Sign in

Greg Foss

@gregfoss.com
954 followers 352 following 8 posts

Security Research Leader @ Datadog Views are strictly my own

PostsRepliesMedia
Greg Foss @gregfoss.com · 06/03/2026
We recently partnered with Okta to ship new identity threat detections, alongside contributing to Okta's open source Security Detection Catalog, so the broader security community benefits. Big thanks to the Okta Cyber Defense team for the collaboration! sec.okta.com/articles/202...
sec.okta.com
Datadog and Okta Combine for New Customer Detections
Comprehensive monitoring of identity activity is crucial to the security of any organization. A compromised identity can lead to widespread data breaches and
031
Reposted by Greg Foss
Datadog Security Labs @securitylabs.datadoghq.com · 21/07/2025
Beyond Mimo’lette: Tracking Mimo's Expansion to Magento CMS and Docker securitylabs.datadoghq.com/articles/bey...
securitylabs.datadoghq.com
Beyond Mimo’lette: Tracking Mimo's Expansion to Magento CMS and Docker | Datadog Security Labs
This post reports on activity from the 'Mimo' threat actor.
021
Reposted by Greg Foss
Datadog Security Labs @securitylabs.datadoghq.com · 27/06/2025
fwd:cloudsec is around the corner! Don't miss these 3 talks from Datadog researchers Seth Sec, Katie Knowles, Greg Foss, and Anthony Randazzo. fwdcloudsec.org/conference/n... @sethsec.bsky.social @siigil.bsky.social @gregfoss.com
042
Reposted by Greg Foss
techy @techy.detectionengineering.net · 10/05/2025
I'm so excited to announce that Datadog Security Research is launching a FREE, fully-online, Detection Engineering focused conference called Datadog Detect! bit.ly/datadog-detect Our lineup is incredible with experts in the field of detection, response and threat intelligence.
bit.ly
Datadog Detect: Scale your Security Operations with Detection Engineering | Datadog
See metrics from all of your apps, tools & services in one place with Datadog's cloud monitoring as a service solution. Try it for free.
0103
Greg Foss @gregfoss.com · 19/05/2025
Excited to speak at @fwdcloudsec.org in Denver on June 30 with Anthony Randazzo! We’ll share lessons from a year of cloud threat hunting. Don’t miss other @securitylabs.datadoghq.com talks from @siigil.bsky.social on EntraID escalation and @sethsec.bsky.social on AMI name confusion as well!
fwdcloudsec.org
fwd:cloudsec 2025 Speaker Bios & Abstracts | fwd:cloudsec
fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...
071
Reposted by Greg Foss
Nick Frichette @frichetten.com · 21/04/2025
@datadoghq.com Security Research is heading to RSAC next week! Come join us for any of our talks on the main stage, meet our research team at the Datadog booth, or attend some of the leadership events below! www.datadoghq.com/event/rsa202...
datadoghq.com
Datadog at RSA Conference 2025 | Datadog
Datadog at RSA Conference 2025
032
Greg Foss @gregfoss.com · 24/01/2025
Today our #Datadog Security Research and Detection Engineering team released our first threat roundup report! Datadog has unique visibility into threat actor activity targeting cloud environments and this report highlights our key findings from Q4 2024. securitylabs.datadoghq.com/articles/202...
securitylabs.datadoghq.com
Datadog threat roundup: top insights for Q4 2024 | Datadog Security Labs
Threat insights from Datadog Security Labs for Q4 2024.
1124
Reposted by Greg Foss
Eric Geller @ericjgeller.com · 21/01/2025
DHS has terminated the memberships of everyone on its advisory committees. This includes several cyber committees, like CISA's advisory panel and the Cyber Safety Review Board, which was investigating Salt Typhoon. That review is "dead," person familiar says. www.documentcloud.org/documents/25...
501059595
Reposted by Greg Foss
Datadog Security Labs @securitylabs.datadoghq.com · 11/12/2024
"Tales from the cloud trenches: Unwanted visitor" securitylabs.datadoghq.com/articles/tal... This post describes an attacker that we've observed in the wild, including a malicious AWS account ID used to create a backdoor IAM role.
0206
Reposted by Greg Foss
Nick Frichette @frichetten.com · 06/12/2024
New from Datadog Security Research! Threat actors are constantly publishing backdoored software libraries to steal credentials, get C2, and more. @ikretz.bsky.social did something about it. Meet the Supply-Chain Firewall, a tool to block malicious packages. securitylabs.datadoghq.com/articles/int...
securitylabs.datadoghq.com
Introducing Supply-Chain Firewall: Protecting Developers from Malicious Open Source Packages | Datadog Security Labs
Release of Supply-Chain Firewall, an open source tool for preventing the installation of malicious PyPI and npm packages
0196
Reposted by Greg Foss
Datadog Security Labs @securitylabs.datadoghq.com · 29/11/2024
Exploring Google Cloud Default Service Accounts: Deep Dive and Real-World Adoption Trends securitylabs.datadoghq.com/articles/goo... by @christophetd.fr
securitylabs.datadoghq.com
Exploring Google Cloud Default Service Accounts: Deep Dive and Real-World Adoption Trends | Datadog Security Labs
This post offers a deep dive into Google Cloud’s default service accounts, explaining their functionality, risks, and real-world adoption trends.
0102
Reposted by Greg Foss
Eslam Salem @netcodex.bsky.social · 22/11/2024
I will be presenting Guarddog github.com/datadog/guar... at Blackhat MEA next week. If you will be there come and say Hi
github.com
GitHub - DataDog/guarddog: :snake: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages - GitHub - DataDog/guarddog: :snake: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
061
Reposted by Greg Foss
techy @techy.detectionengineering.net · 18/11/2024
I made a Detection Engineering starter pack, will be adding more as more folks jump over to bluesky! go.bsky.app/HenXJUR
812455
Reposted by Greg Foss
Rory McCune @mccune.org.uk · 18/11/2024
If you're looking for the security talks from Kubecon NA 2024, I've added the abstracts and Youtube embeds to talks.container-security.site/categories/#... . There's also talks going back to 2016 in case you really want to watch a lot of container security videos!
talks.container-security.site
Posts by Category
This site hosts a list of talks from various conferences on the topic of Cloud Native security.
13510
Reposted by Greg Foss
Nick Frichette @frichetten.com · 18/11/2024
Want to keep up to date with Datadog’s Cloud Security Research? We’ve got a starter pack for that. All of our researchers in one feed. go.bsky.app/8XpcFm5
03815
Greg Foss @gregfoss.com · 04/11/2024
hello world 👋
2141