Cyber Defense Advisors

Month: July 2023

  • by
  • July 19, 2023

GitHub Actions

ACM.255 Triggering an update to a website when code gets checked into GitHub — by you or attackers Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • July 19, 2023

Microsoft hit by Storm season – a tale of two semi-zero days

The first compromise didn’t get the crooks as far as they wanted, so they found a second one that did…

Cyber News, Cyber Threat Trends
  • by
  • July 19, 2023

Attackers can abuse Google Cloud Build to poison production environments

Researchers warn that a permission associated with the Google Cloud Build service in Google Cloud can be easily abused by attackers with access to a regular account to elevate their privileges and potentially poison container images used in production environments. Google Cloud Build is a CI/CD platform that allows organizations and developers to execute code […]

Cyber News, Cyber Threat Trends
  • by
  • July 19, 2023

Template error: variable names in Fn::Sub syntax must contain only alphanumeric characters…

I got this error trying to deploy an S3 bucket: Continue reading on Bugs That Bite »

Cyber News, Cyber Threat Trends
  • by
  • July 19, 2023

Cannot reference resources in the Conditions block of the template

A typo in a name, essentially Continue reading on Bugs That Bite »

Cyber News, Cyber Threat Trends
  • by
  • July 19, 2023

Automated Deployment of an S3 Bucket for a Static Website

ACM.253 A few tweaks to our reusable AWS S3 bucket template Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • July 19, 2023

How a Content Delivery Network (CDN) Can Help Your Website

ACM.254 What is CloudFront and why do we want to use it? Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends