TrustOnCloud

TrustOnCloud provide cloud control catalogs for each Cloud service; based on threat models, audit-ready, and always up-to-date.

[TrustOnCloud @trustoncloud]

𝗣𝗿𝗼𝗱𝘂𝗰𝘁 𝘂𝗽𝗱𝗮𝘁𝗲: Data flow diagrams are now interactive. Across 𝗲𝘃𝗲𝗿𝘆 cloud service we cover.

Here’s what’s new:
→ 𝗛𝗼𝘃𝗲𝗿 any component to surface its threats
→ 𝗣𝗶𝗻 the popup to keep it visible while you explore
→ 𝗖𝗹𝗶𝗰𝗸 through to the full threat detail

For our customers, log in and try it across every service you’re covered for.

Try it with the Amazon S3 model: https://t.co/5ZEs4bfecO.

#ProductUpdate #DataFlowDiagrams #CloudSecurity #AWS #S3

[TrustOnCloud @trustoncloud]

Kudos to Usman at @TrustOnCloud for flagging this and helping AWS ship the fix, and to @Hacker0x01 for a structured disclosure path that actually moves.

#CloudSecurity #AWS #CloudTrail #TrustOnCloud #CloudService

[TrustOnCloud @trustoncloud]

CloudTrail is where your regulators, your SIEM, and your auditors all look. So when a service starts quietly writing customer details into it, that's a problem.

[TrustOnCloud @trustoncloud]

Two things worth doing this week:

1️⃣Review where CloudTrail logs are stored and who can read them
2️⃣Spot-check what the services handling your most sensitive data are actually writing to the event record

[TrustOnCloud @trustoncloud]

We made our cloud security research more explorable.

Browse our cloud security research for Amazon S3 (also covers AWS S3 glacier), Azure Storage (also Azure blobs, files), BigQuery (BigQuery Data Transfer Service, Analytics Hub).

Each service includes:
→ threat scenarios with data flow diagrams
→ prioritised controls mapped to 180+ frameworks
→ continuous updates as cloud providers ship changes

View now 👇
https://t.co/7hO8u330ty

#cloudsecurity #multicloud #trustoncloud #ai #onboarding

[TrustOnCloud @trustoncloud]

66% of your cloud controls aren't covered by default Wiz rules. we know because we mapped every single one across AWS S3, Azure Storage, and GCP BigQuery.

then we open-sourced 50+ custom rules to close it. used by 4 global systemic banks. free on Github: https://t.co/EJ2SrXFBqn

#cloudsecurity #CNAPP #infosec #Cloudcontrols

[TrustOnCloud @trustoncloud]

5/ Each package includes: mapping of default Wiz rules → our controls + Rego CCRs for every gap. All open-source. Learn more: https://t.co/VrBoNmVvSs

[TrustOnCloud @trustoncloud]

1/ We just open-sourced @wiz_io CCR packages for AWS S3, Azure Storage & GCP BigQuery.

Default Wiz coverage: ~34% for these services. Here's what's missing and why it matters for regulated enterprises 🧵

[TrustOnCloud @trustoncloud]

4/ GCP #BigQuery: 3% covered. 34 of 35 controls missing. Most are medium severity: IAM entity access, row-level security, authorized encryption.

[TrustOnCloud @trustoncloud]

We learned the hard way: RSS isn't reliable for cloud change monitoring. AWS API + pagination + completeness checks = table stakes now.
#CloudSecurity #AWS #DevSecOps #ThreatIntelligence

[TrustOnCloud @trustoncloud]

🚨 Using AWS "What's New" #RSS feed for cloud monitoring? You might be missing critical updates.
A few years back, our dashboards stayed green while we went blind to changes. Here's what happened 🧵

[TrustOnCloud @trustoncloud]

Before the next re:Invent:
✅ Pull daily during burst weeks
✅ Use the API, not just RSS
✅ Add completeness checks: make "missing updates" an alert, not an accident
(4/5)