The Inner Circle

Weekly Cloud and Security Watch Newsletter #84 - October 4th, 2020

  • 1.  Weekly Cloud and Security Watch Newsletter #84 - October 4th, 2020

    Posted 14 days ago
    Edited by Olivier Caleff 9 days ago

    Weekly Cloud and Security Watch Newsletter - September 28th to October 4th, 2020

    ________________________________________
    Full Newsletter with links ⇒ CloudSecurityAlliance.fr/go/KA4/
    ________________________________________

    1 - CSA News and Updates - September 28th to October 4th, 2020

    • Publication: 'Security for the deployment of Docker containers' (ANSSI)'
    • News: Registration Open for CSA EMEA Congress 2020, November, 3rd to 5th
    • News: CSA STAR Registry Reaches Significant Milestone with 1,000 Entries
    • News : 'Cloud & Cyber Security Expo Paris' 2020 show postponed
    • Blog : 'RECON (CVE-2020-6287) and its impact on Cloud Applications'

    2 - Cloud and Security News Watch (over 60 links)

    • Must read
      • Recommandations for a secure deployment of Docker containers (in French, ANSSI)
      • Détection de portes dérobées pour Microsoft 365 et Azure AD (FireEye)
    • Attacks, Incidents, Leaks, Threats, Vulnerabilities, Outages
      • Attacks: Cloud-delivered Malicious Office Documents
      • Vulnerabilities: Exploiting AWS IAM permissions • Hack Into Microsoft Azure
      • Outages: Microsoft 365
    • Best Practices, and Detection
      • Best Practices: Azure AD Log Analysis
    • Reports, Surveys, Studies, Publications
      • Report: 'CISO Cloud/SaaS Security Report' (Qosmos)
      • Study: 'Data Protection Trends and Strategies for Containers' (Zerto)
      • Cloud Services Providers, Solutions, and Tools
      • AWS : Security Announcements • O365 with AWS Managed Microsoft AD
      • Azure : Confidential Computing on AKS
      • Oracle : Threat Intelligence Benefits
      • Kubernetes: Risks to Mitigate • EKS vs GKE vs AKS
      • Tools: MSSpray • AWS Key Triage Script
    • Podcasts, Weekly 'Cloud and Security' Watch
      • Newsletters: TL;DR Security 54 • The Cloud Security Reading List 57
    • Market, Acquisitions
      • Acquisitions: Portshift by Cisco
    • Miscellaneous
      • Threat Intelligence et Cloud
      • Ransomware in O365
      • Shared Irresponsibility Model (Lacework)

    3 - Agenda

    • November 3rd to 5th → CSA : EMEA Summit • on-line
    • November 23rd to 24th or 25th → CCSK / CCSK Plus training in French

    4 - Link

    ________________________________________

    ________________________________________
    #Watch
    ________________________________________

    ------------------------------
    Olivier Caleff - CSA French Chapter - Chapter Leader - olivier.caleff@cloudsecurityalliance.fr - https://CloudSecurityAlliance.fr
    ------------------------------