shenril

Snr Cloud Architect at AWS, mad coder, security driven
Tweets are my own

[shenril @shenril]

@Korben Ça aurait pu être pire , ils auraient pu te prendre pour un pigeon ^^

[AWS Security @AWSSecurityInfo]

Just announced! 🚀 #AWS is extending its Vulnerability Disclosure Program to accept security reports on HackerOne. Thank you to all the security researchers that help keep our customers safe. #cloudsecurity @Hacker0x01

Learn how you can participate. 👉 https://t.co/46aB0u99w5

[Christophe Tafani-Dereeper @christophetd]

Just in time for Black Hat Arsenal, Stratus Red Team now supports Amazon EKS attack techniques!

• Backdoor aws-auth EKS ConfigMap
• Create Admin EKS Access Entry

https://t.co/a9j5xFf1yU

https://t.co/3pBSkos0Hu

[shenril @shenril]

FrenchTech Tokyo, on y est !
#frenchtech #tokyo

[Martial Gervaise @argevise]

Evaluation de la gravité des vulnérabilités : la nouvelle norme CVSS 4.0 est disponible !

https://t.co/cARq2lZdKQ

https://t.co/mDQzQropMu

https://t.co/HxPmJrxdK6

[にゃん☆たく/takumi.a @taku888infinity]

【要点抽出】CVSS v4.0 - 2LoD.sec https://t.co/1xQCppeRTQ

めちゃ参考になりました・・・

[Marco Lancini @lancinimarco]

⚗️ stratus-red-team v2.9.0
Stratus Red Team now features 3 attack techniques to simulate ransomware activity.
https://t.co/9EGOElyxMZ

[shenril @shenril]

@iamdeafmute Mais ça boot ? ;)

[Christophe Tafani-Dereeper @christophetd]

Stratus Red Team v2.6.0 is out with a GCP new attack technique:

Exfiltrate a Compute Disk through its IAM policy, allowing an attacker to copy it to their own project

https://t.co/HFpfAWPKVR

https://t.co/ledRfqrFJt

[Scott Piper @0xdabbad00]

I strongly agree with these points. I haven't watched a talk from Peter DeSantis yet, but it's now on my todo list. https://t.co/gEKEiRXs9s

[shenril @shenril]

I'm not slacking off ! Github is down ! :)
https://t.co/CCa8b85Fkd

[shenril @shenril]

Company culture is everything that comes into play when you have to take a decision for your company. Prove me otherwise :)

[deafmute @iamdeafmute]

🚨 Save the date, vendredi 17/03 à 21h sur ma chaine twitch ci-dessous, en compagnie de @Delphes99, on parle architecture. Apprenez à mieux structurer vos applications web ! 🤓📚#twitch #dev #solid #srp
——
➡️https://t.co/4T7PaAlyvN

[Christophe Tafani-Dereeper @christophetd]

I found a vulnerability in the login rate limiting algorithm of the AWS Console that allowed to continuously brute-force 280 passwords per minute (4.6/second) on a single IAM user without getting blocked

https://t.co/vCYZ9Ou8Ph

Now remediated by AWS, only IAM users without MFA

[AWS Security @AWSSecurityInfo]

The following 5 workshops simulate multiple security events. Brought to you by the AWS Customer Incident Response Team (CIRT) 👇

[shenril @shenril]

Interesting paper from Microsoft about integrating Threat Modeling into modern DevOps cycles
https://t.co/S8DIW68I0K

[Evan You @evanyou]

OSS devs relying on GitHub sponsor will undoubtedly take a hit on their income because of this.

What’s the reason behind this? I think we deserve some explanation.

[Scott Piper @0xdabbad00]

It's awesome to see how fast AWS is getting the re:Invent videos up on youtube. Here's AWS's Security, Compliance, and Identity playlist so far. Thank you AWS for being so quick with this! In total there's been 275+ videos from this week uploaded so far! https://t.co/v0BWke9FKt

[La Pause Dev (Live/Podcast) - by SilvereLeDev @LaPauseDevTalk]

CE SOIR C'EST...

🎙️Review de l'actu IT/Dev et discussions sur le métier de dev avec @LiiorC @XavierAgap1 @willtraore @iamdeafmute @silvereledev

📌 RDV à 21h30 sur https://t.co/6vqmPci4PZ

Psssst ! N'hésite pas à RT pour faire découvrir l'émission 🫶

[Emilio Escobar @eaescob]

Super excited for this project! I love the fact that the team focuses on building things that can be used broadly with the primary attention to safety for all: https://t.co/GwySrnR3n7