A recently released Azure AD Identity Governance feature can be abused for Privilege Escalation within Azure Environments through dynamic membership rules. Dynamic Membership Rules, and the Risks Besides the ordinary IAM, Azure AD has an extensive list of features that are intended to help and empower how organizations manage their users and groups, through different layers…

The Power of GCP Service Accounts — Nowadays, more and more organizations are migrating their on-premises environments to the cloud. Cloud platforms are more secure on certain levels, but IT and security teams must understand the weak points. One notable weak point is misconfigured identities, especially service accounts in the Google Cloud Platform (GCP). Basic Privilege Escalation…

Confession: I really like guides that spell things out for me. Monkey see, monkey do. I like them because they allow me to focus on the real challenge I’m trying to overcome instead of the busywork or the configuration. So, I decided to create one that describes how to create…

Sometimes it feels like there’s a tradeoff between security and simplicity, agility, performance, or usability. In many cases this feeling is untrue, and stems from misinterpretations of security guidelines. In reality, many security bugs are usability bugs in disguise — for example, Injection vulnerabilities. Why should you care about injection vulnerabilities? Current development frameworks make building real-world…

For most people, when the phrase “data breach” is thrown into the conversation, the first thought that usually comes up is — “just don’t let it happen to me”. …

Thoughts on what the future holds amidst the Russian-Ukrainian Crisis — A month into the war between Russia and Ukraine, we heard a lot about Russia’s activity in the cyber domain. One of the central elements, included witnessing the use of wipers, ransomware, and DDOS attacks against Ukrainian entities long before the first shot was even fired. This of course, caused…

The Chum Bucket: Thoughts About S3 Buckets From an Attackers Perspective For a long time now, S3 buckets have become a staple for almost any organization that has gotten into the cloud computing environment. These buckets are abstract and can be used for many purposes. The variability of these buckets’ ranges from static images for a website’s web home page to…

Have YOU Attacked Your Own Network Yet? Security professionals around the world are investing a large amount of time and effort in order to improve their security posture. Regardless of the size or complexity of the organization, the resources that are poured into security controls, monitoring, investigating, etc. are huge. Defenders and architects are tasked with consistently…