Cloud Security Partners

Your partner for reducing modern risk.

[Verified Voting @VerifiedVoting]

3️⃣ Non-voting election technologies are fundamental to our elections! Senior Policy Associate Saige Draeger will take the stage with experts from @CloudSecPartner & @EnhancedVoting for a crucial conversation on "Verifying Non-Voting Election Technology." 🔍

[John Poulin @forced_request]

Looking forward to giving a webinar tomorrow on Defense-in-Depth engineering. We’ll talk through four key areas to help harden our applications and systems, including real tangible examples that folks can start utilizing right away.

https://t.co/rw81b7HiTe

[HackGDL @HackGDL]

Michael McCabe de @CloudSecPartner nos explica como asegurar nuestra infraestructura con Terraform, incluyendo sus vulnerabilidades y las mejores prácticas para proteger los sistemas de IAC.
https://t.co/avZzzT5RCH
#HackGDL #HackGDL2025 #hacking #cybersecurity #Mexico

[Cloud Security Partners @CloudSecPartner]

#FunFactFriday! 🌟

Did you know that you can easily set up and maintain a safe, multi-account #AWS environment with AWS Control Tower? It's like connecting with air traffic control to maintain the safety of your cloud tarmac. 🛫 ☁

[Ken Johnson @cktricky]

If you’re in the DMV area - next week myself, @amanofwar , and others will be speaking at @CloudSecPartner “Summer Series” in Ashburn, VA. I’ll be discussing the history of AppSec, current gaps, and how AI can be leveraged to push us forward.

https://t.co/kukNhTHxC8

[Cloud Security Partners @CloudSecPartner]

#MemeMonday

[Cloud Security Partners @CloudSecPartner]

Catch @mccabe615 talks tomorrow at 11 am at @hackmiami XI or 9 am on Sunday at @cackalackycon! To learn more on Remote Code Execution: How to Abuse Terraform to Elevate Access?

[Cloud Security Partners @CloudSecPartner]

https://t.co/sItxO7xsnW

[Cloud Security Partners @CloudSecPartner]

Wondering why we have been quiet recently? It's because we've been preparing something epic! We're excited to announce a 3-part summer conference series. The first event kicks off in June. For more details and to sign up, check out the link in the comments.

[Cloud Security Partners @CloudSecPartner]

#MemeMonday

[Cloud Security Partners @CloudSecPartner]

Want to dive into Infrastructure As Remote Code Execution: How to Abuse Terraform to Elevate Access? Catch @mccabe615 talks next week at @Hackmiami XI or @CackalackyCon!

#InfrastructureAsCode #security

[Cloud Security Partners @CloudSecPartner]

#mememonday

[Cloud Security Partners @CloudSecPartner]

CISA has reported that a severe vulnerability in GitLab, CVE-2023-7028, is currently being exploited. This flaw permits malicious actors to redirect password reset emails to an email address of their choice, enabling potential account takeovers.
https://t.co/uVz94YbIB5

[Cloud Security Partners @CloudSecPartner]

In episode 3 of Cocktails & Cloud, join @forced_request as he makes the Blue Milk of Tatooine and explores 3 key #AWS Security Group practices. Secure your cloud with the Force! #MAYTHEFORCEBEWITHYOU

https://t.co/pLl0dZ2PvP

[Cloud Security Partners @CloudSecPartner]

Alex went back to Highschool today! She went to talk to the students about careers in Cybersecurity.
#cybersecurity #CareerGoals

[Cloud Security Partners @CloudSecPartner]

Fun fact: We have a Cocktails and Cloud episode coming your way soon!

[Cloud Security Partners @CloudSecPartner]

#throwbackthursday revisit #Firebase: Google Cloud’s Evil Twin, blog post analysis of Firebase's security challenges presented by SANS. The article shows how Firebase's user-friendly interface can unintentionally expose sensitive data.
https://t.co/0SnHwoDyxW

[Cloud Security Partners @CloudSecPartner]

Check out our blog on Prompt Injections in #LLMs. These #vulnerabilities arise because LLMs can't differentiate between user inputs and system prompts. We discuss existing guardrails and design strategies to mitigate these risks.

https://t.co/Bqbe6cE1I6

[Cloud Security Partners @CloudSecPartner]

This is supported by GreyNoise's findings that additional vulnerabilities require an additional untracked vulnerability. Consult Palo Alto Networks' CVE guidelines for mitigation and workaround techniques.
#CVE #CyberSecurity
https://t.co/cvhMzZISir

[Cloud Security Partners @CloudSecPartner]

There has been an increase in attacks exploiting a command injection flaw, known as CVE-2024-3400, in the PAN-OS operating system of Palo Alto Networks' firewall. The vulnerability allows for unauthenticated code execution with elevated privileges.

[Cloud Security Partners @CloudSecPartner]

Disabling telemetry is not an effective mitigation measure. Rapid7 determined that the exploit involves a secondary vulnerability outside of telemetry, an untracked vulnerability related to the GlobalProtect web server.