Episode Summary
Last week in security news: Orca Security keeps finding vulnerabilities in Azure, this week’s S3 Bucket Negligence Award, and more!
Episode Show Notes & Transcript
Links:
- Azure’s continuing security woes
- The Meeting Owl videoconference device apparently had significant security problems
- Brandon Sherman writes about how Temporal structures its access control strategy with regard to AWS
- This week's S3 Bucket Negligence Award goes to Mobike.
- Cloud Functions or Cloud Run launched from any GCP organization can bypass Google Kubernetes Engine (GKE) Authorized Networks restrictions
- Proof of someone migrating to SSO and disabling IAM users entirely.
- AWS blog post about IAM policy types: How and when to use them
- Tailscale
