Wondering why I’m seeing SSM charges suddenly in accounts where SSM charges never existed before.

I Thought I Knew System Design Until I Met a Google L7 Interviewer I love this post so much. I worked at a company where my job changed and the person behind me came in and started putting Kafka in everywhere. The system hadn’t even launched yet. medium.com/beyond-local...

Cloud Security Class Lab Code ☁️ Use at your own risk and please read all the caveats 🔒 teriradichel.substack.com/p/cloud-secu...

What I would like to know is if this AWS IP on black lists why is it still operating on AWS and snooping around on my server? 15.157.135.226 Montreal

Troubleshooting a Lambda Function With AI 🤖 Getting quick answers when troubleshooting code using AI tools, but only when you don't need to protect your IP and sensitive data teriradichel.substack.com/p/troublesho...

Troubleshooting a Lambda Function With AI Getting quick answers when troubleshooting code using AI tools, but only when you don't need to protect your IP and sensitive data teriradichel.substack.com/p/troublesho...

When to Use An AI Agent 🤖 Considering when AI agents are useful and when they burn tokens unnecessarily or may produce a harmful result teriradichel.substack.com/p/when-to-us...

For friends in SF I’ll be speaking at the AWS Community Day in SF again this year. www.aws-cscd.com

Non-Deterministic: The most important word you need to understand about AI 🤖 teriradichel.substack.com/p/non-determ...

Now in Amazon Bedrock all models are available by default. You can manage access via IAM policies and SCPs.

Whatever is at 189.36.244.50 is malicious or compromised. Easy to see the command it’s trying to run using AI as explained in this post. Targeting Apache CVE 2.4.49 and 2.4.50. teriradichel.substack.com/p/using-ai-t...

Apologies I forgot to add the fix for asymmetric routing to the script. It is a bit complicated to explain so I linked to a prior post and added a script you can run for each host to generate the configuration to fix the routes. Seems to work. :-)

I just logged into my @fidelity account and it shows that I granted CoPilot access to my account. I have never used CoPilot. Login on the web and check your data sharing settings.

Securing Pentest and Bug Bounty Research Networks on AWS Make it harder for an attacker to compromise your pentest infrastructure and snipe your bounties How might an attacker be infiltrating your networks and stealing your data in ways you don’t notice? teriradichel.substack.com/p/securing-p...

How Spot Impostor Traffic 😈 When The Network Logs Look Correct How can you tell if someone spoofed an IP address and has compromised encryption in transit? teriradichel.substack.com/p/how-spot-i...

Spotting a Man In the Middle Attack on AWS in Network Logs When your IP logs will tell you that your traffic is being intercepted and when they won't Will you always be able to tell from your network logs? Not always from your particular vantage point. teriradichel.substack.com/p/spotting-a...

I took a look at the generative AI tools offered by Amazon and AWS snd explain AI concepts along the way (model, MCP, RAG, foundational model, frontier model). teriradichel.substack.com/p/generative... Which tools should you use and why?

Blog: ✍️👩‍💻🤖🔒 teriradichel.substack.com

Using AI to Analyze Network Packets This post is part of my Security Insights section of the blog. You can subscribe to the sections that interest you most. teriradichel.substack.com/p/using-ai-t...

Bank Accounts and Yubikeys Which banks offer protection for your assets via a Yubikey in 2026? This is in the 🔒Cybersecure Me 🔒 section of my blog. You can subscribe to each section separately. teriradichel.substack.com/p/bank-accou...

The first time I sat down with Eric Hammond to got a crash course in AI 🤖 we first made a plan, then implemented it using Claude Code. That was at re:Invent a couple of years ago before Kiro existed.

New blog. Subscribe for free for security 🔒 and AI 🤖 research. teriradichel.substack.com

If Pentesting, AppSec, Bug Bounties or Security Engineering is your focus the Security Bugs section of my blog may be for you. Here I explore a serialization CVE in SolarWinds and prevention methods Programming Languages and Serialization CVEs teriradichel.substack.com/p/programmin...

