Public & Private Cloud Security
Azure Single Sign-On Case Study #3: Secure authentication for Function Apps
Azure Single Sign-On Case Study #3: Secure authentication for Function Apps
General guidance on Azure Function App authentication setup for different client types.
Azure Single Sign-On Case Study #2: Unmasking authentication in Function Apps
Azure Single Sign-On Case Study #2: Unmasking authentication in Function Apps
Explore the details of configuring Single Sign-On for Azure Function Apps and discover the potential security risks.
Azure Single Sign-On Case Study #1: Secure architecture for SPA & API
Azure Single Sign-On Case Study #1: Secure architecture for SPA & API
A case study of an insecure Single Sign-On architecture followed by a comprehensive guide on how to do it the right way.
Using Azure CLI and PowerShell to secure your Storage Accounts
Using Azure CLI and PowerShell to secure your Storage Accounts
Keeping your cloud infrastructure safe can be tricky. This article shows how to make your environment more secure using Azure CLI and…
Cloud Shared Responsibility Model explained
Cloud Shared Responsibility Model explained
The cloud computing is the future, and many companies are moving their workloads to the cloud. However, there is a general misconception…
Setting up your AWS Monitoring — Security tips
Setting up your AWS Monitoring — Security tips
This article contains good practices of AWS Monitoring and Alerting configuration. We also showed a few real-world evasion techniques.
Top 7 AWS security vulnerabilities based on real-world tests
Top 7 AWS security vulnerabilities based on real-world tests
In our security tests and reviews of the AWS infrastructure , we often come across repeated oversights. Here are the most common ones.
What can you find in 57K AWS S3 buckets? 2021 update
What can you find in 57K AWS S3 buckets? 2021 update
Cloud infrastructure is becoming a standard, but correct access settings still do not seem so obvious. See how we managed to make use of…
Serverless (in)security
Serverless (in)security
serverless opens up a number of benefits for us, but we can’t forget about its threats. Even if you “believe” in security of your code, you
Data leaks from AWS EC2 — how can Bob reveal Alice’s secrets?
Data leaks from AWS EC2 — how can Bob reveal Alice’s secrets?
In this blog post I’m going to show you several ways in which sensitive data from an isolated AWS EC2 instance can be exfiltrated by an…
Should I pentest my cloud infrastructure? RE: Why the heck haven’t you done it yet?!
Should I pentest my cloud infrastructure? RE: Why the heck haven’t you done it yet?!
It is true that migrating your business to the cloud indeed mitigates a lot of risks while comparing to a monolithic architecture. Thanks…
Yet another S3 leak? Why there are still so many victims?
Yet another S3 leak? Why there are still so many victims?
More and more companies decide to store their files in the Amazon cloud, using S3 service. Unlimited storage space and a relatively cheap…
KrkAnalytica challenge demystified
KrkAnalytica challenge demystified
Recently SecuRing has prepared some fancy challenge before the conference CONFidence 2018. We’ve received so positive feedback from users…