOW US as we explore cloud networking security with #AI!

#awssecurity

Had to put words in #ChatGPT's mouth to get this answer.

Does anybody know if calls to the time sync service are logged? Maybe that's what we'll ask in a couple of days.

FOLLOW US as we talk to #AI about cloud network security.

#awssecurity

Best to configure Route53 Resolver Firewall so exfil can only happen to trusted parties 😅

#awssecurity

https://infosec.exchange/@ChaserSystems/109840264932775052