#cloudsec — Public Fediverse posts

🤖 Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

📝 AI models have reached a threshold ...

https://www.microsoft.com/en-us/security/blog/2026/07/08/protecting-microsoft-at-ai-speed-how-sfi-proactively-hardens-our-cloud/

📰 Microsoft Security Blog

#AI #CloudSec #CVE

🏛️ CISA Contractor AWS GovCloud Security Leak

📝 CISA contractor exposed AWS GovCloud credentials and internal system details.

https://www.schneier.com/blog/archives/2026/05/cisa-security-leak.html

📰 Schneier on Security

#GovSec #AI #CloudSec

🚩 CoPhish phishing campaign (HIGH severity) targets Copilot Studio agents to steal OAuth tokens — enabling session hijack & cloud access. No CVE. User training, OAuth app reviews, and token monitoring are key. Details: https://radar.offseq.com/threat/new-cophish-attack-steals-oauth-tokens-via-copilot-266ec823 #OffSeq #OAuth #Phishing #CloudSec

Tickets booked for #fwdcloudseceurope - hope to meet some new and old faces there!

#CloudSec #Fwdcloudsec

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Cloud Native Security; Explained”
📽️ https://twp.ai/4ipSVP

#CyberSecurity #SecurityAwareness #cloudsec #cloud #cloudnative

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Cloud Native Security; Explained”
📽️ https://twp.ai/4iosID

#CyberSecurity #SecurityAwareness #cloudsec #cloud #cloudnative

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Cloud Native Security; Explained”
📽️ https://twp.ai/4in9re

#CyberSecurity #SecurityAwareness #cloudsec #cloud #cloudnative

🔐 Gamma AI is now being used to craft pixel-perfect phishing pages.
These attacks mimic cloud login portals, flip JavaScript behavior, and bypass email filters.

📉 We break it all down in our latest article:
— Real misuse cases
— MITRE TTP matrix
— Python detection script
— Visual trust infographic

📖 Read it here: https://open.substack.com/pub/teamivity/p/weaponized-intelligence-how-gamma?r=3cbcvp&utm_medium=ios

#CyberSecurity #GammaAI #LLMSecurity #CloudSec #Phishing #Infosec

Hot take, If you develop for cloud environments you need to get used to a default deny on egress and only allow dependencies to be pulled during the build phase. You should know exactly what is talking to where and why. allow all on egress is the equivalent to I chmod 777'd it and it works so whatever...

#cloudsecurity #CloudSec #HotTake #Infosec

In the Cloud, #FinOps is #CloudSec

Fight me.

"An open-source collection of cloud infrastructure best practices, for bootstrapping your own cloud platform."

https://www.cloudguardrails.com/

#security #cybersecurity #cloud #cloudsec

"Highlights from fwd:cloudsec Europe 2024"

https://securitylabs.datadoghq.com/articles/highlights-from-fwdcloudsec-europe-2024/

#security #cloudsec

"Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources"

https://www.aquasec.com/blog/bucket-monopoly-breaching-aws-accounts-through-shadow-resources/

#aws #security #cloudsec #infosec

Day 1 of #BlackHatUSA2024

I am around the BlackHat area connecting with old friends and making new friends.

feel free to connect, highly interested in discussions around mobile, cloud, and supply chain security.

#infosec #mobilesec #cloudsec # #blackhat

HIRING: Senior Cyber Security Analyst / San Jose, CA

👉 https://infosec-jobs.com/J120075/

#InfoSec #infosecjobs #CyberSecurity #CyberCareer #cyber #security #jobs #cyberjobs #jobsearch #techjobs #hiring #SanJose #ValleyWater #SCADA #monitoring #Infrastructure #cloudsec #cybersec

The Loco Moco Security Conference (LocoMocoSec) #cfp is open until March 21st. The event takes place July 17th and 18th in Līhuʻe on Kauaʻi, Hawaiʻi https://sessionize.com/loco-moco-security-conference-2024 #appsec #prodsec #cloudsec

To me, it feels like organizations with a dedicated Security team that are developer and IDAM-led are "modern" and "best-of-breed." When you talk to these teams and individuals you feel encouraged and empowered. It feels like you're living and working in 2024. These teams know #CloudSec, #AppSec, and have the technical chops to address myriad InfoSec challenges. They seem to harness all sorts of technical ways and means like automation and AI. I know these organizations make me feel hopeful (which is damn near impossible).

On the flip side though, there are still countless Security organizations (especially in the reseller and VAR space) being "led" by the Network folks. What I find most interesting is these Cisco-centric individuals/teams have almost no way to even relate to the best-of-breed model I called out above. Talking to these folks feels like you're in a time capsule and the year is 2011.

I can't help but wonder if this is just my experience or if others are seeing and feeling this as well.

#Infosec #informationsecurity

Major cloud hosting provider LeaseWeb is working to restore "critical" systems after a security breach caused the company to take the affected systems offline to mitigate security risks.

In its statement, it told customers that only a small percentage of their cloud customers were impacted by the downtime. The company goes on to say that they have retained a Digital Forensics & Incident Response (DFIR) firm to assist with its investigation.

https://www.bleepingcomputer.com/news/security/leaseweb-is-restoring-critical-systems-after-security-breach/

#infosec #cybersecurity #securitybreach #Leaseweb #CloudSec

Another one from the Wiz Experts! 5 Vulnerability Management Best Practices - https://www.wiz.io/academy/5-best-practices-for-vulnerability-management

#vulnerabilitymanagement #vulnerability #bestpractice #cloudsec #cloudsecurity

🔎 findmytakeover

Scans AWS, Azure, and Google Cloud for dangling DNS records and potential subdomain takeovers

#CloudSec #cybersecurity

Headed to the #cloudsec superb owl

If you make it to Anaheim, say hi 👋

The YouTube link for this evenings meetup is at https://youtube.com/watch?v=FkRDNSHkpCc

#OWASP #Ottawa #AppSec #CloudSec

#AWS CloudTrail #vulnerability: Undocumented API allows CloudTrail bypass:

#CloudSecurity
#CloudSec

https://securitylabs.datadoghq.com/articles/iamadmin-cloudtrail-bypass/

Using #AWS? Check out @[email protected]'s article: "Abusing Misconfigured ECR Resource Policies" for examples of possible misconfigurations and how these can be abused:

#CloudSecurity
#CloudSec

https://hackingthe.cloud/aws/exploitation/Misconfigured_Resource-Based_Policies/misconfigured_ecr_resource_policy/

We need to talk about cloud security automation. The room for improvement is huge and the current state is really painful.

If you're running a Large Cloud Infrastructure, I want to hear from you! What are your challenges? Your solutions?

https://ldse.substack.com/p/about-cloud-security-and-automation

#cloudsec #automation #securityautomation