Weekly Cloud and Security Watch Newsletter - October 19th to 25th, 2020
________________________________________
Full newsletter with links ⇒ CloudSecurityAlliance.fr/go/KAP/
________________________________________
1 - CSA News and Updates - October 19th to 25th, 2020
- Fill in the new CSA survey on Cloud Adoption in 2020
- Publication: 'Mitigating Hybrid Clouds Risks'
- Publication: 'Cloud Controls Matrix v3.0.1 ISO Reverse Mapping'
2 - Cloud and Security News Watch (over 60 links)
- Must read
- New CloudSecDocs.com repository site by Marco Lancini
- Attacks, Incidents, Leaks, Threats, Vulnerabilities, Outages
- Attacks: Teams' Phishing (Threatpost) • Slack Abuse to Target O365 (Avanan) • Office 365 OAuth (KnowBe4)
- Leaks: Patient Data on Unsecured Cloud Storage
- Threats: Gathering Azure Passwords
- Reports, Surveys, Studies, Publications
- Reports: Remote Work and SaaS (AppOmni) • 'Cloud Identity & Access Management' (Divvy Cloud)
- Surveys: Exploitation des services Cloud par les cyber-attaquants (Kaspersky)
- Studies: 'SaaS Security & Management Survey' (AppOmni) • Microsoft Office 365 IT Security Policy Usages (CoreView)
- Cloud Services Providers, Solutions, and Tools
- AWS: Incident Response Automation • AWS PrivateLink Malicious Usage • Over 100 millions IP Addresses for Amazon
- Azure: Playbooks & Watchlists with Sentinel
- GCP: Huge List of Resources Liste de ressources • Graceful Shutdowns on Cloud Run • Certification Authority
- Kubernetes: Log Management Tools • Threat Detection • Threat Vectors
- Containers: Security Level Comparison with VMs (Intezer) • Image Management (Anchore and Ant Group)
- Microservices: Securing Microservices Architecture
- Podcasts, Weekly 'Cloud and Security' Watch
- Newsletters: TL;DR Security #57 • The Cloud Security Reading List #60
- Miscellaneous
- 'SaaS Hunting' (Obsidian Security) • Threat Hunting in the Cloud, Threat Intelligence (Checkpoint Software)
3 - Agenda
- October 26th/29th → AWS: AWS Cloud Security Week 2020
- November 3rd/5th → CSA: EMEA Summit
- November 23rd/25th → CCSK / CCSK Plus training in French
4 - Link
________________________________________
________________________________________
#Veille #Watch________________________________________
------------------------------
Olivier Caleff - CSA French Chapter - Chapter Leader -
[email protected] -
https://CloudSecurityAlliance.fr------------------------------