Just published my recap of KubeCon NA 2025 - Atlanta! 🇺🇸 My first time attending as a CNCF Ambassador + speaking twice 🎤🚀 👉 lnkd.in/eHYa2z82 AI on K8s, Zero-Trust, Platform Engineering, SPIFFE/SPIRE & more! #KubeCon #CNCF #Kubernetes #CloudNative #CloudSecurity #AI #PlatformEngineering

Metis is an open-source, AI-driven tool for deep security code review github.com/arm/metis #CloudSecurity #AISecurity

Welcome #KubeCon! 🤩

What a ride at #CloudNativeRejekts NA 2025 in Atlanta! ⚡ Deep-tech talks, AI breakthroughs, and hardcore #Kubernetes security insights, all powered by an incredible community. Full recap 👉 zigmax.net/cloud-native-r… Next stop#KubeConon 🚀#CloudNativev#CloudSecurityty

Ready!! 🤩 #Rejekts2025

On my way to #KubeCon + #CloudNativeCon North America! 🛫

Super excited to be part of #DevFest Montreal 2025! Can’t wait to connect, learn, and share ideas with the community. 🚀

3 WEEKS AWAY! 🚀 Cloud Native @rejekts.io is the essential FREE, in-person event on Nov 8 in Atlanta, GA. Explore hidden technical gems that you won't want to miss. Get your free ticket ➡️ cloud-native.rejekts.io

Orbit is a CLI tool that unifies the discovery of and access to the managed #Kubernetes clusters across different cloud providers (AWS EKS, Azure AKS, and Google GKE). It adds newly discovered clusters to your existing kubeconfig. gitlab.com/RMJx1/orbit // Source: #Kubernative Telegram channel

KyvernoCon is here! 🎉 An inaugural event for the #policyascode community, co-located with #KubeCon + #CloudNativeCon NA 2025. Connect with contributors, hear real-world stories, and see how Kyverno is scaling beyond Kubernetes. 🛠️ Join us → www.cncf.io/blog/2025/09... #Kyverno #CNCF #CloudNative

Excited to join #BSidesMontreal today!

🤩🤩 ! #CNCF Meetup #QuebecCity!

#Kubernetes Escape Room partyrock.aws/u/bernardoor...

Ever thought of using S3 server access logs for data exfiltration? If you control an IAM identity with `s3:GetObject`, you could receive log details including denied requests alongside the data you aim to exfiltrate. It's a unique take on cloud security worth exploring. Learn more:

Breaking Boundaries - Kubernetes Namespaces and multi-tenacy blog.amberwolf.com/blog/2025/se... #cloudsecurity #kubernetessecurity

Kubernetes 1.34 security features www.armosec.io/blog/kuberne... #KubernetesSecurity #CloudSecurity

Backdoor on s3 policy #cloudsecurity medium.com/@akarshad428...

Want more Platform Engineering content? Our friends @kubecrash.bsky.social are hosting a free, virtual conference on Tuesday, September 23rd! Get practical insights from speakers like Dima Shevchuk (Grammarly) & Lisa Shissler Smith (formerly Netflix). Register now: kubecrash.io

Build a small language model from scratch #AI #SLM medium.com/@shravankoni...

ATEAM: Azure Tenant Enumeration and Attribution Module #cloudsecurity github.com/NetSPI/ATEAM

skybound.link/2025/08/defc... #Kubernetes #cloudsecurity #defcon33

Want to help make Kubernetes better? If you run multiple clusters, the community would like to learn from you! Check out the survey!

#ECScape www.sweet.security/blog/ecscape...

Explore how misusing EC2 user data can lead to privilege escalation. If you have `ec2:ModifyInstanceAttribute` permissions, you can execute custom scripts as root on EC2 instances. This involves modifying user data and leveraging cloud-init to execute scripts at boot. Details here:

Kubectl-explorer github.com/keisku/kubec...

📣We're excited to announce that #Rejekts will take place on Nov. 8 as a one-day event before KubeCon Atlanta🌆 📜CFP is now open👉🏽 tinyurl.com/e6bkfpd8 🔔We look forward to receiving your rejekted proposals until 11th Aug 23:59 PM ET!

