#cloudanix
LightNews LightNews
connectabhiram.bsky.social
Publicly Accessible Database, Open Route to the Internet: How to Read the Attack Path?

Link: www.cloudanix.com/blog/publicl...

#datasecurity #attackpath #codesecurity #cloudsecurity #ciso #securityleadership #ceo #cnapp
Publicly Accessible RDS, 0.0.0.0/0 Routes & Lateral Movement Explained | Cloudanix
'Publicly accessible: Yes' on a database is not the whole story. Whether it is reachable depends on five separate gates. Here is how to check each one, how VPC peering widens the blast radius, and how...
www.cloudanix.com
November 6, 2026 at 10:32 AM
connectabhiram.bsky.social
A Text File in Your Downloads Folder Can Hijack Your AI Coding Agent. Here Is Why, and What to Do About It

Link: www.cloudanix.com/blog/agents-...

#aicodingagent #promptinjection #agentsecurity #aisecurity #cloudanix
AGENTS.md Downloads Folder Hijack of AI Coding Agents | Cloudanix
Researchers showed a malicious AGENTS.md file in the Downloads folder can make OpenAI Codex and Claude Code install malware or leak tokens. Here is how the attack works, why there is nothing to patch,...
www.cloudanix.com
November 2, 2026 at 9:40 AM
connectabhiram.bsky.social
Building a Software Risk Register: A Component Inventory Across Bitbucket Repos.

Link: www.cloudanix.com/use-cases/bu...

#softwarerisk #register #inventory #sbom #cloudsecurity #cve #cnapp
Software Risk Register & Component Inventory With SBOM | Cloudanix
A tech lead wanted a Software Risk Register — the ability to answer 'which repos use log4j, which versions, and do they have CVEs?' Here's how a per-repo SBOM and a component-centric view answer that ...
www.cloudanix.com
October 29, 2026 at 5:36 AM
connectabhiram.bsky.social
PHP2Shell: Two Unauthenticated RCE Flaws in the Language Running Most of the Web.

Here Is Your Response Plan: www.cloudanix.com/blog/php2she...

#remotecode #rce #codeinjection #maliciouscode #cloudsecurity #cnapp
PHP2Shell CVE-2026-109618 & CVE-2026-109619 — What to Do | Cloudanix
PHP shipped an out-of-cycle patch for PHP2Shell: two unauthenticated RCE flaws (CVE-2026-109618, CVE-2026-109619) in PHP core. Here is how they work, why inventory is the hard part, and a step-by-step...
www.cloudanix.com
October 30, 2026 at 6:20 AM
connectabhiram.bsky.social
Nikkei Credential Breach: Why CSPM Needs Identity Correlation?

Link: www.cloudanix.com/blog/nikkei-...

#cspm #identitysecurity #iam #cnapp
Nikkei Credential Breach: Why CSPM Needs Identity Correlation | Cloudanix
Nikkei disclosed its third breach in a month — 1.83M records exposed via unauthorized access to a cloud dev service. Here is why credentials keep reaching dev environments and how identity-aware CSPM ...
www.cloudanix.com
October 26, 2026 at 5:43 AM
connectabhiram.bsky.social
Malicious GitHub Actions Workflows Hit 30,000 Repos. Your CI/CD Is an Identity Problem.

link: www.cloudanix.com/blog/ghostac...
GhostAction GitHub Actions Supply-Chain Attack — How to Secure CI/CD Credentials | Cloudanix
The GhostAction campaign planted credential-stealing GitHub Actions workflows across ~30,000 repositories, hijacking cloud creds, publishing tokens, and AI API keys. Here is how it works and how to se...
www.cloudanix.com
October 23, 2026 at 6:46 AM
connectabhiram.bsky.social
CISA Flags an Ivanti Connect Secure Zero-Day: Why the Fix Is Exposure and Blast Radius, Not Just the Patch?

link: www.cloudanix.com/blog/ivanti-...

#zeroday #cve #vulnerabilityexposure #vulndb #patch #cloudsecurity
Ivanti Connect Secure Zero-Day CVE-2026-104935 — What to Do | Cloudanix
CISA added an actively exploited Ivanti Connect Secure zero-day (CVE-2026-104935) to its KEV catalog. Here is how the auth-bypass RCE works, why it leads to credential theft, and how to shrink the bla...
www.cloudanix.com
October 22, 2026 at 8:14 AM
connectabhiram.bsky.social
24,000 Secrets Sitting in MCP Config Files: Why AI Agents Need JIT, Not Better Key Vaulting?

Link: www.cloudanix.com/blog/24000-s...

#codesecurity #secretscanning #appsec #identitysecurity #cnapp #mcp #misconfigurations #cspm #cloudanix
Secrets Leaking in MCP Configs: Fix AI Agent Credentials With JIT
GitGuardian found 24,008 secrets in public MCP config files, thousands of them live. Here is why hardcoded agent credentials keep leaking and how JIT fixes it.
www.cloudanix.com
October 21, 2026 at 6:15 AM
connectabhiram.bsky.social
Join us as we delve into the world of threat detection with our expert guest Reanna Shultz, a renowned security leader and community builder.

Watch on YouTube: youtu.be/vW9DVv3PH5o

#detectionengineering #threatdetection #cloudsecurity
Detection Engineering, Generative AI for Cybersecurity Leaders | Ft. Reanna Schultz | Ep. 84
YouTube video by Cloudanix
youtu.be
February 14, 2025 at 5:19 AM
mrsyiswhy.bsky.social
Join me on the Scale to Zero podcast, where I discuss the application of a Restorative Justice framework to the practice of Information Security https://www.scaletozero.com/episodes/restorative-justice-a-new-way-to-solve-conflict/
Restorative Justice Framework: A New Way to Solve Conflict with Michele Chubirka
Host: Hi, everyone. Thanks for tuning into another episode of Scale to Zero. I'm Purushottam, co-founder and CTO of Cloudanix. Today's topics include restorative framework, DevSecOps, Kubernetes. And ...
www.scaletozero.com
July 28, 2023 at 3:25 PM
zoph.me
I love seeing the tools I've maintained for many years still used by the AWS Security community, continuing to bring value.

Users are the best ambassadors. Listen to Rowan explaining the use case for MAMIP.

youtube.com/clip/UgkxvM...
✂️ Rowan talks about MAMIP
51 seconds · Clipped by Victor Grenu · Original video "Securing Production | AWS IAM Security | Best Practices | Ft. Rowan Udell | Ep.87 | Cloudanix" by Clou...
www.youtube.com
April 14, 2025 at 2:57 PM