Cyber Research #62

Mert Coskuner

2 min readNov 26, 2022

Articles

Disrupting a PyPI Software Supply Chain Threat Actor

Software supply chain attacks in the open-source ecosystem are frequent and pervasive. The cost of publishing a…

blog.phylum.io

Burp Suite and Protobuf - hn security

Last year (I know, I'm "a little" late with this article 😀 ) I tested a couple of applications that employed the…

security.humanativaspa.it

A Deep Dive on AWS KMS Key Access and AWS Key Grants | CloudQuery

We recently published a blog post about Encryption in AWS and Multi-Account Access. As a follow-up to that post, we're…

www.cloudquery.io

AWS IAM Roles, a tale of unnecessary complexity

This is going to be a highly opinionated blog post. I think AWS is great and use it daily, but their implementation of…

infosec.rodeo

Token tactics: How to prevent, detect, and respond to cloud token theft - Microsoft Security Blog

As organizations increase their coverage of multifactor authentication (MFA), threat actors have begun to move to more…

www.microsoft.com

Introducing IAM Deny, a simple way to harden your security posture at scale | Google Cloud Blog

Free trial At Google Cloud, we're focused on making it easy for organizations to build solutions quickly and securely…

cloud.google.com

Tools

Nighthawk: An Up-and-Coming Pentest Tool Likely to Gain Threat Actor Notice | Proofpoint US

Nighthawk is an advanced C2 framework intended for red team operations through commercial licensing. Proofpoint…

www.proofpoint.com

Proxify - A portable CLI-based HTTP/Socks proxy written in Golang

In this blog we'll discuss the basics of proxies, explain what Proxify is and how it can be used. You'll learn how to…

blog.projectdiscovery.io

GitHub - google/gke-policy-automation: Tool and policy library for reviewing Google Kubernetes…

This repository contains the tool and the policy library for validating GKE clusters against configuration best…

github.com

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.