...in the pursuit of knowledge
Github Repo found here: https://github.com/heilancoos/ludus_k8s Introduction In my blog on Attacking and Defending Kubernetes, I covered several different attack techniques and provided Falco detections for them. While writing that blog over the course of 3 months, I found that I spent most of my time simply trying to get things working properly as things tend to go with security research.
Introduction This is my write-up of an investigation I conducted while working through Xintra’s HuskyCorp incident simulation lab, along with what I learned throughout the process. The investigation revealed a hybrid end-to-end compromise and showed how an attacker can abuse identity in Entra ID in a variety of ways in order to escalate their privileges, maintain persistence, and effectively take…
Introduction
How attackers can abuse AWS KMS with BYOK and external key material to simulate ransomware in cloud environments.
Originally posted on IBM Think here: Blog Link