The Inner Circle

Weekly Cloud and Security Watch Newsletter - September 20th, 2020

  • 1.  Weekly Cloud and Security Watch Newsletter - September 20th, 2020

    Posted 27 days ago

    Weekly Cloud and Security Watch Newsletter - September 14th to 20th, 2020

    ________________________________________
    Full Newsletter with links ⇒ CloudSecurityAlliance.fr/go/K9K/
    ________________________________________

    1 - CSA News and Updates - September 14th to 20th, 2020


    • Publication : 'Top Threats to Cloud Computing: Egregious Eleven'
    • Actu : 'Forum Securité@Cloud' conference on September 23rd and 24th
    • Blog : 'Quantum Bitcoin'
    • Blog : 'Blockweave: Patents Granted for Low-Cost Alternative to Blockchain'

    2 - Cloud and Security News Watch (over 80 links)


    • Must read
      • 2020 SANS Enterprise Cloud Incident Response Survey
      • Dynamic Cloud Service Map (Nuageo)
      • Last Decade of Linux APT Attacks (Intezer)
    • Attacks, Incidents, Leaks, Threats, Vulnerabilities, Outages
      • Threats: MFA Bypass Bugs Opened Microsoft 365
      • Outage: Google Drive on September 15th
    • Reports, Surveys, Studies, Publications
      • Reports: Access Keys Exposed (Digital Shadows) • Attacks on Container Infrastructure (Aqua Security) • Offensive Security Testing Using Cloud Tools (Coalfire)
    • Cloud Services Providers, Solutions, and Tools
      • AWS: Upcoming Changes in the AWS SSO • GuardDuty Usage• RBAC and ABAC
      • Azure: Protect Office 365 Data Against Consent Phishing • Casting Some Light on E5 • Locations and Names
      • GCP: Alert About CVE-2020-14386 and Protection by gVisor Against • Logging Capabilities
      • Oracle: Cloud Guard and New Tools
      • Kubernetes: Architecture and Impact on Security (StackRox)
    • Podcasts, Weekly 'Cloud and Security' Watch
      • Veilles: TL;DR Security #52 • The Cloud Security Reading List #55
    • Market, Acquisitions
      • Acquisitions: Odo Security by Checkpoint • Portworx by Pure Storage
    • Miscellaneous
      • Disaster Recovery Strategies
      • APIs: connectivity and Authentication Challenges (CyberArk Conjur)
      • Online Resources for Azure and GCP
      • Rise of the 'Cloud Economist'

    3 - Agenda


    • September 23rd/24th → BIRP: Forum Sécurité@Cloud • Paris, Porte de Versailles
    • up to September 30th → CSA: Webinars 'SECtember Experience'

    4 - Link


    ________________________________________

    ------------------------------
    Olivier Caleff - CSA French Chapter - Chapter Leader - olivier.caleff@cloudsecurityalliance.fr - https://CloudSecurityAlliance.fr
    ------------------------------