🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

1/ A world first reverse engineering analysis of AWS Session Tokens. Prior to our research these tokens were a complete black box. Today, we are making it more of a glass box, by sharing code and tools to analyze and modify AWS Session Tokens. medium.com/@TalBeerySec/r…

The schedule for fwd:cloudsec Europe is out! fwdcloudsec.org/conference/eur… Rami McCarthy will be giving the opening talk, "How to 10X Your Cloud Security (Without the Series D)". Talks will be live-streamed on YouTube for free.

Greetings from the new simple Plerion! 🎈🍾 Tired of the complexity and confusion in cloud security? We hear you. That's why we've rebuilt our brand and website, ex. all the BS. No more jargon and fluff. Our mission is to simplify cloud security. plerion.com

3 events, 3 days, over $3m paid and a new bug bash industry record. If you’re not hacking on bugcrowd you’re missing out on the best events the industry has to offer. Love our crowd. You are all so incredible.

Excited to release a new open-source tool to help with AWS detection engineering: Grimoire! github.com/datadog/grimoi… securitylabs.datadoghq.com/articles/annou…

TIL the EventBridge team recently replaced kinesis with SQS internally, resulting in a substantial p50 improvement

We're trying something a little different this week. Instead of just giving you the articles to read, we're doing the reading for you with a little commentary. What do you think? buff.ly/3X6gUki

Terraform Weekly newsletter ( weekly.tf ) is looking for sponsors! Stats: * 186 newsletters (once per week) * 9300+ email subscribers * 40% open rate * 15% click rate Main audience: #Terraform enthusiasts, #DevOps Engineers, and #SRE practitioners. DMs are open.

What happens if you accidentally give the whole world permission to read or write to your SQS queue? Sid comes scans billions of queues and finds yours, that's what! If you work with SQS, this research is for you. plerion.com/blog/your-queu…

In my fwd:cloudsec presentation on Getting into AWS Security Research as a N00bcake, I challenged folks to just go try it and publish the results. It took a little longer than a week but Sid did it, and the results are pretty awesome. plerion.com/blog/your-queu…

I’ve been thinking about how we create new IAM service roles in AWS Mostly, it seems like they get artisanally crafted by an IAM expert I wrote up a survey of existing approaches and tools: ramimac.me/iam-service-ro… Very interested in hearing if you have a good approach!

🛠️ Spent some time this AM adding multi-region support to console.wut.dev. Now you can see a live table view of all your AWS resources in 1+ regions. Next up: multi-account mode!

Ever wonder why there is a different way to delete every thing in AWS? Sometimes you have to type the resource name, sometimes "delete", sometimes you just click "confirm". What is going on here? I got to work with my hero Rami McCarthy on this. If you're into security UX and

A tale of AWS UX inconsistency, cloudscape.design, and Daniel Grzelak and I bringing out the worst (best) in each other - what more could you want?

We're incredibly excited that fwd:cloudsec Europe is happening tomorrow, in Brussels. All the talks will be livestreamed on YouTube starting from 9 a.m. CEST at youtube.com/live/oD-d9B71y…, don't miss it! Schedule: fwdcloudsec.org/conference/eur…

Thrilled at the opportunity to kick off the inaugural fwd:cloudsec, as a newly minted European resident 🇸🇪 Slides are live, click all the links! speakerdeck.com/ramimac/scale-…

The recordings for fwd:cloudsec Europe talks are now on YouTube! youtube.com/playlist?list=…

Per Daniel Grzelak: "attentions spans ain't what they used to be" Or maybe it was "your talk was certainly ... long?" 😅 So I put together a 6 minute video summary of my fwd:cloudsec Europe talk for this week's AWS Security Digest: youtu.be/NODQ7dXbeyE