This month’s digest covers Hacker Summer Camp prep, a new cloud image investigator, and supply-chain vulnerabilities associated with the Open VSX Registry.

This February edition of the Datadog Security Digest dives into the

Security researchers discovered a name confusion attack that allows access to an Amazon Web Services account to anyone that publishes an Amazon Machine Image (AMI) with a specific name.

Detailing the discovery and impact of the whoAMI cloud image name confusion attack, which could allow attackers to execute code within AWS accounts due to a vulnerable pattern in AMI retrieval.

Detailing the discovery and impact of the whoAMI cloud image name confusion attack, which could allow attackers to execute code within AWS accounts due to a vulnerable pattern in AMI retrieval.

Detailing the discovery and impact of the whoAMI cloud image name confusion attack, which could allow attackers to execute code within AWS accounts due to a vulnerable pattern in AMI retrieval.

I’m joining the leading cloud security startup, hoping to “work for the Security Industry, at Wiz.”

Threat insights from Datadog Security Labs for Q4 2024.

Introduction Hello, I’m RyotaK (@ryotkak ), a security engineer at Flatt Security Inc. A few days ago, I was upgrading my home lab network, and I decided to upgrade the OpenWrt on my router.1 After ac...

Release of Supply-Chain Firewall, an open source tool for preventing the installation of malicious PyPI and npm packages

A tool for preventing the installation of malicious PyPI and npm packages :fire: - DataDog/supply-chain-firewall

Awseye tracks publicly accessible AWS data to help identify and secure known and exposed AWS resources. Empowering defenders with open-source intelligence.

Modern Red Teaming: macOS, K8s, and Cloud Carnal0wnage int0x80

In the November edition, read about Google Cloud Trends, DPRK npm Threats, & Privilege Escalation Walkthroughs, and more.

YouTube video by Datadog

Join the conversation

A vulnerability in Amazon DataZone could have allowed potential attackers to assume roles in AWS accounts by exploiting a confused deputy problem in DataZone environments. This issue, which has been r...

Discover more about what's new at AWS with Introducing resource control policies (RCPs) to centrally restrict access to AWS resources

This post offers a deep dive into Google Cloud’s default service accounts, explaining their functionality, risks, and real-world adoption trends.

YouTube video by SANS Cloud Security

I recently had the opportunity to contribute to Stratus Red Team as a part of my research into Entra ID administrative units. Open-source contributions can feel daunting if you haven’t been through th...