Cloud Hacking Basics: IAM in AWS - Understanding JSON-Based Policies
Explore AWS IAM policies: their structure, implementation, and potential vulnerabilities. Learn how JSON-based policies control access in cloud environments.
How to Secure Cloud Machine Identities
Learn best practices for securing cloud machine identities, mitigating risks from mismanaged credentials, and implementing specific steps on AWS and GCP to prevent high-profile breaches.
Writing Your Own Ticket to the Cloud Like APT - A Deep Dive to AD FS Attacks, Detections, and Mitigations
Explore AD FS attacks, detections, and mitigations for Azure AD security. Learn about identity federation vulnerabilities and strategies to protect cloud-based resources from unauthorized access.
IAM The One Who Knocks
Exposing hidden risks in multi-cloud IAM, detailing access flaws, misconfigurations, and inconsistencies that can lead to unintended access and privilege escalation across cloud providers.
Integrating VMware Cloud Foundation with Okta - Identity and Access Management
Discover how to enhance security and efficiency by integrating VMware Cloud Foundation with Okta's identity management platform, featuring practical demonstrations and expert insights.
Rethinking Apache Kafka Security and Account Management - Centralized Identity Management
Explore centralized identity management for Apache Kafka, focusing on OAuth integration, security enhancements, and best practices for seamless access control across cloud and on-premises environments.
Modern Identity Management in the Era of Serverless and Microservices
Explore comprehensive identity management beyond authentication, covering provisioning, governance, and federation. Learn about passwordless login, multifactor authentication, and PaaS solutions for improved user experience.
Exploring Best Practices for Implementing Authentication and Authorization in a Cloud-Native Environment
Discover best practices for implementing authentication and authorization in cloud-native environments, exploring standards like OpenID Connect and tools including Keycloak, OPA, OpenFGA, and Topaz.
Identity and Access Management for Micron Devices - Bridging IT and OT Security
Explore identity and credential management fundamentals for building trust in IT/OT environments, focusing on authentication, authorization, and secure supply chain communication principles.
Exploiting Cloud Provider Vulnerabilities for Initial Access in AWS
Dive into advanced AWS security vulnerabilities, focusing on IAM role exploitation, confused deputy attacks, and critical misconfigurations that enable unauthorized cloud environment access.
Способы Аутентификации в Kubernetes и Интеграция с LDAP
Discover comprehensive authentication methods in Kubernetes, from RBAC implementation to external directory service integration, focusing on Dex and Keycloak solutions for effective cluster access management.
Cloud Metadata Abuse - Threat Actors and Security Implications
Explore cloud metadata abuse techniques and learn defensive strategies to protect your cloud infrastructure from potential threats.
Fine-grained API Authorization Using 3scale and Authorization Systems
Explore fine-grained API authorization using 3scale and systems like Keycloak and Open Policy Agent. Learn about mechanisms, benefits, and implementation challenges.
Full-stack Identity and Access Management (IAM) Options on Google Cloud
Explore Google Cloud's identity-first, AI-powered security solutions for protecting users, infrastructure, and applications. Learn about IAM enhancements and zero trust principles.
Identities as the Bedrock for Google Cloud Security
Explore identity choices, workload federation, access policies, and policy intelligence tools for enhanced Google Cloud security. Learn from L'Oreal's implementation.
Cloud Security Threat Briefing: Evolving Tactics in Cloud Environments
Explore evolving cloud security threats, attacker tactics, and proactive defense strategies to protect your organization's cloud environment.
Securing Access to Kubernetes Clusters on AWS
Learn strategies and best practices for securing Kubernetes clusters on AWS, focusing on access control and protection of cloud workloads.
SCARLETEEL: Advancing Cloud Attack Chains
Explore SCARLETEEL operation's tactics for infiltrating AWS, stealing data, and performing cryptojacking attacks. Learn defensive strategies for EC2, IAM, Lambda, and Terraform to fortify cloud security.
Microsoft Entra ID Governance: Features, Licensing, and Key Capabilities
Explore Microsoft Entra ID Governance's key features, licensing options, and recent capabilities. Learn about access reviews, entitlement management, and integration with Verified ID for enhanced identity governance.
Implementing Transaction Tokens with Keycloak for API Request Authentication
Explore implementing Transaction Tokens with Keycloak for secure API authentication in cloud-native architectures, addressing token redirect attacks and enabling call chain identification for internal workloads.
Decoding 8 Real-World Cloud Identity Breaches
Dissection of 8 real cloud breaches exploiting insecure identities, revealing insights and mitigation strategies for common IAM vulnerabilities in cloud environments.