Issue 52
AWS-CloudSec is now one year old! Thank You to all the readers and the support :)
This issue is sponsored by Invary. Check out Invary's ability to detect hidden rootkits, a task that modern threat detection solutions fail in action » HERE.
This week TLDR i.e. 1 minute version (For executives):
AWS Managed Services (AMS) Accelerate now includes Trusted Remediator.
Trending in Cloud & Cyber Security (Security Blogs, articles, news, advisories etc):
AWS Security Blogs & Bulletins:
Centrally manage VPC network ACL rules to block unwanted traffic using AWS Firewall Manager. Link.
General security blogs, articles & reports:
Least privilege and DB access audit with Aurora IAM authentication by Oleksii Bebych. Link.
Integrating G Suite with AWS IAM Identity Center for Seamless Access by Tigran Gevorgyan. Link.
Cloud Attack Emulation: Democratizing Security Operations in the Cloud by Kennedy Torkura. Link.
Moving AWS Accounts and OUs Within An Organization - Not So Simple! by Matthew Fuller. Link.
CloudSorcerer – A new APT targeting Russian government entities by securelist. Link.
Trending on the news & advisories:
Avast releases free decryptor for DoNex Ransomware and its Predecessors. Linked. Link.
Google announces the launch of kvmCTF, a vulnerability reward program (VRP) for the Kernel-based Virtual Machine (KVM). Link.
Twilio Authy- Security Alert: Authy Android (v25.1.0) and iOS App (v26.1.0) Link.
Proton introduced Docs in Proton Drive. Link.
This week Long i.e. 3-5 minutes version (For architects & engineers):
AWS Managed Services (AMS) Accelerate customer now have access to Trusted Remediator, allowing them to automatically address recommendations derived from Trusted Advisor checks. This automation eliminates the need for manual intervention to resolve account misconfigurations, enhancing security, fault tolerance, and performance. (Note: The features requires AMS, which is not offered for personal accounts and I couldn’t hands-on it for test purposes- especially for the security remediations). Link.
