Thread by @clintgibler

📚 tl;dr sec 105
* #DevSecOps - @NIST on microservices + service mesh
* @ErmeticSec Defending S3 from ransomware
* @falco_org labs
* Risk-Based Security Decision Making at @netflix
* @brutelogic XSS exercises
* @trailofbits osquery + macOS EndpointSec

tldrsec.com/blog/tldr-sec-…

@NIST @ErmeticSec @falco_org @netflix @brutelogic @trailofbits 📢 Sponsor: Learn how “Detection-as-Code” is changing how security teams write, test and harden detections. blog.runpanther.io/detections-as-…

@NIST @ErmeticSec @falco_org @netflix @brutelogic @trailofbits Risk-Based Security Decision Making at @netflix
eventbrite.com/e/risk-based-s…

@ztgrace A tool for detecting default and backdoor creds
github.com/ztgrace/change…

@omer_gil Bypassing required reviews using GitHub Actions
medium.com/cider-sec/bypa…

@NIST @ErmeticSec @falco_org @netflix @brutelogic @trailofbits @ztgrace @omer_gil @NIST #DevSecOps for Microservices-based App with Service Mesh
csrc.nist.gov/publications/d…

Building an end-to-end #Kubernetes-based DevSecOps software factory on AWS
aws.amazon.com/blogs/devops/b…

@alsmola on effectively "shifting left"

https://twitter.com/alsmola/status/1411429895222140929

@NIST @ErmeticSec @falco_org @netflix @brutelogic @trailofbits @ztgrace @omer_gil @alsmola @righettod Custom Piper scripts for @Burp_Suite
github.com/righettod/burp…

@brutelogic Train your XSS Muscles #bugbountytips
brutelogic.com.br/blog/training-…

@zoph Analyzes the Twitch leak from an AWS Security Consultant perspective

https://twitter.com/zoph/status/1446474797693628424

@NIST @ErmeticSec @falco_org @netflix @brutelogic @trailofbits @ztgrace @omer_gil @alsmola @righettod @Burp_Suite @zoph @lancinimarco Checklist: So You Inherited an AWS Account
cloudsecdocs.com/aws/defensive/…

Visualize CloudFormation/SAM/CDK stacks
github.com/mhlabs/cfn-dia…

@ErmeticSec The Threat of #Ransomware to S3 Buckets
ermetic.com/blog/aws/new-r…

@NIST @ErmeticSec @falco_org @netflix @brutelogic @trailofbits @ztgrace @omer_gil @alsmola @righettod @Burp_Suite @zoph @lancinimarco @QuinnyPig An AWS Cloud pricing meeting

https://twitter.com/QuinnyPig/status/1443970010976641025

@quarkslab Context Discovery Tool for #Kubernetes
blog.quarkslab.com/kdigger-a-cont…

@falco_org labs
falco.org/labs/

k8s RBAC tool
github.com/alcideio/rbac-…

@vinumsec k8s Security Checklist
github.com/Vinum-Security…

@NIST @ErmeticSec @falco_org @netflix @brutelogic @trailofbits @ztgrace @omer_gil @alsmola @righettod @Burp_Suite @zoph @lancinimarco @QuinnyPig @quarkslab @vinumsec @trailofbits osquery + macOS EndpointSecurity
trailofbits.com/post/announcin…

@thomasuhrig Logging Best Practices
tuhrig.de/my-logging-bes…

@_ckosmic Super Mario 64 has been ported to iOS
old.reddit.com//r/SM64PC/comm…

@NIST @ErmeticSec @falco_org @netflix @brutelogic @trailofbits @ztgrace @omer_gil @alsmola @righettod @Burp_Suite @zoph @lancinimarco @QuinnyPig @quarkslab @vinumsec @ThomasUhrig @_ckosmic If you liked this thread, check out tl;dr sec, a weekly newsletter I send out with:

📚 Summaries of great security talks
🛠️ The latest tools and useful blog posts
🧪 My various research projects

Thanks for reading, have a great day! 😎

tldrsec.com