Lacework Labs

The dedicated @Lacework security research team.

[Lacework Labs @laceworklabs]

Our latest Cloud Threat Report is here!

We cover:
✅ #CloudSecurity posture
✅ Software supply chain
✅ Runtime threats & more

Check it out ➡️ https://t.co/ukR46uO33j

[Lacework @Lacework]

Principal Cloud Security Researcher @35Foss shared his thoughts on how organizations can enhance threat detection in this article from @vmblog on National Insider Threat Awareness Month.⬇️ #NITAM #InsiderThreats

[Lacework Labs @laceworklabs]

📢new blog! - How Watchdog smuggles malware into your network as uninteresting photos
👇
https://t.co/vMo4sQ51JK

#linux #malware #steg #cryptojacking

[Jared @DLL_Cool_J]

Do you like #containers? How about #honeypots? #Linux malware?

Check out my ATT&CKCON 3.0 talk, “ATT&CKING Containers in The Cloud” now on YouTube

https://t.co/P6o63qCOK4

[Lacework Labs @laceworklabs]

📢new blog! - Kinsing, Dark.IoT botnet and others targeting Confluence CVE-2022-26134 ITW
👇
https://t.co/po4zGzUY82
#linux #malware

[Trent R Hein @trenthein]

Great start to @BSidesBoulder with keynote from @35Foss! #bsides #cybersecurity

[Lacework Labs @laceworklabs]

Checkout #Lacework Labs' latest security advisory on multiple vulnerabilities in Atlassian products!

https://t.co/qatHM6m1yx

[Lacework @Lacework]

Cheers🍻

We'll be at the #RSAC this year and we are sponsoring the Expo Pub Crawl! Enjoy a cold one and talk all things #CloudSecurity.

Learn more here: https://t.co/qNArCVFu3z

[Greg Foss @35Foss]

For those of you not headed to @RSAConference, join us either in person or online for @BSidesBoulder! I am honored to be giving the keynote and they have an amazing lineup of speakers and activities planned. Hope to see you there!
https://t.co/TcWJlUg7WL
#BSidesBoulder

[Lacework Labs @laceworklabs]

Checkout #Lacework Lab's latest security advisory on critical vulnerabilities in #VMWare!

https://t.co/gygympsqik

[Rex Guo @Xiaofei_REX]

Excited to share that Junyuan and myself will be presenting at @BlackHatEvents USA 2022. If you review our previous attack at DEFCON 29, you will have even more fun with this year's demo :)
@Lacework #cloudsecurity #containersecurity #detectionandresponse #DevSecOps #BHUSA

[Lacework Labs @laceworklabs]

Checkout the latest post from #Lacework Labs on #mirai targeting CVE-2022-1388!

https://t.co/f8JKJbLIr9

#malware #cloud

[@[email protected] @BSidesBoulder]

We're finally ready to announce our keynote speaker!

Greg Foss (@35Foss) will be presenting the keynote talk for BSides Boulder 2022! Greg is a Principal Cloud Security Researcher focusing on large-scale data science and threat research to help secure cloud environments.

[Jared @DLL_Cool_J]

Playing around with exposing projects via #traefik and #ngrok. Shout out to @ngrokHQ for making it dead simple to expose applications for personal projects!

[Greg Foss @35Foss]

Join Chris Hall and me tomorrow morning as we discuss @laceworklabs latest Cloud Threat Report!

https://t.co/2BiZfLufSJ

@Lacework #ThreatIntel #Research #FreeFood

[Sennovate @Sennovate]

Here's an exclusive preview to what our upcoming podcast episode is all about! 👀

Note the date: 12th April

Get ready to know everything on Identity and Access Management in Cloud Security with @35Foss, Principal Cloud Security Researcher at @laceworklabs. #Staytuned

[Lacework Labs @laceworklabs]

Unsure if you're vulnerable to #SpringShell or #Log4j? Check out @Lacework's @bjornvb script which scans for #Java libraries vulnerable to #Spring4Shell or #Log4Shell
https://t.co/F7eI2ePtvU

[Richard Hensen @rhensenbu]

@LaceworkLabs digs into one of the more popular vulnerability scanning tools and techniques, and demonstrates how net defenders and analysts can leverage them for threat intelligence purposes. https://t.co/g6OUJALdSn

[Lacework @Lacework]

We are releasing a set of tools for analyzing Project Discovery traffic.

Project Discovery accounts for roughly half of all #Log4j attacks, a quarter of attacks observed by @LaceworkLabs, and it has been utilized for #Spring4Shell attacks. https://t.co/CPuAvvX3zN

[Lacework @Lacework]

It’s time to leverage #DevOps principles and #ShiftLeft to automatically merge indicators. 💥

@laceworklabs is breaking down how to make actionable use of threat intelligence in an AWS environment without overwhelming security engineering teams. https://t.co/yStSz8EAvs

[Lacework Labs @laceworklabs]

It’s time to leverage #DevOps principles and #ShiftLeft to automatically merge indicators. 💥

We are breaking down how to make actionable use of threat intelligence in an AWS environment without overwhelming security engineering teams. https://t.co/zC5Wf8lvSR