PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How Hackers Can Strengthen Cloud Security for Applications

hackerone.com | blog | #bug-bounty | #cloud | #cloud-security | #attack-surface | #conference | #risk-management | #penetration-testing | #ethical-hacking | #elastic | #hacker-powered-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Elastic's Josh Bressers reflects on how the cloud dissolved perimeter defenses and expanded attack surfaces, and why hacker-powered testing helps address the unknowns that keep security teams honest.
Published
Collected

Related coverage

blog · hackenproof.com
What Is Penetration Testing? How It Works, What You Get, and When to Test
A pentest is a time-boxed, authorized attack where ethical hackers chain flaws to prove exploitable risk, not just run scans. It outlines deliverables, audit drivers, and when to test.
blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · netspi.com
The Systems That Time Forgot
Forgotten test and legacy systems that escape asset management become easy entry points for attackers. The author outlines practical steps for discovery, inventory, and ownership.
blog · netspi.com
Secure360
A recap of the Secure360 conference in the Twin Cities, covering why risk is so hard for organizations to grasp, cloud security gaps, and using PCI DSS as a baseline for security programs.
Back