Insights for the modern cloud
In-depth guides, tutorials, and best practices for AWS, Azure, GCP, and OCI.
Microsoft Details Help Desk Impersonation Leading to AD CS Abuse via ESC1 and ESC8
Attackers used Teams impersonation to gain remote access, then abused Active Directory Certificate Services misconfigurations to escalate privileges and persist.
AWS IAM Identity Center adds cross-Region trusted identity propagation
Trusted identity propagation now carries user identity across AWS Regions, removing the single-Region constraint for fine-grained access control and auditing.
CloudFront VPC Origins Go Dual-Stack: IPv6 Without Exposing Origins
AWS adds IPv6 support to CloudFront VPC origins, enabling end-to-end IPv6 delivery to private ALBs, NLBs, and EC2 instances without compromising security.
Configure OAuth for AWS Lambda Kafka Event Source Mappings
AWS Lambda now supports OAuth authentication for self-managed Apache Kafka event source mappings, enabling secure integration with enterprise identity providers like Amazon Cognito or Okta.
Microsoft Details Help Desk Impersonation Leading to AD CS Abuse via ESC1 and ESC8
Attackers used Teams impersonation to gain remote access, then abused Active Directory Certificate Services misconfigurations to escalate privileges and persist.
The CISO's New Mandate: Governing Autonomous Agents Without Slowing Innovation
As AI agents gain autonomy, CISOs must shift from perimeter defense to identity-centric governance and AI-powered threat detection to secure the agentic enterprise.
September 2023 Patches Released for Azure DevOps Server Self-Hosted Instances
Microsoft has issued cumulative updates for Azure DevOps Server 2022 and 2020 to address security and reliability issues. Administrators should apply these patches to maintain supported, secure self-hosted deployments.
GKE API timeouts traced to three bugs across PSC, Envoy, and Linux kernel
A multi-week outage blocking 800 developers across europe-west clusters was caused by packet reordering in Private Service Connect, Envoy half-close behavior, and a Linux kernel bug that silently dropped FIN packets in FIN_WAIT_2 state.
Gateway API v1.6 Graduates TCPRoute and UDPRoute to Standard
Gateway API v1.6 promotes TCPRoute and UDPRoute to v1 stability for layer 4 routing, while moving experimental resources like XBackend into a separate API group with X-prefixed names.
Scale GKE Networking for High-Density AI Agent Workloads with Dataplane V2
GKE Dataplane V2 now handles millions of concurrent AI agent sandboxes by separating identity labels from metadata annotations and filtering high-cardinality labels, enabling sub-second provisioning at 300 sandboxes per second.