The Inner Circle

Weekly Cloud and Security Watch Newsletter #87 - Octobre 25th, 2020

  • 1.  Weekly Cloud and Security Watch Newsletter #87 - Octobre 25th, 2020

    Posted 30 days ago
    Edited by Olivier Caleff 27 days ago

    Weekly Cloud and Security Watch Newsletter - October 19th to 25th, 2020

    ________________________________________
    Full newsletter with links ⇒ CloudSecurityAlliance.fr/go/KAP/
    ________________________________________

    1 - CSA News and Updates - October 19th to 25th, 2020


    • Fill in the new CSA survey on Cloud Adoption in 2020
    • Publication: 'Mitigating Hybrid Clouds Risks'
    • Publication: 'Cloud Controls Matrix v3.0.1 ISO Reverse Mapping'

    2 - Cloud and Security News Watch (over 60 links)


    • Must read
      • New CloudSecDocs.com repository site by Marco Lancini
    • Attacks, Incidents, Leaks, Threats, Vulnerabilities, Outages
      • Attacks: Teams' Phishing (Threatpost) • Slack Abuse to Target O365 (Avanan) • Office 365 OAuth (KnowBe4)
      • Leaks: Patient Data on Unsecured Cloud Storage
      • Threats: Gathering Azure Passwords
    • Reports, Surveys, Studies, Publications
      • Reports: Remote Work and SaaS (AppOmni) • 'Cloud Identity & Access Management' (Divvy Cloud)
      • Surveys: Exploitation des services Cloud par les cyber-attaquants (Kaspersky)
      • Studies: 'SaaS Security & Management Survey' (AppOmni) • Microsoft Office 365 IT Security Policy Usages (CoreView)
    • Cloud Services Providers, Solutions, and Tools
      • AWS: Incident Response Automation • AWS PrivateLink Malicious Usage • Over 100 millions IP Addresses for Amazon
      • Azure: Playbooks & Watchlists with Sentinel
      • GCP: Huge List of Resources Liste de ressources • Graceful Shutdowns on Cloud Run • Certification Authority
      • Kubernetes: Log Management Tools • Threat Detection • Threat Vectors
      • Containers: Security Level Comparison with VMs (Intezer) • Image Management (Anchore and Ant Group)
      • Microservices: Securing Microservices Architecture
    • Podcasts, Weekly 'Cloud and Security' Watch
      • Newsletters: TL;DR Security #57 • The Cloud Security Reading List #60
    • Miscellaneous
      • 'SaaS Hunting' (Obsidian Security) • Threat Hunting in the Cloud, Threat Intelligence (Checkpoint Software)

    3 - Agenda


    • October 26th/29th → AWS: AWS Cloud Security Week 2020
    • November 3rd/5th → CSA: EMEA Summit
    • November 23rd/25th → CCSK / CCSK Plus training in French

    4 - Link


    ________________________________________

    ________________________________________
    #Veille #Watch
    ________________________________________

    ------------------------------
    Olivier Caleff - CSA French Chapter - Chapter Leader - [email protected] - https://CloudSecurityAlliance.fr
    ------------------------------