Waiting… 🥲

I find it hard to believe that AWS charges me for having hourly data of costs in my AWS environment.

You can now see users that have triggered the Elevated Access toggle in Azure. A simple bypass is to immediately assign the principal the same permissions at the top level management group, Tenant Root Group (tenant ID) rather than the Root scope ("/"). I still think this is an important feature.

Finally read and implemented the AWS Delegated Management - @scottpiper.bsky.social’s article hits the nail on challebges - we built and maintained an internal API to access this information for automation purposes, which I would do again if it wasn’t for this feature www.wiz.io/blog/use-cas...

We’re also happy to announce our Europe scholarship program. Through this initiative, we hope to give a limited number of students or those looking to make a career change a chance to attend the conference, through a complimentary ticket and a stipend to cover travel expenses..

Ticket sales for fwd:cloudsec Europe 2025 goes live on April 22nd, first batch at 9 AM CET and a second batch at 7PM CET. Tickets are sold through Swoogo, link at fwdcloudsec.org/conference/e... ..

GitHub has released an unofficial tool to audit GitHub Actions Released after the Changed-Files debacle github.com/github/audit...

Cloudy at Fløtatind, Sunndal

The only liberation we’ve experienced through the past week is the liberation of our savings

What happens if a lambda that puts an event to an S3 triggers on the same S3… I can’t afford to find out

Messed up an entire GCP org. trying to clean up inheritance using google_organization_iam_policy rather than binding. Will never know what random internal service account were assigned a hopefully not critical role.

It's happening again! We're looking for sponsors that will help support this years European conference🤝

Is there any way to generate an SBOM that describes github actions and their transitive dependencies? Ref tj-actions. I feel like this should be a thing

Stumbled upon the Serverless Image Handler while looking into AWS Solutions: www.o3c.no/knowledge/ab...

I'll be in Singapore at that time, but for those lucky enough to make it - ENJOY and hope to see you next year or in Europe this Fall (TBA).

Last week, we presented our latest research into Azure and OIDC where we also released our latest tool for mapping attack paths between Azure and GitHub www.o3c.no/knowledge/to...

The CFP for the best cloud security conference on earth is now open! If you'd like your research to be presented alongside the cutting edge of the industry, this is your opportunity! fwdcloudsec.org/conference/n...

AWS just renamed the Serverless Image Handler solution to Dynamic Image Transformation for Amazon CloudFront aws.amazon.com/solutions/im...

Starting the new year above the clouds

Cariad, a subsidiary of Volkswagen Group recently had a data compromise in AWS. Unlike my initial instinct, this was not related to a Public or Unprotected bucket.. Looking further into the breach, published by the Chaos Computer Club (ccc.de) responsible for the disclosure it was discovered by..

Great writeup on Azure OpenAI Abuse by Matt Graber redcanary.com/blog/threat-...

First year I have FOMO for not attending #reinvent

Spent some time on AWS research tonight. I’m looking forward to interact with the new vulnerability disclosure program 🫡

Are you an Azure Pentester looking for new lateral movement techniques? Take a look at my blog post about abusing Data Factory to steal secrets and tokens. Thanks @karimscloud.bsky.social for the inspiration to look into this. codyburkard.com/abusingselfh...

Wrote some research on abusing Azure Data Factory www.o3c.no/knowledge/az... #cloudsecurity

Twitter has been dead for weeks, time to move on