PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cloud Penetration: Not Your Typical Internal Testing

sethsec.blogspot.com | blog | #cloud | #cloud-security | #aws | #pentesting | #privilege-escalation | #penetration-testing | #career | #iam
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

New to cloud penetration testing? Learn about the trials and tribulations of this rapidly growing career field from Bishop Fox expert, Seth Art.

Why it matters

This coverage gives security teams current context for monitoring, validation, and remediation.
Published
Collected

Related coverage

blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · hunt.io
Over 68 GB of Philippine Overseas-Employment Database Backups Copied From an Exposed Staging Server
An exposed staging server at UpCloud revealed a completed 68 GB copy of 27 Philippine overseas-employment database backups, a rebranded GodPotato privilege escalation tool, and the operator's own transfer logs.
blog · certik.com
Preparing for a Web3 Penetration Test: What to Expect Before, During, and After
reparing for a Web3 penetration test? Here’s what happens before, during, and after an engagement, and how to get the most value from yours.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · wiz.io
A security community success story of mitigating a misconfiguration
The story of fixing a common misconfiguration: GitHub Actions OIDC trust policies missing their 'sub' condition let anyone assume AWS roles, until coordinated research pushed defaults to change.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
Back