0:00-5:20
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
Links:
- Azure has another security issue around its Synapse offering; this one was discovered by Tenable.
- Sysdig has a dive into the real threats to SSH on EC2.
- Tailscale has announced the ability to support Tailscale SSH.
- Chris Farris has a treatise on the The Philosphy of Prevention when it comes to cloud security.
- Google Cloud CISO Phil Venables asks whether security analogies are counterproductive.
- A security issue of sorts was discovered around sts:GetSessionToken Role Chaining in AWS
- The person responsible for the giant Capital One hack that took advantage of a series of small AWS misconfigurations has been convicted.
- Rogue GitHub apps could have hijacked countless repos for a week or two earlier this year.
- Wickr for Government achieves FedRAMP Ready designation
- It takes an open source project like trackiam to collate IAM actions, AWS APIs, and managed policies from all over the place
- Passwordle lets you guess commonly used passwords.
discovered by Tenable
medium.comreal threats
sysdig.comTailscale SSH.
tailscale.comThe Philosphy of Prevention
chrisfarris.comsecurity analogies are counterproductive
philvenables.comsts:GetSessionToken Role Chaining in AWS
praetorian.combeen convicted
seattletimes.comRogue GitHub apps could have hijacked countless repos
theregister.comWickr for Government achieves FedRAMP Ready designation
aws.amazon.comtrackiam
github.comPasswordle
sarahcec.github.io
