Learn how trusted coding-agent projects can execute repository-controlled code before the first prompt through Codex MCP configuration and Claude Code environment settings.

How to setup Tailscale peer relays to listen on multiple ports.

A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE - DataDog/IDE-SHEPHERD-extension

Learn how malicious Claude Code skills can abuse dynamic context commands to execute before model-level prompt injection defenses can intervene.

The Claude Platform on AWS is now generally available, offering a new way for AWS customers to access the full set of Claude platform features with AWS authentication, billing, and commitment retireme...

Use session policy denials and verbose IAM error messages to determine if AWS resources have public resource-based policies.

UNC6426 used stolen GitHub tokens from the 2025 nx npm breach to gain AWS admin access in under 72 hours, enabling data theft and cloud destruction.

During research, we sometimes encounter scenarios that remind us that it's a good idea to trust but verify. In September 2025, we noticed that certain Microsoft Copilot Studio agent settings did not l...

Comprehensive monitoring of identity activity is crucial to the security of any organization. A compromised identity can lead to widespread data breaches and

American data analytics company LexisNexis Legal & Professional has confirmed to BleepingComputer that hackers breached its servers and accessed some customer and business information.

AWS now reveals public permissions in error messages. Learn how a deny-all session policy exposes which actions would succeed safely.

Make Codex or Claude Code act as a virtual dungeon master for DND 5e. - Frichetten/Dungeons-and-Agents

Break out of a Cloud Workstations container through an exposed Docker socket, then access project credentials from instance metadata.

Learn how Datadog AI Guard evaluates prompts, responses, and tool calls in real time to help you defend agentic AI applications against emerging threats.

Convert access to the AWS Console into IAM credentials.

A deep dive into OpenSSL’s January 2026 CMS and PKCS#12 vulnerabilities, including a pre-auth stack overflow and a PKCS#12 parsing bug.

Hacking the Cloud is opening the door to AI and LLM security research.

IDE-SHEPHERD is an open-source IDE security extension that provides real-time monitoring and protection for VS Code and Cursor. It intercepts malicious process executions, monitors network activity, a...

Outsourcing the painful aspects of a car purchase to AI was refreshingly nice, and sold me on the vision of Clawdbot

How Anthropic's refusal test string can be abused to stop streaming responses and create sticky failures.

Recently I ran an experiment where I built agents on top of Opus 4.5 and GPT-5.2 and then challenged them to write exploits for a zeroday vulnerability in the QuickJS Javascript interpreter. I adde…

Wiz Research discovered CodeBreach, a critical vulnerability that risked the AWS Console supply chain. Learn how to secure your AWS CodeBuild pipelines.

We're building a platform that engineers love to use. Join us, and help usher in the future.

An end of year summary for Hacking the Cloud in 2025.

Abuse IAM's eventual consistency to maintain persistence against incident response containment.

Bypass AWS Network Firewall Egress Filtering using SNI spoofing and Host Header manipulation.

We're building a platform that engineers love to use. Join us, and help usher in the future.

Abusing the CodeBuild managed GitHub Actions runner integration to obtain long‑term access to an AWS environment.