#security (2020-05)
Archive: https://archive.sweetops.com/security/
2020-05-05

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report with a triage worksheet. - salesforce/cloudsplaining


Summary & Key Takeaways On May 3rd, 2020, Algolia’s infrastructure experienced an attack due to the salt configuration management vulnerability CVE-2020-11651. Through this vulnerability, two types

Friends do not let friends open non-authenticated, internal-service ports to the world?

Summary & Key Takeaways On May 3rd, 2020, Algolia’s infrastructure experienced an attack due to the salt configuration management vulnerability CVE-2020-11651. Through this vulnerability, two types

Right? Seriously.

And what is it doing on public reachable ip’s to begin with..
2020-05-06
2020-05-07

A hacker claims to have stolen over 500GB of data from Microsoft’s private GitHub repositories, BleepingComputer reports. From the report: This evening, a hacker going by the name Shiny Hunters contacted BleepingComputer to tell us they had hacked into the Microsoft GitHub account, gaining full acce…
2020-05-09

yeah, an account that was hosting public repos or the ones meant to be public. from what I red MS is using several hundred enterprise accounts because most teams have it’s own private org
2020-05-24
