Favorite talk so far at #fwdcloudsec?
| Photography | @betapixels |
| Website | https://norsec.xyz |
| Bluesky | @theomegabit |
| Threads | @theomegabit |
theOmegabit
@theomegabit@infosec.exchange
- 373 Followers
- 795 Following
- 1.6K Posts
AWS SA Pro | CISSP / CCSP | Security Professional | Tech enthusiast | Photographer 📸
#fwdcloudsec day 🙂
The every repeating cycle of “ship now” biting us (people in general) in the ass.
Sometimes it’s worth slowing down if even for a moment.
There’s a decent amount of talk and research on specific AWS api calls that aren’t logged to cloudtrail but is there an all encompassing list (GitHub hopefully) that covers everything currently known?
Yikes
Marketplace Takeover: How We Could’ve Taken Over Every Developer Using a VSCode Fork; Putting Millions at Risk
TL;DR: We discovered a critical vulnerability in open-vsx.org, the open-source VS Code extensions marketplace powering popular VSCode forks like Cursor, Windsurf and VSCodium, used by over 8,000,000…
Anyone going to @fwdcloudsec #cloudsecurity
Cool Cloud Security learning challenge from Wiz
Wiz 
🚨 We scanned GitHub and found *hundreds* of valid secrets, 4 of the top 5 were AI-related:
HuggingFace, Azure OpenAI, Weights & Biases, and Groq.
Read more:
https://www.wiz.io/blog/leaking-ai-secrets-in-public-code
Minor annoyance - it looks like AWS renamed “Security Hub” of years past to “Security Hub CSPM” and then re-used “Security Hub” for this new functionality.
Unify your security with the new AWS Security Hub for risk prioritization and response at scale (Preview) | Amazon Web Services
AWS Security Hub has been enhanced with new capabilities that integrate multiple AWS security services to automatically discover resources, evaluate risks, analyze attack paths, and provide AI-assisted recommendations, helping security teams prioritize critical issues and respond to threats at scale with improved visualization and remediation guidance.