The Inner Circle

Weekly Cloud and Security Watch Newsletter - May 24th, 2020

  • 1.  Weekly Cloud and Security Watch Newsletter - May 24th, 2020

    Posted May 26, 2020 12:38:00 AM
    Edited by Olivier Caleff 13 days ago

    Weekly Cloud and Security Watch Newsletter - May 18th to 24th

    ________________________________________

    1 - CSA News and Updates

    • Registration now open for the CCSK training in French for the mid June session, new sessions late Agust and in November
    • Agenda for the CloudBytes Connect Virtual Conference, May 26th to 28th
    • Call for comments for a CSA document: 'Mobile Application Security Testing - Sum-Up & Landscape Overview' before June 8th

    2 - Cloud and Security News Watch (over 60 links)

    • Must read:
      • Oracle and KPMG Cloud Threat Report for 2020
      • Verizon Data Breach Investigations Report (DBIR)
      • Update of Scott Piper's AWS Security Maturity Roadmap
    • Vulnerabilities and alerts
      • Docker Desktop for Windows
      • VMware Cloud Director
      • Bug Bounty payout of 31.337$ for a GCP vulnerability
    • Attacks
      • Anatomy of a SaaS attack and Kubernetes attack scenarios
      • O365 phishing case(s)
      • Credential theft for AWS, in containers, and by bypassing MFA
      • Some search results exposed in O365
    • Reports
      • Accurics (DevSecOps)
    • Acquisitions
      • Born in the Cloud by OpenSystems
    • Miscellaneous
      • AzureAD
      • Cyber resilience
      • Cloud Supply Chain
      • Secrets Management
      • Anton Chuvakin viewpoint
      • Pen Testing in the Cloud

    3 - Agenda


    • May 26th-28th: online CSA 'CloudBytes Connect Virtual Conference'
    • June 9th-12th: online CSA 'Virtual EU Summit'
    • June 15th-17th: CCSK training in French (open for registration)

    CloudSecurityAlliance.fr/go/K5O/
    ________________________________________

    ------------------------------
    Olivier Caleff - CSA French Chapter - Chapter Leader - olivier.caleff@cloudsecurityalliance.fr - https://CloudSecurityAlliance.fr
    ------------------------------