🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

📚 tl;dr sec 248 ☁️ 10X Your Cloud Security Rami McCarthy 🛡️ Secure by Design whitepaper SANS Institute, @aws, @emjohn20, Paul Vixie, Bertram Dorn 📖 fwd:cloudsec overview Christophe Tafani-Dereeper 😈 recaptcha-phish PoC John Hammond 🤖 AI OffSec benchmark Nico Waisman, XBOW and more!

Really looking forward to speaking at BSides Ljubljana this week!

🛎️ AWS Security Digest 176 is out! All about fwd:cloudsec Europe. awssecuritydigest.com/past-issues/aw… 1️⃣ undocumented-aws-api-hunter by @frichette_n 2️⃣ A Cloud Access Management Maturity Model: Part 1 & Part 2 by rowan 3️⃣ Highlights from fwd:cloudsec Europe 2024 by Christophe Tafani-Dereeper Bonus:

As a reminder for whoever is looking for my old articles such as .NET remoting article, please use my blog instead of the NCC Group research website as they have mangled almost all documents containing XML. e.g.: soroush.me/blog/2019/03/f… They all have a PDF there.

Preparation in full swing Računalniški muzej / Computer History Museum 🇸🇮 (thx Gaja, Natasa, Marko + boy who did all the heavy lifting). Cooper in the house, making sure there will be recording #BSidesLjubljana

We are kicking off! #BSidesLjubljana

A globally distributed team of people have been...creating a lot of print jobs in the past 24 hours. And by that I mean we've been testing the new big-name RCE. See our detailed analysis here: securitylabs.datadoghq.com/articles/emerg…

That's me got my Noddy tickets booked for this one, looking forward to it!

Thanks to the generosity of the community, we have a small number of pre-paid tickets to give away. We want to do our bit to help newcomers, those on low incomes, or those who simply deserve a chance. Our "pay it forward" nomination form is now live! payitforward.hackglasgow.live

People often ask how many talks/cons my rigs have recorded by now, and I'd just accept any number suggested because, well, 🤷🏻‍♂️. Today I figured oh well, and ran some numbers: Events - 281 spread over 686 days. Talks - 5255 of which 4625 are currently online.

over 100k people have joined bluesky in the last 12 hours alone... welcome! 🦋💙 bsky.app/download

Apropos of nothing in particular... I'm more active these days on :- Blue Sky - @mccune.org.uk Mastodon - @[email protected] Linkedin - linkedin.com/in/rorym/

☁️ State of Cloud Security 2024 update of @Datadog’s report analyzing security posture data from a sample of thousands of orgs across AWS, Azure, and Google Cloud • Long-lived credentials continue to be a major risk. • Adoption of public access blocks in cloud storage

The density and diversity of infosec people on bluesky is now high enough to allow for great content and meaningful discussions. Why aren’t you joining? Known benefits: - no ads 😌 - no polarizing "For you" feed 🕊️ - an Open Source simili-TweetDeck 🤖

If people are thinking of checking out Blue Sky for any reason and are wondering how to find interesting accounts, it's worth knowing about their starter pack feature. Some possibly handy ones below. go.bsky.app/RnNiDb9 go.bsky.app/RCerxDE go.bsky.app/JvFS98y

Fun with Google Cloud's default service accounts (and how to leverage them for offensive purposes) securitylabs.datadoghq.com/articles/googl…

🦋