If AWS Security is your thing, I have a section on my new blog just for that which you can follow separately. In this post I corralled all my EIPs into a single account in my org. Simplify IP Address Management Across Your AWS Organization teriradichel.substack.com/p/simplify-i...

Whether you love or hate X for all the reasons it’s where I find the a lot of good information to help me on pentests - more than any other platform. I just hit 11K followers over there. I’m sure it will fluctuate but nice milestone anyway.

Weird. AWS multi-session support got turned on and pretty sure I didn’t do it. Did I? When enabled it’s interesting that I can’t see switch roles I had set up. Seems like those would still be there.

I’m just getting organized on substack. One of the cool things about it is that you can set up different sections and from what I’ve read people can subscribe to the different sections. In this section I’m going to focus on ~ 🤖 AI and Vibe Coding Research teriradichel.substack.com/p/ai-and-vib...

Google Workspace is going to start deleting secondary calendars that don’t have owners. If you don’t know what that means check your email if you are a workspace admin.

VPC encryption controls: Enforce encryption in transit within and across VPCs in a Region, Seems like a very helpful control for larger organizations where compliance and security are critical. aws.amazon.com/blogs/aws/in...

With the rise of AI tools, interconnected MCP servers, and risky security propositions like Clawdbot / Moltbot there’s no better time to learn more about cybersecurity. Most of my class material is still applicable and it’s free here (new blog): teriradichel.substack.com

Wow. Talk about a single point of failure always on with all your credentials using tons of tokens (hopefully someone else not using your tokens) and people getting banned on Claude Code. Be careful. Clawdbot / Moltbot m.youtube.com/watch?v=WfTi...

Why did Slack reset my password?

Poison Fountain initiative aims to disrupt AI training data | SC Media www.scworld.com/brief/poison...

I think I see something really good coming in IAM switch role, role/user tracking and maybe MFA. Am I right?! 🤞Looking at CloudTrail logs.

Sorry. Not sorry. 🎉🏈

OK. I’m awake. Too old for all-nighters but keep doing it when I have a deadline because I become obsessed. Finishing a report and then expect more blog posts on my new blog at: teriradichel.substack.com

You don’t need AI to run code scanners that don’t use AI. That is a waste of tokens and 💰. But you can use AI to write a script to install and run a bunch of scanners. I just did that and will write about it here and provide the script when done with current pentest! teriradichel.substack.com

Wait. You want me to allow your tool to access my GitHub account? No. infosec.exchange/@teriradiche...

Kiro now has granular controls for fetch URLs. Recommend you limit to what you need and trust. AWS Weekly Roundup: Kiro CLI latest features, AWS European Sovereign Cloud, EC2 X8i instances, and more (January 19, 2026) aws.amazon.com/blogs/aws/aw...

Adding a “hello we are xyz company” in your packet header doesn’t make it any less annoying that you are sending spam packets to my endpoints.

AI Annoyance 🤖 writing a script last night. But I expect this will improve. infosec.exchange/@teriradiche...

The official Anthropic git MCP server used to access git repositories had the security vulnerabilities accessible through prompt injection that could lead to repository access and RCE (execution of command on remote systems). thehackernews.com/2026/01/thre...

Attackers Redirected Employee Paychecks Without Breaching a Single System [TR: Check for this ~ The threat actor registered an external email address as an authentication method within the organization’s Azure Active Directory environment.] cybersecuritynews.com/attackers-re...

China Has Banned a Host of Major Cybersecurity Firms cybermagazine.com/news/inside-...

If @verizon is giving me a credit for a service outage why do I have to click a link and fill something out to get it? Just taking up more customer time.

I have this idea for what I want to do on substack if anyone is interested enough to pay for a subscription. Ask me to build anything with AI and if I select your request I’ll spend a few hours to a day on it, see what I can build, and publish it to GitHub.