From IMDSv1 detection to IMDSv2 enforcement
AWS Instance Metadata Service Version 2: Transforming Cloud Security Through Enhanced Authentication The AWS Instance Metadata Service Version 2 (IMDSv2) represents a critical evolution in cloud s...
Hamza Nakabi
IaC Security at Scale
Infrastructure as Code Security: Comprehensive Analysis of Policy-as-Code and Secrets Management Infrastructure as Code (IaC) has transformed modern infrastructure management, enabling organizatio...
CloudFox Tool to gain situational awareness in AWS
CloudFox is an open-source command-line tool developed by Bishop Fox to assist penetration testers and security professionals in gaining situational awareness within unfamiliar cloud environments. ...
Modern QRadar Rule Engineering
How to Supercharge IBM QRadar Detection with YARA Rules If you’re looking to boost your threat detection game in IBM QRadar, YARA rules are a fantastic tool to have in your arsenal. In this post, ...
Cloud Attack Vectors
The Top Cloud Attack Vectors You Need to Know (Based on UCTM) Cloud environments are powerful but come with unique security risks. The Universal Cloud Threat Model (UCTM) highlights the main attac...
AWS Advanced Threat Intelligence
Introduction AWS Advanced Threat Intelligence leverages a combination of real-time data analysis, machine learning, and global threat feeds to detect, analyze, and respond to security threats targ...
Enhanced Ingress-NGINX Controller Security Analysis
The IngressNightmare Vulnerabilities (CVE-2025 Series) In March 2025, security researchers disclosed four critical vulnerabilities enabling full cluster compromise through the ingress-nginx admissi...