MCPSpy - Real-time monitoring for Model Context Protocol communication using eBPF github.com/alex-ilgayev... #AISecurity #CloudSecurity

Petit tool #AI du jour, made by #OVHcloud (merci @aurelievache.bsky.social pour la découverte): github.com/ovh/shai

Discover common vulnerabilities in AWS Lambda that allow attackers to access IAM credentials and event data. These incidents often exploit file read and SSRF vulnerabilities. Learn how attackers can leak sensitive information and how to protect your environments. Read more:

Humbled and excited to be renewed as a Microsoft MVP for the 9th consecutive year! 🚀 This recognition belongs to the incredible tech community that keeps pushing me to grow and give back. Let’s keep building, sharing, and securing together! #MicrosoftMVP #MVPBuzz #Azure #CloudSecurity #CloudNative

www.offensai.com/blog/the-fut... #AISecurity #CloudSecurity

MCP Security Checklist github.com/slowmist/MCP... #AISecurity #CloudSecurity

Iam-lens: Get visibility into the IAM permissions in your AWS organizations and accounts. Use your actual AWS IAM policies (downloaded via iam-collect) and evaluate the effective permissions. github.com/cloud-copilo... #cloudsecurity

Turn AWS Console access into IAM credentials using CloudShell! If you have session cookies from a developer’s browser, you can extract IAM credentials through an undocumented endpoint. Perfect for pen tests where direct credentials aren't available. Dive in for more details.

Ever wondered about Azure's Run Command feature? It's a potent tool for executing scripts, but it can also pose security risks. Our latest post explores how Run Command can be abused for lateral movement within cloud environments, and how to detect such activities. Let's dive in!

#CNCF Meetup QuebecCity! 🤩 Back from #KubeCon London! 🇬🇧

Mark your calendar: fwd:cloudsec Europe 2025 lights up Berlin on September 15-16! This two-day event is a non-profit cloud security conference, and we expect over 350 attendees this year!

TIL @microsoft.com is the largest cloud contributor to #oss @cncf.io projects #MSBuild

🧠 Multi-Agent Support in Copilot Studio (Preview) A new way to scale automation: agents can now delegate tasks to each other in Copilot Studio🤜🤛 📢Now in private preview—public preview coming soon. #MSBuild #PowerPlatform #CopilotStudio 🔗 www.microsoft.com/en-us/micros...

Well hell, AWS is finally taking a mature stance on service deprecations! "Today, we’re introducing the AWS Product Lifecycle page, a centralized resource that provides comprehensive information about service availability changes across AWS." Well done 👏 👏 buff.ly/OKMv8aF

CloudTrail monitoring for AWS API access over VPC endpoints is now GA! This is a good security feature which shows which API calls were denied by a VPC endpoint. Previously this data was not available - you could only see allowed calls or denies with direct API access in CloudTrail. buff.ly/Mw0XDI1

A tool for customers to evaluate their AWS service configurations based on AWS and community best practices github.com/aws-samples/... #cloudsecurity

👾 It's up!! Everything you ever wanted to know about Entra Administrative Unit (AU) attack paths, from my talk at @specterops.io SO-CON 😁 www.youtube.com/watch?v=oxD7...

Datadog Security Research is launching a free, online Detection Engineering conference called Datadog Direct! Featuring a stacked lineup of brilliant folks in threat intelligence, detection, and response! www.datadoghq.com/event/datado...

🚨 New on Hacking the Cloud: Discover how misconfigured tagBindings.create permissions in GCP can lead to privilege escalation. Learn how attackers can exploit tags to gain elevated access. Stay informed and secure your cloud infrastructure. Read more: hackingthe.cloud/gcp/exploita...

Good on Microsoft. This is an example of them at their absolute best.

FINOS AI Governance Framework air-governance-framework.finos.org #cloudsecurity #aisecurity

ImageRunner: A privilege escalation Vulnerability impacting GCP Cloud Run #cloudsecurity www.tenable.com/blog/imageru...

Yesterday was an incredible day at Platform Engineering Day and BackstageCon—so much energy and inspiration! Now I’m super excited for the #KubeCon keynote!