Curated security research, vulnerabilities, advisories and tools for practitioners.

#cloud

Security coverage tagged cloud. (Page 25)

721.

Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS

research | 2022-03-22 12:12 | volexity.com | Original ↗ | .md | #cloud | #vulnerability-research | #threat-intelligence

722.

Abusing Azure Hybrid Workers for Privilege Escalation – Part 1

vulnerability | 2022-03-17 00:00 | netspi.com | Original ↗ | .md | #cloud | #privilege-escalation | #azure

723.

Announcing Azure in BloodHound Enterprise

blog | 2022-03-17 16:36 | specterops.io | Original ↗ | .md | #cloud

724.

Live from SecureWorld Boston 2022

blog | 2022-03-15 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #conference

725.

Shifting Left with Ethical Hackers: A Q&A with GitLab

vulnerability | 2022-03-08 18:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #cloud | #cloud-security

726.

Escalating from Logic App Contributor to Root Owner in Azure

blog | 2022-03-09 00:00 | netspi.com | Original ↗ | .md | #cloud | #privilege-escalation | #path-traversal

727.

Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager

vulnerability | 2022-02-25 11:23 | swarm.ptsecurity.com | Original ↗ | .md | #cloud | #rce | #authentication-bypass

728.

Cloud 9: Top Cloud Penetration Testing Tools

blog | 2022-02-24 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #aws | #attack-surface

729.

Hunting for bugs in VMware: View Planner and vRealize Business for Cloud

vulnerability | 2022-02-15 14:06 | swarm.ptsecurity.com | Original ↗ | .md | #cloud | #rce | #vulnerability-research

730.

Eliminating Dangling Elastic IP Takeovers with Ghostbuster

research | 2022-02-13 00:00 | slcyber.io | Original ↗ | .md | #cloud | #cloud-security | #vulnerability-research

731.

Identity Attack Watch: January 2022

incident | 2022-01-28 17:06 | semperis.com | Original ↗ | .md | #cloud | #active-directory | #mfa

732.

The Log4Shell vulnerability may have been exploited since August 2021

vulnerability | 2022-01-27 16:54 | CVE-2021-44228 | blog.viettelcybersecurity.com | Original ↗ | .md | #cloud | #threat-intelligence | #log4j

733.

How To Extract Credentials from Azure Kubernetes Service (AKS)

blog | 2022-01-27 00:00 | netspi.com | Original ↗ | .md | #cloud | #kubernetes | #azure

734.

A modern, elastic design for Burp Collaborator server

blog | 2022-01-21 14:40 | portswigger.net | Original ↗ | .md | #cloud | #portswigger | #burp-collaborator

735.

Abusing Reverse Proxies, Part 2: Internal Access

blog | 2022-01-17 08:38 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #cloud

736.

Abusing Reverse Proxies, Part 1: Metadata

blog | 2022-01-17 08:38 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #cloud

737.

Zero-Day Collaboration: Working With Imperva to Eliminate a Critical Exposure

vulnerability | 2022-01-11 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #zero-day | #vulnerability

738.

Azure SAS Tokens for Web Application Penetration Testers

blog | 2022-01-06 00:00 | netspi.com | Original ↗ | .md | #cloud | #azure | #misconfiguration

739.

Best of NetSPI: Top Cybersecurity Blogs, Resources, Webinars, and Podcasts of 2021

blog | 2021-12-28 00:00 | netspi.com | Original ↗ | .md | #cloud | #appsec | #log4j

740.

Avoiding “Blindside” Cloud Security Attacks

blog | 2021-12-21 00:00 | bugcrowd.com | Original ↗ | .md | #cloud | #supply-chain | #cloud-security

741.

Tips for Migrating to a New Computer for Programmers

blog | 2021-12-20 00:00 | hackerone.com | Original ↗ | .md | #cloud | #ssh | #gpg

742.

CWE (Common Weakness Enumeration) and the CWE Top 25 Explained

blog | 2021-12-16 17:50 | hackerone.com | Original ↗ | .md | #cloud | #secure-coding | #cve

743.

How Hackers Help Organizations Face New Attack Vectors and Build Stronger Security Programs

blog | 2021-12-07 17:50 | hackerone.com | Original ↗ | .md | #bug-bounty | #cloud | #conference

744.

Azure Privilege Escalation via Azure API Permissions Abuse

vulnerability | 2021-12-01 18:12 | specterops.io | Original ↗ | .md | #cloud

745.

Advisory: Jamf Pro SSRF - CVE-2021-39303 & CVE-2021-40809

vulnerability | 2021-11-30 00:00 | CVE-2021-39303 | slcyber.io | Original ↗ | .md | #cloud | #vulnerability-research | #advisory

746.

CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory

vulnerability | 2021-11-17 00:00 | CVE-2021-42306 | netspi.com | Original ↗ | .md | #cloud | #azure | #certificates

747.

How Hackers Can Strengthen Cloud Security for Applications

blog | 2021-11-11 17:50 | hackerone.com | Original ↗ | .md | #bug-bounty | #cloud | #cloud-security

748.

Vulnerability Disclosure | What’s the Responsible Solution?

vulnerability | 2021-10-28 16:50 | hackerone.com | Original ↗ | .md | #cloud | #zero-day | #security-research

749.

Azure Privilege Escalation via Service Principal Abuse

vulnerability | 2021-10-12 13:10 | specterops.io | Original ↗ | .md | #cloud

750.

How Trustpilot Manages Risk by Working with Ethical Hackers

blog | 2021-10-14 16:50 | hackerone.com | Original ↗ | .md | #bug-bounty | #cloud | #cloud-security

← Previous More →