0xCBE

joined 1 year ago
MODERATOR OF
cloudsecurity
sorted by: new top controversial old
2
A framework to securely use LLMs in companies - Part 1: Overview of Risks (boringappsec.substack.com)
2
Bad.Build: A Critical Privilege Escalation Design Flaw in Google Cloud Build Enables a Supply Chain Attack (orca.security)
2
Impact of remote-code execution vulnerability in LangChain (ntietz.com)
1
PoisonGPT: How we hid a lobotomized LLM on Hugging Face to spread fake news (blog.mithrilsecurity.io)
1
ALFA: Automated Audit Log Forensic Analysis for Google Workspace (github.com)
 

cross-posted from: https://infosec.pub/post/397812

Automated Audit Log Forensic Analysis (ALFA) for Google Workspace is a tool to acquire all Google Workspace audit logs and perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework.

By Greg Charitonos and BertJanCyber

1
Prompt Injection Attacks and Mitigations (rez0.blog)
1
Building Chainguard's container image registry (www.chainguard.dev)
 

We’ve made a few changes to the way we host and distribute our Images over the last year to increase security, give ourselves more control over the distribution, and most importantly to keep our costs under control [...]

1
Kubernetes Security Basics Series Part I - Deployment and Container Orchestration (ksoc.com)
 

This first post in a 9-part series on Kubernetes Security basics focuses on DevOps culture, container-related threats and how to enable the integration of security into the heart of DevOps.

1
Kubernetes Grey Zone: Risks in Managed Cluster Middleware (www.wiz.io)
1
My AWS Pentest Methodology (medium.com)
1
Microsoft says early June disruptions to Outlook, cloud platform, were cyberattacks (apnews.com)
1
GCP Pentesting Guide (slashparity.com)
Introduce yourself! in c/blueteam@infosec.pub
[–] 0xCBE@infosec.pub 1 points 1 year ago

👋 infra sec blue team lead for a large tech company

view more: next ›