CloudSec Wednesday: Recon Azure Cloud, Kubernetes Pentesting, CloudSec EU'24 Conference, DevSecOps Journey to Secure Github Repos, CloudShovel Tool Spotlight, Ransomware Attacks in Hybrid Cloud

Hey! James here.

Today’s edition covers Cloud Security, Container Security and DevSecOps Practices:

• 📝 Ransomware Attacks in Hybrid Cloud, Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs!

• 🔥 CloudSec EU'24 conference, Recon Azure Cloud, Kubernetes Pentesting!

• 🧠 DevSecOps Journey to Secure Github Repos, Public Cloud is the most Insecure Form of Infrastructure!

• And more…

First time reading? Sign up here.

📰 Top Security News

• Ransomware attacks expanding to hybrid cloud environments (Microsoft)

• New security protocol shields data from attackers during cloud-based computation (mit.edu)

• Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments(Wiz)

📝 Best Of Blogs

• A Journey to Secure and Standardise GitHub Repositories (Apheris)

• NIST Updates Digital Identity Guidelines: Stronger Authentication and Risk Management (NIST)

• Public Cloud is the most insecure form of infrastructure(Chris Farris)

🧠 Learning Resources

• Cloudsec Europe 2024 Conference talks(fwd:cloudsec)

• Reconnaissance: Azure Cloud w/ Kevin Klingbile Webcast (Black Hills)

• Kubernetes Pentesting Webcast(SecureIdeas)

🛠️ Tools

• CloudShovel - A tool for scanning public or private  AMIs for sensitive files and secrets. (GitHub)

• Finic - Stealth browsers as a service. Run chrome in cloud for your scraper or automation. (GitHub)

⚡️ Misc

• Eliminating Memory Safety Vulnerabilities at the Source (Google)

• AWS launched new Vulnerability Disclosure Program (Hackerone)

🎯 Favorite Quote

“The future belongs to those who believe in the beauty of their dreams.“
_{- Eleanor Roosevelt}