Security BSides Sofia 2022 - Daniel Rankov's 'Common Security Pitfalls In AWS Public Cloud For Highly Regulated Industries' →

Our thanks to Security BSides Sofia for publishing their Presenter’s Security BSides Sofia 2022 superb security videos on the organization’s’ YouTube channel.

DEF CON 27, Cloud Village - Chris Le Roy's 'Build To Hack Hack To Build' →

via the Comic Noggins of Nitrozac and Snaggy at The Joy of Tech®! 1:

DEF CON 27, Cloud Village - Ayman Elsawah's 'Using Paretos Principle For Securing AWS With SCPs' →

Thanks to Def Con 27 Volunteers, Videographers and Presenters for publishing their superlative conference videos via their YouTube Channel for all to see, enjoy and learn.

DEF CON 27, Cloud Village - Erick Galinkin's 'Your Blacklist Is Dead Airgap Everything' →

Thanks to Def Con 27 Volunteers, Videographers and Presenters for publishing their superlative conference videos via their YouTube Channel for all to see, enjoy and learn.

DEF CON 27, Cloud Village - Rotem Bar's 'Hacking Into Automative Clouds' →

Thanks to Def Con 27 Volunteers, Videographers and Presenters for publishing their superlative conference videos via their YouTube Channel for all to see, enjoy and learn.

DEF CON 27, Cloud Village - Rod Soto's and José Hernandez' 'Using Splunk Or ELK For Auditing AWS GCP Azure Security' →

Thanks to Def Con 27 Volunteers, Videographers and Presenters for publishing their superlative conference videos via their YouTube Channel for all to see, enjoy and learn.

DEF CON 27, Cloud Village - Setu Parimi's 'PacBot Policy As Code From T-Mobile OSS' →

Thanks to Def Con 27 Volunteers, Videographers and Presenters for publishing their superlative conference videos via their YouTube Channel for all to see, enjoy and learn.

DEF CON 27, Cloud Village - Tanya Janca's 'DYI Azure Security Assessment' →

Thanks to Def Con 27 Volunteers, Videographers and Presenters for publishing their superlative conference videos via their YouTube Channel for all to see, enjoy and learn.

And Then There's This

via InformationWeek's DarkReading blog - and written by Corey Nachreiner, comes a rather dire warning of the inevitable movement of ransomeware toting miscreants targeting cloud deployments... Ignore the fear,ladies and gentlemen, and remediate the fundamentally flawed security infrastructure you've migrated to the web whilst comfortably enveloped in the vainglorious effort to 'digitally transform' your 'environment.

'As cloud services become increasingly critical to more businesses' daily operations, ransomware authors will follow to maximize profits. The good news is that the cloud can be secured with many of the same best practices that apply to physical networks. Make every effort to keep your cloud deployments safe and secure today. In the future, you might be glad you did.' - via InformationWeek's DarkReading blog and scribed by Corey Nachreiner

USENIX Enigma 2019, Neha Rungta's 'Provable Security At AWS' →

Thanks to USENIX for publishing the USENIX Enigma 2019

outstanding conference videos on their YouTube Channel

Security BSides London 2019, Paul Schwarzenberger's 'AWS Vs Azure Security' →

Many thanks to Security BSides London for publishing their outstanding conference videos on YouTube.

ASUS Cloud Services: Backdoor In Motion

via the eponymous Dan Goodin, writing at Ars Technica, comes news of a cloud solution gone spuriously out-of-control. Certainly a clear-enough indication the 'Cloud' is not to be trusted, at any time, nor from any vendor - regardless of claims to the contrary. Today's Must Read.

Meanwhile, In News of the Coming Software Apocalypse...

via Paul Kunert, writing at El Reg, comes this story of persistent login issues with Microsoft Corporation's (Nasdaq: MSFT) 'Cloud' based Office Not-So-Productive productivity product, monikered O365 - Oh, but you knew that, since you've been unable to fire up good ol' Word for days... Perhaps a non - Cloud based solution to run your business might be in order, eh?

The Secrets Mangler

via Tom Krazit, writing at GeekWire, details the need for security tooling assistance targeting the apparent shortcomings of customer security comprehension. Really? I chalk this up to customer facing security tooling, and enablement (Hows' that for Corporate DoubleSpeak?). Far be it for me to denigrate customer security understanding... Today's MustRead!

Coinhive Cryptojacker, The Prevaler →

Check Point Software Technologies Ltd. has noted (via the comapny's well traveled blog) a new milestone for malicious wares/scripts et cetera; this time Coinhive takes the blue ribbon award for the most pernicious installations on our beloved interwebs, according to the Check Point's research.