CloudSec Wednesday: Azure Cloud Security, DevSecops HomeLab, Hacking Misconfigured Cloudflare Buckets, 2024 State of the Software Supply Chain

Hey! James here.

Today’s edition covers Cloud Security, Container Security and DevSecOps Practices:

• 📝 Why Code Security Matters, Hacking misconfigured Cloudflare R2 buckets, Multi-Cloud Security Testing!

• 🔥 4oFour, Pipreqs, Hardened-chrome Tools, Mozilla and Jetpack Security advisory, 2024 State of the Software Supply Chain!

• 🧠 Build A DevSecOps HomeLab, Build and Manage container images at scale with cloud native Buildpacks, Hands-on Azure Cloud security!

• And more…

First time reading? Sign up here.

📰 Top Security News

• 2024 State of the Software Supply Chain (Sonatype)

• Jetpack 13.9.1: Critical Security Update (Jetpack)

• Mozilla has issued an emergency security update (Mozilla)

📝 Best Of Blogs

• Why Code Security Matters in Hardened Environment (Sonarsource)

• Hacking misconfigured Cloudflare R2 buckets: a complete guide (Intigriti)

• The Open-Source Tool Democratizing Multi-Cloud Security Testing (Vectra)

🧠 Learning Resources

• How I Built A DevSecOps Homelab For Under $350 (Damien Burks)

• Building & Managing Container Images at Scale with Cloud Native by Terence Lee, Fuchs (Devoxx)

• Hands-On Azure Cloud Security: Tool Talk (Maester)(David Okeyode)

🛠️ Tools

• 4oFour - A tech enumeration toolkit focused on 404 Not found pages (GitHub)

• Pipreqs - Generate pip requirements.txt file based on imports of any project. (GitHub)

• Hardened-chromium - A hardened chromium for desktop Linux inspired by Vanadium. (GitHub)

⚡️ Misc

• The Trouble With Telegram The platform may not be as secure as it claims to be (Spectrum)

• Mystery Drones Swarmed a U.S. Military Base for 17 Days. The Pentagon Is Stumped (Wsj)

• 2024: 0.5% of the Global Top 200 Websites Use Valid HTML (Meiert)

🎯 Favorite Quote

“Go confidently in the direction of your dreams! Live the life you've imagined.“
_{- Henry David Thoreau}