Kat Traxler

Forget the obscure, some of the sneakiest bugs hide in plain sight. This blog introduces a new vulnerability class in the cloud, Insecure-by-Design Flaws.

The Document AI service unintentionally allows users to read any Cloud Storage object in the same project and write to an attacker-controlled location.

This blog outlines three vulnerabilities surfaced from how Google Cloud handles user-asociated HMAC keys.

This new open-source tool bridges common gaps SOC teams face in cloud threat detection. Gain more flexibility to develop custom attack techniques.

Attacker techniques are dictated by the characteristics of the tech stack. So what is the approach needed to defend cloud systems?

This blog outlines the intel in the LastPass communiques and enumerates the attacker indicators while framing the discussion around the "Pyramid of Pain".

A comprehensive backup strategy is a cornerstone of any DR plan. But how would you distinguish between legitimate backup activity and malicious data exfiltration?

Threat actors can use the Log4J vulnerability as a platform for launching attacks, but what does this mean for cloud environments? Find out exactly how attackers are exploiting this vulnerability and what this could mean for your organization.