Cyber Research #63

Mert Coskuner

2 min readDec 3, 2022

Articles

Hardware Selection and Logistics (Passwordless Authentication Series, #1)

How Palantir enforces passwordless authentication for thousands of globally distributed employees and contractors.

blog.palantir.com

How to Bypass Cloudflare: A Comprehensive Guide - ZenRows

With studies estimating that over 40% of all internet traffic originates from bots, there has been a rise in demand for…

www.zenrows.com

A Confused Deputy Vulnerability in AWS AppSync | Datadog Security Labs

Nick Frichette Senior Security Researcher We have identified a cross-tenant vulnerability in Amazon Web Services (AWS)…

securitylabs.datadoghq.com

https://blog.cloudflare.com/cloudflare-servers-dont-own-ips-anymore/

Investigating a backdoored PyPi package targeting FastAPI applications | Datadog Security Labs

Christophe Tafani-Dereeper Cloud Security Researcher and Advocate Vladimir de Turckheim Staff Engineer, Application…

securitylabs.datadoghq.com

Visual Studio Code: Remote Code Execution

Summary An attacker could, through a link or website, take over the computer of a Visual Studio Code user and any…

github.com

Three recurring Security Hub usage patterns and how to deploy them | Amazon Web Services

As Amazon Web Services (AWS) Security Solutions Architects, we get to talk to customers of all sizes and industries…

aws.amazon.com

Establishing a data perimeter on AWS: Allow only trusted identities to access company data | Amazon…

As described in an earlier blog post, Establishing a data perimeter on AWS, Amazon Web Services (AWS) offers a set of…

aws.amazon.com

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.

Cyber Research #63

Articles

Hardware Selection and Logistics (Passwordless Authentication Series, #1)

How Palantir enforces passwordless authentication for thousands of globally distributed employees and contractors.

How to Bypass Cloudflare: A Comprehensive Guide - ZenRows

With studies estimating that over 40% of all internet traffic originates from bots, there has been a rise in demand for…

A Confused Deputy Vulnerability in AWS AppSync | Datadog Security Labs

Nick Frichette Senior Security Researcher We have identified a cross-tenant vulnerability in Amazon Web Services (AWS)…

Investigating a backdoored PyPi package targeting FastAPI applications | Datadog Security Labs

Christophe Tafani-Dereeper Cloud Security Researcher and Advocate Vladimir de Turckheim Staff Engineer, Application…

Visual Studio Code: Remote Code Execution

Summary An attacker could, through a link or website, take over the computer of a Visual Studio Code user and any…

Three recurring Security Hub usage patterns and how to deploy them | Amazon Web Services

As Amazon Web Services (AWS) Security Solutions Architects, we get to talk to customers of all sizes and industries…

Establishing a data perimeter on AWS: Allow only trusted identities to access company data | Amazon…

As described in an earlier blog post, Establishing a data perimeter on AWS, Amazon Web Services (AWS) offers a set of…

Thank you for reading!

Written by Mert Coskuner