Blog

A GCP Organization is the top node of the permissions hierarchy, making policies defined at this level powerful, automatically applying...

No one outside the IT department cares about vulnerability metrics. They care about efficacy. And traditional stats don’t show that.

Orca researcher Lidor Ben Shitrit reveals how Log4 shell TTPs in an AWS cloud environment can be used to open...

This Kubernetes Hardening Guide addresses security challenges and suggests hardening strategies for four major areas of Kubernetes security.

Learn about the differences between the two vulnerabilities and which one you need to be more concerned about (spoiler alert:...

Cloud Attack Path Analysis is the automatic identification of risk combinations that create dangerous attack paths that can be exploited...

Although an internal SBOM (Software Bill of Materials) is valuable, you owe it to yourself to avoid making it externally...

On March 25, 2022, a PoC was published for the 4-year old CVE-2018-25032 in Zlib open source software that everyone...

BreakingFormation is an XML External Entity (XXE) vulnerability found in AWS CloudFormation that led to local file disclosure, directory listing,...